Apache 2.4.52
tcp/443 tcp/80
WARNING: This plugin will generate false positive and is purely informative:
regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)
Severity: info
Fingerprint: 3f43e0ebb5dce37ab8b59eb53ea6237e8f56bf578f56bf578f56bf578f56bf57
Found potentially vulnerable SSH version: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13 WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 129.97.152.215:443
2026-01-22 18:03
HTTP/1.1 200 OK
Date: Thu, 22 Jan 2026 18:03:48 GMT
Server: Apache/2.4.52 (Ubuntu)
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: default-src 'self' https://cdn.zapier.com; connect-src *; font-src 'self' https://cdn.zapier.com data:; frame-src *; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' 'sha256-jqxtvDkBbRAl9Hpqv68WdNOieepg8tJSYu1xIy7zT34=' 'sha256-aui5xYk3Lu1dQcnsPlNZI+qDTdfzdUv3fzsw80VLJgw=' https://cdn.zapier.com https://zapier.com; style-src 'self' 'unsafe-inline' https://cdn.zapier.com
X-Instance-ID: 8386ba48-a7eb-4931-bfb2-0e107690b4a0
Access-Control-Allow-Origin: *
X-Powered-By: Express
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Page title: Rocket.Chat
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" type="text/css" class="__meteor-css__" href="/e37e3a526aace32e4ea71108fc18652f860ce79f.css?meteor_css_resource=true">
<script id="scripts" type="text/javascript" src="/scripts_887a5339b2625a8970658c4f5f9bd94f1067ab7a.js"></script>
<meta name="referrer" content="same-origin" />
<link rel="icon" sizes="16x16" type="image/png" href=/assets/favicon_16.png />
<link rel="icon" sizes="32x32" type="image/png" href=/assets/favicon_32.png />
<link rel="icon" sizes="any" type="image/svg+xml" href=/assets/favicon.svg />
<title>Rocket.Chat</title><meta name="application-name" content="Rocket.Chat"><meta name="apple-mobile-web-app-title" content="Rocket.Chat">
<meta http-equiv="content-language" content=""><meta name="language" content="">
<meta name="robots" content="INDEX,FOLLOW">
<meta name="msvalidate.01" content="">
<meta name="google-site-verification" content="">
<meta property="fb:app_id" content="">
<base href="/">
</head>
<body>
<noscript style="color: white; text-align:center">
You need to enable JavaScript to run this app.
</noscript>
<div id="react-root">
<div class="page-loading" role="alert" aria-busy="true" aria-live="polite" aria-label="loading">
<div class="loading__animation">
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
</div>
</div>
</div>
<style id='css-variables'> :root {}</style>
<script type="text/javascript" src="/meteor_runtime_config.js?hash=267fec907705c3e88f0a928a73dafb800f87c1da"></script>
<script type="text/javascript" src="/3054b8907c5ff9acb854316cc540d0d364e126dc.js?meteor_js_resource=true"></script>
</body>
</html>
Open service 129.97.152.215:22
2026-01-22 13:47
Open service 129.97.152.215:443 · rocketchat-courses.cs.uwaterloo.ca
2026-01-09 05:16
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 05:16:10 GMT
Server: Apache/2.4.52 (Ubuntu)
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: default-src 'self' https://cdn.zapier.com; connect-src *; font-src 'self' https://cdn.zapier.com data:; frame-src *; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' 'sha256-jqxtvDkBbRAl9Hpqv68WdNOieepg8tJSYu1xIy7zT34=' 'sha256-aui5xYk3Lu1dQcnsPlNZI+qDTdfzdUv3fzsw80VLJgw=' https://cdn.zapier.com https://zapier.com; style-src 'self' 'unsafe-inline' https://cdn.zapier.com
X-Instance-ID: 2ed0f0d3-9486-49fc-ad6a-98f4371b44d1
Access-Control-Allow-Origin: *
X-Powered-By: Express
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Page title: Rocket.Chat
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" type="text/css" class="__meteor-css__" href="/e37e3a526aace32e4ea71108fc18652f860ce79f.css?meteor_css_resource=true">
<script id="scripts" type="text/javascript" src="/scripts_887a5339b2625a8970658c4f5f9bd94f1067ab7a.js"></script>
<meta name="referrer" content="same-origin" />
<link rel="icon" sizes="16x16" type="image/png" href=/assets/favicon_16.png />
<link rel="icon" sizes="32x32" type="image/png" href=/assets/favicon_32.png />
<link rel="icon" sizes="any" type="image/svg+xml" href=/assets/favicon.svg />
<title>Rocket.Chat</title><meta name="application-name" content="Rocket.Chat"><meta name="apple-mobile-web-app-title" content="Rocket.Chat">
<meta http-equiv="content-language" content=""><meta name="language" content="">
<meta name="robots" content="INDEX,FOLLOW">
<meta name="msvalidate.01" content="">
<meta name="google-site-verification" content="">
<meta property="fb:app_id" content="">
<base href="/">
</head>
<body>
<noscript style="color: white; text-align:center">
You need to enable JavaScript to run this app.
