195.225.236.239 — 7 open ports, 5 known CVEs, network Johann Baldermann

Known CVEs on this host

7open ports

18names pointing here

5known CVEs

1known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-07.

CVEs by severity: HIGH 2 MEDIUM 3

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 1 possible, version too vague to tell (proftpd 1.3.5). See them

Not counted: 33 on a distribution build — the fix may be backported (proftpd 1.3.5, php 5.6.40). See them

Not counted: 1 only affects another platform (php 5.6.40). See them

Network: Johann Baldermann AS31239
Open ports: 21, 25, 80, 110, 143, 443, 587 · at our latest check, 2026-06-07
Location: Austria AT
Hostname: hd001.dorn.cc · reverse DNS, checked 2026-10-05
Route: 195.225.236.0/22 · announced by Johann Baldermann AS31239 RPKI valid
Organisation: Johann Baldermann
Registry network: VIENNAWEB · 195.225.236.0 - 195.225.239.255 · RIPE
Abuse contact: [email protected] · for VIENNAWEB
First seen: 2026-06-07 02:45 UTC
Last seen alive: 2026-06-07 02:58 UTC
Hosted domains: 18 names point here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (7)

21/tcp FTP proftpd 1.3.5 1 CVE first 2026-06-07 · last 2026-06-07

Banner: 220 ProFTPD 1.3.5 Server (Debian) [::ffff:195.225.236.239]

Raw response

220 ProFTPD 1.3.5 Server (Debian) [::ffff:195.225.236.239]

25/tcp SMTP first 2026-06-07 · last 2026-06-07

Banner: 220 hd001.dorn.cc ESMTP Postfix (Debian/GNU)

Raw response

220 hd001.dorn.cc ESMTP Postfix (Debian/GNU)

80/tcp HTTP Apache 4 CVEs first 2026-06-07 · last 2026-06-07

Status: 301 Moved Permanently
Server: Apache
Powered by: PHP/5.6.40-0+deb8u12

Raw response

HTTP/1.1 301 Moved Permanently
Date: Sun, 07 Jun 2026 02:56:14 GMT
Server: Apache
X-Powered-By: PHP/5.6.40-0+deb8u12
Location: https://edv.dorn.cc
Content-Length: 80
Content-Type: text/html; charset=UTF-8

<h1>DORN edv Dienstleistungen<h1>
<a href="https://edv.dorn.cc">edv.dorn.cc</a>

110/tcp POP3 first 2026-06-07 · last 2026-06-07

Banner: +OK Hello there.

Raw response

+OK Hello there.

143/tcp IMAP first 2026-06-07 · last 2026-06-07

Banner: * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc. S

Raw response

* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc.  See COPYING for distribution information.

443/tcp TLS first 2026-06-07 · last 2026-06-07

TLS: TLSv1.2
Certificate for: hd001.dorn.cc
Issued by: YR2
Valid: 2026-06-04 → 2026-09-02

Raw response

HTTP/1.1 400 Bad Request
Date: Sun, 07 Jun 2026 02:56:14 GMT
Server: Apache
Content-Length: 362
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
 Instead use the HTTPS scheme to access this URL, please.<br />
</p>
</body></html>

587/tcp SMTP first 2026-06-07 · last 2026-06-07

Banner: 220 hd001.dorn.cc ESMTP Postfix (Debian/GNU)

Raw response

220 hd001.dorn.cc ESMTP Postfix (Debian/GNU)

Vulnerabilities

Distribution build — the fix may be backported (33)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.

CVEs by severity: CRITICAL 4 HIGH 21 MEDIUM 8

CVE	Software
CVE-2015-3306 CRITICAL 10.0 known exploited	proftpd 1.3.5 · port 21
CVE-2017-8923 CRITICAL 9.8	php 5.6.40 · port 80
CVE-2017-9225 CRITICAL 9.8	php 5.6.40 · port 80
CVE-2019-9641 CRITICAL 9.8	php 5.6.40 · port 80
CVE-2026-63090 HIGH 8.8	proftpd 1.3.5 · port 21
CVE-2026-42167 HIGH 8.1	proftpd 1.3.5 · port 21
CVE-2026-44331 HIGH 8.1	proftpd 1.3.5 · port 21
CVE-2016-3125 HIGH 7.5	proftpd 1.3.5 · port 21
CVE-2017-7963 HIGH 7.5	php 5.6.40 · port 80
CVE-2017-9229 HIGH 7.5	php 5.6.40 · port 80
CVE-2018-19395 HIGH 7.5	php 5.6.40 · port 80
CVE-2018-19396 HIGH 7.5	php 5.6.40 · port 80
CVE-2019-18217 HIGH 7.5	proftpd 1.3.5 · port 21
CVE-2019-19270 HIGH 7.5	proftpd 1.3.5 · port 21
CVE-2019-19271 HIGH 7.5	proftpd 1.3.5 · port 21
CVE-2019-19272 HIGH 7.5	proftpd 1.3.5 · port 21
CVE-2019-9637 HIGH 7.5	php 5.6.40 · port 80
CVE-2019-9638 HIGH 7.5	php 5.6.40 · port 80
CVE-2019-9639 HIGH 7.5	php 5.6.40 · port 80
CVE-2020-9272 HIGH 7.5	proftpd 1.3.5 · port 21
CVE-2021-46854 HIGH 7.5	proftpd 1.3.5 · port 21
CVE-2023-51713 HIGH 7.5	proftpd 1.3.5 · port 21
CVE-2024-48651 HIGH 7.5	proftpd 1.3.5 · port 21
CVE-2017-7272 HIGH 7.4	php 5.6.40 · port 80
CVE-2026-63091 HIGH 7.1	proftpd 1.3.5 · port 21
CVE-2015-9253 MEDIUM 6.5	php 5.6.40 · port 80
CVE-2026-53994 MEDIUM 6.5	proftpd 1.3.5 · port 21
CVE-2026-119146 MEDIUM 6.3	proftpd 1.3.5 · port 21
CVE-2026-119364 MEDIUM 6.0	proftpd 1.3.5 · port 21
CVE-2023-48795 MEDIUM 5.9	proftpd 1.3.5 · port 21
CVE-2017-7418 MEDIUM 5.5	proftpd 1.3.5 · port 21
CVE-2026-119147 MEDIUM 5.3	proftpd 1.3.5 · port 21
CVE-2019-19269 MEDIUM 4.9	proftpd 1.3.5 · port 21

Only affects another platform (1)

These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.

CVEs by severity: CRITICAL 1

CVE	Software
CVE-2024-3566 CRITICAL 9.8	php 5.6.40 · port 80

Possible, version too vague to tell (1)

These CVEs were matched on a software version that names only a major release (such as “2”) or no version at all: whether the release running here is affected cannot be told. They are not counted anywhere on this site.

CVE	Software
CVE-2013-4359 MEDIUM 5.0	proftpd 1.3.5 · port 21

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.