- Server
- SSH-2.0-OpenSSH_8.3p1 Ubuntu-1
- Host key
- ssh-ed25519 f6a73be5fa67ef02…
Raw response
SSH-2.0-OpenSSH_8.3p1 Ubuntu-1
Host
Tags: Hosting Expired certificate
As of our latest check on 2026-06-08, 213.239.198.2 (Hetzner Online GmbH, AS24940, Germany) had 3 open ports (22, 80, 443) and 93 known CVEs, 2 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-06-08.
CVEs by severity: CRITICAL 22 HIGH 51 MEDIUM 19 LOW 1
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 39 on a distribution build — the fix may be backported (openssh 8.3p1). See them
Not counted: 4 only affect another platform (http_server 2.4.46). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
SSH-2.0-OpenSSH_8.3p1 Ubuntu-1
HTTP/1.1 200 OK
Date: Mon, 08 Jun 2026 04:32:09 GMT
Server: Apache/2.4.46 (Ubuntu)
Last-Modified: Sun, 04 May 2025 12:20:23 GMT
ETag: "e8a-6344e68636491-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1335
Content-Type: text/html
��W�n�6}��b�y�$�i��Ѫu�0�6n�"�SAI#� E*$���S���/鐒V{�A����g������篯��ݼ��6"=I�?LV�e�:�� �_Ҡe��L��������`{H�����U��+iQ��/l�(p�s��#��[�Dhr&pq��lU��5o-Wrk��J4�:��%Z���h,�0Y���;���ڝl�Ԫ�_D�����ax<�r+0����ީN�
�V��RQ{�Ի��$�7�7\~�b�hjD
H��\�����㼐�M���`�\51{��c�3��7d+4�����It���L���2�v����ar��L2U����u��;xS���"��HU���ULP����ƃ����A�ܳ�m����X��i�KchjC�7I�nm#�r��=l�����...<truncated>
HTTP/1.1 400 Bad Request Date: Mon, 08 Jun 2026 04:32:09 GMT Server: Apache/2.4.46 (Ubuntu) Content-Length: 451 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> </p> <hr> <address>Apache/2.4.46 (Ubuntu) Server at www.bluebox-security.de Port 80</address> </body></html>
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: CRITICAL 1 HIGH 10 MEDIUM 16 LOW 12
| CVE | Software |
|---|---|
| CVE-2023-38408 CRITICAL 9.8 | openssh 8.3p1 · port 22 |
| CVE-2026-35385 HIGH 8.1 | openssh 8.3p1 · port 22 |
| CVE-2026-35414 HIGH 8.1 | openssh 8.3p1 · port 22 |
| CVE-2026-106583 HIGH 7.8 | openssh 8.3p1 · port 22 |
| CVE-2026-60002 HIGH 7.7 | openssh 8.3p1 · port 22 |
| CVE-2026-106553 HIGH 7.5 | openssh 8.3p1 · port 22 |
| CVE-2026-106555 HIGH 7.5 | openssh 8.3p1 · port 22 |
| CVE-2026-60000 HIGH 7.5 | openssh 8.3p1 · port 22 |
| CVE-2020-15778 HIGH 7.4 | openssh 8.3p1 · port 22 |
| CVE-2021-28041 HIGH 7.1 | openssh 8.3p1 · port 22 |
| CVE-2021-41617 HIGH 7.0 | openssh 8.3p1 · port 22 |
| CVE-2025-26465 MEDIUM 6.8 | openssh 8.3p1 · port 22 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 8.3p1 · port 22 |
| CVE-2026-106552 MEDIUM 6.5 | openssh 8.3p1 · port 22 |
| CVE-2026-106585 MEDIUM 6.5 | openssh 8.3p1 · port 22 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 8.3p1 · port 22 |
| CVE-2026-59998 MEDIUM 6.5 | openssh 8.3p1 · port 22 |
| CVE-2026-60001 MEDIUM 6.5 | openssh 8.3p1 · port 22 |
| CVE-2020-14145 MEDIUM 5.9 | openssh 8.3p1 · port 22 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 8.3p1 · port 22 |
| CVE-2026-59999 MEDIUM 5.9 | openssh 8.3p1 · port 22 |
| CVE-2026-59995 MEDIUM 5.4 | openssh 8.3p1 · port 22 |
| CVE-2026-59996 MEDIUM 5.4 | openssh 8.3p1 · port 22 |
| CVE-2026-59997 MEDIUM 5.4 | openssh 8.3p1 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 8.3p1 · port 22 |
| CVE-2026-73282 MEDIUM 4.8 | openssh 8.3p1 · port 22 |
| CVE-2026-106586 MEDIUM 4.3 | openssh 8.3p1 · port 22 |
| CVE-2025-32728 LOW 3.8 | openssh 8.3p1 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 8.3p1 · port 22 |
| CVE-2026-106582 LOW 3.7 | openssh 8.3p1 · port 22 |
| CVE-2025-61984 LOW 3.6 | openssh 8.3p1 · port 22 |
| CVE-2025-61985 LOW 3.6 | openssh 8.3p1 · port 22 |
| CVE-2026-73281 LOW 3.5 | openssh 8.3p1 · port 22 |
| CVE-2026-106584 LOW 3.3 | openssh 8.3p1 · port 22 |
| CVE-2026-106587 LOW 3.3 | openssh 8.3p1 · port 22 |
| CVE-2026-106588 LOW 3.1 | openssh 8.3p1 · port 22 |
| CVE-2026-106589 LOW 2.9 | openssh 8.3p1 · port 22 |
| CVE-2026-35388 LOW 2.5 | openssh 8.3p1 · port 22 |
| CVE-2026-73283 LOW 2.5 | openssh 8.3p1 · port 22 |
These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.
CVEs by severity: HIGH 2 MEDIUM 2
| CVE | Software |
|---|---|
| CVE-2024-40898 HIGH 7.5 | http_server 2.4.46 · port 80 |
| CVE-2024-43394 HIGH 7.5 | http_server 2.4.46 · port 80 |
| CVE-2020-13938 MEDIUM 5.5 | http_server 2.4.46 · port 80 |
| CVE-2022-28330 MEDIUM 5.3 | http_server 2.4.46 · port 80 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.