</noscript>
<div id="react-root">
<div class="page-loading" role="alert" aria-busy="true" aria-live="polite" aria-label="loading">
<div class="loading__animation">
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
</div>
</div>
</div>
<style id='css-variables'> :root {}</style>
<script type="text/javascript" src="/meteor_runtime_config.js?hash=267fec907705c3e88f0a928a73dafb800f87c1da"></script>
<script type="text/javascript" src="/3054b8907c5ff9acb854316cc540d0d364e126dc.js?meteor_js_resource=true"></script>
</body>
</html>
Open service 129.97.152.215:443
2026-01-08 18:25
HTTP/1.1 200 OK
Date: Thu, 08 Jan 2026 18:25:05 GMT
Server: Apache/2.4.52 (Ubuntu)
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: default-src 'self' https://cdn.zapier.com; connect-src *; font-src 'self' https://cdn.zapier.com data:; frame-src *; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' 'sha256-jqxtvDkBbRAl9Hpqv68WdNOieepg8tJSYu1xIy7zT34=' 'sha256-aui5xYk3Lu1dQcnsPlNZI+qDTdfzdUv3fzsw80VLJgw=' https://cdn.zapier.com https://zapier.com; style-src 'self' 'unsafe-inline' https://cdn.zapier.com
X-Instance-ID: 2ed0f0d3-9486-49fc-ad6a-98f4371b44d1
Access-Control-Allow-Origin: *
X-Powered-By: Express
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Page title: Rocket.Chat
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" type="text/css" class="__meteor-css__" href="/e37e3a526aace32e4ea71108fc18652f860ce79f.css?meteor_css_resource=true">
<script id="scripts" type="text/javascript" src="/scripts_887a5339b2625a8970658c4f5f9bd94f1067ab7a.js"></script>
<meta name="referrer" content="same-origin" />
<link rel="icon" sizes="16x16" type="image/png" href=/assets/favicon_16.png />
<link rel="icon" sizes="32x32" type="image/png" href=/assets/favicon_32.png />
<link rel="icon" sizes="any" type="image/svg+xml" href=/assets/favicon.svg />
<title>Rocket.Chat</title><meta name="application-name" content="Rocket.Chat"><meta name="apple-mobile-web-app-title" content="Rocket.Chat">
<meta http-equiv="content-language" content=""><meta name="language" content="">
<meta name="robots" content="INDEX,FOLLOW">
<meta name="msvalidate.01" content="">
<meta name="google-site-verification" content="">
<meta property="fb:app_id" content="">
<base href="/">
</head>
<body>
<noscript style="color: white; text-align:center">
You need to enable JavaScript to run this app.
