Host

103.6.52.97

Tags: Remote access

As of our latest check on 2026-08-24, 103.6.52.97 (ARDH GLOBAL INDONESIA, PT, AS45731, Indonesia) had 4 open ports (22, 23, 80, 443) and 4 known CVEs.

Known CVEs on this host

4open ports
0names pointing here
4known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-24.

CVEs by severity: MEDIUM 4

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 53 on a distribution build — the fix may be backported (openssh 7.6p1, nginx 1.14.0). See them

Network
ARDH GLOBAL INDONESIA, PT AS45731
Open ports
22, 23, 80, 443 · at our latest check, 2026-08-24
Location
Indonesia ID
Hostname
server.calypso.co.id · reverse DNS, checked 2026-10-04
Route
103.6.52.0/23 · announced by ARDH GLOBAL INDONESIA, PT AS45731 RPKI valid
Organisation
ARDH GLOBAL INDONESIA, PT
Registry network
ARDH-ID · 103.6.52.0 - 103.6.55.255 · APNIC
First seen
2026-08-24 04:20 UTC
Last seen alive
2026-08-24 04:23 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (4)

22/tcp SSH OpenSSH_7.6p1 4 CVEs first 2026-08-24 · last 2026-08-24
Server
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4
Host key
ssh-rsa d023815f10dab4ce…
Raw response
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4
23/tcp TELNET first 2026-08-24 · last 2026-08-24
Banner
Ubuntu 18.04 LTS cvppos login:
Raw response
���� ��#��'
80/tcp HTTP nginx/1.14.0 (Ubuntu) first 2026-08-24 · last 2026-08-24
Status
403 Forbidden
Title
403 Forbidden
Server
nginx/1.14.0 (Ubuntu)
Raw response
HTTP/1.1 403 Forbidden
Server: nginx/1.14.0 (Ubuntu)
Date: Mon, 24 Aug 2026 04:20:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip

c5
���1�0Ew$�`:�������	q��6M�4A!��4P$������g�B��VӉ�$��DKժX��e�	�
"�<����[��M�HYR��"�J���0$����k���5��y������Iu.v�O��m��ߗ�	�h\���T��p�oA:���%8Cm��DC�Xr�������CD
0
443/tcp TLS first 2026-08-24 · last 2026-08-24
TLS
TLSv1.2
Certificate for
cvppos.co.id, www.cvppos.co.id
Issued by
Sectigo Public Server Authentication CA DV R36
Valid
2025-11-05 → 2026-11-29
Raw response
HTTP/1.1 400 Bad Request
Server: nginx/1.14.0 (Ubuntu)
Date: Mon, 24 Aug 2026 04:20:39 GMT
Content-Type: text/html
Content-Length: 682
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body bgcolor="white">
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.14.0 (Ubuntu)</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Vulnerabilities

Distribution build — the fix may be backported (53)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.

CVEs by severity: CRITICAL 2 HIGH 18 MEDIUM 21 LOW 12

CVESoftware
CVE-2023-44487 HIGH 7.5 known exploited nginx 1.14.0 · port 80
CVE-2023-38408 CRITICAL 9.8 openssh 7.6p1 · port 22
CVE-2026-60002 CRITICAL 9.4 openssh 7.6p1 · port 22
CVE-2026-35385 HIGH 8.1 openssh 7.6p1 · port 22
CVE-2026-35414 HIGH 8.1 openssh 7.6p1 · port 22
CVE-2022-41741 HIGH 7.8 nginx 1.14.0 · port 80
CVE-2026-106583 HIGH 7.8 openssh 7.6p1 · port 22
CVE-2021-23017 HIGH 7.7 nginx 1.14.0 · port 80
CVE-2018-16843 HIGH 7.5 nginx 1.14.0 · port 80
CVE-2018-16844 HIGH 7.5 nginx 1.14.0 · port 80
CVE-2019-9511 HIGH 7.5 nginx 1.14.0 · port 80
CVE-2019-9513 HIGH 7.5 nginx 1.14.0 · port 80
CVE-2026-106553 HIGH 7.5 openssh 7.6p1 · port 22
CVE-2026-106555 HIGH 7.5 openssh 7.6p1 · port 22
CVE-2026-59999 HIGH 7.5 openssh 7.6p1 · port 22
CVE-2026-60000 HIGH 7.5 openssh 7.6p1 · port 22
CVE-2020-15778 HIGH 7.4 openssh 7.6p1 · port 22
CVE-2021-3618 HIGH 7.4 nginx 1.14.0 · port 80
CVE-2022-41742 HIGH 7.1 nginx 1.14.0 · port 80
CVE-2021-41617 HIGH 7.0 openssh 7.6p1 · port 22
CVE-2019-6110 MEDIUM 6.8 openssh 7.6p1 · port 22
CVE-2025-26465 MEDIUM 6.8 openssh 7.6p1 · port 22
CVE-2019-9516 MEDIUM 6.5 nginx 1.14.0 · port 80
CVE-2023-51385 MEDIUM 6.5 openssh 7.6p1 · port 22
CVE-2026-106552 MEDIUM 6.5 openssh 7.6p1 · port 22
CVE-2026-106585 MEDIUM 6.5 openssh 7.6p1 · port 22
CVE-2026-35387 MEDIUM 6.5 openssh 7.6p1 · port 22
CVE-2026-59998 MEDIUM 6.5 openssh 7.6p1 · port 22
CVE-2026-60001 MEDIUM 6.5 openssh 7.6p1 · port 22
CVE-2018-16845 MEDIUM 6.1 nginx 1.14.0 · port 80
CVE-2020-14145 MEDIUM 5.9 openssh 7.6p1 · port 22
CVE-2023-48795 MEDIUM 5.9 openssh 7.6p1 · port 22
CVE-2026-59995 MEDIUM 5.4 openssh 7.6p1 · port 22
CVE-2026-59996 MEDIUM 5.4 openssh 7.6p1 · port 22
CVE-2026-59997 MEDIUM 5.4 openssh 7.6p1 · port 22
CVE-2016-20012 MEDIUM 5.3 openssh 7.6p1 · port 22
CVE-2018-15919 MEDIUM 5.3 openssh 7.6p1 · port 22
CVE-2019-20372 MEDIUM 5.3 nginx 1.14.0 · port 80
CVE-2025-23419 MEDIUM 5.3 nginx 1.14.0 · port 80
CVE-2026-73282 MEDIUM 4.8 openssh 7.6p1 · port 22
CVE-2026-106586 MEDIUM 4.3 openssh 7.6p1 · port 22
CVE-2025-32728 LOW 3.8 openssh 7.6p1 · port 22
CVE-2021-36368 LOW 3.7 openssh 7.6p1 · port 22
CVE-2026-106582 LOW 3.7 openssh 7.6p1 · port 22
CVE-2025-61984 LOW 3.6 openssh 7.6p1 · port 22
CVE-2025-61985 LOW 3.6 openssh 7.6p1 · port 22
CVE-2026-73281 LOW 3.5 openssh 7.6p1 · port 22
CVE-2026-106584 LOW 3.3 openssh 7.6p1 · port 22
CVE-2026-106587 LOW 3.3 openssh 7.6p1 · port 22
CVE-2026-106588 LOW 3.1 openssh 7.6p1 · port 22
CVE-2026-106589 LOW 2.9 openssh 7.6p1 · port 22
CVE-2026-35388 LOW 2.5 openssh 7.6p1 · port 22
CVE-2026-73283 LOW 2.5 openssh 7.6p1 · port 22

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.