- Banner
- 220 (vsFTPd 3.0.3)
Raw response
220 (vsFTPd 3.0.3) 530 Please login with USER and PASS. 530 Please login with USER and PASS. 530 Please login with USER and PASS. 530 Please login with USER and PASS. 530 Please login with USER and PASS.
Host
104.237.13.60
Tags: Database
As of our latest check on 2026-08-27, 104.237.13.60 (Nodisto IT, LLC, AS394727, United States) had 4 open ports (21, 22, 80, 3306) and 2 known CVEs.
Known CVEs on this host
4open ports
0names pointing here
2known CVEs
0known exploited
Open ports and CVEs as of our latest check of this host, 2026-08-27.
CVEs by severity: HIGH 2
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 82 on a distribution build — the fix may be backported (mysql 5.7.42, openssh 7.6p1, nginx 1.14.0). See them
Not counted: 4 fixed by the distribution (openssh 7.6p1). See them
- Network
- Nodisto IT, LLC AS394727
- Open ports
- 21, 22, 80, 3306 · at our latest check, 2026-08-27
- Location
- United States US
- Route
- 104.237.13.0/24 · announced by Nodisto IT, LLC AS394727 no RPKI authorisation
- Organisation
- Nodisto IT, LLC
- Registry network
- HOSTEROS · 104.237.0.0 - 104.237.15.255 · Hosteros LLC · ARIN
- First seen
- 2026-08-27 20:20 UTC
- Last seen alive
- 2026-08-27 20:24 UTC
- Hosted domains
- No host name points here
Reputation
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
Services (4)
22/tcp
SSH
OpenSSH_7.6p1
first 2026-08-27 · last 2026-08-27
- Server
- SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.5
- Host key
- ssh-ed25519 670bbce9258f1464…
Raw response
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.5
80/tcp
HTTP
nginx/1.14.0 (Ubuntu)
first 2026-08-27 · last 2026-08-27
- Status
- 404 Not Found
- Title
- 404 Not Found
- Server
- nginx/1.14.0 (Ubuntu)
Raw response
HTTP/1.1 404 Not Found Server: nginx/1.14.0 (Ubuntu) Date: Thu, 27 Aug 2026 20:21:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip c6 �퐱 �0�w�w8;鐦��1�(8�">@b�&�&S�oo���������㘎��� �(g�D������;��+d��$Tz5�lO���,n�D,���.b�L�߆�0:�����k��Ӻ�����Q�.��O��m�Nߗ���q-D�\����v �)X��;�s0��C�!M��d�_��_<���D 0
3306/tcp
MYSQL
first 2026-08-27 · last 2026-08-27
- Protocol
- 5.7.42-0ubuntu0.18.04.1
Raw response
[ 5.7.42-0ubuntu0.18.04.1~�j0bGEp9����>Kxz** Hzemysql_native_password
Vulnerabilities
Distribution build — the fix may be backported (82)
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.
CVEs by severity: CRITICAL 3 HIGH 18 MEDIUM 53 LOW 8
| CVE | Software |
|---|---|
| CVE-2023-44487 HIGH 7.5 known exploited | nginx 1.14.0 · port 80 |
| CVE-2019-3822 CRITICAL 9.8 | mysql 5.7.42 · port 3306 |
| CVE-2023-38408 CRITICAL 9.8 | openssh 7.6p1 · port 22 |
| CVE-2021-21351 CRITICAL 9.1 | mysql 5.7.42 · port 3306 |
| CVE-2022-21824 HIGH 8.2 | mysql 5.7.42 · port 3306 |
| CVE-2026-35385 HIGH 8.1 | openssh 7.6p1 · port 22 |
| CVE-2026-35414 HIGH 8.1 | openssh 7.6p1 · port 22 |
| CVE-2019-5436 HIGH 7.8 | mysql 5.7.42 · port 3306 |
| CVE-2021-21348 HIGH 7.8 | mysql 5.7.42 · port 3306 |
| CVE-2022-41741 HIGH 7.8 | nginx 1.14.0 · port 80 |
| CVE-2021-23017 HIGH 7.7 | nginx 1.14.0 · port 80 |
| CVE-2026-60002 HIGH 7.7 | openssh 7.6p1 · port 22 |
| CVE-2018-16843 HIGH 7.5 | nginx 1.14.0 · port 80 |
| CVE-2018-16844 HIGH 7.5 | nginx 1.14.0 · port 80 |
| CVE-2019-9511 HIGH 7.5 | nginx 1.14.0 · port 80 |
| CVE-2019-9513 HIGH 7.5 | nginx 1.14.0 · port 80 |
| CVE-2020-28196 HIGH 7.5 | mysql 5.7.42 · port 3306 |
| CVE-2026-60000 HIGH 7.5 | openssh 7.6p1 · port 22 |
| CVE-2020-15778 HIGH 7.4 | openssh 7.6p1 · port 22 |
| CVE-2022-41742 HIGH 7.1 | nginx 1.14.0 · port 80 |
| CVE-2021-41617 HIGH 7.0 | openssh 7.6p1 · port 22 |
| CVE-2019-6110 MEDIUM 6.8 | openssh 7.6p1 · port 22 |
| CVE-2025-26465 MEDIUM 6.8 | openssh 7.6p1 · port 22 |
| CVE-2019-9516 MEDIUM 6.5 | nginx 1.14.0 · port 80 |
| CVE-2020-14830 MEDIUM 6.5 | mysql 5.7.42 · port 3306 |
