IP Address
IPv4
116.124.4.30
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 116.124.4.30
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
ASN
—
Not yet attributed
Country
—
GeoIP pending
Reverse DNS
—
PTR
Open Ports
—
Last scan
Autonomous System
ASN
—
AS Name
—
AS Type
—
RIR
APNIC
Allocated
2007-05-21
Allocation status
Allocated
Geolocation
Country
—
Continent
—
Source
MaxMind GeoLite2
Reverse DNS
PTR
—
Last seen
—
Network
Prefix
—
RPKI
—
Open Ports
Port-scan data not yet ingested
Open-port and banner-grab data from our scan layer will appear here. World-sweep covers all IPv4 over time — this host may be in a /8 we haven't reached yet.
TLS Certificates
Port 443
7123ab5bc8eb…
Subject: NOT SECURE!!!
Issuer: GET A NEW CERTIFICATE!!
SANs: —
Valid 2000-06-27 23:32:42 → 2027-11-13 23:32:42
Known Vulnerabilities
Published CVEs matched to the software versions fingerprinted on this host. Matching is by product and version against the NVD dictionary — presence of a CVE does not confirm the host is exploitable (patches or backports may apply).
| CVE | Software | CVSS | Severity | Summary |
|---|---|---|---|---|
| CVE-2002-2272 | Apache 1.3.22 | 7.8 | HIGH | Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communic... |
| CVE-2006-2940 | OpenSSL 0.9.6b | 7.8 | HIGH | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys... |
| CVE-2002-0257 | Apache 1.3.22 | 7.5 | HIGH | Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fiel... |
| CVE-2002-0843 | Apache 1.3.22 | 7.5 | HIGH | Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to caus... |
| CVE-2003-0993 | Apache 1.3.22 | 7.5 | HIGH | mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask,... |
| CVE-2004-1082 | Apache 1.3.22 | 7.5 | HIGH | mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to repla... |
| CVE-2013-5697 | Apache 1.3.22 | 7.5 | HIGH | SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL command... |
| CVE-2002-0082 | mod_ssl 2.8.5 | 7.5 | HIGH | The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESS... |
| CVE-2004-0700 | mod_ssl 2.8.5 | 7.5 | HIGH | Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote atta... |
| CVE-2002-0655 | OpenSSL 0.9.6b | 7.5 | HIGH | OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attac... |
| CVE-2002-0656 | OpenSSL 0.9.6b | 7.5 | HIGH | Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key... |
| CVE-2003-0131 | OpenSSL 0.9.6b | 7.5 | HIGH | The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a m... |
| CVE-2010-0742 | OpenSSL 0.9.6b | 7.5 | HIGH | The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structure... |
| CVE-2010-4252 | OpenSSL 0.9.6b | 7.5 | HIGH | OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass... |
| CVE-2012-2110 | OpenSSL 0.9.6b | 7.5 | HIGH | The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret inte... |
| CVE-2003-0542 | Apache 1.3.22 | 7.2 | HIGH | Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a den... |
| CVE-2002-0840 | Apache 1.3.22 | 6.8 | MEDIUM | Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and suppo... |
| CVE-2010-0010 | Apache 1.3.22 | 6.8 | MEDIUM | Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote o... |
| CVE-2012-2333 | OpenSSL 0.9.6b | 6.8 | MEDIUM | Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows rem... |
| CVE-2008-5077 | OpenSSL 0.9.6b | 5.8 | MEDIUM | OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the... |
| CVE-2011-4354 | OpenSSL 0.9.6b | 5.8 | MEDIUM | crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher... |
| CVE-2005-1797 | OpenSSL 0.9.6b | 5.1 | MEDIUM | The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are diffi... |
| CVE-2002-2103 | Apache 1.3.22 | 5.0 | MEDIUM | Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails... |
| CVE-2004-0263 | Apache 1.3.22 | 5.0 | MEDIUM | PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have... |
| CVE-2007-6750 | Apache 1.3.22 | 5.0 | MEDIUM | The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris,... |
| CVE-2011-3368 | Apache 1.3.22 | 5.0 | MEDIUM | The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) R... |
| CVE-2002-0659 | OpenSSL 0.9.6b | 5.0 | MEDIUM | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. |
| CVE-2003-0147 | OpenSSL 0.9.6b | 5.0 | MEDIUM | OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing dif... |
| CVE-2003-0851 | OpenSSL 0.9.6b | 5.0 | MEDIUM | OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences. |
| CVE-2006-7250 | OpenSSL 0.9.6b | 5.0 | MEDIUM | The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference... |
| CVE-2009-0789 | OpenSSL 0.9.6b | 5.0 | MEDIUM | OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial... |
| CVE-2009-4355 | OpenSSL 0.9.6b | 5.0 | MEDIUM | Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to... |
| CVE-2011-4576 | OpenSSL 0.9.6b | 5.0 | MEDIUM | The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might all... |
| CVE-2011-4619 | OpenSSL 0.9.6b | 5.0 | MEDIUM | The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remo... |
| CVE-2012-0027 | OpenSSL 0.9.6b | 5.0 | MEDIUM | The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial... |
| CVE-2012-0884 | OpenSSL 0.9.6b | 5.0 | MEDIUM | The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle be... |
| CVE-2012-1165 | OpenSSL 0.9.6b | 5.0 | MEDIUM | The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL... |
| CVE-2013-0166 | OpenSSL 0.9.6b | 5.0 | MEDIUM | OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCS... |
| CVE-2002-1658 | Apache 1.3.22 | 4.6 | MEDIUM | Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is normall... |
| CVE-2003-1418 | Apache 1.3.22 | 4.3 | MEDIUM | Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode num... |
Tech Stack
Wappalyzer fingerprinting pending
HTTP-body analysis identifies web frameworks, CMS platforms, analytics, JS libraries and server-side languages from this host.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-leak candidates for this IP
When this IP serves a TLS cert for a domain that fronts behind a CDN, that domain surfaces here as an origin-leak candidate with a confidence score.
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
Domains the body links to whose DNS does NOT resolve to this IP — usually CDN assets, embeds, or third-party services. Boilerplate (Google Fonts, jsDelivr, w3.org…) is already filtered.
History
Historical change-log pending
ASN changes, prefix re-allocations, cert rotations, port-state diffs over months — accumulates as our archives grow.