Host

104.236.180.185

Tags: Cloud Hosting Expired certificate

As of our latest check on 2026-08-27, 104.236.180.185 (DigitalOcean, LLC, AS14061, United States) had 2 open ports (80, 443) and 7 known CVEs.

Known CVEs on this host

2open ports
1name pointing here
7known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-27.

CVEs by severity: HIGH 5 MEDIUM 1 LOW 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 37 on a distribution build — the fix may be backported (http_server 2.4.66). See them

Network
DigitalOcean, LLC AS14061
Open ports
80, 443 · at our latest check, 2026-08-27
Location
United States US
Route
104.236.128.0/18 · announced by DigitalOcean, LLC AS14061 RPKI valid
Organisation
DigitalOcean · Content / hosting
Cloud
DigitalOcean · region US-CA
Registry network
DIGITALOCEAN-104-236-0-0 · 104.236.0.0 - 104.236.255.255 · DigitalOcean, LLC · ARIN
Abuse contact
[email protected] · for DIGITALOCEAN-104-236-0-0
First seen
2026-08-27 20:16 UTC
Last seen alive
2026-08-27 20:18 UTC
Hosted domains
1 name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (2)

80/tcp HTTP Apache/2.4.66 (Ubuntu) 7 CVEs first 2026-08-27 · last 2026-08-27
Status
200 OK
Title
Hello World
Server
Apache/2.4.66 (Ubuntu)
Raw response
HTTP/1.1 200 OK
Date: Thu, 27 Aug 2026 20:16:35 GMT
Server: Apache/2.4.66 (Ubuntu)
Last-Modified: Fri, 30 Jan 2026 20:35:02 GMT
ETag: "de-649a0e861814f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 178
Content-Type: text/html

�Eϻ�0н_a2��nIb��1��"���V+����,_Y�����y;����B���[	"�m[�Y�qz���w�j/���{Tb�8��L�a��������֦<{M�h4�j����=�$���YY稐u>C�����5�Yn�$��ҥw~K_Ew�
443/tcp TLS first 2026-08-27 · last 2026-08-27
TLS
TLSv1.2
Certificate for
ana-page.web-staging.dev
Issued by
E8
Valid
2025-11-08 → 2026-02-06
Raw response
HTTP/1.1 400 Bad Request
Date: Thu, 27 Aug 2026 20:16:35 GMT
Server: Apache/2.4.66 (Ubuntu)
Content-Length: 492
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
 Instead use the HTTPS scheme to access this URL, please.<br />
</p>
<hr>
<address>Apache/2.4.66 (Ubuntu) Server at ana-page.web-staging.dev Port 80</address>
</body></html>

Vulnerabilities

Distribution build — the fix may be backported (37)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.

CVEs by severity: CRITICAL 7 HIGH 20 MEDIUM 10

CVESoftware
CVE-2026-28780 CRITICAL 9.8 http_server 2.4.66 · port 80
CVE-2026-29167 CRITICAL 9.8 http_server 2.4.66 · port 80
CVE-2026-44631 CRITICAL 9.8 http_server 2.4.66 · port 80
CVE-2026-56154 CRITICAL 9.8 http_server 2.4.66 · port 80
CVE-2026-57941 CRITICAL 9.8 http_server 2.4.66 · port 80
CVE-2026-59797 CRITICAL 9.8 http_server 2.4.66 · port 80
CVE-2026-42535 CRITICAL 9.1 http_server 2.4.66 · port 80
CVE-2026-23918 HIGH 8.8 http_server 2.4.66 · port 80
CVE-2026-24072 HIGH 8.8 http_server 2.4.66 · port 80
CVE-2026-93546 HIGH 8.8 http_server 2.4.66 · port 80
CVE-2026-73636 HIGH 8.1 http_server 2.4.66 · port 80
CVE-2026-29169 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-34059 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-34355 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-34356 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-42536 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-49975 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-59685 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-63045 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-63292 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-63686 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-63718 HIGH 7.5 http_server 2.4.66 · port 80
CVE-2026-29168 HIGH 7.3 http_server 2.4.66 · port 80
CVE-2026-44185 HIGH 7.3 http_server 2.4.66 · port 80
CVE-2026-44186 HIGH 7.3 http_server 2.4.66 · port 80
CVE-2026-48913 HIGH 7.3 http_server 2.4.66 · port 80
CVE-2026-73637 HIGH 7.3 http_server 2.4.66 · port 80
CVE-2026-33523 MEDIUM 6.5 http_server 2.4.66 · port 80
CVE-2026-43951 MEDIUM 6.5 http_server 2.4.66 · port 80
CVE-2026-29170 MEDIUM 6.1 http_server 2.4.66 · port 80
CVE-2026-44119 MEDIUM 5.5 http_server 2.4.66 · port 80
CVE-2026-33007 MEDIUM 5.3 http_server 2.4.66 · port 80
CVE-2026-33857 MEDIUM 5.3 http_server 2.4.66 · port 80
CVE-2026-34032 MEDIUM 5.3 http_server 2.4.66 · port 80
CVE-2026-58415 MEDIUM 5.3 http_server 2.4.66 · port 80
CVE-2026-79768 MEDIUM 5.3 http_server 2.4.66 · port 80
CVE-2026-33006 MEDIUM 4.8 http_server 2.4.66 · port 80

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Hostnames pointing to this address

1 name · as answered by each domain's own name servers

sunnyzia.comfirst seen 2026-10-20