22/tcp
SSH
OpenSSH_8.7
first 2026-06-08 · last 2026-06-08
- Server
- SSH-2.0-OpenSSH_8.7
- Host key
- ssh-ed25519 ece46c90d390fea2…
Raw response
SSH-2.0-OpenSSH_8.7
Host
217.76.55.248
Tags: Hosting Expired certificate
As of our latest check on 2026-06-08, 217.76.55.248 (Contabo GmbH, AS51167, Germany) had 3 open ports (22, 80, 443) and 2 known CVEs.
Known CVEs on this host
3open ports
0names pointing here
2known CVEs
0known exploited
Open ports and CVEs as of our latest check of this host, 2026-06-08.
CVEs by severity: MEDIUM 2
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 37 on a distribution build — the fix may be backported (openssh 8.7). See them
Not counted: 1 only affects another platform (php 7.4.33). See them
- Network
- Contabo GmbH AS51167
- Open ports
- 22, 80, 443 · at our latest check, 2026-06-08
- Location
- Germany DE
- Hostname
- vmi2824043.contaboserver.net · reverse DNS, checked 2026-10-05
- Route
- 217.76.48.0/20 · announced by Contabo GmbH AS51167 RPKI valid
- Organisation
- Contabo Group · Content / hosting
- Registry network
- TT-20221122 · 217.76.48.0 - 217.76.55.255 · RIPE
- Abuse contact
- [email protected] · for TT-20221122
- First seen
- 2026-06-08 09:00 UTC
- Last seen alive
- 2026-06-08 09:01 UTC
- Hosted domains
- No host name points here
Reputation
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
Services (3)
- Status
- 302 Found
- Title
- Redirecting to http://217.76.55.248/authentication/create
- Server
- Apache
- Powered by
- PHP/7.4.33
Raw response
HTTP/1.1 302 Found Date: Mon, 08 Jun 2026 09:00:25 GMT Server: Apache X-Powered-By: PHP/7.4.33 Cache-Control: no-cache, private X-Refresh-Token: 1e64ca0efc186a999096ffd89e9b1dca Set-Cookie: XSRF-TOKEN=eyJpdiI6InlYZ0RFekZqaW5VNjg5ZHpGSnc1SlE9PSIsInZhbHVlIjoiVU1qUnZYWW4zcEVMU0VnSmpISDF5UDhKNDJ5Uk45bnNvQyt2Zi9jcERQNlpKd1o2ZDE3MTVDVzNIZkJrblMwVTZjK3RRQlE3Wlg5MzJSdXdrb1lQVm92VkZ4QVZGd3FZT0lrNy93UWNtZnRMSndrQWZvZkN4MFRqeUE3dzk0bjEiLCJtYWMiOiI3NzM5ZGI0MmQ2NTUwMTc0MzllMTE4MmIxOGU5ODFkZGEzOGU5YWFmNjAzMzk4MzcyMmQ4NWVhMDBlZDNjYTAwIiwidGFnIjoiIn0%3D; expires=Mon, 08-Jun-2026 11:00:25 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: laravel_session=eyJpdiI6Im9DaXBBS3VEQ1M3ZzlEd003Q1FCWHc9PSIsInZhbHVlIjoiZ0hhaXpYVkFodmFwM1pOWDRhVWhPdDhTSWQzK3lhVmJvcU8zMEJNSjArblQrdnpHcFJxYTBGRnRvRGpmZXEvdzNySWV4ajB6clV1ampIOWZOeHR4NS96OThNOGZjdDkxcHJ5N3VzeUdJcFpnc3VtTDZHSHFzZVFKV1gyRG1xKzYiLCJtYWMiOiJmMDExODJjMDhiNGUwMTk2ZWVhNTE4MTQ3MzFiNWIxNTM3NzA1M2MwNTg4MjIyMGVkYjdmNmMyNzhk
443/tcp
TLS
first 2026-06-08 · last 2026-06-08
- TLS
- TLSv1.2
- Certificate for
- acesso2.attracker.com.br
- Issued by
- YE1
- Valid
- 2026-06-05 → 2026-09-03
Raw response
HTTP/1.1 400 Bad Request Date: Mon, 08 Jun 2026 09:00:25 GMT Server: Apache Content-Length: 362 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> </p> </body></html>
Vulnerabilities
Distribution build — the fix may be backported (37)
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: CRITICAL 1 HIGH 9 MEDIUM 15 LOW 12
| CVE | Software |
|---|---|
| CVE-2023-38408 CRITICAL 9.8 | openssh 8.7 · port 22 |
| CVE-2024-6387 HIGH 8.1 | openssh 8.7 · port 22 |
| CVE-2026-35385 HIGH 8.1 | openssh 8.7 · port 22 |
| CVE-2026-35414 HIGH 8.1 | openssh 8.7 · port 22 |
| CVE-2026-106583 HIGH 7.8 | openssh 8.7 · port 22 |
| CVE-2026-60002 HIGH 7.7 | openssh 8.7 · port 22 |
| CVE-2026-106553 HIGH 7.5 | openssh 8.7 · port 22 |
| CVE-2026-106555 HIGH 7.5 | openssh 8.7 · port 22 |
| CVE-2026-60000 HIGH 7.5 | openssh 8.7 · port 22 |
| CVE-2021-41617 HIGH 7.0 | openssh 8.7 · port 22 |
| CVE-2025-26465 MEDIUM 6.8 | openssh 8.7 · port 22 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-106552 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-106585 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-59998 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-60001 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 8.7 · port 22 |
| CVE-2026-59999 MEDIUM 5.9 | openssh 8.7 · port 22 |
| CVE-2026-59995 MEDIUM 5.4 | openssh 8.7 · port 22 |
| CVE-2026-59996 MEDIUM 5.4 | openssh 8.7 · port 22 |
| CVE-2026-59997 MEDIUM 5.4 | openssh 8.7 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 8.7 · port 22 |
| CVE-2026-73282 MEDIUM 4.8 | openssh 8.7 · port 22 |
| CVE-2026-106586 MEDIUM 4.3 | openssh 8.7 · port 22 |
| CVE-2025-32728 LOW 3.8 | openssh 8.7 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 8.7 · port 22 |
| CVE-2026-106582 LOW 3.7 | openssh 8.7 · port 22 |
| CVE-2025-61984 LOW 3.6 | openssh 8.7 · port 22 |
| CVE-2025-61985 LOW 3.6 | openssh 8.7 · port 22 |
| CVE-2026-73281 LOW 3.5 | openssh 8.7 · port 22 |
| CVE-2026-106584 LOW 3.3 | openssh 8.7 · port 22 |
| CVE-2026-106587 LOW 3.3 | openssh 8.7 · port 22 |
| CVE-2026-106588 LOW 3.1 | openssh 8.7 · port 22 |
| CVE-2026-106589 LOW 2.9 | openssh 8.7 · port 22 |
| CVE-2026-35388 LOW 2.5 | openssh 8.7 · port 22 |
| CVE-2026-73283 LOW 2.5 | openssh 8.7 · port 22 |
Only affects another platform (1)
These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.
CVEs by severity: CRITICAL 1
| CVE | Software |
|---|---|
| CVE-2024-3566 CRITICAL 9.8 | php 7.4.33 · port 80 |
Port history
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.