Host
As of our latest check on 2026-10-08, 159.148.49.16 (SIA "BITE Latvija", AS2588, Latvia) had 10 open ports (21, 25, 80, 110, 143, 443, 465, 587, …) and 98 known CVEs, 2 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-10-08.
CVEs by severity: CRITICAL 23 HIGH 53 MEDIUM 21 LOW 1
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 4 from an older observation (bind 9.18.30-0ubuntu0.20.04.2; matched 2026-06-08). See them
Not counted: 4 only affect another platform (http_server 2.4.41). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
220 ProFTPD Server (My-Hosting FTP Server FW1) [159.148.49.16]
220 fw1.my-hosting.lv ESMTP Postfix
HTTP/1.1 200 OK Date: Thu, 08 Oct 2026 06:30:47 GMT Server: Apache/2.4.41 Last-Modified: Sat, 06 Nov 2021 16:32:30 GMT ETag: "17-5d0214e5e3ffc" Accept-Ranges: bytes Content-Length: 23 X-Frame-Options: sameorigin Content-Type: text/html nothing here. go away!
+OK Dovecot (Ubuntu) ready.
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready.
HTTP/1.1 400 Bad Request Date: Thu, 08 Oct 2026 06:30:47 GMT Server: Apache/2.4.41 Content-Length: 362 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> </p> </body></html>
220 fw1.my-hosting.lv ESMTP Postfix
220 fw1.my-hosting.lv ESMTP Postfix
YUdl�����ä�WOĽ���sZ��7+DOWNGRD ~<|Á��[D�����Bz�-M}�L������/
����0��0���y�*:t�|�^��*�5�0
*�H��
0310 UUS10U
Let's Encrypt10
UYR10
260923222957Z
261222222956Z010Ufw1.my-hosting.lv0�"0
*�H��
�0�
��$+���f�V��(jCtxd��g�:�.n��:��B��u0;��h�!���
aK� �6��ʛzC�W���-��$q�-]H"�1$hjN�%E
V*����DH�i��{�� �<������յ{,߱�Ľq��s�/V�f��PB5��b��lQ�)�bLg�)��}@]��l�V}_u�ʇw3�d��0��'�0���U"���߆�$���;�z$l���F2�T���(��H��L\�]�]2�'�A�T�J�)�F&. �����0�0U��0U%0
+0U�00Uчx*`Uiȴ����u&n��0U#0�/5�F��@��y,Ux���h�03+'0%0#+0�http://yr1.i.lencr.org/0U0�fw1.my-hosting.lv0U 0
0g�0.U'0%0#�!��http://yr1.c.lencr.org/78.crl0�
+�y�����~F��=;>埥wި$]6�...<truncated>
YU.�d��R#*�Ya/VI`ð�"�DOWNGRD 3���7��hl�����>fi33��X�S]��CH�/
����0��0���y�*:t�|�^��*�5�0
*�H��
0310 UUS10U
Let's Encrypt10
UYR10
260923222957Z
261222222956Z010Ufw1.my-hosting.lv0�"0
*�H��
�0�
��$+���f�V��(jCtxd��g�:�.n��:��B��u0;��h�!���
aK� �6��ʛzC�W���-��$q�-]H"�1$hjN�%E
V*����DH�i��{�� �<������յ{,߱�Ľq��s�/V�f��PB5��b��lQ�)�bLg�)��}@]��l�V}_u�ʇw3�d��0��'�0���U"���߆�$���;�z$l���F2�T���(��H��L\�]�]2�'�A�T�J�)�F&. �����0�0U��0U%0
+0U�00Uчx*`Uiȴ����u&n��0U#0�/5�F��@��y,Ux���h�03+'0%0#+0�http://yr1.i.lencr.org/0U0�fw1.my-hosting.lv0U 0
0g�0.U'0%0#�!��http://yr1.c.lencr.org/78.crl0�
+�y�����~F��=;>埥wި$]6���"...<truncated>
These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.
CVEs by severity: HIGH 2 MEDIUM 2
| CVE | Software |
|---|---|
| CVE-2024-40898 HIGH 7.5 | http_server 2.4.41 · port 80 |
| CVE-2024-43394 HIGH 7.5 | http_server 2.4.41 · port 80 |
| CVE-2020-13938 MEDIUM 5.5 | http_server 2.4.41 · port 80 |
| CVE-2022-28330 MEDIUM 5.3 | http_server 2.4.41 · port 80 |
These CVEs were matched on software this host reported in an earlier observation (matched 2026-06-08), not on a port that is open now, and no service of that kind was open at the latest check (2026-10-08). They are not counted above.
CVEs by severity: HIGH 3 MEDIUM 1
| CVE | Software |
|---|---|
| CVE-2026-1519 HIGH 7.5 | bind 9.18.30-0ubuntu0.20.04.2 |
| CVE-2026-3039 HIGH 7.5 | bind 9.18.30-0ubuntu0.20.04.2 |
| CVE-2026-5946 HIGH 7.5 | bind 9.18.30-0ubuntu0.20.04.2 |
| CVE-2026-3592 MEDIUM 5.3 | bind 9.18.30-0ubuntu0.20.04.2 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.
6 names · as answered by each domain's own name servers