21/tcp
FTP
first 2026-08-27 · last 2026-08-27
- Banner
- 220 FTP Server Ready
Raw response
220 FTP Server Ready
Host
104.232.11.83
Tags: Database Self-signed certificate
As of our latest check on 2026-08-27, 104.232.11.83 (ARPHost, LLC, AS401707, United States) had 4 open ports (21, 22, 443, 3306) and 2 known CVEs.
Known CVEs on this host
4open ports
3names pointing here
2known CVEs
0known exploited
Open ports and CVEs as of our latest check of this host, 2026-08-27.
CVEs by severity: HIGH 1 MEDIUM 1
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 20 on a distribution build — the fix may be backported (openssh 9.9). See them
- Network
- ARPHost, LLC AS401707
- Open ports
- 21, 22, 443, 3306 · at our latest check, 2026-08-27
- Location
- United States US
- Hostname
- orange.orangefury.com · reverse DNS, checked 2026-10-04
- Route
- 104.232.11.0/24 · announced by ARPHost, LLC AS401707 RPKI valid
- Organisation
- ARPHost, LLC · Network service provider (transit)
- First seen
- 2026-08-27 22:32 UTC
- Last seen alive
- 2026-08-27 23:20 UTC
- Hosted domains
- 3 names point here
Reputation
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
Services (4)
22/tcp
SSH
OpenSSH_9.9
first 2026-08-27 · last 2026-08-27
- Server
- SSH-2.0-OpenSSH_9.9
- Host key
- ssh-ed25519 37fc49e7f7eeaba4…
Raw response
SSH-2.0-OpenSSH_9.9
- TLS
- TLSv1.2
- Certificate for
- orange.orangefury.com
- Issued by
- orange.orangefury.com
- Valid
- 2025-10-28 → 2026-10-28
- Note
- self-signed certificate
Raw response
HTTP/1.1 400 Bad Request Server: openresty/1.29.2.3 Date: Thu, 27 Aug 2026 23:19:18 GMT Content-Type: text/html Content-Length: 663 Connection: close <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>openresty/1.29.2.3</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
- Protocol
- 5.5.5-10.6.28-MariaDB
Raw response
Y 5.5.5-10.6.28-MariaDB}�IX_Uk;%F����p%b@WtdyRnS5mysql_native_password
Vulnerabilities
Distribution build — the fix may be backported (20)
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: HIGH 4 MEDIUM 10 LOW 6
| CVE | Software |
|---|---|
| CVE-2026-35385 HIGH 8.1 | openssh 9.9 · port 22 |
| CVE-2026-35414 HIGH 8.1 | openssh 9.9 · port 22 |
| CVE-2026-60002 HIGH 7.7 | openssh 9.9 · port 22 |
| CVE-2026-60000 HIGH 7.5 | openssh 9.9 · port 22 |
| CVE-2025-26465 MEDIUM 6.8 | openssh 9.9 · port 22 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 9.9 · port 22 |
| CVE-2026-59998 MEDIUM 6.5 | openssh 9.9 · port 22 |
| CVE-2026-60001 MEDIUM 6.5 | openssh 9.9 · port 22 |
| CVE-2025-26466 MEDIUM 5.9 | openssh 9.9 · port 22 |
| CVE-2026-59999 MEDIUM 5.9 | openssh 9.9 · port 22 |
| CVE-2026-59995 MEDIUM 5.4 | openssh 9.9 · port 22 |
| CVE-2026-59996 MEDIUM 5.4 | openssh 9.9 · port 22 |
| CVE-2026-59997 MEDIUM 5.4 | openssh 9.9 · port 22 |
| CVE-2026-73282 MEDIUM 4.8 | openssh 9.9 · port 22 |
| CVE-2025-32728 LOW 3.8 | openssh 9.9 · port 22 |
| CVE-2025-61984 LOW 3.6 | openssh 9.9 · port 22 |
| CVE-2025-61985 LOW 3.6 | openssh 9.9 · port 22 |
| CVE-2026-73281 LOW 3.5 | openssh 9.9 · port 22 |
| CVE-2026-35388 LOW 2.5 | openssh 9.9 · port 22 |
| CVE-2026-73283 LOW 2.5 | openssh 9.9 · port 22 |
Port history
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.
Hostnames pointing to this address
3 names · as answered by each domain's own name servers
369north.comfirst seen 2026-10-09
ns1.orangefury.comearlier · last seen 2026-10-09
ns2.orangefury.comearlier · last seen 2026-10-09