IP Address
IPv4
64.251.25.206
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 64.251.25.206
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
ASN
—
Not yet attributed
Country
US
United States
Reverse DNS
206-25-251-64.serverpronto.com
PTR
Open Ports
1
Last scan
Autonomous System
ASN
—
AS Name
—
AS Type
—
RIR
ARIN
Allocated
2001-02-05
Allocation status
Allocated
Geolocation
Reverse DNS
Last seen
2026-07-22 14:29:49
Network
Prefix
—
RPKI
—
Open Ports
| Port | Proto | Service | Server | Last seen |
|---|---|---|---|---|
| 80 | tcp | http | Apache/2.4.16 (FreeBSD) OpenSSL/1.0.1p-freebsd PHP/5.6.14 | 2026-07-22 14:28:59.000 |
TLS Certificates
TLS certificate observations pending
Once our scan layer captures a TLS cert from this IP, certificate chain, JARM and JA4S fingerprints will appear here.
Known Vulnerabilities
Published CVEs matched to the software versions fingerprinted on this host. Matching is by product and version against the NVD dictionary — presence of a CVE does not confirm the host is exploitable (patches or backports may apply).
| CVE | Software | CVSS | Severity | Summary |
|---|---|---|---|---|
| CVE-2017-3169 | Apache 2.4.16 | 9.8 | N/A | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() d... |
| CVE-2018-1312 | Apache 2.4.16 | 9.8 | N/A | In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated us... |
| CVE-2016-2554 | PHP 5.6.14 | 9.8 | N/A | Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of servi... |
| CVE-2016-3141 | PHP 5.6.14 | 9.8 | N/A | Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (... |
| CVE-2016-5773 | PHP 5.6.14 | 9.8 | N/A | php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garb... |
| CVE-2016-5768 | PHP 5.6.14 | 9.8 | N/A | Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23,... |
| CVE-2016-4072 | PHP 5.6.14 | 9.8 | N/A | The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as... |
| CVE-2016-4073 | PHP 5.6.14 | 9.8 | N/A | Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 a... |
| CVE-2016-6294 | PHP 5.6.14 | 9.8 | N/A | The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restr... |
| CVE-2016-4473 | PHP 5.6.14 | 9.8 | N/A | /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-683... |
| CVE-2016-4537 | PHP 5.6.14 | 9.8 | N/A | The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument,... |
| CVE-2016-6296 | PHP 5.6.14 | 9.8 | N/A | Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, an... |
| CVE-2016-4071 | PHP 5.6.14 | 9.8 | N/A | Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote atta... |
| CVE-2016-4540 | PHP 5.6.14 | 9.8 | N/A | The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to... |
| CVE-2016-4541 | PHP 5.6.14 | 9.8 | N/A | The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to c... |
| CVE-2016-4542 | PHP 5.6.14 | 9.8 | N/A | The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf argume... |
| CVE-2016-4543 | PHP 5.6.14 | 9.8 | N/A | The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allo... |
| CVE-2016-6291 | PHP 5.6.14 | 9.8 | N/A | The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a... |
| CVE-2016-4538 | PHP 5.6.14 | 9.8 | N/A | The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considerin... |
| CVE-2016-4539 | PHP 5.6.14 | 9.8 | N/A | The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of... |
| CVE-2016-6290 | PHP 5.6.14 | 9.8 | N/A | ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows rem... |
| CVE-2016-5769 | PHP 5.6.14 | 9.8 | N/A | Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a... |
| CVE-2016-6295 | PHP 5.6.14 | 9.8 | N/A | ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection,... |
| CVE-2016-1903 | PHP 5.6.14 | 9.1 | N/A | The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attacker... |
| CVE-2016-5114 | PHP 5.6.14 | 9.1 | N/A | sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows at... |
| CVE-2016-5767 | PHP 5.6.14 | 8.8 | N/A | Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.2... |
| CVE-2016-5766 | PHP 5.6.14 | 8.8 | N/A | Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.2... |
| CVE-2016-6297 | PHP 5.6.14 | 8.8 | N/A | Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote att... |
| CVE-2016-4342 | PHP 5.6.14 | 8.8 | N/A | ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers t... |
| CVE-2016-5094 | PHP 5.6.14 | 8.6 | N/A | Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial... |
| CVE-2016-5096 | PHP 5.6.14 | 8.6 | N/A | Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service... |
| CVE-2016-5093 | PHP 5.6.14 | 8.6 | N/A | The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the pres... |
| CVE-2016-5095 | PHP 5.6.14 | 8.6 | N/A | Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to caus... |
| CVE-2016-3142 | PHP 5.6.14 | 8.2 | N/A | The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive informat... |
| CVE-2016-6289 | PHP 5.6.14 | 7.8 | N/A | Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attack... |
| CVE-2013-7456 | PHP 5.6.14 | 7.6 | N/A | gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote a... |
| CVE-2016-0736 | Apache 2.4.16 | 7.5 | N/A | In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB m... |
| CVE-2016-2161 | Apache 2.4.16 | 7.5 | N/A | In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for... |
| CVE-2017-15710 | Apache 2.4.16 | 7.5 | N/A | In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language head... |
| CVE-2017-9798 | Apache 2.4.16 | 7.5 | N/A | Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has... |
Tech Stack
Wappalyzer fingerprinting pending
HTTP-body analysis identifies web frameworks, CMS platforms, analytics, JS libraries and server-side languages from this host.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-leak candidates for this IP
When this IP serves a TLS cert for a domain that fronts behind a CDN, that domain surfaces here as an origin-leak candidate with a confidence score.
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
ICMP responsive
This IP replied to our global ICMP sweep — last confirmed 2026-08-03.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
No external references found yet
As HTML bodies get banner-grabbed, references to external domains land here.
History
First observed
2026-06-07 04:29
Last observed
2026-07-22 14:28
Scan observations
4
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.