🛰 Infrastructure Exposure Map

Every routable state IP the platform tracks — Cuban and Venezuelan — enriched through Shodan's public InternetDB index: open services, fingerprinted software, and known CVEs. Read-only: CubaIntel never connects to, scans, or exploits any host. It maps the regimes' internet-facing attack surface from public data alone.
1,683
State IPs checked
365
Indexed by Shodan
70
Hosts with known CVEs
4,004
Total CVE exposures
90
Gov / mil hosts
2,233
Open services
CVE-exposed Government All indexed
Exposed hosts — 70
190.9.130.90 190.9-130-90.static.cantv.net 1 ports 373 CVE
Open ports / services
80 HTTP
Fingerprinted software
php:php:5.4.45apache:http_serverwordpress:wordpress:4.1.9
Known CVEs (373) — oldest first
Shodan tags
eol-product
seed · checked 2026-10-14T07:23 · via Shodan InternetDB
201.249.52.22 intranet.insalud.gob.ve · roraima.insalud.gob.ve · dev.insalud.gob.ve +8 10 ports 332 CVE
Open ports / services
21 FTP22 SSH53 DNS80 HTTP82443 HTTPS3306 MySQL8080 HTTP-alt908010000
Fingerprinted software
f5:nginxapache:http_server:2.4.6wordpress:wordpress:5.5.1apache:tomcatpureftpd:pure-ftpdopenbsd:openssh:7.4mariadb:mariadb:5.5.68-MariaDBphp:php:8.2.20php:php:7.0.33
Known CVEs (332) — oldest first
Shodan tags
databaseeol-productself-signed
seed · checked 2026-10-15T07:19 · via Shodan InternetDB
152.206.201.89 srv89201-206152.vps.etecsa.cu · webmail.countigo.cu 12 ports 206 CVE
Open ports / services
389443 HTTPS465 SMTPS587 SMTP993 IMAPS133730013306 MySQL44338080 HTTP-alt88889443
Fingerprinted software
strapi:strapigetbootstrap:bootstrapf5:nginxportainer:portainer:2.11.1canonical:ubuntu_linuxapache:http_serverlinux:linux_kernelf5:nginx:1.18.0oracle:mysql:5.7.22jquery:jqueryangularjs:angular.jsjquery:jquery_ui
Known CVEs (206) — oldest first
Shodan tags
starttlseol-productdatabase
cuban_external · checked 2026-10-10T07:27 · via Shodan InternetDB
181.225.235.176 miempresa.etecsa.cu 4 ports 193 CVE
Open ports / services
80 HTTP443 HTTPS30005000
Fingerprinted software
redhat:linuxapache:http_server:2.4.37python:python:3.6modwsgi:mod_wsgi:4.6.4openssl:openssl:1.1.1kfacebook:react
Known CVEs (193) — oldest first
public_ipv4 · checked 2026-10-11T07:21 · via Shodan InternetDB
181.225.233.4 2 ports 168 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
openssl:openssl:1.0.2kcentos:centosapache:http_server:2.4.6getbootstrap:bootstrap
Known CVEs (168) — oldest first
public_ipv4 · checked 2026-10-11T07:21 · via Shodan InternetDB
190.92.127.20 en.escambray.cu · bohemia.cu · www.bohemia.cu 2 ports 152 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
debian:debian_linuxapache:http_server:2.4.10openssl:openssl:1.0.1t
Known CVEs (152) — oldest first
cuban_external · checked 2026-10-11T07:23 · via Shodan InternetDB
201.249.66.174 201-249-66-174-bto-00.rai.cantv.net · indet.sytes.net 10 ports 138 CVE
Open ports / services
22 SSH80 HTTP3306 MySQL80068080 HTTP-alt8443 HTTPS-alt908091801002218006
Fingerprinted software
apache:http_server:2.4.65debian:debian_linuxgitlab:gitlabf5:nginxapache:http_server:2.4.10mariadb:mariadb:10.5.26-MariaDB-0%2bdeb11u2openbsd:openssh:8.4p1linux:linux_kernel
Known CVEs (138) — oldest first
Shodan tags
open-dirdatabaseeol-product
seed · checked 2026-10-15T07:19 · via Shodan InternetDB
190.9.130.168 190.9-130-168.static.cantv.net 1 ports 132 CVE
Open ports / services
80 HTTP
Fingerprinted software
apache:http_server:2.4.10
Known CVEs (132) — oldest first
seed · checked 2026-10-14T07:23 · via Shodan InternetDB
