Raw response
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.15
Host
Tags: Expired certificate
As of our latest check on 2026-06-08, 217.22.25.239 (MOJOHOST B.V., AS42567, Netherlands) had 3 open ports (22, 80, 443) and 30 known CVEs.
Open ports and CVEs as of our latest check of this host, 2026-06-08.
CVEs by severity: CRITICAL 3 HIGH 15 MEDIUM 6 LOW 6
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 86 on a distribution build — the fix may be backported (http_server 2.4.52, openssh 8.9p1). See them
Not counted: 3 only affect another platform (http_server 2.4.52). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.15
HTTP/1.1 200 OK
Date: Mon, 08 Jun 2026 05:17:47 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 24 Jan 2025 16:05:37 GMT
ETag: "29af-62c75e5b9139e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3121
Content-Type: text/html
��Z�s۸������%�DJr��Y3ۙ�L���N���B$(�����{w��K���i��"�}a��y���O��?�\���
r����/�`��<�ë�+��w�ޓI0&����.S*���o2����p����@�ux�1���&x��:2��Al���da~ފT_t������Ӱ���7���A�<�,&��[b6�\��)���9�'�T��*OMn��ڐ<��a��L���h|:�N����d����ym2)3�*_k���l<~ {G#+Ɔ�xi�.��P{v��������L
K��v���ܧ��a�M���&ц*��ŧ۷�ـ����F���6l�e��Cn�d�ѐ�T�z����6{��~�M���lY���@G���Z����R6��q���...<truncated>
HTTP/1.1 400 Bad Request Date: Mon, 08 Jun 2026 05:17:47 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 447 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> </p> <hr> <address>Apache/2.4.52 (Ubuntu) Server at v4-api.karbondx.com Port 80</address> </body></html>
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.
CVEs by severity: CRITICAL 17 HIGH 37 MEDIUM 26 LOW 6
| CVE | Software |
|---|---|
| CVE-2024-38475 CRITICAL 9.1 known exploited | http_server 2.4.52 · port 80 |
| CVE-2022-22720 CRITICAL 9.8 | http_server 2.4.52 · port 80 |
| CVE-2022-23943 CRITICAL 9.8 | http_server 2.4.52 · port 80 |
| CVE-2022-31813 CRITICAL 9.8 | http_server 2.4.52 · port 80 |
| CVE-2023-25690 CRITICAL 9.8 | http_server 2.4.52 · port 80 |
| CVE-2023-28531 CRITICAL 9.8 | openssh 8.9p1 · port 22 |
| CVE-2023-38408 CRITICAL 9.8 | openssh 8.9p1 · port 22 |
| CVE-2024-38474 CRITICAL 9.8 | http_server 2.4.52 · port 80 |
| CVE-2024-38476 CRITICAL 9.8 | http_server 2.4.52 · port 80 |
| CVE-2026-28780 CRITICAL 9.8 | http_server 2.4.52 · port 80 |
| CVE-2026-29167 CRITICAL 9.8 | http_server 2.4.52 · port 80 |
| CVE-2026-44631 CRITICAL 9.8 | http_server 2.4.52 · port 80 |
| CVE-2022-22721 CRITICAL 9.1 | http_server 2.4.52 · port 80 |
| CVE-2022-28615 CRITICAL 9.1 | http_server 2.4.52 · port 80 |
| CVE-2025-23048 CRITICAL 9.1 | http_server 2.4.52 · port 80 |
| CVE-2026-42535 CRITICAL 9.1 | http_server 2.4.52 · port 80 |
| CVE-2022-36760 CRITICAL 9.0 | http_server 2.4.52 · port 80 |
| CVE-2026-24072 HIGH 8.8 | http_server 2.4.52 · port 80 |
| CVE-2025-58098 HIGH 8.3 | http_server 2.4.52 · port 80 |
| CVE-2024-38473 HIGH 8.1 | http_server 2.4.52 · port 80 |
| CVE-2024-6387 HIGH 8.1 | openssh 8.9p1 · port 22 |
| CVE-2026-35385 HIGH 8.1 | openssh 8.9p1 · port 22 |
| CVE-2026-35414 HIGH 8.1 | openssh 8.9p1 · port 22 |
| CVE-2026-60002 HIGH 7.7 | openssh 8.9p1 · port 22 |
