Host

104.247.164.78

Tags: Hosting

As of our latest check on 2026-08-27, 104.247.164.78 (GNET Internet Telekomunikasyon A.S., AS42846, Türkiye) had 4 open ports (22, 25, 80, 443) and 8 known CVEs.

Known CVEs on this host

4open ports
5names pointing here
8known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-27.

CVEs by severity: CRITICAL 1 HIGH 4 MEDIUM 2 LOW 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 37 on a distribution build — the fix may be backported (openssh 8.7). See them

Network
GNET Internet Telekomunikasyon A.S. AS42846
Open ports
22, 25, 80, 443 · at our latest check, 2026-08-27
Location
Türkiye TR
Hostname
78gsjcg7.guzel.net.tr · reverse DNS, checked 2026-10-04
Route
104.247.164.0/24 · announced by GNET Internet Telekomunikasyon A.S. AS42846 RPKI valid
Organisation
GNET Internet Telekomunikasyon A.S.
Registry network
cust-guzelhosting · 104.247.164.0 - 104.247.164.255 · RIPE
Abuse contact
[email protected] · for cust-guzelhosting
First seen
2026-08-27 18:05 UTC
Last seen alive
2026-08-27 18:08 UTC
Hosted domains
5 names point here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (4)

22/tcp SSH OpenSSH_8.7 first 2026-08-27 · last 2026-08-27
Server
SSH-2.0-OpenSSH_8.7
Host key
ssh-ed25519 70a1c8b8939f434c…
Raw response
SSH-2.0-OpenSSH_8.7
25/tcp SMTP exim 4.99.2 8 CVEs first 2026-08-27 · last 2026-08-27
Banner
220 server.diotecenergy.com.tr ESMTP Exim 4.99.2 Thu, 27 Aug 2026 14:08:28 -0400
Raw response
220 server.diotecenergy.com.tr ESMTP Exim 4.99.2 Thu, 27 Aug 2026 14:05:42 -0400
500 unrecognized command
80/tcp HTTP nginx/1.28.2 first 2026-08-27 · last 2026-08-27
Status
404 Not Found
Server
nginx/1.28.2
Raw response
HTTP/1.1 404 Not Found
Server: nginx/1.28.2
Date: Thu, 27 Aug 2026 18:05:41 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
x-request-id: f14d33d6-abc0-4cf8-ae94-22000ebdafb2
RateLimit: "500-in-15min"; r=499; t=900
Rate
443/tcp TLS first 2026-08-27 · last 2026-08-27
TLS
TLSv1.2
Certificate for
api.diotecenerji.com
Issued by
YE2
Valid
2026-08-14 → 2026-11-12
Raw response
HTTP/1.1 400 Bad Request
Server: nginx/1.28.2
Date: Thu, 27 Aug 2026 18:05:42 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.28.2</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Vulnerabilities

Distribution build — the fix may be backported (37)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.

CVEs by severity: CRITICAL 2 HIGH 9 MEDIUM 14 LOW 12

CVESoftware
CVE-2023-38408 CRITICAL 9.8 openssh 8.7 · port 22
CVE-2026-60002 CRITICAL 9.4 openssh 8.7 · port 22
CVE-2024-6387 HIGH 8.1 openssh 8.7 · port 22
CVE-2026-35385 HIGH 8.1 openssh 8.7 · port 22
CVE-2026-35414 HIGH 8.1 openssh 8.7 · port 22
CVE-2026-106583 HIGH 7.8 openssh 8.7 · port 22
CVE-2026-106553 HIGH 7.5 openssh 8.7 · port 22
CVE-2026-106555 HIGH 7.5 openssh 8.7 · port 22
CVE-2026-59999 HIGH 7.5 openssh 8.7 · port 22
CVE-2026-60000 HIGH 7.5 openssh 8.7 · port 22
CVE-2021-41617 HIGH 7.0 openssh 8.7 · port 22
CVE-2025-26465 MEDIUM 6.8 openssh 8.7 · port 22
CVE-2023-51385 MEDIUM 6.5 openssh 8.7 · port 22
CVE-2026-106552 MEDIUM 6.5 openssh 8.7 · port 22
CVE-2026-106585 MEDIUM 6.5 openssh 8.7 · port 22
CVE-2026-35387 MEDIUM 6.5 openssh 8.7 · port 22
CVE-2026-59998 MEDIUM 6.5 openssh 8.7 · port 22
CVE-2026-60001 MEDIUM 6.5 openssh 8.7 · port 22
CVE-2023-48795 MEDIUM 5.9 openssh 8.7 · port 22
CVE-2026-59995 MEDIUM 5.4 openssh 8.7 · port 22
CVE-2026-59996 MEDIUM 5.4 openssh 8.7 · port 22
CVE-2026-59997 MEDIUM 5.4 openssh 8.7 · port 22
CVE-2016-20012 MEDIUM 5.3 openssh 8.7 · port 22
CVE-2026-73282 MEDIUM 4.8 openssh 8.7 · port 22
CVE-2026-106586 MEDIUM 4.3 openssh 8.7 · port 22
CVE-2025-32728 LOW 3.8 openssh 8.7 · port 22
CVE-2021-36368 LOW 3.7 openssh 8.7 · port 22
CVE-2026-106582 LOW 3.7 openssh 8.7 · port 22
CVE-2025-61984 LOW 3.6 openssh 8.7 · port 22
CVE-2025-61985 LOW 3.6 openssh 8.7 · port 22
CVE-2026-73281 LOW 3.5 openssh 8.7 · port 22
CVE-2026-106584 LOW 3.3 openssh 8.7 · port 22
CVE-2026-106587 LOW 3.3 openssh 8.7 · port 22
CVE-2026-106588 LOW 3.1 openssh 8.7 · port 22
CVE-2026-106589 LOW 2.9 openssh 8.7 · port 22
CVE-2026-35388 LOW 2.5 openssh 8.7 · port 22
CVE-2026-73283 LOW 2.5 openssh 8.7 · port 22

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Hostnames pointing to this address

5 names · as answered by each domain's own name servers

diotecenerji.comfirst seen 2026-10-12
api.diotecenerji.comfirst seen 2026-10-12
cp.diotecenerji.comfirst seen 2026-10-12
panel.diotecenerji.comfirst seen 2026-10-12
personel.diotecenerji.comfirst seen 2026-10-12