Host

45.138.157.99

Tags: Expired certificate

As of our latest check on 2026-06-27, 45.138.157.99 (UFO Hosting LLC, AS33993, Russia) had 4 open ports (22, 80, 443, 8080) and 53 known CVEs, 2 known to be exploited.

Known CVEs on this host

4open ports
0names pointing here
53known CVEs
2known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-27.

CVEs by severity: CRITICAL 6 HIGH 18 MEDIUM 23 LOW 6

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 76 on a distribution build — the fix may be backported (http_server 2.4.54, nginx 1.18.0, openssh 8.9p1). See them

Not counted: 1 only affects a particular platform; this host's is not known (php 8.1.13). See them

Not counted: 17 fixed by the distribution (openssh 8.9p1, http_server 2.4.54). See them

Not counted: 4 only affect another platform (http_server 2.4.54, php 8.1.13). See them

Network
UFO Hosting LLC AS33993
Open ports
22, 80, 443, 8080 · at our latest check, 2026-06-27
Location
Russia RU
Route
45.138.157.0/24 · announced by JSC Mediasoft ekspert AS48347 RPKI valid
Organisation
JSC MTW.RU · Network service provider (transit)
Registry network
BNK-MSK-RU-RUVDS · 45.138.157.0 - 45.138.157.255 · RIPE
Abuse contact
[email protected] · for BNK-MSK-RU-RUVDS
First seen
2026-06-27 16:42 UTC
Last seen alive
2026-06-27 16:45 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (4)

22/tcp SSH OpenSSH_8.9p1 20 CVEs first 2026-06-27 · last 2026-06-27
Server
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.15
Host key
ssh-ed25519 8fa1be509f8b0705…
Raw response
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.15
80/tcp HTTP nginx/1.18.0 (Ubuntu) first 2026-06-27 · last 2026-06-27
Status
404 Not Found
Title
404 Not Found
Server
nginx/1.18.0 (Ubuntu)
Raw response
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 27 Jun 2026 16:42:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip

ba
���1�0�w��pn:�i��C�"
��? ��6�^$�`���� Ύ���{��SMl���TC��6:�e^��G���Qɷ��Ih��,�HA���v$E��=d'h�����EV������ح>Y9�˩�B0p3��k���M���#l��[�k���z�|H��@���?��[<*�I54
0
443/tcp TLS first 2026-06-27 · last 2026-06-27
TLS
TLSv1.2
Certificate for
books.winvan.ru
Issued by
R13
Valid
2026-05-03 → 2026-08-01
Raw response
HTTP/1.1 400 Bad Request
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 27 Jun 2026 16:42:27 GMT
Content-Type: text/html
Content-Length: 666
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
8080/tcp HTTP Apache/2.4.54 (Debian) 33 CVEs first 2026-06-27 · last 2026-06-27
Status
400 Bad Request
Title
Nextcloud
Server
Apache/2.4.54 (Debian)
Powered by
PHP/8.1.13
Raw response
HTTP/1.1 400 Bad Request
Date: Sat, 27 Jun 2026 16:42:27 GMT
Server: Apache/2.4.54 (Debian)
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP/8.1.13
Set-Cookie: ocfetkh1wqhb=1d2e6356a0d901f97805afc414a939d8; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: oc_sessionPassphrase=jZRw5NS%2BQTqLsVBrFmAxrvwvCODUckCiDNQvZz2TGyVRq4iTIoQ9PvYETTIRVLQSa02MbBa6FYCeqtWhxhWtshp7pYu10wa%2B8KoG2B1uTFc6aZjBHLBIeZpVNw1yJRF2; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: ocfetkh1wqhb=7571db7b0acd3e9c1dd49ce47385317c; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: ocfetkh1wqhb=7571db7b0acd3e9c1dd49ce47385317c; path=/; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: default-src 'self'; scri

Vulnerabilities

Distribution build — the fix may be backported (76)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 3 of them are known to be exploited.

