Host

192.162.199.49

Tags: Blocklisted Self-signed certificate

As of our latest check on 2026-06-05, 192.162.199.49 (FEMO IT SOLUTIONS LIMITED, AS214351, Netherlands) had 3 open ports (22, 80, 443) and 40 known CVEs, 2 known to be exploited. It is on 2 current blocklists.

Known CVEs on this host

3open ports
0names pointing here
40known CVEs
2known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-05.

CVEs by severity: CRITICAL 2 HIGH 13 MEDIUM 14 LOW 11

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 12 on a distribution build — the fix may be backported (openssh 7.4p1). See them

Network
FEMO IT SOLUTIONS LIMITED AS214351
Open ports
22, 80, 443 · at our latest check, 2026-06-05
Location
Netherlands NL
Route
192.162.199.0/24 · announced by FEMO IT SOLUTIONS LIMITED AS214351 RPKI valid
Organisation
FEMO IT SOLUTIONS LIMITED
Registry network
FEMO · 192.162.199.0 - 192.162.199.255 · RIPE
Abuse contact
[email protected] · for FEMO
First seen
2026-06-05 17:22 UTC
Last seen alive
2026-06-05 17:23 UTC
Hosted domains
No host name points here

Reputation

Blocklists
blocklisted on 2 current lists About blocklists
ListCategoryListed networkSince
aggregated attack lists (level 1) aggregated attack lists 192.162.199.0/24 2026-10-04
hijacked or criminal-operated networks (do-not-route list) hijacked or criminal network 192.162.199.0/24 2026-10-04

Services (3)

22/tcp SSH OpenSSH_7.4p1 34 CVEs first 2026-06-05 · last 2026-06-05
Server
SSH-2.0-OpenSSH_7.4p1 Debian-10+deb9u7
Host key
ssh-ed25519 20e0c3327c9e9885…
Raw response
SSH-2.0-OpenSSH_7.4p1 Debian-10+deb9u7
80/tcp HTTP nginx/1.18.0 6 CVEs first 2026-06-05 · last 2026-06-05
Status
200 OK
Title
FASTPANEL
Server
nginx/1.18.0
Raw response
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 05 Jun 2026 17:22:31 GMT
Content-Type: text/html
Content-Length: 11694
Last-Modified: Thu, 05 Mar 2026 09:53:08 GMT
Connection: keep-alive
ETag: "69a95284-2dae"
Accept-Ranges: bytes
443/tcp TLS first 2026-06-05 · last 2026-06-05
TLS
TLSv1.2
Certificate for
parking
Issued by
parking
Valid
2026-06-04 → 2027-06-04
Note
self-signed certificate
Raw response
HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Date: Fri, 05 Jun 2026 17:22:31 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.18.0</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Vulnerabilities

Distribution build — the fix may be backported (12)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.

CVEs by severity: HIGH 2 MEDIUM 9 LOW 1

CVESoftware
CVE-2020-15778 HIGH 7.4 openssh 7.4p1 · port 22
CVE-2021-41617 HIGH 7.0 openssh 7.4p1 · port 22
CVE-2019-6109 MEDIUM 6.8 openssh 7.4p1 · port 22
CVE-2019-6110 MEDIUM 6.8 openssh 7.4p1 · port 22
CVE-2019-6111 MEDIUM 5.9 openssh 7.4p1 · port 22
CVE-2020-14145 MEDIUM 5.9 openssh 7.4p1 · port 22
CVE-2016-20012 MEDIUM 5.3 openssh 7.4p1 · port 22
CVE-2017-15906 MEDIUM 5.3 openssh 7.4p1 · port 22
CVE-2018-15473 MEDIUM 5.3 openssh 7.4p1 · port 22
CVE-2018-15919 MEDIUM 5.3 openssh 7.4p1 · port 22
CVE-2018-20685 MEDIUM 5.3 openssh 7.4p1 · port 22
CVE-2021-36368 LOW 3.7 openssh 7.4p1 · port 22

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.