- Server
- SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u2
- Host key
- ssh-ed25519 b19d988be7adca36…
Raw response
SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u2
Host
As of our latest check on 2026-06-01, 130.149.80.239 (Verein zur Foerderung eines Deutschen Forschungsnetzes e.V., AS680, Germany) had 3 open ports (22, 80, 443) and 138 known CVEs, 3 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-06-01.
CVEs by severity: CRITICAL 24 HIGH 65 MEDIUM 37 LOW 12
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 13 on a distribution build — the fix may be backported (openssh 7.9p1). See them
Not counted: 4 only affect another platform (http_server 2.4.38). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u2
HTTP/1.1 302 Found Date: Sun, 31 May 2026 22:41:23 GMT Server: Apache/2.4.38 (Univention) Location: http://130.149.80.239/univention/ Content-Length: 301 Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="http://130.149.80.239/univention/">here</a>.</p> <hr> <address>Apache/2.4.38 (Univention) Server at 130.149.80.239 Port 80</address> </body></html>
HTTP/1.1 400 Bad Request Date: Sun, 31 May 2026 22:41:23 GMT Server: Apache/2.4.38 (Univention) Content-Length: 450 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> </p> <hr> <address>Apache/2.4.38 (Univention) Server at dc.windc.intranet Port 443</address> </body></html>
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: CRITICAL 1 HIGH 3 MEDIUM 8 LOW 1
| CVE | Software |
|---|---|
| CVE-2023-38408 CRITICAL 9.8 | openssh 7.9p1 · port 22 |
| CVE-2019-16905 HIGH 7.8 | openssh 7.9p1 · port 22 |
| CVE-2020-15778 HIGH 7.4 | openssh 7.9p1 · port 22 |
| CVE-2021-41617 HIGH 7.0 | openssh 7.9p1 · port 22 |
| CVE-2019-6109 MEDIUM 6.8 | openssh 7.9p1 · port 22 |
| CVE-2019-6110 MEDIUM 6.8 | openssh 7.9p1 · port 22 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 7.9p1 · port 22 |
| CVE-2019-6111 MEDIUM 5.9 | openssh 7.9p1 · port 22 |
| CVE-2020-14145 MEDIUM 5.9 | openssh 7.9p1 · port 22 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 7.9p1 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 7.9p1 · port 22 |
| CVE-2018-20685 MEDIUM 5.3 | openssh 7.9p1 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 7.9p1 · port 22 |
These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.
CVEs by severity: HIGH 2 MEDIUM 2
| CVE | Software |
|---|---|
| CVE-2024-40898 HIGH 7.5 | http_server 2.4.38 · port 80 |
| CVE-2024-43394 HIGH 7.5 | http_server 2.4.38 · port 80 |
| CVE-2020-13938 MEDIUM 5.5 | http_server 2.4.38 · port 80 |
| CVE-2022-28330 MEDIUM 5.3 | http_server 2.4.38 · port 80 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.