</noscript>
<div id="react-root">
<div class="page-loading" role="alert" aria-busy="true" aria-live="polite" aria-label="loading">
<div class="loading__animation">
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
</div>
</div>
</div>
<style id='css-variables'> :root {}</style>
<script type="text/javascript" src="/meteor_runtime_config.js?hash=267fec907705c3e88f0a928a73dafb800f87c1da"></script>
<script type="text/javascript" src="/3054b8907c5ff9acb854316cc540d0d364e126dc.js?meteor_js_resource=true"></script>
</body>
</html>
Open service 129.97.152.215:22
2026-01-08 16:32
Open service 129.97.152.215:443 · rocketchat-courses.cs.uwaterloo.ca
2026-01-02 05:22
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 05:22:04 GMT
Server: Apache/2.4.52 (Ubuntu)
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: default-src 'self' https://cdn.zapier.com; connect-src *; font-src 'self' https://cdn.zapier.com data:; frame-src *; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' 'sha256-jqxtvDkBbRAl9Hpqv68WdNOieepg8tJSYu1xIy7zT34=' 'sha256-aui5xYk3Lu1dQcnsPlNZI+qDTdfzdUv3fzsw80VLJgw=' https://cdn.zapier.com https://zapier.com; style-src 'self' 'unsafe-inline' https://cdn.zapier.com
X-Instance-ID: 752c2051-a679-4877-a772-bfea751af7ca
Access-Control-Allow-Origin: *
X-Powered-By: Express
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Page title: Rocket.Chat
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" type="text/css" class="__meteor-css__" href="/e37e3a526aace32e4ea71108fc18652f860ce79f.css?meteor_css_resource=true">
<script id="scripts" type="text/javascript" src="/scripts_887a5339b2625a8970658c4f5f9bd94f1067ab7a.js"></script>
<meta name="referrer" content="same-origin" />
<link rel="icon" sizes="16x16" type="image/png" href=/assets/favicon_16.png />
<link rel="icon" sizes="32x32" type="image/png" href=/assets/favicon_32.png />
<link rel="icon" sizes="any" type="image/svg+xml" href=/assets/favicon.svg />
<title>Rocket.Chat</title><meta name="application-name" content="Rocket.Chat"><meta name="apple-mobile-web-app-title" content="Rocket.Chat">
<meta http-equiv="content-language" content=""><meta name="language" content="">
<meta name="robots" content="INDEX,FOLLOW">
<meta name="msvalidate.01" content="">
<meta name="google-site-verification" content="">
<meta property="fb:app_id" content="">
<base href="/">
</head>
<body>
<noscript style="color: white; text-align:center">
You need to enable JavaScript to run this app.
</noscript>
<div id="react-root">
<div class="page-loading" role="alert" aria-busy="true" aria-live="polite" aria-label="loading">
<div class="loading__animation">
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
</div>
</div>
</div>
<style id='css-variables'> :root {}</style>
<script type="text/javascript" src="/meteor_runtime_config.js?hash=267fec907705c3e88f0a928a73dafb800f87c1da"></script>
<script type="text/javascript" src="/3054b8907c5ff9acb854316cc540d0d364e126dc.js?meteor_js_resource=true"></script>
</body>
</html>
Open service 129.97.152.215:80 · rocketchat-courses.cs.uwaterloo.ca
2026-01-01 19:11
HTTP/1.1 301 Moved Permanently Date: Thu, 01 Jan 2026 19:11:40 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://rocketchat-courses.cs.uwaterloo.ca/ Content-Length: 351 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 301 Moved Permanently <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://rocketchat-courses.cs.uwaterloo.ca/">here</a>.</p> <hr> <address>Apache/2.4.52 (Ubuntu) Server at rocketchat-courses.cs.uwaterloo.ca Port 80</address> </body></html>
Open service 129.97.152.215:443 · rocketchat-courses.cs.uwaterloo.ca
2026-01-01 19:11
HTTP/1.1 200 OK
Date: Thu, 01 Jan 2026 19:11:38 GMT
Server: Apache/2.4.52 (Ubuntu)
