OSN

Host

217.128.150.4

Tags: Self-signed certificate End-of-life software

As of our latest check on 2026-06-08, 217.128.150.4 (Orange S.A., AS3215, France) had 3 open ports (22, 80, 443) and 90 known CVEs.

Known CVEs on this host

3open ports
0names pointing here
90known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-08.

CVEs by severity: CRITICAL 8 HIGH 33 MEDIUM 40 LOW 9

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 204 on a distribution build — the fix may be backported (php 5.4.4). See them

Not counted: 4 fixed by the distribution (openssh 6.0p1). See them

Not counted: 2 only affect another platform (php 5.4.4). See them

Network
Orange S.A. AS3215
Open ports
22, 80, 443 · at our latest check, 2026-06-08
Location
France FR
Hostname
217-128-150-4.ftth.fr.orangecustomers.net · reverse DNS, checked 2026-10-05
Route
217.128.0.0/16 · announced by Orange S.A. AS3215 RPKI valid
Organisation
Orange S.A. · Access network (cable / DSL / ISP)
Registry network
IP2000-ADSL-BAS · 217.128.150.0 - 217.128.150.255 · RIPE
Abuse contact
[email protected] · for IP2000-ADSL-BAS
First seen
2026-06-08 22:28 UTC
Last seen alive
2026-06-08 22:28 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (3)

22/tcp SSH OpenSSH_6.0p1 58 CVEs first 2026-06-08 · last 2026-06-08
Server
SSH-2.0-OpenSSH_6.0p1 Debian-4
Host key
ssh-rsa 9efe3e78a5b1322e…
Raw response 
SSH-2.0-OpenSSH_6.0p1 Debian-4
80/tcp HTTP lighttpd/1.4.31 32 CVEs first 2026-06-08 · last 2026-06-08
Status
302 Found
Server
lighttpd/1.4.31
Powered by
PHP/5.4.4-14+deb7u2
Raw response 
HTTP/1.1 302 Found
X-Powered-By: PHP/5.4.4-14+deb7u2
Set-Cookie: VIEWBOXSESSID=ipivml57h498h3vjafh9tth5i1; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: /login.php
Content-type: text/html
Content-Length: 0
Date: Mon, 08 Jun 2026 22:28:09 GMT
Server: lighttpd/1.4.31
443/tcp TLS first 2026-06-08 · last 2026-06-08
TLS
TLSv1.2
Certificate for
usg20-vpn_BCCF4FEA38CF
Issued by
usg20-vpn_BCCF4FEA38CF
Valid
2021-01-16 → 2031-01-14
Note
self-signed certificate
Raw response 
HTTP/1.1 400 Bad Request
Date: Mon, 08 Jun 2026 22:28:10 GMT
Content-Length: 362
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
 Instead use the HTTPS scheme to access this URL, please.<br />
</p>
</body></html>

Vulnerabilities

Distribution build — the fix may be backported (204)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.