CVEs by severity: CRITICAL 13 HIGH 43 MEDIUM 17 LOW 3

CVESoftware
CVE-2024-38475 CRITICAL 9.1 known exploited http_server 2.4.54 · port 8080
CVE-2026-123158 HIGH 8.1 known exploited openssh 8.9p1 · port 22
CVE-2023-44487 HIGH 7.5 known exploited nginx 1.18.0 · port 80
CVE-2023-25690 CRITICAL 9.8 http_server 2.4.54 · port 8080
CVE-2024-38474 CRITICAL 9.8 http_server 2.4.54 · port 8080
CVE-2024-38476 CRITICAL 9.8 http_server 2.4.54 · port 8080
CVE-2026-28780 CRITICAL 9.8 http_server 2.4.54 · port 8080
CVE-2026-29167 CRITICAL 9.8 http_server 2.4.54 · port 8080
CVE-2026-44631 CRITICAL 9.8 http_server 2.4.54 · port 8080
CVE-2026-56154 CRITICAL 9.8 http_server 2.4.54 · port 8080
CVE-2026-57941 CRITICAL 9.8 http_server 2.4.54 · port 8080
CVE-2026-59797 CRITICAL 9.8 http_server 2.4.54 · port 8080
CVE-2025-23048 CRITICAL 9.1 http_server 2.4.54 · port 8080
CVE-2026-42535 CRITICAL 9.1 http_server 2.4.54 · port 8080
CVE-2022-36760 CRITICAL 9.0 http_server 2.4.54 · port 8080
CVE-2026-24072 HIGH 8.8 http_server 2.4.54 · port 8080
CVE-2026-93546 HIGH 8.8 http_server 2.4.54 · port 8080
CVE-2025-58098 HIGH 8.3 http_server 2.4.54 · port 8080
CVE-2024-38473 HIGH 8.1 http_server 2.4.54 · port 8080
CVE-2026-73636 HIGH 8.1 http_server 2.4.54 · port 8080
CVE-2022-41741 HIGH 7.8 nginx 1.18.0 · port 80
CVE-2021-23017 HIGH 7.7 nginx 1.18.0 · port 80
CVE-2006-20001 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2023-27522 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2023-31122 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2024-27316 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2024-38477 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2024-39573 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2024-42516 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2024-43204 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2024-47252 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2025-49630 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2025-53020 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2025-55753 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-29169 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-34059 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-34355 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-34356 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-42536 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-46729 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-48005 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-49975 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-56153 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-56449 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-63045 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-63292 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-63686 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-63718 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2021-3618 HIGH 7.4 nginx 1.18.0 · port 80
CVE-2025-49812 HIGH 7.4 http_server 2.4.54 · port 8080
CVE-2023-38709 HIGH 7.3 http_server 2.4.54 · port 8080
CVE-2026-29168 HIGH 7.3 http_server 2.4.54 · port 8080
CVE-2026-44185 HIGH 7.3 http_server 2.4.54 · port 8080
CVE-2026-44186 HIGH 7.3 http_server 2.4.54 · port 8080
CVE-2026-73637 HIGH 7.3 http_server 2.4.54 · port 8080
CVE-2022-41742 HIGH 7.1 nginx 1.18.0 · port 80
CVE-2025-65082 MEDIUM 6.5 http_server 2.4.54 · port 8080
CVE-2026-33523 MEDIUM 6.5 http_server 2.4.54 · port 8080
CVE-2026-43951 MEDIUM 6.5 http_server 2.4.54 · port 8080
CVE-2024-24795 MEDIUM 6.3 http_server 2.4.54 · port 8080
CVE-2026-29170 MEDIUM 6.1 http_server 2.4.54 · port 8080
CVE-2023-45802 MEDIUM 5.9 http_server 2.4.54 · port 8080
CVE-2026-44119 MEDIUM 5.5 http_server 2.4.54 · port 8080
CVE-2025-66200 MEDIUM 5.4 http_server 2.4.54 · port 8080
CVE-2022-37436 MEDIUM 5.3 http_server 2.4.54 · port 8080
CVE-2025-23419 MEDIUM 5.3 nginx 1.18.0 · port 80
CVE-2026-33007 MEDIUM 5.3 http_server 2.4.54 · port 8080
CVE-2026-33857 MEDIUM 5.3 http_server 2.4.54 · port 8080
CVE-2026-34032 MEDIUM 5.3 http_server 2.4.54 · port 8080
CVE-2026-58415 MEDIUM 5.3 http_server 2.4.54 · port 8080
CVE-2026-79768 MEDIUM 5.3 http_server 2.4.54 · port 8080
CVE-2026-33006 MEDIUM 4.8 http_server 2.4.54 · port 8080
CVE-2026-42528 MEDIUM 4.3 http_server 2.4.54 · port 8080
CVE-2026-42356 LOW 3.7 http_server 2.4.54 · port 8080
CVE-2026-106588 LOW 3.1 openssh 8.9p1 · port 22
CVE-2026-106589 LOW 2.9 openssh 8.9p1 · port 22
Only affects certain platforms (1)

These CVEs only apply when the software runs on a particular platform (for example Windows), and this host's platform is not known. They are not counted.

CVEs by severity: CRITICAL 1

CVESoftware
CVE-2022-31631 CRITICAL 9.1 php 8.1.13 · port 8080
Fixed by the distribution (17)

The distribution's security data says the package revision this service shows already has the fix for these CVEs, or that its build is not affected. They are not counted.

CVEs by severity: CRITICAL 2 HIGH 6 MEDIUM 5 LOW 4

CVESoftware
CVE-2023-28531 CRITICAL 9.8 openssh 8.9p1 · port 22
CVE-2023-38408 CRITICAL 9.8 openssh 8.9p1 · port 22
CVE-2024-6387 HIGH 8.1 openssh 8.9p1 · port 22
CVE-2026-35385 HIGH 8.1 openssh 8.9p1 · port 22
CVE-2026-35414 HIGH 8.1 openssh 8.9p1 · port 22
CVE-2024-38472 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2025-59775 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2026-59685 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2025-26465 MEDIUM 6.8 openssh 8.9p1 · port 22
CVE-2023-51385 MEDIUM 6.5 openssh 8.9p1 · port 22
CVE-2026-35387 MEDIUM 6.5 openssh 8.9p1 · port 22
CVE-2023-48795 MEDIUM 5.9 openssh 8.9p1 · port 22
CVE-2023-51384 MEDIUM 5.5 openssh 8.9p1 · port 22
CVE-2025-32728 LOW 3.8 openssh 8.9p1 · port 22
CVE-2025-61984 LOW 3.6 openssh 8.9p1 · port 22
CVE-2025-61985 LOW 3.6 openssh 8.9p1 · port 22
CVE-2026-35388 LOW 2.5 openssh 8.9p1 · port 22
Only affects another platform (4)

These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted. 1 of them is known to be exploited.

CVEs by severity: CRITICAL 2 HIGH 2

CVESoftware
CVE-2024-4577 CRITICAL 9.8 known exploited php 8.1.13 · port 8080
CVE-2024-3566 CRITICAL 9.8 php 8.1.13 · port 8080
CVE-2024-40898 HIGH 7.5 http_server 2.4.54 · port 8080
CVE-2024-43394 HIGH 7.5 http_server 2.4.54 · port 8080

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.