IP Address
IPv4
80.14.160.160
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 80.14.160.160
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
ASN
AS3215
Orange France
Country
FR
France
Reverse DNS
lstlambert-656-1-109-160.w80-14.abo.wanadoo.fr
PTR
Open Ports
1
Last scan
Autonomous System
ASN
AS Name
Orange France
AS Type
—
RIR
RIPE NCC
Allocated
1994-04-15
Allocation status
Allocated
Geolocation
Reverse DNS
Last seen
2026-06-17 23:35:08
Network
Prefix
RPKI
—
Open Ports
| Port | Proto | Service | Server | Last seen |
|---|---|---|---|---|
| 80 | tcp | http | Apache/2.4.9 (Win32) PHP/5.5.12 | 2026-06-17 23:35:02.000 |
TLS Certificates
TLS certificate observations pending
Once our scan layer captures a TLS cert from this IP, certificate chain, JARM and JA4S fingerprints will appear here.
Known Vulnerabilities
Published CVEs matched to the software versions fingerprinted on this host. Matching is by product and version against the NVD dictionary — presence of a CVE does not confirm the host is exploitable (patches or backports may apply).
| CVE | Software | CVSS | Severity | Summary |
|---|---|---|---|---|
| CVE-2018-1312 | Apache 2.4.9 | 9.8 | N/A | In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated us... |
| CVE-2014-9912 | PHP 5.5.12 | 9.8 | N/A | The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly... |
| CVE-2015-4599 | PHP 5.5.12 | 9.8 | N/A | The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitiv... |
| CVE-2015-6835 | PHP 5.5.12 | 9.8 | N/A | The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote at... |
| CVE-2015-6834 | PHP 5.5.12 | 9.8 | N/A | Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via... |
| CVE-2015-5589 | PHP 5.5.12 | 9.8 | N/A | The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer... |
| CVE-2015-4642 | PHP 5.5.12 | 9.8 | N/A | The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to exec... |
| CVE-2015-4603 | PHP 5.5.12 | 9.8 | N/A | The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to... |
| CVE-2015-4602 | PHP 5.5.12 | 9.8 | N/A | The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers... |
| CVE-2015-4600 | PHP 5.5.12 | 9.8 | N/A | The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (applicatio... |
| CVE-2015-8835 | PHP 5.5.12 | 9.8 | N/A | The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, w... |
| CVE-2016-4071 | PHP 5.5.12 | 9.8 | N/A | Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote atta... |
| CVE-2016-4072 | PHP 5.5.12 | 9.8 | N/A | The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as... |
| CVE-2016-4073 | PHP 5.5.12 | 9.8 | N/A | Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 a... |
| CVE-2016-5116 | PHP 5.5.12 | 9.1 | N/A | gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain s... |
| CVE-2016-3171 | PHP 5.5.12 | 8.1 | N/A | Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code vi... |
| CVE-2016-0736 | Apache 2.4.9 | 7.5 | N/A | In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB m... |
| CVE-2016-2161 | Apache 2.4.9 | 7.5 | N/A | In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for... |
| CVE-2017-15710 | Apache 2.4.9 | 7.5 | N/A | In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language head... |
| CVE-2017-9798 | Apache 2.4.9 | 7.5 | N/A | Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has... |
| CVE-2014-3669 | PHP 5.5.12 | 7.5 | HIGH | Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remot... |
| CVE-2014-8142 | PHP 5.5.12 | 7.5 | HIGH | Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before... |
| CVE-2014-9427 | PHP 5.5.12 | 7.5 | HIGH | sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not p... |
| CVE-2014-9653 | PHP 5.5.12 | 7.5 | HIGH | readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread... |
| CVE-2014-9705 | PHP 5.5.12 | 7.5 | HIGH | Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.... |
| CVE-2015-6838 | PHP 5.5.12 | 7.5 | N/A | The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is us... |
| CVE-2015-6833 | PHP 5.5.12 | 7.5 | N/A | Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to a... |
| CVE-2015-6837 | PHP 5.5.12 | 7.5 | N/A | The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is us... |
| CVE-2015-4022 | PHP 5.5.12 | 7.5 | HIGH | Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to exe... |
| CVE-2015-4025 | PHP 5.5.12 | 7.5 | HIGH | PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remot... |
| CVE-2015-4026 | PHP 5.5.12 | 7.5 | HIGH | The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which m... |
| CVE-2015-4147 | PHP 5.5.12 | 7.5 | HIGH | The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an... |
| CVE-2015-0231 | PHP 5.5.12 | 7.5 | HIGH | Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before... |
| CVE-2015-3329 | PHP 5.5.12 | 7.5 | HIGH | Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow... |
| CVE-2015-3307 | PHP 5.5.12 | 7.5 | HIGH | The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial... |
| CVE-2015-2787 | PHP 5.5.12 | 7.5 | HIGH | Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before... |
| CVE-2015-4604 | PHP 5.5.12 | 7.5 | N/A | The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not prop... |
| CVE-2015-4605 | PHP 5.5.12 | 7.5 | N/A | The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not pro... |
| CVE-2015-0273 | PHP 5.5.12 | 7.5 | HIGH | Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execu... |
| CVE-2015-4644 | PHP 5.5.12 | 7.5 | N/A | The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not... |
Tech Stack
Detected via Wappalyzer-style rules on the HTTP response body, headers, scripts and meta tags.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-leak candidates for this IP
When this IP serves a TLS cert for a domain that fronts behind a CDN, that domain surfaces here as an origin-leak candidate with a confidence score.
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
Domains the body links to whose DNS does NOT resolve to this IP — usually CDN assets, embeds, or third-party services. Boilerplate (Google Fonts, jsDelivr, w3.org…) is already filtered.
History
First observed
2026-06-15 10:57
Last observed
2026-06-17 23:35
Scan observations
4
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.