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: default-src 'self' https://cdn.zapier.com; connect-src *; font-src 'self' https://cdn.zapier.com data:; frame-src *; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' 'sha256-jqxtvDkBbRAl9Hpqv68WdNOieepg8tJSYu1xIy7zT34=' 'sha256-aui5xYk3Lu1dQcnsPlNZI+qDTdfzdUv3fzsw80VLJgw=' https://cdn.zapier.com https://zapier.com; style-src 'self' 'unsafe-inline' https://cdn.zapier.com
X-Instance-ID: 752c2051-a679-4877-a772-bfea751af7ca
Access-Control-Allow-Origin: *
X-Powered-By: Express
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Page title: Rocket.Chat
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" type="text/css" class="__meteor-css__" href="/e37e3a526aace32e4ea71108fc18652f860ce79f.css?meteor_css_resource=true">
<script id="scripts" type="text/javascript" src="/scripts_887a5339b2625a8970658c4f5f9bd94f1067ab7a.js"></script>
<meta name="referrer" content="same-origin" />
<link rel="icon" sizes="16x16" type="image/png" href=/assets/favicon_16.png />
<link rel="icon" sizes="32x32" type="image/png" href=/assets/favicon_32.png />
<link rel="icon" sizes="any" type="image/svg+xml" href=/assets/favicon.svg />
<title>Rocket.Chat</title><meta name="application-name" content="Rocket.Chat"><meta name="apple-mobile-web-app-title" content="Rocket.Chat">
<meta http-equiv="content-language" content=""><meta name="language" content="">
<meta name="robots" content="INDEX,FOLLOW">
<meta name="msvalidate.01" content="">
<meta name="google-site-verification" content="">
<meta property="fb:app_id" content="">
<base href="/">
</head>
<body>
<noscript style="color: white; text-align:center">
You need to enable JavaScript to run this app.
</noscript>
<div id="react-root">
<div class="page-loading" role="alert" aria-busy="true" aria-live="polite" aria-label="loading">
<div class="loading__animation">
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
</div>
</div>
</div>
<style id='css-variables'> :root {}</style>
<script type="text/javascript" src="/meteor_runtime_config.js?hash=267fec907705c3e88f0a928a73dafb800f87c1da"></script>
<script type="text/javascript" src="/3054b8907c5ff9acb854316cc540d0d364e126dc.js?meteor_js_resource=true"></script>
</body>
</html>
Open service 129.97.152.215:443
2026-01-01 19:07
HTTP/1.1 200 OK
Date: Thu, 01 Jan 2026 19:07:43 GMT
Server: Apache/2.4.52 (Ubuntu)
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: default-src 'self' https://cdn.zapier.com; connect-src *; font-src 'self' https://cdn.zapier.com data:; frame-src *; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' 'sha256-jqxtvDkBbRAl9Hpqv68WdNOieepg8tJSYu1xIy7zT34=' 'sha256-aui5xYk3Lu1dQcnsPlNZI+qDTdfzdUv3fzsw80VLJgw=' https://cdn.zapier.com https://zapier.com; style-src 'self' 'unsafe-inline' https://cdn.zapier.com
X-Instance-ID: 752c2051-a679-4877-a772-bfea751af7ca
Access-Control-Allow-Origin: *
X-Powered-By: Express
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Page title: Rocket.Chat
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" type="text/css" class="__meteor-css__" href="/e37e3a526aace32e4ea71108fc18652f860ce79f.css?meteor_css_resource=true">
<script id="scripts" type="text/javascript" src="/scripts_887a5339b2625a8970658c4f5f9bd94f1067ab7a.js"></script>
<meta name="referrer" content="same-origin" />
<link rel="icon" sizes="16x16" type="image/png" href=/assets/favicon_16.png />
<link rel="icon" sizes="32x32" type="image/png" href=/assets/favicon_32.png />
<link rel="icon" sizes="any" type="image/svg+xml" href=/assets/favicon.svg />
<title>Rocket.Chat</title><meta name="application-name" content="Rocket.Chat"><meta name="apple-mobile-web-app-title" content="Rocket.Chat">
<meta http-equiv="content-language" content=""><meta name="language" content="">
<meta name="robots" content="INDEX,FOLLOW">
<meta name="msvalidate.01" content="">
<meta name="google-site-verification" content="">
<meta property="fb:app_id" content="">
<base href="/">
</head>
<body>
<noscript style="color: white; text-align:center">
You need to enable JavaScript to run this app.