190.205.40.74 190.205.40.74-bto-00.rai.cantv.net 3 ports 127 CVE
Open ports / services
53 DNS80 HTTP4700
Fingerprinted software
apache:http_server:2.4.38linux:linux_kernelopenbsd:openssh:7.9p1debian:debian_linux
Known CVEs (127) — oldest first
seed · checked 2026-10-14T07:23 · via Shodan InternetDB
200.44.12.110 200-44-12-110.cnt-02.rai.cantv.net · nube.conatel.gob.ve 2 ports 126 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
owncloud:ownclouddebian:debian_linuxgetbootstrap:bootstrapphp:php:5.6.30handlebars.js_project:handlebars.jsapache:http_server:2.2.22backbone_project:backbonejquery:jquery_uijquery:jquery
Known CVEs (126) — oldest first
Shodan tags
eol-product
seed · checked 2026-10-14T07:24 · via Shodan InternetDB
201.248.68.116 201-248-67-116.cnt-02.rai.cantv.net · inn.gob.ve 3 ports 123 CVE
Open ports / services
53 DNS80 HTTP443 HTTPS
Fingerprinted software
apache:http_server:2.4.41canonical:ubuntu_linuxisc:bind:9.18.39
Known CVEs (123) — oldest first
seed · checked 2026-10-26T07:23 · via Shodan InternetDB
201.248.68.117 innqr.inn.gob.ve · 201-248-67-117.cnt-02.rai.cantv.net 2 ports 118 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
getbootstrap:bootstrapapache:http_server:2.4.41canonical:ubuntu_linuxjquery:jquery
Known CVEs (118) — oldest first
seed · checked 2026-10-26T07:23 · via Shodan InternetDB
152.206.177.165 srv165177-206152.vps.etecsa.cu 4 ports 117 CVE
Open ports / services
22 SSH80 HTTP9921194
Fingerprinted software
canonical:ubuntu_linuxapache:http_server:2.4.41openbsd:openssh:8.2p1
Known CVEs (117) — oldest first
Shodan tags
vpn
cuban_external · checked 2026-10-10T07:24 · via Shodan InternetDB
190.202.26.12 190-202-26-12.chc-00.rai.cantv.net 2 ports 109 CVE
Open ports / services
53 DNS80 HTTP
Fingerprinted software
apache:http_server:2.4.38debian:debian_linux
Known CVEs (109) — oldest first
seed · checked 2026-10-11T07:22 · via Shodan InternetDB
152.206.3.53 vlired.cu · correo.uclv.edu.cu · mta.uclv.cu +12 11 ports 101 CVE
Open ports / services
21 FTP80 HTTP143 IMAP443 HTTPS465 SMTPS587 SMTP993 IMAPS18834949900015555
Fingerprinted software
debian:debian_linuxapache:http_server:2.4.48postfix:postfix
Known CVEs (101) — oldest first
Shodan tags
starttls
cuban_external · checked 2026-10-10T07:29 · via Shodan InternetDB
190.202.150.77 190-202-150-77-chc-00.rai.cantv.net · www.fona.gob.ve 5 ports 99 CVE
Open ports / services
22 SSH80 HTTP222443 HTTPS500
Fingerprinted software
debian:debian_linuxapache:http_server:2.4.51apache:http_server:2.4.66openbsd:openssh:10.0p2openbsd:openssh:8.4p1linux:linux_kernel
Known CVEs (99) — oldest first
Shodan tags
vpn
seed · checked 2026-10-14T07:23 · via Shodan InternetDB
152.206.201.15 srv15201-206152.vps.etecsa.cu 2 ports 99 CVE
Open ports / services
22 SSH80 HTTP
Fingerprinted software
canonical:ubuntu_linuxapache:http_server:2.4.41openbsd:openssh:8.2p1
Known CVEs (99) — oldest first
cuban_external · checked 2026-10-10T07:27 · via Shodan InternetDB
166.1.68.179 www.fondoefa.gob.ve · fondoefa.gob.ve · 166-1-68-179.ips.acedatacenter.com 2 ports 94 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
apache:http_server:2.4.52canonical:ubuntu_linux
Known CVEs (94) — oldest first
seed · checked 2026-10-26T07:23 · via Shodan InternetDB
161.196.43.73 cantv.com.ve · www.cantv.com.ve 2 ports 91 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
citrix:netscaler_application_delivery_controllerwordpress:wordpress:6.5
Known CVEs (91) — oldest first
seed · checked 2026-10-11T07:20 · via Shodan InternetDB
