IP Address
IPv4
216.117.128.206
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 216.117.128.206
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
ASN
AS10843
Click for details
Country
US
United States
Reverse DNS
nameservices.net
PTR
Open Ports
—
Last scan
Autonomous System
Geolocation
Reverse DNS
PTR
Last seen
2026-06-18 12:57:39
Network
Prefix
RPKI
—
Open Ports
Port-scan data not yet ingested
Open-port and banner-grab data from our scan layer will appear here. World-sweep covers all IPv4 over time — this host may be in a /8 we haven't reached yet.
TLS Certificates
TLS certificate observations pending
Once our scan layer captures a TLS cert from this IP, certificate chain, JARM and JA4S fingerprints will appear here.
Known Vulnerabilities
Published CVEs matched to the software versions fingerprinted on this host. Matching is by product and version against the NVD dictionary — presence of a CVE does not confirm the host is exploitable (patches or backports may apply).
| CVE | Software | CVSS | Severity | Summary |
|---|---|---|---|---|
| CVE-2017-3169 | Apache 2.2.17 | 9.8 | N/A | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() d... |
| CVE-2012-2110 | OpenSSL 1.0.0d | 7.5 | HIGH | The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret inte... |
| CVE-2014-3512 | OpenSSL 1.0.0d | 7.5 | HIGH | Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (... |
| CVE-2014-8176 | OpenSSL 1.0.0d | 7.5 | HIGH | The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considerin... |
| CVE-2015-0292 | OpenSSL 1.0.0d | 7.5 | HIGH | Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m,... |
| CVE-2015-1789 | OpenSSL 1.0.0d | 7.5 | N/A | The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote... |
| CVE-2014-3567 | OpenSSL 1.0.0d | 7.1 | HIGH | Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to ca... |
| CVE-2012-2333 | OpenSSL 1.0.0d | 6.8 | MEDIUM | Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows rem... |
| CVE-2014-3509 | OpenSSL 1.0.0d | 6.8 | MEDIUM | Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session... |
| CVE-2015-0209 | OpenSSL 1.0.0d | 6.8 | MEDIUM | Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.... |
| CVE-2015-1791 | OpenSSL 1.0.0d | 6.8 | MEDIUM | Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 befor... |
| CVE-2016-4975 | Apache 2.2.17 | 6.1 | N/A | Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32... |
| CVE-2016-0703 | OpenSSL 1.0.0d | 5.9 | N/A | The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 befor... |
| CVE-2016-0704 | OpenSSL 1.0.0d | 5.9 | N/A | An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.... |
| CVE-2013-6450 | OpenSSL 1.0.0d | 5.8 | MEDIUM | The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encrypti... |
| CVE-2017-3735 | OpenSSL 1.0.0d | 5.3 | N/A | While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of... |
| CVE-2012-4557 | Apache 2.2.17 | 5.0 | MEDIUM | The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing ti... |
| CVE-2013-5704 | Apache 2.2.17 | 5.0 | MEDIUM | The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer po... |
| CVE-2011-3207 | OpenSSL 1.0.0d | 5.0 | MEDIUM | crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL va... |
| CVE-2011-3210 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshak... |
| CVE-2011-4576 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might all... |
| CVE-2011-4619 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remo... |
| CVE-2012-0027 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial... |
| CVE-2012-0884 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle be... |
| CVE-2012-1165 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL... |
| CVE-2013-0166 | OpenSSL 1.0.0d | 5.0 | MEDIUM | OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCS... |
| CVE-2014-3505 | OpenSSL 1.0.0d | 5.0 | MEDIUM | Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote at... |
| CVE-2014-3506 | OpenSSL 1.0.0d | 5.0 | MEDIUM | d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of... |
| CVE-2014-3507 | OpenSSL 1.0.0d | 5.0 | MEDIUM | Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cau... |
| CVE-2014-3570 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, whic... |
| CVE-2014-3571 | OpenSSL 1.0.0d | 5.0 | MEDIUM | OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and applicat... |
| CVE-2014-3572 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECD... |
| CVE-2014-8275 | OpenSSL 1.0.0d | 5.0 | MEDIUM | OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to... |
| CVE-2015-0205 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) c... |
| CVE-2015-0206 | OpenSSL 1.0.0d | 5.0 | MEDIUM | Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of... |
| CVE-2015-0286 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properl... |
| CVE-2015-0287 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not re... |
| CVE-2015-0288 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow... |
| CVE-2015-0289 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer... |
| CVE-2015-0293 | OpenSSL 1.0.0d | 5.0 | MEDIUM | The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial... |
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-leak candidates for this IP
When this IP serves a TLS cert for a domain that fronts behind a CDN, that domain surfaces here as an origin-leak candidate with a confidence score.
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
No external references found yet
As HTML bodies get banner-grabbed, references to external domains land here.
History
First observed
2026-05-26 01:48
Last observed
2026-06-18 12:57
Scan observations
4
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.