CVEs by severity: CRITICAL 54 HIGH 85 MEDIUM 62 LOW 3

CVESoftware
CVE-2012-2688 HIGH 10.0 php 5.4.4 · port 80
CVE-2015-0235 HIGH 10.0 php 5.4.4 · port 80
CVE-2014-9912 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-4116 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-4599 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-4600 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-4601 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-4602 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-4603 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-4643 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-5589 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-6834 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-6835 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-8835 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2015-8876 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-2554 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-3141 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-4537 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-4538 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-4539 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-4540 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-4541 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-4542 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-4543 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-5768 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-5769 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-5770 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-5771 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-5772 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-5773 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-6288 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-6290 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-6291 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-6294 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-6295 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-6296 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-7124 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-7126 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-7127 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-7129 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-7411 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-7413 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-7414 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-7417 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-9137 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-9138 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-9935 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2017-12933 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2017-8923 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2017-9224 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2017-9225 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2017-9226 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2018-7584 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2016-1903 CRITICAL 9.1 php 5.4.4 · port 80
CVE-2016-5114 CRITICAL 9.1 php 5.4.4 · port 80
CVE-2017-11147 CRITICAL 9.1 php 5.4.4 · port 80
CVE-2016-4342 HIGH 8.8 php 5.4.4 · port 80
CVE-2016-4343 HIGH 8.8 php 5.4.4 · port 80
CVE-2016-6297 HIGH 8.8 php 5.4.4 · port 80
CVE-2018-10549 HIGH 8.8 php 5.4.4 · port 80
CVE-2016-5093 HIGH 8.6 php 5.4.4 · port 80
CVE-2016-5094 HIGH 8.6 php 5.4.4 · port 80
CVE-2016-5095 HIGH 8.6 php 5.4.4 · port 80
CVE-2016-5096 HIGH 8.6 php 5.4.4 · port 80
CVE-2016-3142 HIGH 8.2 php 5.4.4 · port 80
CVE-2016-6174 HIGH 8.1 php 5.4.4 · port 80
CVE-2016-7412 HIGH 8.1 php 5.4.4 · port 80
CVE-2016-5399 HIGH 7.8 php 5.4.4 · port 80
CVE-2016-6289 HIGH 7.8 php 5.4.4 · port 80
CVE-2017-11628 HIGH 7.8 php 5.4.4 · port 80
CVE-2013-1635 HIGH 7.5 php 5.4.4 · port 80
CVE-2013-3735 HIGH 7.5 php 5.4.4 · port 80
CVE-2013-6420 HIGH 7.5 php 5.4.4 · port 80
CVE-2014-0236 HIGH 7.5 php 5.4.4 · port 80
CVE-2014-3515 HIGH 7.5 php 5.4.4 · port 80
CVE-2014-3669 HIGH 7.5 php 5.4.4 · port 80
CVE-2014-8142 HIGH 7.5 php 5.4.4 · port 80
CVE-2014-9425 HIGH 7.5 php 5.4.4 · port 80
CVE-2014-9653 HIGH 7.5 php 5.4.4 · port 80
CVE-2014-9705 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-0231 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-0273 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-1351 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-2301 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-2331 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-2787 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-3307 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-3329 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-3414 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-3415 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-3416 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-4022 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-4025 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-4026 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-4147 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-4604 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-4605 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-4644 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-6833 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-6837 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-6838 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-8867 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-8873 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-8874 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-8877 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-8879 HIGH 7.5 php 5.4.4 · port 80
