Host

213.136.71.118

Tags: Hosting

As of our latest check on 2026-06-07, 213.136.71.118 (Contabo GmbH, AS51167, Germany) had 2 open ports (80, 443) and 6 known CVEs.

Known CVEs on this host

2open ports
0names pointing here
6known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-07.

CVEs by severity: HIGH 4 MEDIUM 1 LOW 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 59 on a distribution build — the fix may be backported (http_server 2.4.58). See them

Not counted: 2 only affect another platform (http_server 2.4.58). See them

Network
Contabo GmbH AS51167
Open ports
80, 443 · at our latest check, 2026-06-07
Location
Lauterbourg, FR-6AE · France FR
Hostname
mebkenya.com · reverse DNS, checked 2026-10-05
Route
213.136.70.0/23 · announced by Contabo GmbH AS51167 RPKI valid
Organisation
Contabo Group · Content / hosting
Registry network
CONTABO · 213.136.64.0 - 213.136.79.255 · Contabo GmbH · RIPE
Abuse contact
[email protected] · for CONTABO
First seen
2026-06-07 22:26 UTC
Last seen alive
2026-06-07 22:27 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (2)

80/tcp HTTP Apache/2.4.58 (Ubuntu) 6 CVEs first 2026-06-07 · last 2026-06-07
Status
403 Forbidden
Title
403 Forbidden
Server
Apache/2.4.58 (Ubuntu)
Raw response
HTTP/1.1 200 OK
Date: Sun, 07 Jun 2026 22:26:52 GMT
Server: Apache/2.4.58 (Ubuntu)
X-Drupal-Cache: MISS
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Strict-Transport-Security: max-age=63072000;includeSubDomains
Content-Language: en
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-UA-Compatible: IE=edge
X-Generator: D7
Link: <https://mebkenya.com/>; rel="canonical",<https://mebkenya.com/sites/default/files/pictures/meb-social-media-thumbnail.png>; rel="image_src",<https://mebkenya.com/>; rel="shortlink",<en>; rel="hreflang_xdefault",<en-KE>; rel="hreflang_en"
Upgrade: h2,h2c
Connection: Upgrade
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20026
Content-Type: text/html; charset=utf-8

��}�z�Ƶ��}
��ٱ�mP�_[��8�&n�\w�����$X��U�e?�y����� 	J�%���TN$0�5k�}�O~��7�|��W/�i3+����H��O�|`�����h�����I~�t���&�7��...<truncated>
443/tcp HTTP Apache/2.4.58 (Ubuntu) first 2026-06-07 · last 2026-06-07
Status
403 Forbidden
Title
403 Forbidden
Server
Apache/2.4.58 (Ubuntu)
Raw response
HTTP/1.1 400 Bad Request
Date: Sun, 07 Jun 2026 22:26:52 GMT
Server: Apache/2.4.58 (Ubuntu)
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: geolocation=(), microphone=(), camera=()
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com; frame-ancestors 'self';
Content-Length: 440
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Requ

Vulnerabilities

Distribution build — the fix may be backported (59)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.

CVEs by severity: CRITICAL 11 HIGH 34 MEDIUM 14

CVESoftware
CVE-2024-38475 CRITICAL 9.1 known exploited http_server 2.4.58 · port 80
CVE-2024-38474 CRITICAL 9.8 http_server 2.4.58 · port 80
CVE-2024-38476 CRITICAL 9.8 http_server 2.4.58 · port 80
CVE-2026-28780 CRITICAL 9.8 http_server 2.4.58 · port 80
CVE-2026-29167 CRITICAL 9.8 http_server 2.4.58 · port 80
CVE-2026-44631 CRITICAL 9.8 http_server 2.4.58 · port 80
CVE-2026-56154 CRITICAL 9.8 http_server 2.4.58 · port 80
CVE-2026-57941 CRITICAL 9.8 http_server 2.4.58 · port 80
CVE-2026-59797 CRITICAL 9.8 http_server 2.4.58 · port 80
CVE-2025-23048 CRITICAL 9.1 http_server 2.4.58 · port 80
CVE-2026-42535 CRITICAL 9.1 http_server 2.4.58 · port 80
CVE-2026-24072 HIGH 8.8 http_server 2.4.58 · port 80
CVE-2026-93546 HIGH 8.8 http_server 2.4.58 · port 80
CVE-2025-58098 HIGH 8.3 http_server 2.4.58 · port 80
CVE-2024-38473 HIGH 8.1 http_server 2.4.58 · port 80
CVE-2026-73636 HIGH 8.1 http_server 2.4.58 · port 80
CVE-2024-27316 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2024-38472 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2024-38477 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2024-39573 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2024-42516 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2024-43204 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2024-47252 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2025-49630 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2025-53020 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2025-55753 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2025-59775 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-29169 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-34059 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-34355 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-34356 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-42536 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-49975 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-59685 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-63045 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-63292 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-63686 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2026-63718 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2025-49812 HIGH 7.4 http_server 2.4.58 · port 80
CVE-2023-38709 HIGH 7.3 http_server 2.4.58 · port 80
CVE-2026-29168 HIGH 7.3 http_server 2.4.58 · port 80
CVE-2026-44185 HIGH 7.3 http_server 2.4.58 · port 80
CVE-2026-44186 HIGH 7.3 http_server 2.4.58 · port 80
CVE-2026-48913 HIGH 7.3 http_server 2.4.58 · port 80
CVE-2026-73637 HIGH 7.3 http_server 2.4.58 · port 80
CVE-2025-65082 MEDIUM 6.5 http_server 2.4.58 · port 80
CVE-2026-33523 MEDIUM 6.5 http_server 2.4.58 · port 80
CVE-2026-43951 MEDIUM 6.5 http_server 2.4.58 · port 80
CVE-2024-24795 MEDIUM 6.3 http_server 2.4.58 · port 80
CVE-2026-29170 MEDIUM 6.1 http_server 2.4.58 · port 80
CVE-2026-44119 MEDIUM 5.5 http_server 2.4.58 · port 80
CVE-2024-36387 MEDIUM 5.4 http_server 2.4.58 · port 80
CVE-2025-66200 MEDIUM 5.4 http_server 2.4.58 · port 80
CVE-2026-33007 MEDIUM 5.3 http_server 2.4.58 · port 80
CVE-2026-33857 MEDIUM 5.3 http_server 2.4.58 · port 80
CVE-2026-34032 MEDIUM 5.3 http_server 2.4.58 · port 80
CVE-2026-58415 MEDIUM 5.3 http_server 2.4.58 · port 80
CVE-2026-79768 MEDIUM 5.3 http_server 2.4.58 · port 80
CVE-2026-33006 MEDIUM 4.8 http_server 2.4.58 · port 80
Only affects another platform (2)

These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.

CVEs by severity: HIGH 2

CVESoftware
CVE-2024-40898 HIGH 7.5 http_server 2.4.58 · port 80
CVE-2024-43394 HIGH 7.5 http_server 2.4.58 · port 80

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.