</noscript>
<div id="react-root">
<div class="page-loading" role="alert" aria-busy="true" aria-live="polite" aria-label="loading">
<div class="loading__animation">
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
</div>
</div>
</div>
<style id='css-variables'> :root {}</style>
<script type="text/javascript" src="/meteor_runtime_config.js?hash=267fec907705c3e88f0a928a73dafb800f87c1da"></script>
<script type="text/javascript" src="/3054b8907c5ff9acb854316cc540d0d364e126dc.js?meteor_js_resource=true"></script>
</body>
</html>
Open service 129.97.152.215:22
2026-01-01 15:24
Open service 129.97.152.215:22
2025-12-24 01:31
Open service 129.97.152.215:443 · rocketchat-courses.cs.uwaterloo.ca
2025-12-22 06:50
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 06:50:37 GMT
Server: Apache/2.4.52 (Ubuntu)
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: default-src 'self' https://cdn.zapier.com; connect-src *; font-src 'self' https://cdn.zapier.com data:; frame-src *; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' 'sha256-jqxtvDkBbRAl9Hpqv68WdNOieepg8tJSYu1xIy7zT34=' 'sha256-aui5xYk3Lu1dQcnsPlNZI+qDTdfzdUv3fzsw80VLJgw=' https://cdn.zapier.com https://zapier.com; style-src 'self' 'unsafe-inline' https://cdn.zapier.com
X-Instance-ID: e2b9d5ad-f33f-4ec4-b8ba-d481c5423875
Access-Control-Allow-Origin: *
X-Powered-By: Express
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Page title: Rocket.Chat
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" type="text/css" class="__meteor-css__" href="/e37e3a526aace32e4ea71108fc18652f860ce79f.css?meteor_css_resource=true">
<script id="scripts" type="text/javascript" src="/scripts_887a5339b2625a8970658c4f5f9bd94f1067ab7a.js"></script>
<meta name="referrer" content="same-origin" />
<link rel="icon" sizes="16x16" type="image/png" href=/assets/favicon_16.png />
<link rel="icon" sizes="32x32" type="image/png" href=/assets/favicon_32.png />
<link rel="icon" sizes="any" type="image/svg+xml" href=/assets/favicon.svg />
<title>Rocket.Chat</title><meta name="application-name" content="Rocket.Chat"><meta name="apple-mobile-web-app-title" content="Rocket.Chat">
<meta http-equiv="content-language" content=""><meta name="language" content="">
<meta name="robots" content="INDEX,FOLLOW">
<meta name="msvalidate.01" content="">
<meta name="google-site-verification" content="">
<meta property="fb:app_id" content="">
<base href="/">
</head>
<body>
<noscript style="color: white; text-align:center">
You need to enable JavaScript to run this app.
</noscript>
<div id="react-root">
<div class="page-loading" role="alert" aria-busy="true" aria-live="polite" aria-label="loading">
<div class="loading__animation">
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
<div class="loading__animation__bounce"></div>
</div>
</div>
</div>
<style id='css-variables'> :root {}</style>
<script type="text/javascript" src="/meteor_runtime_config.js?hash=267fec907705c3e88f0a928a73dafb800f87c1da"></script>
<script type="text/javascript" src="/3054b8907c5ff9acb854316cc540d0d364e126dc.js?meteor_js_resource=true"></script>
</body>
</html>