Host
Tags: Cloud Hosting Self-signed certificate
As of our latest check on 2026-08-27, 104.238.138.136 (The Constant Company, LLC, AS20473, United States) had 3 open ports (22, 80, 8443) and 2 known CVEs, 1 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-08-27.
CVEs by severity: HIGH 1 MEDIUM 1
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 30 on a distribution build — the fix may be backported (openssh 10.0p2). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
SSH-2.0-OpenSSH_10.0p2 Ubuntu-5ubuntu5.4
HTTP/1.1 200 OK Server: openresty/1.19.9.1 Date: Thu, 27 Aug 2026 23:14:33 GMT Content-Type: text/html; charset=utf-8,gbk Content-Length: 471 Last-Modified: Wed, 10 Dec 2025 06:18:10 GMT Connection: keep-alive ETag: "693910a2-1d7" Access-Control-Allow-Origin: * Accept-Ranges: bytes
HTTP/1.1 400 Bad Request Server: nginx/1.24.0 Date: Thu, 27 Aug 2026 23:14:33 GMT Content-Type: text/html; charset=utf-8 Content-Length: 657 Connection: close <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>nginx/1.24.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.
CVEs by severity: CRITICAL 1 HIGH 9 MEDIUM 10 LOW 10
| CVE | Software |
|---|---|
| CVE-2026-123158 HIGH 8.1 known exploited | openssh 10.0p2 · port 22 |
| CVE-2026-60002 CRITICAL 9.4 | openssh 10.0p2 · port 22 |
| CVE-2026-35385 HIGH 8.1 | openssh 10.0p2 · port 22 |
| CVE-2026-35386 HIGH 8.1 | openssh 10.0p2 · port 22 |
| CVE-2026-35414 HIGH 8.1 | openssh 10.0p2 · port 22 |
| CVE-2026-106583 HIGH 7.8 | openssh 10.0p2 · port 22 |
| CVE-2026-106553 HIGH 7.5 | openssh 10.0p2 · port 22 |
| CVE-2026-106555 HIGH 7.5 | openssh 10.0p2 · port 22 |
| CVE-2026-59999 HIGH 7.5 | openssh 10.0p2 · port 22 |
| CVE-2026-60000 HIGH 7.5 | openssh 10.0p2 · port 22 |
| CVE-2026-106552 MEDIUM 6.5 | openssh 10.0p2 · port 22 |
| CVE-2026-106585 MEDIUM 6.5 | openssh 10.0p2 · port 22 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 10.0p2 · port 22 |
| CVE-2026-59998 MEDIUM 6.5 | openssh 10.0p2 · port 22 |
| CVE-2026-60001 MEDIUM 6.5 | openssh 10.0p2 · port 22 |
| CVE-2026-59995 MEDIUM 5.4 | openssh 10.0p2 · port 22 |
| CVE-2026-59996 MEDIUM 5.4 | openssh 10.0p2 · port 22 |
| CVE-2026-59997 MEDIUM 5.4 | openssh 10.0p2 · port 22 |
| CVE-2026-73282 MEDIUM 4.8 | openssh 10.0p2 · port 22 |
| CVE-2026-106586 MEDIUM 4.3 | openssh 10.0p2 · port 22 |
| CVE-2026-106582 LOW 3.7 | openssh 10.0p2 · port 22 |
| CVE-2025-61984 LOW 3.6 | openssh 10.0p2 · port 22 |
| CVE-2025-61985 LOW 3.6 | openssh 10.0p2 · port 22 |
| CVE-2026-73281 LOW 3.5 | openssh 10.0p2 · port 22 |
| CVE-2026-106584 LOW 3.3 | openssh 10.0p2 · port 22 |
| CVE-2026-106587 LOW 3.3 | openssh 10.0p2 · port 22 |
| CVE-2026-106588 LOW 3.1 | openssh 10.0p2 · port 22 |
| CVE-2026-106589 LOW 2.9 | openssh 10.0p2 · port 22 |
| CVE-2026-35388 LOW 2.5 | openssh 10.0p2 · port 22 |
| CVE-2026-73283 LOW 2.5 | openssh 10.0p2 · port 22 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.