8.242.232.210 pagos.alcaldiachacao.net 2 ports 86 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
php:php:8.3.33apache:http_server:2.4.62openssl:openssl:3.5.5
Known CVEs (86) — oldest first
seed · checked 2026-10-15T07:20 · via Shodan InternetDB
190.202.122.202 190-202-122-202.cnt-02.rai.cantv.net 5 ports 82 CVE
Open ports / services
53 DNS80 HTTP443 HTTPS80009090 Web
Fingerprinted software
php:php:8.2.29f5:nginxopenresty:openrestygetbootstrap:bootstrap:3.4.1debian:debian_linuxapache:http_server:2.4.62
Known CVEs (82) — oldest first
seed · checked 2026-10-14T07:22 · via Shodan InternetDB
190.202.80.212 190.202-80-212.cnt-02.rai.cantv.net 2 ports 73 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
debian:debian_linuxapache:http_server:2.2.22
Known CVEs (73) — oldest first
seed · checked 2026-10-14T07:23 · via Shodan InternetDB
190.202.80.217 190.202-80-217.cnt-02.rai.cantv.net 2 ports 72 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
apache:http_server:2.2.22debian:debian_linux
Known CVEs (72) — oldest first
seed · checked 2026-10-14T07:23 · via Shodan InternetDB
190.92.127.88 trabajadores.cu · www.trabajadores.cu · archivo.trabajadores.cu 2 ports 63 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
apache:http_server:2.4.56debian:debian_linux
Known CVEs (63) — oldest first
cuban_external · checked 2026-10-11T07:23 · via Shodan InternetDB
190.114.9.155 3henlinea.com · empleos.com.ve · www.tdutec.com +2 8 ports 61 CVE
Open ports / services
80 HTTP443 HTTPS207920822083208720963306 MySQL
Fingerprinted software
oracle:mysql:8.0.37f5:nginxopenresty:lua-nginx-module:1.31.1.1openresty:openresty:1.31.1.1
Known CVEs (61) — oldest first
Shodan tags
databaseeol-product
seed · checked 2026-10-14T07:22 · via Shodan InternetDB
150.187.25.30 nube.fundacite-merida.gob.ve 5 ports 60 CVE
Open ports / services
22 SSH25 SMTP80 HTTP161443 HTTPS
Fingerprinted software
owncloud:owncloudpostfix:postfixgetbootstrap:bootstrapselect2:select2openbsd:openssh:9.6p1apache:http_server:2.4.58handlebars.js_project:handlebars.jsbackbone_project:backbonejquery:jquery_uicanonical:ubuntu_linuxjquery:jquery
Known CVEs (60) — oldest first
Shodan tags
cloudstarttlsself-signed
seed · checked 2026-10-14T07:22 · via Shodan InternetDB
200.6.157.47 c887.gconex.com 18 ports 51 CVE
Open ports / services
21 FTP22 SSH25 SMTP53 DNS80 HTTP110 POP3143 IMAP443 HTTPS465 SMTPS587 SMTP993 IMAPS995 POP3S203020822083208620872096
Fingerprinted software
postfix:postfixf5:nginx:1.20.2getbootstrap:bootstrapopenbsd:openssh:7.4control-webpanel:webpaneljquery:jqueryphp:php:7.2.30pureftpd:pure-ftpdjquery:jquery_ui
Known CVEs (51) — oldest first
Shodan tags
eol-productstarttls
seed · checked 2026-10-11T07:24 · via Shodan InternetDB
200.35.132.93 bcv.org.ve 2 ports 50 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
joomla:joomladebian:debian_linuxjoomla:joomla%21:1.7php:phpjquery:jqueryapache:http_server:2.4.61mootools:mootools
Known CVEs (50) — oldest first
seed · checked 2026-10-11T07:23 · via Shodan InternetDB
201.248.74.148 unhollow.inces.gob.ve · acreditacion.inces.gob.ve · 201-248-74-148.cnt-02.rai.cantv.net 4 ports 45 CVE
Open ports / services
80 HTTP443 HTTPS806910443
Fingerprinted software
encode:uvicornpython:pythongetbootstrap:bootstrapdebian:debian_linuxapache:http_server:2.4.67
Known CVEs (45) — oldest first
seed · checked 2026-10-14T07:24 · via Shodan InternetDB
192.99.147.218 less.dns40.com · aptprocessing-latam.com · www.less.dns40.com +1 16 ports 41 CVE
Open ports / services