CVE-2015-8994 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-10158 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-10159 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-10161 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-10397 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-10712 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-4070 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-7125 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-7130 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-7131 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-7132 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-7416 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-7418 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-7478 HIGH 7.5 php 5.4.4 · port 80
CVE-2016-9934 HIGH 7.5 php 5.4.4 · port 80
CVE-2017-11142 HIGH 7.5 php 5.4.4 · port 80
CVE-2017-11143 HIGH 7.5 php 5.4.4 · port 80
CVE-2017-11144 HIGH 7.5 php 5.4.4 · port 80
CVE-2017-11145 HIGH 7.5 php 5.4.4 · port 80
CVE-2017-16642 HIGH 7.5 php 5.4.4 · port 80
CVE-2017-7963 HIGH 7.5 php 5.4.4 · port 80
CVE-2017-9229 HIGH 7.5 php 5.4.4 · port 80
CVE-2018-10546 HIGH 7.5 php 5.4.4 · port 80
CVE-2018-10548 HIGH 7.5 php 5.4.4 · port 80
CVE-2017-7272 HIGH 7.4 php 5.4.4 · port 80
CVE-2014-9426 HIGH 7.3 php 5.4.4 · port 80
CVE-2015-5590 HIGH 7.3 php 5.4.4 · port 80
CVE-2015-6831 HIGH 7.3 php 5.4.4 · port 80
CVE-2015-6832 HIGH 7.3 php 5.4.4 · port 80
CVE-2015-6836 HIGH 7.3 php 5.4.4 · port 80
CVE-2015-8865 HIGH 7.3 php 5.4.4 · port 80
CVE-2014-0185 HIGH 7.2 php 5.4.4 · port 80
CVE-2016-3185 HIGH 7.1 php 5.4.4 · port 80
CVE-2011-4718 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2013-4113 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2013-7327 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2014-3597 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2014-3670 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2015-0232 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2015-2305 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2015-3330 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2015-7803 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2015-7804 MEDIUM 6.8 php 5.4.4 · port 80
CVE-2014-0207 MEDIUM 6.5 php 5.4.4 · port 80
CVE-2014-3478 MEDIUM 6.5 php 5.4.4 · port 80
CVE-2014-3480 MEDIUM 6.5 php 5.4.4 · port 80
CVE-2015-3411 MEDIUM 6.5 php 5.4.4 · port 80
CVE-2015-4598 MEDIUM 6.5 php 5.4.4 · port 80
CVE-2015-9253 MEDIUM 6.5 php 5.4.4 · port 80
CVE-2016-6292 MEDIUM 6.5 php 5.4.4 · port 80
CVE-2017-7890 MEDIUM 6.5 php 5.4.4 · port 80
CVE-2014-5120 MEDIUM 6.4 php 5.4.4 · port 80
CVE-2015-8935 MEDIUM 6.1 php 5.4.4 · port 80
CVE-2018-10547 MEDIUM 6.1 php 5.4.4 · port 80
CVE-2018-5712 MEDIUM 6.1 php 5.4.4 · port 80
CVE-2015-3152 MEDIUM 5.9 php 5.4.4 · port 80
CVE-2015-8838 MEDIUM 5.9 php 5.4.4 · port 80
CVE-2015-2783 MEDIUM 5.8 php 5.4.4 · port 80
CVE-2018-5711 MEDIUM 5.5 php 5.4.4 · port 80
CVE-2015-3412 MEDIUM 5.3 php 5.4.4 · port 80
CVE-2016-7128 MEDIUM 5.3 php 5.4.4 · port 80
CVE-2014-4049 MEDIUM 5.1 php 5.4.4 · port 80
CVE-2012-1171 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2013-1643 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2013-2110 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2013-4635 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2013-6712 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2013-7345 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2014-0237 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2014-0238 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2014-1943 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2014-2020 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2014-3538 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2014-3668 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2014-3710 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2014-9652 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2014-9709 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2015-1352 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2015-2348 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2015-4021 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2015-4024 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2015-4148 MEDIUM 5.0 php 5.4.4 · port 80
CVE-2018-10545 MEDIUM 4.7 php 5.4.4 · port 80
CVE-2013-6501 MEDIUM 4.6 php 5.4.4 · port 80
CVE-2014-4670 MEDIUM 4.6 php 5.4.4 · port 80
CVE-2014-4698 MEDIUM 4.6 php 5.4.4 · port 80
CVE-2013-1824 MEDIUM 4.3 php 5.4.4 · port 80
CVE-2013-4248 MEDIUM 4.3 php 5.4.4 · port 80
CVE-2013-4636 MEDIUM 4.3 php 5.4.4 · port 80
CVE-2014-2270 MEDIUM 4.3 php 5.4.4 · port 80
CVE-2014-2497 MEDIUM 4.3 php 5.4.4 · port 80
CVE-2014-3479 MEDIUM 4.3 php 5.4.4 · port 80
CVE-2014-3487 MEDIUM 4.3 php 5.4.4 · port 80
CVE-2014-3587 MEDIUM 4.3 php 5.4.4 · port 80

Showing the first 200 of 204.

Fixed by the distribution (4)

The distribution's security data says the package revision this service shows already has the fix for these CVEs, or that its build is not affected. They are not counted.

CVEs by severity: HIGH 2 LOW 2

CVESoftware
CVE-2010-5107 HIGH 7.5 openssh 6.0p1 · port 22
CVE-2014-1692 HIGH 7.3 openssh 6.0p1 · port 22
CVE-2026-106588 LOW 3.1 openssh 6.0p1 · port 22
CVE-2026-106589 LOW 2.9 openssh 6.0p1 · port 22
Only affects another platform (2)

These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.

CVEs by severity: CRITICAL 2

CVESoftware
CVE-2015-4642 CRITICAL 9.8 php 5.4.4 · port 80
CVE-2024-3566 CRITICAL 9.8 php 5.4.4 · port 80

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Report an issue with this page