21/tcp
FTP
first 2026-08-27 · last 2026-08-27
- Banner
- 220 (vsFTPd 3.0.5)
Raw response
220 (vsFTPd 3.0.5)
Host
104.237.1.54
Tags: Hosting
As of our latest check on 2026-08-27, 104.237.1.54 (HIVELOCITY, Inc., AS29802, United States) had 4 open ports (21, 22, 80, 443) and 1 known CVE.
Known CVEs on this host
4open ports
0names pointing here
1known CVE
0known exploited
Open ports and CVEs as of our latest check of this host, 2026-08-27.
CVEs by severity: MEDIUM 1
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 170 on a distribution build — the fix may be backported (http_server 2.4.57, openssl 3.0.7, openssh 8.7). See them
Not counted: 3 only affect another platform (http_server 2.4.57, php 8.0.30). See them
- Network
- HIVELOCITY, Inc. AS29802
- Open ports
- 21, 22, 80, 443 · at our latest check, 2026-08-27
- Location
- United States US
- Hostname
- files.benarchuleta.com · reverse DNS, checked 2026-10-04
- Route
- 104.237.1.0/24 · announced by HIVELOCITY, Inc. AS29802 no RPKI authorisation
- Organisation
- Hivelocity LLC · Network service provider (transit)
- Registry network
- HOSTEROS · 104.237.0.0 - 104.237.15.255 · Hosteros LLC · ARIN
- First seen
- 2026-08-27 18:11 UTC
- Last seen alive
- 2026-08-27 18:14 UTC
- Hosted domains
- No host name points here
Reputation
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
Services (4)
22/tcp
SSH
OpenSSH_8.7
first 2026-08-27 · last 2026-08-27
- Server
- SSH-2.0-OpenSSH_8.7
- Host key
- ssh-ed25519 cbdbe219a4d6c0c6…
Raw response
SSH-2.0-OpenSSH_8.7
- Status
- 302 Found
- Title
- Redirecting to http://104.237.1.54/authentication/create
- Server
- Apache/2.4.57 (AlmaLinux) OpenSSL/3.0.7
- Powered by
- PHP/8.0.30
Raw response
HTTP/1.1 302 Found Date: Thu, 27 Aug 2026 18:11:27 GMT Server: Apache/2.4.57 (AlmaLinux) OpenSSL/3.0.7 X-Powered-By: PHP/8.0.30 Cache-Control: no-cache, private X-Refresh-Token: ad049a5c5c49b655f644c8ba5fe61700 Set-Cookie: XSRF-TOKEN=eyJpdiI6IkNnV016OFZzWmg2S1p3Zm1Hb3JNeHc9PSIsInZhbHVlIjoiRzRuM01FczVQZUQxMndhSjFoODBFeTVmN1gyelR3SDFNTXhvTzd6MThXV0tKNW9hOEluRDN5c2ZjNDY3d0U4N0xNbkhRVFk3NWJKRFJOYXlwWHhlZUJWblErT29xS3lNcjBzOUtHOG5wZ1ozWlYyVm5jOEwzdDIrMWJVVC9rUFIiLCJtYWMiOiI1M2NjMzYzOGJmYmQ1MjNjN2Q0MDNjNjZmZGY0ZDhhOGIzMDM0NWNjNGFiZTljMDE4YmQwNTk4YmI0N2RjYWNhIiwidGFnIjoiIn0%3D; expires=Thu, 27-Aug-2026 20:11:27 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: laravel_session=eyJpdiI6ImlhVHdITkp5TENPVEZ2SVRrRnM1UlE9PSIsInZhbHVlIjoiVm9HM0dpZHJHTklxWW1mUEhnakl6dndGemJ5YzVWVXNkUEhqYk9SZ2JWRWVidzZLWHJSWHlZbjFVVjRQVXBSQlBmMlM0U2tLYkUySmtVZ0pQRFVxTHJQOElBY2YwdWlWbVhxT0hFd1dlck94blhsUWJPTVJBNkNJcTlrbStGZkQiLCJtYWMiOiI0MTJhM2U0NTcxY2Q5MTA2OTgxYTc2NzAyMjM0MWRhZjF
443/tcp
TLS
first 2026-08-27 · last 2026-08-27
- TLS
- TLSv1.2
- Certificate for
- plataforma.zonacarsarca.com
- Issued by
- YE1
- Valid
- 2026-08-17 → 2026-11-15
Raw response
HTTP/1.1 400 Bad Request Date: Thu, 27 Aug 2026 18:11:27 GMT Server: Apache/2.4.57 (AlmaLinux) OpenSSL/3.0.7 Content-Length: 362 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> </p> </body></html>
Vulnerabilities
Distribution build — the fix may be backported (170)
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.