21 FTP22 SSH53 DNS80 HTTP110 POP3111443 HTTPS465 SMTPS993 IMAPS995 POP3S2077208220873306 MySQL5432 PostgreSQL9100
Fingerprinted software
openbsd:openssh:7.4exim:exim:4.99.5apache:http_serverpureftpd:pure-ftpdcpanel:cpanelmariadb:mariadb:10.3.39-MariaDB-log-cll-lvephp:php:7.4.33
Known CVEs (41) — oldest first
Shodan tags
eol-oseol-productdatabasestarttls
seed · checked 2026-10-11T07:23 · via Shodan InternetDB
190.202.82.68 mail.info.intt.gob.ve 9 ports 37 CVE
Open ports / services
22 SSH143 IMAP443 HTTPS465 SMTPS587 SMTP993 IMAPS995 POP3S20008010
Fingerprinted software
openbsd:openssh:8.7jquery:jquery:2.1.3f5:nginxgetbootstrap:bootstrap:3.3.1
Known CVEs (37) — oldest first
Shodan tags
starttls
seed · checked 2026-10-14T07:23 · via Shodan InternetDB
201.243.82.126 201-243-82-126.anz-00.rai.cantv.net 2 ports 33 CVE
Open ports / services
22 SSH443 HTTPS
Fingerprinted software
openbsd:openssh:7.9f5:nginxjquery:jquery:3.5.1getbootstrap:bootstrap
Known CVEs (33) — oldest first
Shodan tags
self-signed
seed · checked 2026-10-14T07:24 · via Shodan InternetDB
104.250.141.195 reg.gservidor.com · zservidor.com 20 ports 31 CVE
Open ports / services
22 SSH25 SMTP53 DNS80 HTTP110 POP3111143 IMAP443 HTTPS465 SMTPS587 SMTP995 POP3S2077208220832086208720953306 MySQL41905201
Fingerprinted software
mariadb:mariadb:11.4.12-MariaDB-logopenbsd:openssh:8.7exim:exim:4.99.5litespeedtech:litespeed_web_server
Known CVEs (31) — oldest first
Shodan tags
databasestarttls
seed · checked 2026-10-11T07:20 · via Shodan InternetDB
217.216.51.45 ima.gob.ve · vmi2945845.contaboserver.net 6 ports 30 CVE
Open ports / services
111443 HTTPS20223306 MySQL34438017
Fingerprinted software
mariadb:mariadb:10.5.29-MariaDB-logf5:nginx:1.20.1openbsd:openssh:8.7
Known CVEs (30) — oldest first
Shodan tags
databaseeol-product
seed · checked 2026-10-15T07:19 · via Shodan InternetDB
152.206.201.7 srv7201-206152.vps.etecsa.cu 8 ports 28 CVE
Open ports / services
22 SSH80 HTTP443 HTTPS300040008443 HTTPS-alt944310443
Fingerprinted software
canonical:ubuntu_linuxgitea:gitea:1.14.1f5:nginx:1.28.0openbsd:openssh:8.2p1
Known CVEs (28) — oldest first
Shodan tags
eol-product
cuban_external · checked 2026-10-10T07:27 · via Shodan InternetDB
200.14.50.210 2 ports 25 CVE
Open ports / services
80 HTTP443 HTTPS
Fingerprinted software
apache:http_server:2.4.67
Known CVEs (25) — oldest first
public_ipv4 · checked 2026-10-13T07:21 · via Shodan InternetDB
201.220.222.230 webhosting.red.sld.cu 8 ports 23 CVE
Open ports / services
25 SMTP80 HTTP161443 HTTPS8738080 HTTP-alt910010050
Fingerprinted software
exim:exim:4.94.2apache:http_server
Known CVEs (23) — oldest first
Shodan tags
self-signedeol-osstarttls
public_ipv4 · checked 2026-10-11T07:24 · via Shodan InternetDB
67.211.219.77 alcaldialossalias.gob.ve · cpcalendars.vps.alcaldialossalias.gob.ve · mail.vps.alcaldialossalias.gob.ve +10 18 ports 21 CVE
Open ports / services
21 FTP53 DNS80 HTTP110 POP3143 IMAP443 HTTPS465 SMTPS587 SMTP993 IMAPS995 POP3S2079208220832086208720963306 MySQL4524
Fingerprinted software
openbsd:openssh:9.9mariadb:mariadbapache:http_servercpanel:cpanelpureftpd:pure-ftpdexim:exim:4.100
Known CVEs (21) — oldest first
Shodan tags
databasestarttls
seed · checked 2026-10-11T07:25 · via Shodan InternetDB
172.203.241.10 gamma.wthosting.net · bomberosmerida.gob.ve 15 ports 21 CVE
Open ports / services
22 SSH53 DNS80 HTTP110 POP3443 HTTPS465 SMTPS587 SMTP993 IMAPS995 POP3S207720822083208620872095
Fingerprinted software
exim:exim:4.100openbsd:openssh:9.9cpanel:whmapache:http_serverexim:exim:4.100.1cpanel:cpanel
