IP Address
IPv4
189.130.49.34
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 189.130.49.34
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
ASN
AS8151
Uninet S.A. de C.V.
Country
MX
Mexico
Reverse DNS
dsl-34-49-130-189-dynamic.prod-infinitum.com.mx
PTR
Open Ports
1
Last scan
Autonomous System
ASN
AS Name
Uninet S.A. de C.V.
AS Type
—
RIR
LACNIC
Allocated
1997-04-29
Allocation status
Allocated
Geolocation
Reverse DNS
Last seen
2026-05-26 23:11:11
Network
Prefix
RPKI
—
Open Ports
| Port | Proto | Service | Server | Last seen |
|---|---|---|---|---|
| 8080 | tcp | http-proxy | Apache/2.4.18 (Win32) OpenSSL/1.0.2e PHP/5.6.18 | 2026-05-26 23:03:26.000 |
TLS Certificates
TLS certificate observations pending
Once our scan layer captures a TLS cert from this IP, certificate chain, JARM and JA4S fingerprints will appear here.
Known Vulnerabilities
Published CVEs matched to the software versions fingerprinted on this host. Matching is by product and version against the NVD dictionary — presence of a CVE does not confirm the host is exploitable (patches or backports may apply).
| CVE | Software | CVSS | Severity | Summary |
|---|---|---|---|---|
| CVE-2017-3169 | Apache 2.4.18 | 9.8 | N/A | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() d... |
| CVE-2018-1312 | Apache 2.4.18 | 9.8 | N/A | In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated us... |
| CVE-2016-0705 | OpenSSL 1.0.2e | 9.8 | N/A | Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attacke... |
| CVE-2016-0799 | OpenSSL 1.0.2e | 9.8 | N/A | The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote att... |
| CVE-2016-2177 | OpenSSL 1.0.2e | 9.8 | N/A | OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (int... |
| CVE-2016-2182 | OpenSSL 1.0.2e | 9.8 | N/A | The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a den... |
| CVE-2016-2842 | OpenSSL 1.0.2e | 9.8 | N/A | The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeed... |
| CVE-2016-6303 | OpenSSL 1.0.2e | 9.8 | N/A | Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-boun... |
| CVE-2016-3141 | PHP 5.6.18 | 9.8 | N/A | Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (... |
| CVE-2016-6290 | PHP 5.6.18 | 9.8 | N/A | ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows rem... |
| CVE-2016-4071 | PHP 5.6.18 | 9.8 | N/A | Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote atta... |
| CVE-2016-4072 | PHP 5.6.18 | 9.8 | N/A | The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as... |
| CVE-2016-4073 | PHP 5.6.18 | 9.8 | N/A | Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 a... |
| CVE-2016-4473 | PHP 5.6.18 | 9.8 | N/A | /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-683... |
| CVE-2016-4537 | PHP 5.6.18 | 9.8 | N/A | The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument,... |
| CVE-2016-6296 | PHP 5.6.18 | 9.8 | N/A | Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, an... |
| CVE-2016-4539 | PHP 5.6.18 | 9.8 | N/A | The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of... |
| CVE-2016-4540 | PHP 5.6.18 | 9.8 | N/A | The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to... |
| CVE-2016-4541 | PHP 5.6.18 | 9.8 | N/A | The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to c... |
| CVE-2016-4542 | PHP 5.6.18 | 9.8 | N/A | The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf argume... |
| CVE-2016-4543 | PHP 5.6.18 | 9.8 | N/A | The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allo... |
| CVE-2016-6294 | PHP 5.6.18 | 9.8 | N/A | The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restr... |
| CVE-2016-4538 | PHP 5.6.18 | 9.8 | N/A | The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considerin... |
| CVE-2016-6291 | PHP 5.6.18 | 9.8 | N/A | The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a... |
| CVE-2016-5768 | PHP 5.6.18 | 9.8 | N/A | Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23,... |
| CVE-2016-5769 | PHP 5.6.18 | 9.8 | N/A | Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a... |
| CVE-2016-5773 | PHP 5.6.18 | 9.8 | N/A | php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garb... |
| CVE-2016-6295 | PHP 5.6.18 | 9.8 | N/A | ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection,... |
| CVE-2016-6297 | PHP 5.6.18 | 8.8 | N/A | Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote att... |
| CVE-2016-5766 | PHP 5.6.18 | 8.8 | N/A | Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.2... |
| CVE-2016-5767 | PHP 5.6.18 | 8.8 | N/A | Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.2... |
| CVE-2016-5094 | PHP 5.6.18 | 8.6 | N/A | Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial... |
| CVE-2016-5096 | PHP 5.6.18 | 8.6 | N/A | Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service... |
| CVE-2016-5095 | PHP 5.6.18 | 8.6 | N/A | Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to caus... |
| CVE-2016-5093 | PHP 5.6.18 | 8.6 | N/A | The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the pres... |
| CVE-2016-2176 | OpenSSL 1.0.2e | 8.2 | N/A | The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive informatio... |
| CVE-2016-3142 | PHP 5.6.18 | 8.2 | N/A | The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive informat... |
| CVE-2016-6289 | PHP 5.6.18 | 7.8 | N/A | Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attack... |
| CVE-2013-7456 | PHP 5.6.18 | 7.6 | N/A | gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote a... |
| CVE-2016-4979 | Apache 2.4.18 | 7.5 | N/A | The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HT... |
Tech Stack
Wappalyzer fingerprinting pending
HTTP-body analysis identifies web frameworks, CMS platforms, analytics, JS libraries and server-side languages from this host.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-leak candidates for this IP
When this IP serves a TLS cert for a domain that fronts behind a CDN, that domain surfaces here as an origin-leak candidate with a confidence score.
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
ICMP responsive
This IP replied to our global ICMP sweep — last confirmed 2026-08-05.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Web Pages
| Port | Page title | Status | Flags |
|---|---|---|---|
| 8080 | AppServ Open Project 8.1.0 | 200 |
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
Domains the body links to whose DNS does NOT resolve to this IP — usually CDN assets, embeds, or third-party services. Boilerplate (Google Fonts, jsDelivr, w3.org…) is already filtered.
www.appservhosting.com
href · ×2
www.appserv.org
href · ×2
www.php.net
href · ×1
www.phpmyadmin.net
href · ×1
httpd.apache.org
href · ×1
www.mysql.com
href · ×1
History
First observed
2026-05-26 23:03
Last observed
2026-05-26 23:03
Scan observations
1
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.