CVEs by severity: CRITICAL 17 HIGH 79 MEDIUM 58 LOW 16
| CVE | Software |
|---|---|
| CVE-2024-38475 CRITICAL 9.1 known exploited | http_server 2.4.57 · port 80 |
| CVE-2023-38408 CRITICAL 9.8 | openssh 8.7 · port 22 |
| CVE-2024-38474 CRITICAL 9.8 | http_server 2.4.57 · port 80 |
| CVE-2024-38476 CRITICAL 9.8 | http_server 2.4.57 · port 80 |
| CVE-2025-15467 CRITICAL 9.8 | openssl 3.0.7 · port 80 |
| CVE-2026-28780 CRITICAL 9.8 | http_server 2.4.57 · port 80 |
| CVE-2026-29167 CRITICAL 9.8 | http_server 2.4.57 · port 80 |
| CVE-2026-31789 CRITICAL 9.8 | openssl 3.0.7 · port 80 |
| CVE-2026-44631 CRITICAL 9.8 | http_server 2.4.57 · port 80 |
| CVE-2026-56154 CRITICAL 9.8 | http_server 2.4.57 · port 80 |
| CVE-2026-57941 CRITICAL 9.8 | http_server 2.4.57 · port 80 |
| CVE-2026-59797 CRITICAL 9.8 | http_server 2.4.57 · port 80 |
| CVE-2024-5535 CRITICAL 9.1 | openssl 3.0.7 · port 80 |
| CVE-2025-23048 CRITICAL 9.1 | http_server 2.4.57 · port 80 |
| CVE-2026-34182 CRITICAL 9.1 | openssl 3.0.7 · port 80 |
| CVE-2026-42535 CRITICAL 9.1 | http_server 2.4.57 · port 80 |
| CVE-2026-75803 CRITICAL 9.1 | openssl 3.0.7 · port 80 |
| CVE-2026-24072 HIGH 8.8 | http_server 2.4.57 · port 80 |
| CVE-2026-45447 HIGH 8.8 | openssl 3.0.7 · port 80 |
| CVE-2026-93546 HIGH 8.8 | http_server 2.4.57 · port 80 |
| CVE-2025-58098 HIGH 8.3 | http_server 2.4.57 · port 80 |
| CVE-2026-84782 HIGH 8.2 | openssl 3.0.7 · port 80 |
| CVE-2024-38473 HIGH 8.1 | http_server 2.4.57 · port 80 |
| CVE-2024-6387 HIGH 8.1 | openssh 8.7 · port 22 |
| CVE-2026-28387 HIGH 8.1 | openssl 3.0.7 · port 80 |
| CVE-2026-35385 HIGH 8.1 | openssh 8.7 · port 22 |
| CVE-2026-35414 HIGH 8.1 | openssh 8.7 · port 22 |
| CVE-2026-73636 HIGH 8.1 | http_server 2.4.57 · port 80 |
| CVE-2026-7383 HIGH 8.1 | openssl 3.0.7 · port 80 |
| CVE-2023-4807 HIGH 7.8 | openssl 3.0.7 · port 80 |
| CVE-2026-106583 HIGH 7.8 | openssh 8.7 · port 22 |
| CVE-2026-60002 HIGH 7.7 | openssh 8.7 · port 22 |
| CVE-2022-3996 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2022-4450 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2023-0215 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2023-0216 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2023-0217 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2023-0401 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2023-0464 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2023-31122 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2023-43622 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2023-5363 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2024-27316 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2024-38472 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2024-38477 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2024-39573 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2024-42516 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2024-43204 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2024-47252 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2024-4741 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2024-6119 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2025-49630 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2025-53020 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2025-55753 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2025-59775 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2025-69420 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2025-69421 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2025-9230 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-106553 HIGH 7.5 | openssh 8.7 · port 22 |