| CVE-2006-20001 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2022-22719 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2022-26377 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2022-29404 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2022-30556 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2023-27522 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2023-31122 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2024-27316 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2024-38472 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2024-38477 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2024-39573 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2024-42516 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2024-43204 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2024-47252 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2025-49630 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2025-53020 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2025-55753 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2025-59775 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2026-29169 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2026-34059 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2026-34355 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2026-34356 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2026-42536 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2026-49975 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2026-60000 HIGH 7.5 | openssh 8.9p1 · port 22 |
| CVE-2025-49812 HIGH 7.4 | http_server 2.4.52 · port 80 |
| CVE-2023-38709 HIGH 7.3 | http_server 2.4.52 · port 80 |
| CVE-2026-29168 HIGH 7.3 | http_server 2.4.52 · port 80 |
| CVE-2026-44185 HIGH 7.3 | http_server 2.4.52 · port 80 |
| CVE-2026-44186 HIGH 7.3 | http_server 2.4.52 · port 80 |
| CVE-2025-26465 MEDIUM 6.8 | openssh 8.9p1 · port 22 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 8.9p1 · port 22 |
| CVE-2025-65082 MEDIUM 6.5 | http_server 2.4.52 · port 80 |
| CVE-2026-33523 MEDIUM 6.5 | http_server 2.4.52 · port 80 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 8.9p1 · port 22 |
| CVE-2026-43951 MEDIUM 6.5 | http_server 2.4.52 · port 80 |
| CVE-2026-59998 MEDIUM 6.5 | openssh 8.9p1 · port 22 |
| CVE-2026-60001 MEDIUM 6.5 | openssh 8.9p1 · port 22 |
| CVE-2024-24795 MEDIUM 6.3 | http_server 2.4.52 · port 80 |
| CVE-2026-29170 MEDIUM 6.1 | http_server 2.4.52 · port 80 |
| CVE-2023-45802 MEDIUM 5.9 | http_server 2.4.52 · port 80 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 8.9p1 · port 22 |
| CVE-2026-59999 MEDIUM 5.9 | openssh 8.9p1 · port 22 |
| CVE-2023-51384 MEDIUM 5.5 | openssh 8.9p1 · port 22 |
| CVE-2026-44119 MEDIUM 5.5 | http_server 2.4.52 · port 80 |
| CVE-2025-66200 MEDIUM 5.4 | http_server 2.4.52 · port 80 |
| CVE-2026-59995 MEDIUM 5.4 | openssh 8.9p1 · port 22 |
| CVE-2026-59996 MEDIUM 5.4 | openssh 8.9p1 · port 22 |
| CVE-2026-59997 MEDIUM 5.4 | openssh 8.9p1 · port 22 |
| CVE-2022-28614 MEDIUM 5.3 | http_server 2.4.52 · port 80 |
| CVE-2022-37436 MEDIUM 5.3 | http_server 2.4.52 · port 80 |
| CVE-2026-33007 MEDIUM 5.3 | http_server 2.4.52 · port 80 |
| CVE-2026-33857 MEDIUM 5.3 | http_server 2.4.52 · port 80 |
| CVE-2026-34032 MEDIUM 5.3 | http_server 2.4.52 · port 80 |
| CVE-2026-33006 MEDIUM 4.8 | http_server 2.4.52 · port 80 |
| CVE-2026-73282 MEDIUM 4.8 | openssh 8.9p1 · port 22 |
| CVE-2025-32728 LOW 3.8 | openssh 8.9p1 · port 22 |
| CVE-2025-61984 LOW 3.6 | openssh 8.9p1 · port 22 |
| CVE-2025-61985 LOW 3.6 | openssh 8.9p1 · port 22 |
| CVE-2026-73281 LOW 3.5 | openssh 8.9p1 · port 22 |
| CVE-2026-35388 LOW 2.5 | openssh 8.9p1 · port 22 |
| CVE-2026-73283 LOW 2.5 | openssh 8.9p1 · port 22 |
These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.
CVEs by severity: HIGH 2 MEDIUM 1
| CVE | Software |
|---|---|
| CVE-2024-40898 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2024-43394 HIGH 7.5 | http_server 2.4.52 · port 80 |
| CVE-2022-28330 MEDIUM 5.3 | http_server 2.4.52 · port 80 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.