IP Address
IPv4
85.14.7.2
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 85.14.7.2
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Autonomous System
ASN
AS Name
EVOLINK EAD
AS Type
—
RIR
RIPE NCC
Allocated
1997-04-08
Allocation status
Allocated
Geolocation
Reverse DNS
PTR
—
Last seen
—
Network
Prefix
RPKI
—
Open Ports
Port-scan data not yet ingested
Open-port and banner-grab data from our scan layer will appear here. World-sweep covers all IPv4 over time — this host may be in a /8 we haven't reached yet.
TLS Certificates
Port 443
65037005234c…
Subject: nullconf.ca
Issuer: R3
SANs: *.nullconf.ca, *.nullconf.org, nullconf.ca, nullconf.org
Valid 2023-05-21 04:02:27 → 2023-08-19 04:02:26
Port 443
65037005234c…
Subject: nullconf.ca
Issuer: R3
SANs: *.nullconf.ca, *.nullconf.org, nullconf.ca, nullconf.org
Valid 2023-05-21 04:02:27 → 2023-08-19 04:02:26
Known Vulnerabilities
Published CVEs matched to the software versions fingerprinted on this host. Matching is by product and version against the NVD dictionary — presence of a CVE does not confirm the host is exploitable (patches or backports may apply).
| CVE | Software | CVSS | Severity | Summary |
|---|---|---|---|---|
| CVE-2004-0492 | Apache 1.3.31 | 10.0 | HIGH | Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and pos... |
| CVE-2006-3738 | OpenSSL 0.9.7d | 10.0 | HIGH | Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remo... |
| CVE-2007-0910 | PHP 4.4.4 | 10.0 | HIGH | Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors. |
| CVE-2008-5557 | PHP 4.4.4 | 10.0 | HIGH | Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent atta... |
| CVE-2009-4143 | PHP 4.4.4 | 10.0 | HIGH | PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION supe... |
| CVE-2011-3268 | PHP 4.4.4 | 10.0 | HIGH | Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different... |
| CVE-2012-2376 | PHP 4.4.4 | 10.0 | HIGH | Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments t... |
| CVE-2012-2688 | PHP 4.4.4 | 10.0 | HIGH | Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and re... |
| CVE-2007-2844 | PHP 4.4.4 | 9.3 | HIGH | PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such... |
| CVE-2006-2937 | OpenSSL 0.9.7d | 7.8 | HIGH | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed AS... |
| CVE-2006-2940 | OpenSSL 0.9.7d | 7.8 | HIGH | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys... |
| CVE-2007-1718 | PHP 4.4.4 | 7.8 | HIGH | CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers... |
| CVE-2007-1883 | PHP 4.4.4 | 7.8 | HIGH | PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary memory locations via an interruption that triggers a user s... |
| CVE-2007-1461 | PHP 4.4.4 | 7.8 | HIGH | The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x before 5.2.2, does not implement safemode or open_basedir checks, w... |
| CVE-2013-5697 | Apache 1.3.31 | 7.5 | HIGH | SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL command... |
| CVE-2010-0742 | OpenSSL 0.9.7d | 7.5 | HIGH | The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structure... |
| CVE-2010-4252 | OpenSSL 0.9.7d | 7.5 | HIGH | OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass... |
| CVE-2012-2110 | OpenSSL 0.9.7d | 7.5 | HIGH | The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret inte... |
| CVE-2007-1700 | PHP 4.4.4 | 7.5 | HIGH | The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal p... |
| CVE-2007-0905 | PHP 4.4.4 | 7.5 | HIGH | PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension. NOTE: it is possible that... |
| CVE-2007-0906 | PHP 4.4.4 | 7.5 | HIGH | Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1... |
| CVE-2007-0909 | PHP 4.4.4 | 7.5 | HIGH | Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print... |
| CVE-2007-1885 | PHP 4.4.4 | 7.5 | HIGH | Integer overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via a sin... |
| CVE-2007-1376 | PHP 4.4.4 | 7.5 | HIGH | The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows con... |
| CVE-2007-1825 | PHP 4.4.4 | 7.5 | HIGH | Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long bo... |
| CVE-2007-1777 | PHP 4.4.4 | 7.5 | HIGH | Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry... |
| CVE-2007-1890 | PHP 4.4.4 | 7.5 | HIGH | Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows context-dependent att... |
| CVE-2007-1888 | PHP 4.4.4 | 7.5 | HIGH | Buffer overflow in the sqlite_decode_binary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependen... |
| CVE-2007-4658 | PHP 4.4.4 | 7.5 | HIGH | The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors,... |
| CVE-2008-3658 | PHP 4.4.4 | 7.5 | HIGH | Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a... |
| CVE-2009-3291 | PHP 4.4.4 | 7.5 | HIGH | The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack ve... |
| CVE-2009-3292 | PHP 4.4.4 | 7.5 | HIGH | Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif proc... |
| CVE-2009-3293 | PHP 4.4.4 | 7.5 | HIGH | Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an incorrect "sanity check... |
| CVE-2009-4018 | PHP 4.4.4 | 7.5 | HIGH | The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1) safe_mode_allowed_env_vars and (2) safe_... |
| CVE-2011-1092 | PHP 4.4.4 | 7.5 | HIGH | Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive me... |
| CVE-2011-1148 | PHP 4.4.4 | 7.5 | HIGH | Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory cor... |
| CVE-2011-1153 | PHP 4.4.4 | 7.5 | HIGH | Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive inf... |
| CVE-2012-2311 | PHP 4.4.4 | 7.5 | HIGH | sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that cont... |
| CVE-2013-1635 | PHP 4.4.4 | 7.5 | HIGH | ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir d... |
| CVE-2014-9427 | PHP 4.4.4 | 7.5 | HIGH | sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not p... |
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
nullconf.org
95% confidence
behind AS13335 cert 65037005234c… · cert 65037005… served by 85.14.7.2 (AS8262) carries SAN nullconf.org which currently resolves through Cloudflare (AS13335) at 172.67.176.194, 104.21.17.125, 2606:4700:3036::ac43:b0c2, 2606:4700:3032::6815:117d
nullconf.ca
95% confidence
behind AS13335 cert 65037005234c… · cert 65037005… served by 85.14.7.2 (AS8262) carries SAN nullconf.ca which currently resolves through Cloudflare (AS13335) at 104.21.36.211, 172.67.199.156, 2606:4700:3032::6815:24d3, 2606:4700:3031::ac43:c79c
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Web Pages
| Port | Page title | Status | Flags |
|---|---|---|---|
| 443 | 0x00 nullconf | 200 |
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
Domains the body links to whose DNS does NOT resolve to this IP — usually CDN assets, embeds, or third-party services. Boilerplate (Google Fonts, jsDelivr, w3.org…) is already filtered.
html.design
href · ×2
forms.gle
href · ×2
History
Historical change-log pending
ASN changes, prefix re-allocations, cert rotations, port-state diffs over months — accumulates as our archives grow.