- Server
- SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u3
- Host key
- ssh-ed25519 b253c5d1d8aa2686…
Raw response
SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u3
Host
Tags: Hosting Expired certificate
As of our latest check on 2026-06-04, 185.85.108.23 (Datasource AG, AS51395, Switzerland) had 3 open ports (22, 80, 443) and 41 known CVEs, 1 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-06-04.
CVEs by severity: CRITICAL 1 HIGH 14 MEDIUM 15 LOW 11
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 13 on a distribution build — the fix may be backported (openssh 7.9p1). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u3
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 04 Jun 2026 18:59:26 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Custom-Header,accept,Content-Type,Access-Token,New-Token,Authorization,Origin
Access-Control-Allow-Methods: OPTIONS,DELETE,POST,GET,PUT,PATCH
Access-Control-Allow-Origin: http://localhost:8080
Access-Control-Max-Age: 3600
Content-Encoding: gzip
287
��T�r�0~�K/��П$;�)e.d���X�X�,i��[�W�a`z����k;�i�������o��O?��g�N�~���=���iaI& ����`i.�L�%f���ڿ9b§����C��ixb�R��kXj
�!ȋ���@'"́P��[côY�e4�h͊���A%��{�͜X�'O���R9�[у�0#
H�J����"VJb�H�T
a��*�P �ThH��B+s��$P�A�rY�Lʚ�
B��ϵ�ҩ�X��������/������W�O���|c���8<�5���옚]�...<truncated>
HTTP/1.1 400 Bad Request Server: nginx/1.14.2 Date: Thu, 04 Jun 2026 18:59:26 GMT Content-Type: text/html Content-Length: 673 Connection: close <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body bgcolor="white"> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>nginx/1.14.2</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: CRITICAL 1 HIGH 3 MEDIUM 8 LOW 1
| CVE | Software |
|---|---|
| CVE-2023-38408 CRITICAL 9.8 | openssh 7.9p1 · port 22 |
| CVE-2019-16905 HIGH 7.8 | openssh 7.9p1 · port 22 |
| CVE-2020-15778 HIGH 7.4 | openssh 7.9p1 · port 22 |
| CVE-2021-41617 HIGH 7.0 | openssh 7.9p1 · port 22 |
| CVE-2019-6109 MEDIUM 6.8 | openssh 7.9p1 · port 22 |
| CVE-2019-6110 MEDIUM 6.8 | openssh 7.9p1 · port 22 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 7.9p1 · port 22 |
| CVE-2019-6111 MEDIUM 5.9 | openssh 7.9p1 · port 22 |
| CVE-2020-14145 MEDIUM 5.9 | openssh 7.9p1 · port 22 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 7.9p1 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 7.9p1 · port 22 |
| CVE-2018-20685 MEDIUM 5.3 | openssh 7.9p1 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 7.9p1 · port 22 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.