Host
Tags: Expired certificate
As of our latest check on 2026-06-01, 136.255.149.86 (Vodafone Romania S.A., AS12302, Romania) had 2 open ports (80, 443) and 83 known CVEs, 1 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-06-01.
CVEs by severity: CRITICAL 14 HIGH 48 MEDIUM 20 LOW 1
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 3 only affect a particular platform; this host's is not known (http_server 2.4.56, php 5.6.40). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
HTTP/1.1 301 Moved Permanently Date: Mon, 01 Jun 2026 10:30:18 GMT Server: Apache/2.4.56 X-Powered-By: PHP/5.6.40 X-Pingback: http://www.mons-medius.com/xmlrpc.php Expires: Mon, 01 Jun 2026 11:30:19 GMT Cache-Control: max-age=3600 Location: http://www.mons-medius.com/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
HTTP/1.1 400 Bad Request Date: Mon, 01 Jun 2026 10:30:18 GMT Server: Apache/2.4.56 Content-Length: 362 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> </p> </body></html>
These CVEs only apply when the software runs on a particular platform (for example Windows), and this host's platform is not known. They are not counted.
CVEs by severity: CRITICAL 1 HIGH 2
| CVE | Software |
|---|---|
| CVE-2024-3566 CRITICAL 9.8 | php 5.6.40 · port 80 |
| CVE-2024-40898 HIGH 7.5 | http_server 2.4.56 · port 80 |
| CVE-2024-43394 HIGH 7.5 | http_server 2.4.56 · port 80 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.