| CVE-2026-106555 HIGH 7.5 | openssh 8.7 · port 22 |
| CVE-2026-28388 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-28389 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-28390 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-29169 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-31790 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-34059 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-34180 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-34355 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-34356 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-42536 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-45445 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-46729 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-48005 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-49975 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-54874 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-56153 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-56449 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-59685 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-60000 HIGH 7.5 | openssh 8.7 · port 22 |
| CVE-2026-63045 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-63072 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-63076 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2026-63292 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-63686 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-63718 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2026-9076 HIGH 7.5 | openssl 3.0.7 · port 80 |
| CVE-2023-0286 HIGH 7.4 | openssl 3.0.7 · port 80 |
| CVE-2025-49812 HIGH 7.4 | http_server 2.4.57 · port 80 |
| CVE-2025-69419 HIGH 7.4 | openssl 3.0.7 · port 80 |
| CVE-2023-38709 HIGH 7.3 | http_server 2.4.57 · port 80 |
| CVE-2026-29168 HIGH 7.3 | http_server 2.4.57 · port 80 |
| CVE-2026-44185 HIGH 7.3 | http_server 2.4.57 · port 80 |
| CVE-2026-44186 HIGH 7.3 | http_server 2.4.57 · port 80 |
| CVE-2026-48913 HIGH 7.3 | http_server 2.4.57 · port 80 |
| CVE-2026-73637 HIGH 7.3 | http_server 2.4.57 · port 80 |
| CVE-2021-41617 HIGH 7.0 | openssh 8.7 · port 22 |
| CVE-2025-26465 MEDIUM 6.8 | openssh 8.7 · port 22 |
| CVE-2023-2650 MEDIUM 6.5 | openssl 3.0.7 · port 80 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2023-6129 MEDIUM 6.5 | openssl 3.0.7 · port 80 |
| CVE-2025-65082 MEDIUM 6.5 | http_server 2.4.57 · port 80 |
| CVE-2026-106552 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-106585 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-33523 MEDIUM 6.5 | http_server 2.4.57 · port 80 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-43951 MEDIUM 6.5 | http_server 2.4.57 · port 80 |
| CVE-2026-59998 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-60001 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2024-24795 MEDIUM 6.3 | http_server 2.4.57 · port 80 |
| CVE-2026-29170 MEDIUM 6.1 | http_server 2.4.57 · port 80 |
| CVE-2022-4304 MEDIUM 5.9 | openssl 3.0.7 · port 80 |
| CVE-2023-1255 MEDIUM 5.9 | openssl 3.0.7 · port 80 |
| CVE-2023-45802 MEDIUM 5.9 | http_server 2.4.57 · port 80 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 8.7 · port 22 |
| CVE-2023-6237 MEDIUM 5.9 | openssl 3.0.7 · port 80 |
| CVE-2024-2511 MEDIUM 5.9 | openssl 3.0.7 · port 80 |
