IP Address
IPv4
200.71.7.3
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 200.71.7.3
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
ASN
AS20002
Click for details
Country
UY
Uruguay
Reverse DNS
correo3.claronet.com.uy
PTR
Open Ports
—
Last scan
Autonomous System
Geolocation
Reverse DNS
Last seen
2026-06-19 07:33:39
Network
Prefix
RPKI
—
Open Ports
Port-scan data not yet ingested
Open-port and banner-grab data from our scan layer will appear here. World-sweep covers all IPv4 over time — this host may be in a /8 we haven't reached yet.
TLS Certificates
TLS certificate observations pending
Once our scan layer captures a TLS cert from this IP, certificate chain, JARM and JA4S fingerprints will appear here.
Known Vulnerabilities
Published CVEs matched to the software versions fingerprinted on this host. Matching is by product and version against the NVD dictionary — presence of a CVE does not confirm the host is exploitable (patches or backports may apply).
| CVE | Software | CVSS | Severity | Summary |
|---|---|---|---|---|
| CVE-2006-3738 | OpenSSL 0.9.8c | 10.0 | HIGH | Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remo... |
| CVE-2009-3245 | OpenSSL 0.9.8c | 10.0 | HIGH | OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec... |
| CVE-2017-3169 | Apache 2.2.3 | 9.8 | N/A | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() d... |
| CVE-2007-4995 | OpenSSL 0.9.8c | 9.3 | HIGH | Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors. |
| CVE-2011-4109 | OpenSSL 0.9.8c | 9.3 | HIGH | Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by tri... |
| CVE-2007-6423 | Apache 2.2.3 | 7.8 | HIGH | Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memor... |
| CVE-2006-2937 | OpenSSL 0.9.8c | 7.8 | HIGH | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed AS... |
| CVE-2006-2940 | OpenSSL 0.9.8c | 7.8 | HIGH | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys... |
| CVE-2016-1238 | Perl 5.8.8 | 7.8 | N/A | (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6)... |
| CVE-2008-2384 | Apache 2.2.3 | 7.5 | HIGH | SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to... |
| CVE-2010-0742 | OpenSSL 0.9.8c | 7.5 | HIGH | The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structure... |
| CVE-2010-4252 | OpenSSL 0.9.8c | 7.5 | HIGH | OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass... |
| CVE-2012-2110 | OpenSSL 0.9.8c | 7.5 | HIGH | The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret inte... |
| CVE-2013-1667 | Perl 5.8.8 | 7.5 | HIGH | The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted h... |
| CVE-2008-5302 | Perl 5.8.8 | 6.9 | MEDIUM | Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid bina... |
| CVE-2008-5303 | Perl 5.8.8 | 6.9 | MEDIUM | Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack,... |
| CVE-2006-4154 | Apache 2.2.3 | 6.8 | MEDIUM | Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers t... |
| CVE-2007-5135 | OpenSSL 0.9.8c | 6.8 | MEDIUM | Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary... |
| CVE-2012-2333 | OpenSSL 0.9.8c | 6.8 | MEDIUM | Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows rem... |
| CVE-2011-1521 | Python 2.4.4 | 6.4 | MEDIUM | The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it e... |
| CVE-2007-1741 | Apache 2.2.3 | 6.2 | MEDIUM | Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privile... |
| CVE-2016-4975 | Apache 2.2.3 | 6.1 | N/A | Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32... |
| CVE-2014-9365 | Python 2.4.4 | 5.8 | MEDIUM | The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when ac... |
| CVE-2008-5077 | OpenSSL 0.9.8c | 5.8 | MEDIUM | OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the... |
| CVE-2011-4354 | OpenSSL 0.9.8c | 5.8 | MEDIUM | crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher... |
| CVE-2017-3735 | OpenSSL 0.9.8c | 5.3 | N/A | While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of... |
| CVE-2011-2939 | Perl 5.8.8 | 5.1 | MEDIUM | Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent... |
| CVE-2007-6750 | Apache 2.2.3 | 5.0 | MEDIUM | The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris,... |
| CVE-2010-0408 | Apache 2.2.3 | 5.0 | MEDIUM | The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations... |
| CVE-2011-3368 | Apache 2.2.3 | 5.0 | MEDIUM | The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) R... |
| CVE-2013-5704 | Apache 2.2.3 | 5.0 | MEDIUM | The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer po... |
| CVE-2012-0845 | Python 2.4.4 | 5.0 | MEDIUM | SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to caus... |
| CVE-2012-1150 | Python 2.4.4 | 5.0 | MEDIUM | Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collision... |
| CVE-2006-7250 | OpenSSL 0.9.8c | 5.0 | MEDIUM | The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference... |
| CVE-2009-0789 | OpenSSL 0.9.8c | 5.0 | MEDIUM | OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial... |
| CVE-2009-4355 | OpenSSL 0.9.8c | 5.0 | MEDIUM | Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to... |
| CVE-2011-3210 | OpenSSL 0.9.8c | 5.0 | MEDIUM | The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshak... |
| CVE-2011-4576 | OpenSSL 0.9.8c | 5.0 | MEDIUM | The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might all... |
| CVE-2011-4619 | OpenSSL 0.9.8c | 5.0 | MEDIUM | The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remo... |
| CVE-2012-0027 | OpenSSL 0.9.8c | 5.0 | MEDIUM | The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial... |
Tech Stack
Wappalyzer fingerprinting pending
HTTP-body analysis identifies web frameworks, CMS platforms, analytics, JS libraries and server-side languages from this host.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-leak candidates for this IP
When this IP serves a TLS cert for a domain that fronts behind a CDN, that domain surfaces here as an origin-leak candidate with a confidence score.
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
ICMP responsive
This IP replied to our global ICMP sweep — last confirmed 2026-07-31.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Web Pages
| Port | Page title | Status | Flags |
|---|---|---|---|
| 80 | 302 Found | 302 |
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
No external references found yet
As HTML bodies get banner-grabbed, references to external domains land here.
History
First observed
2026-06-19 07:32
Last observed
2026-06-19 07:32
Scan observations
2
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.