Known CVEs (21) — oldest first
Shodan tags
cloudstarttls
seed · checked 2026-10-11T07:20 · via Shodan InternetDB
152.206.118.100 menuqr.cu · srv100118-206152.vps.etecsa.cu 7 ports 19 CVE
Open ports / services
21 FTP22 SSH53 DNS80 HTTP443 HTTPS8883000
Fingerprinted software
canonical:ubuntu_linuxopenbsd:openssh:8.2p1php:php:8.3.21apache:http_serverpureftpd:pure-ftpd
Known CVEs (19) — oldest first
Shodan tags
self-signedstarttls
cuban_external · checked 2026-10-10T07:23 · via Shodan InternetDB
70 total← Prev12Next →
EXPOSED GOVERNMENT DOMAINS
conatel.gob.ve 3 hosts 126 CVE
austria.gob.ve 3 hosts 0 CVE
pescalba.gob.ve 3 hosts 0 CVE
inn.gob.ve 2 hosts 241 CVE
inces.gob.ve 2 hosts 45 CVE
intt.gob.ve 2 hosts 37 CVE
mitrans.gob.cu 2 hosts 14 CVE
tsp.gob.cu 2 hosts 0 CVE
redpinar.gob.cu 2 hosts 0 CVE
mincyt.gob.ve 2 hosts 0 CVE
suscerte.gob.ve 2 hosts 0 CVE
tsj.gob.ve 2 hosts 0 CVE
desarrollominero.gob.ve 2 hosts 0 CVE
mppp.gob.ve 2 hosts 0 CVE
minhvi.gob.ve 2 hosts 0 CVE
insalud.gob.ve 1 host 332 CVE
fona.gob.ve 1 host 99 CVE
fondoefa.gob.ve 1 host 94 CVE
MOST-COMMON CVEs
CVE-2009-2299 · 5
The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.
25 hosts
CVE-2011-1176 · 4.3
The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.
25 hosts
CVE-2013-0942 · 4.3
Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
25 hosts
CVE-2012-4001 · 5
The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.
25 hosts
CVE-2026-42535 · 9.1
A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
25 hosts
CVE-2026-29170 · 6.1
A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
25 hosts
CVE-2012-3526 · 5
The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request.
25 hosts
CVE-2011-2688 · 7.5
SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field.
25 hosts
CVE-2013-2765 · 5
The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.
25 hosts
CVE-2013-0941 · 2.1
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.
25 hosts
CVE-2012-4360 · 4.3
Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
25 hosts
CVE-2009-0796 · 2.6
Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.
25 hosts
CVE-2007-4723 · 7.5
Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence and an account_manage.php/login.php final component for reaching the protected account_manage.php page.
25 hosts
CVE-2013-4365 · 7.5
Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.
25 hosts
CVE-2025-23419 · 4.3
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
24 hosts
CVE-2023-44487 · 7.5 KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
23 hosts
TOP EXPOSED PORTS
80 HTTP256
443 HTTPS220
53 DNS90
25 SMTP68
22 SSH44
465 SMTPS40
993 IMAPS40
208740
208339
208637
208236
587 SMTP34
143 IMAP31
8443 HTTPS-alt29
FINGERPRINTED SOFTWARE
f5:nginx86
apache:http_server40
postfix:postfix38
canonical:ubuntu_linux35
openbsd:openssh:8.2p120
linux:linux_kernel19
cloudflare:cloudflare19
debian:debian_linux16
getbootstrap:bootstrap15
jquery:jquery13
openresty:openresty:1.31.1.113
openresty:lua-nginx-module:1.31.1.111
pureftpd:pure-ftpd10
f5:nginx:1.18.010
jquery:jquery_ui8
openresty:openresty7
Source: Shodan InternetDB + CVEDB (public index, no key) — a public index of internet-facing services. CVE lists reflect software versions Shodan observed and are not a confirmation that a host is compromised. Coverage is bounded and reflects what Shodan has indexed, not a complete survey. CubaIntel is read-only and never connects to any host. Last enrichment: 2026-10-26T07:23 UTC. Refresh: tools/shodan_infra_enrich.py