212.72.212.172 — 3 open ports, 2 known CVEs, network Vivacom Bulgaria EAD

Known CVEs on this host

3open ports

55names pointing here

2known CVEs

1known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-07.

CVEs by severity: HIGH 1 MEDIUM 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network: Vivacom Bulgaria EAD AS8866
Open ports: 22, 80, 443 · at our latest check, 2026-06-07
Location: Bulgaria BG
Hostname: mail.bgregistar.com · reverse DNS, checked 2026-10-05
Route: 212.72.212.0/24 · announced by Vivacom Bulgaria EAD AS8866 RPKI valid
Organisation: Vivacom Bulgaria EAD · Network service provider (transit)
Registry network: BG-BTC-990421 · 212.72.207.0 - 212.72.223.255 · Vivacom Bulgaria EAD · RIPE
Abuse contact: [email protected] · for BG-BTC-990421
First seen: 2026-06-07 09:50 UTC
Last seen alive: 2026-06-07 09:51 UTC
Hosted domains: 55 names point here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (3)

22/tcp SSH ROSSSH first 2026-06-07 · last 2026-06-07

Server: SSH-2.0-ROSSSH
Host key: ssh-rsa ad59287dffd9cf32…

Raw response

SSH-2.0-ROSSSH

80/tcp HTTP nginx/1.22.1 2 CVEs first 2026-06-07 · last 2026-06-07

Status: 403 Forbidden
Title: 403 Forbidden
Server: nginx/1.22.1

Raw response

HTTP/1.1 403 Forbidden
Server: nginx/1.22.1
Date: Sun, 07 Jun 2026 09:50:37 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 199
Connection: keep-alive
Keep-Alive: timeout=60

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
</body></html>

443/tcp TLS first 2026-06-07 · last 2026-06-07

TLS: TLSv1.2
Certificate for: srv8.bgregistar.com
Issued by: R3
Valid: 2022-03-03 → 2022-06-01

Raw response

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Sun, 07 Jun 2026 09:50:37 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.22.1</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.