- Server
- SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u4
- Host key
- ssh-ed25519 6bf813e20026d93c…
Raw response
SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u4
Host
Tags: Expired certificate
As of our latest check on 2026-06-07, 212.60.136.227 (tal.de GmbH, AS8820, Germany) had 3 open ports (22, 80, 443) and 41 known CVEs, 1 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-06-07.
CVEs by severity: HIGH 14 MEDIUM 16 LOW 11
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 13 on a distribution build — the fix may be backported (openssh 7.9p1). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u4
HTTP/1.1 200 OK Server: nginx/1.14.2 Date: Sun, 07 Jun 2026 09:14:56 GMT Content-Type: text/html Last-Modified: Wed, 24 Jul 2019 07:25:48 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"5d3807fc-39" Strict-Transport-Security: max-age=15768000; includeSubDomains; preload X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Encoding: gzip 4c ��(-*JT�UH�LUpJ,�,��P�*�KQ�J-�*�RHO�P(OM*��L-R�,.Q�ˬP���i9 0
HTTP/1.1 400 Bad Request Server: nginx/1.14.2 Date: Sun, 07 Jun 2026 09:14:56 GMT Content-Type: text/html Content-Length: 673 Connection: close X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body bgcolor="white"> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>nginx/1.14.2</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: CRITICAL 1 HIGH 3 MEDIUM 8 LOW 1
| CVE | Software |
|---|---|
| CVE-2023-38408 CRITICAL 9.8 | openssh 7.9p1 · port 22 |
| CVE-2019-16905 HIGH 7.8 | openssh 7.9p1 · port 22 |
| CVE-2020-15778 HIGH 7.4 | openssh 7.9p1 · port 22 |
| CVE-2021-41617 HIGH 7.0 | openssh 7.9p1 · port 22 |
| CVE-2019-6109 MEDIUM 6.8 | openssh 7.9p1 · port 22 |
| CVE-2019-6110 MEDIUM 6.8 | openssh 7.9p1 · port 22 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 7.9p1 · port 22 |
| CVE-2019-6111 MEDIUM 5.9 | openssh 7.9p1 · port 22 |
| CVE-2020-14145 MEDIUM 5.9 | openssh 7.9p1 · port 22 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 7.9p1 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 7.9p1 · port 22 |
| CVE-2018-20685 MEDIUM 5.3 | openssh 7.9p1 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 7.9p1 · port 22 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.
2 names · as answered by each domain's own name servers