| CVE-2026-42766 MEDIUM 5.9 | openssl 3.0.7 · port 80 |
| CVE-2026-42767 MEDIUM 5.9 | openssl 3.0.7 · port 80 |
| CVE-2026-59999 MEDIUM 5.9 | openssh 8.7 · port 22 |
| CVE-2026-63074 MEDIUM 5.9 | openssl 3.0.7 · port 80 |
| CVE-2024-0727 MEDIUM 5.5 | openssl 3.0.7 · port 80 |
| CVE-2026-22795 MEDIUM 5.5 | openssl 3.0.7 · port 80 |
| CVE-2026-44119 MEDIUM 5.5 | http_server 2.4.57 · port 80 |
| CVE-2024-36387 MEDIUM 5.4 | http_server 2.4.57 · port 80 |
| CVE-2025-66200 MEDIUM 5.4 | http_server 2.4.57 · port 80 |
| CVE-2026-59995 MEDIUM 5.4 | openssh 8.7 · port 22 |
| CVE-2026-59996 MEDIUM 5.4 | openssh 8.7 · port 22 |
| CVE-2026-59997 MEDIUM 5.4 | openssh 8.7 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 8.7 · port 22 |
| CVE-2023-0465 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2023-0466 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2023-2975 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2023-3817 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2023-5678 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2024-4603 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2026-22796 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2026-33007 MEDIUM 5.3 | http_server 2.4.57 · port 80 |
| CVE-2026-33857 MEDIUM 5.3 | http_server 2.4.57 · port 80 |
| CVE-2026-34032 MEDIUM 5.3 | http_server 2.4.57 · port 80 |
| CVE-2026-35189 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2026-58415 MEDIUM 5.3 | http_server 2.4.57 · port 80 |
| CVE-2026-75805 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2026-75806 MEDIUM 5.3 | openssl 3.0.7 · port 80 |
| CVE-2026-79768 MEDIUM 5.3 | http_server 2.4.57 · port 80 |
| CVE-2022-4203 MEDIUM 4.9 | openssl 3.0.7 · port 80 |
| CVE-2026-33006 MEDIUM 4.8 | http_server 2.4.57 · port 80 |
| CVE-2026-45446 MEDIUM 4.8 | openssl 3.0.7 · port 80 |
| CVE-2026-73282 MEDIUM 4.8 | openssh 8.7 · port 22 |
| CVE-2025-68160 MEDIUM 4.7 | openssl 3.0.7 · port 80 |
| CVE-2024-9143 MEDIUM 4.3 | openssl 3.0.7 · port 80 |
| CVE-2026-106586 MEDIUM 4.3 | openssh 8.7 · port 22 |
| CVE-2026-42528 MEDIUM 4.3 | http_server 2.4.57 · port 80 |
| CVE-2024-13176 MEDIUM 4.1 | openssl 3.0.7 · port 80 |
| CVE-2025-69418 MEDIUM 4.0 | openssl 3.0.7 · port 80 |
| CVE-2025-32728 LOW 3.8 | openssh 8.7 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 8.7 · port 22 |
| CVE-2026-106582 LOW 3.7 | openssh 8.7 · port 22 |
| CVE-2026-42356 LOW 3.7 | http_server 2.4.57 · port 80 |
| CVE-2026-42770 LOW 3.7 | openssl 3.0.7 · port 80 |
| CVE-2026-54872 LOW 3.7 | openssl 3.0.7 · port 80 |
| CVE-2026-77696 LOW 3.7 | openssl 3.0.7 · port 80 |
| CVE-2025-61984 LOW 3.6 | openssh 8.7 · port 22 |
| CVE-2025-61985 LOW 3.6 | openssh 8.7 · port 22 |
| CVE-2026-73281 LOW 3.5 | openssh 8.7 · port 22 |
| CVE-2026-106584 LOW 3.3 | openssh 8.7 · port 22 |
| CVE-2026-106587 LOW 3.3 | openssh 8.7 · port 22 |
| CVE-2026-106588 LOW 3.1 | openssh 8.7 · port 22 |
| CVE-2026-106589 LOW 2.9 | openssh 8.7 · port 22 |
| CVE-2026-35388 LOW 2.5 | openssh 8.7 · port 22 |
| CVE-2026-73283 LOW 2.5 | openssh 8.7 · port 22 |
Only affects another platform (3)
These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.
CVEs by severity: CRITICAL 1 HIGH 2
| CVE | Software |
|---|---|
| CVE-2024-3566 CRITICAL 9.8 | php 8.0.30 · port 80 |
| CVE-2024-40898 HIGH 7.5 | http_server 2.4.57 · port 80 |
| CVE-2024-43394 HIGH 7.5 | http_server 2.4.57 · port 80 |
Port history
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.