21/tcp
FTP
first 2026-08-26 · last 2026-08-26
- Banner
- 220 103.241.131.78 FTP server ready
Raw response
220 103.241.131.78 FTP server ready
Host
103.241.131.78
Tags: Hosting Database Expired certificate End-of-life software
As of our latest check on 2026-08-26, 103.241.131.78 (IDC Frontier Inc., AS4694, Japan) had 6 open ports (21, 22, 25, 443, 3306, 8443) and 621 known CVEs, 1 known to be exploited.
Known CVEs on this host
6open ports
0names pointing here
621known CVEs
1known exploited
Open ports and CVEs as of our latest check of this host, 2026-08-26.
CVEs by severity: CRITICAL 68 HIGH 151 MEDIUM 334 LOW 68
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 8 only affect a particular platform; this host's is not known (php 5.2.6, openssh 4.3, mysql 5.0.22). See them
Earlier software versions of this host and the CVEs they had are kept as its history. See the history
- Network
- IDC Frontier Inc. AS4694
- Open ports
- 21, 22, 25, 443, 3306, 8443 · at our latest check, 2026-08-26
- Location
- Japan JP
- Route
- 103.241.128.0/22 · announced by IDC Frontier Inc. AS4694 no RPKI authorisation
- Organisation
- IDC Frontier Inc. · Content / hosting
- Registry network
- RIDE-INFLA · 103.241.128.0 - 103.241.131.255 · APNIC
- Abuse contact
- [email protected] · for RIDE-INFLA
- First seen
- 2026-08-26 03:07 UTC
- Last seen alive
- 2026-08-26 14:07 UTC
- Hosted domains
- No host name points here
Reputation
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
Services (6)
- Server
- SSH-2.0-OpenSSH_4.3
- Host key
- ssh-rsa cf4873c6a276ae5b…
Raw response
SSH-2.0-OpenSSH_4.3
25/tcp
SMTP
first 2026-08-26 · last 2026-08-26
- Banner
- 220 dv009-226.domainserver.ne.jp ESMTP
Raw response
220 dv009-226.domainserver.ne.jp ESMTP
443/tcp
TLS
first 2026-08-26 · last 2026-08-26
- TLS
- TLSv1.0
- Certificate for
- www.oka-kango.com, oka-kango.com
- Issued by
- Alpha CA
- Valid
- 2011-03-10 → 2012-03-10
Raw response
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> <blockquote>Hint: <a href="https://default-103-241-131-78/"><b>https://default-103-241-131-78/</b></a></blockquote></p> <hr> <address>Apache/2.2.3 (CentOS) Server at default-103-241-131-78 Port 443</address> </body></html>
- Protocol
- 5.0.22
Raw response
4 5.0.22��|_uQri:&N,�6cp)xB"#%1e-
- Status
- 200 OK
- Server
- Apache
- Powered by
- PHP/5.2.6
Raw response
HTTP/1.1 302 Found Date: Wed, 26 Aug 2026 14:06:20 GMT Server: Apache Location: https://dv009-226.domainserver.ne.jp:8443 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <HTML><HEAD> <TITLE>302 Found</TITLE> </HEAD><BODY> <H1>Found</H1> The document has moved <A HREF="https://dv009-226.domainserver.ne.jp:8443">here</A>.<P> </BODY></HTML>
Vulnerabilities
Only affects certain platforms (8)
These CVEs only apply when the software runs on a particular platform (for example Windows), and this host's platform is not known. They are not counted.
CVEs by severity: CRITICAL 2 HIGH 2 MEDIUM 4
| CVE | Software |
|---|---|
| CVE-2012-2376 HIGH 10.0 | php 5.2.6 · port 8443 |
| CVE-2015-4642 CRITICAL 9.8 | php 5.2.6 · port 8443 |
| CVE-2024-3566 CRITICAL 9.8 | php 5.2.6 · port 8443 |
| CVE-2017-15945 HIGH 7.8 | mysql 5.0.22 · port 3306 |
| CVE-2009-2904 MEDIUM 6.9 | openssh 4.3 · port 22 |
| CVE-2008-4109 MEDIUM 5.0 | openssh 4.3 · port 22 |
| CVE-2009-3294 MEDIUM 5.0 | php 5.2.6 · port 8443 |
| CVE-2011-0754 MEDIUM 4.4 | php 5.2.6 · port 8443 |
CVE history
Software versions this host showed earlier, when we saw each, why it no longer applies, and the CVEs matched on it then. None of them is counted.
Port history
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.