| CVE-2020-14846 MEDIUM 6.5 | mysql 5.7.42 · port 3306 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 7.6p1 · port 22 |
| CVE-2024-21177 MEDIUM 6.5 | mysql 5.7.42 · port 3306 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 7.6p1 · port 22 |
| CVE-2026-59998 MEDIUM 6.5 | openssh 7.6p1 · port 22 |
| CVE-2026-60001 MEDIUM 6.5 | openssh 7.6p1 · port 22 |
| CVE-2018-16845 MEDIUM 6.1 | nginx 1.14.0 · port 80 |
| CVE-2020-14145 MEDIUM 5.9 | openssh 7.6p1 · port 22 |
| CVE-2020-1971 MEDIUM 5.9 | mysql 5.7.42 · port 3306 |
| CVE-2023-22053 MEDIUM 5.9 | mysql 5.7.42 · port 3306 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 7.6p1 · port 22 |
| CVE-2026-59999 MEDIUM 5.9 | openssh 7.6p1 · port 22 |
| CVE-2020-15358 MEDIUM 5.5 | mysql 5.7.42 · port 3306 |
| CVE-2021-22570 MEDIUM 5.5 | mysql 5.7.42 · port 3306 |
| CVE-2022-21509 MEDIUM 5.5 | mysql 5.7.42 · port 3306 |
| CVE-2022-21527 MEDIUM 5.5 | mysql 5.7.42 · port 3306 |
| CVE-2022-21528 MEDIUM 5.5 | mysql 5.7.42 · port 3306 |
| CVE-2026-59995 MEDIUM 5.4 | openssh 7.6p1 · port 22 |
| CVE-2026-59996 MEDIUM 5.4 | openssh 7.6p1 · port 22 |
| CVE-2026-59997 MEDIUM 5.4 | openssh 7.6p1 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 7.6p1 · port 22 |
| CVE-2018-15919 MEDIUM 5.3 | openssh 7.6p1 · port 22 |
| CVE-2019-20372 MEDIUM 5.3 | nginx 1.14.0 · port 80 |
| CVE-2019-7317 MEDIUM 5.3 | mysql 5.7.42 · port 3306 |
| CVE-2024-21176 MEDIUM 5.3 | mysql 5.7.42 · port 3306 |
| CVE-2025-23419 MEDIUM 5.3 | nginx 1.14.0 · port 80 |
| CVE-2022-21539 MEDIUM 5.0 | mysql 5.7.42 · port 3306 |
| CVE-2020-14814 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2020-14837 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2020-14839 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2020-14845 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2020-14852 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2022-21455 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2022-21517 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2022-21525 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2022-21526 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2022-21529 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2022-21530 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2022-21531 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2022-21534 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2022-21537 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2023-21977 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2023-22015 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2023-22026 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2023-22028 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2023-22084 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2024-21179 MEDIUM 4.9 | mysql 5.7.42 · port 3306 |
| CVE-2026-73282 MEDIUM 4.8 | openssh 7.6p1 · port 22 |
| CVE-2022-21522 MEDIUM 4.4 | mysql 5.7.42 · port 3306 |
| CVE-2025-32728 LOW 3.8 | openssh 7.6p1 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 7.6p1 · port 22 |
| CVE-2025-61984 LOW 3.6 | openssh 7.6p1 · port 22 |
| CVE-2025-61985 LOW 3.6 | openssh 7.6p1 · port 22 |
| CVE-2026-73281 LOW 3.5 | openssh 7.6p1 · port 22 |
| CVE-2022-21538 LOW 3.1 | mysql 5.7.42 · port 3306 |
| CVE-2026-35388 LOW 2.5 | openssh 7.6p1 · port 22 |
| CVE-2026-73283 LOW 2.5 | openssh 7.6p1 · port 22 |
Fixed by the distribution (4)
The distribution's security data says the package revision this service shows already has the fix for these CVEs, or that its build is not affected. They are not counted.
CVEs by severity: MEDIUM 4
| CVE | Software |
|---|---|
| CVE-2019-6109 MEDIUM 6.8 | openssh 7.6p1 · port 22 |
| CVE-2019-6111 MEDIUM 5.9 | openssh 7.6p1 · port 22 |
| CVE-2018-15473 MEDIUM 5.3 | openssh 7.6p1 · port 22 |
| CVE-2018-20685 MEDIUM 5.3 | openssh 7.6p1 · port 22 |
Port history
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.