OSN

Host

45.38.4.61

Tags: Expired certificate

As of our latest check on 2026-06-27, 45.38.4.61 (Nodestop LLC, AS400536, United States) had 2 open ports (80, 443) and 1 known CVE.

Known CVEs on this host

2open ports
0names pointing here
1known CVE
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-27.

CVEs by severity: MEDIUM 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 63 on a distribution build — the fix may be backported (http_server 2.4.62, openssl 3.2.2). See them

Not counted: 2 only affect another platform (http_server 2.4.62, php 8.0.30). See them

Network
Nodestop LLC AS400536
Open ports
80, 443 · at our latest check, 2026-06-27
Location
United States US
Hostname
undefined.hostname.localhost · reverse DNS, checked 2026-10-04
Route
45.38.4.0/24 · announced by Nodestop LLC AS400536 RPKI valid
Organisation
Nodestop L.L.C. · Access network (cable / DSL / ISP)
Registry network
EGN-22 · 45.38.0.0 - 45.39.255.255 · Subnet Digital LLC · ARIN
Abuse contact
[email protected] · for EGN-22
First seen
2026-06-27 00:25 UTC
Last seen alive
2026-06-27 00:27 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (2)

80/tcp HTTP Apache/2.4.62 (AlmaLinux) OpenSSL/3.2.2 1 CVE first 2026-06-27 · last 2026-06-27
Status
200 OK
Title
UT-LG - Nodestop, LLC
Server
Apache/2.4.62 (AlmaLinux) OpenSSL/3.2.2
Powered by
PHP/8.0.30
Raw response 
HTTP/1.1 200 OK
Date: Sat, 27 Jun 2026 00:25:26 GMT
Server: Apache/2.4.62 (AlmaLinux) OpenSSL/3.2.2
X-Powered-By: PHP/8.0.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: HYLOOKINGLASS=1fksu2ugaejf6u047av9ukjlsq; path=/
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

1f08
<!doctype html>
<html lang="en" data-bs-theme="">
<head>
    <meta charset="utf-8">
    <meta content="width=device-width, initial-scale=1" name="viewport">
    <meta content="" name="description">
    <meta content="Hybula" name="author">
    <title>UT-LG - Nodestop, LLC</title>
    <link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-4Q6Gf2aSP4eDXB8Miphtr37CMZZQ5oXLH2yaXMJ2w8e2ZtHTl7GptT4jmndRuHDT" crossorigin="anonymous">
        </head>
<body>


<div class="col-lg-8 mx-auto p-3 py-md-5">

    <header class="d-flex al
443/tcp TLS first 2026-06-27 · last 2026-06-27
TLS
TLSv1.2
Certificate for
ut-lg.nodestop.io
Issued by
ut-lg.nodestop.io
Valid
2025-08-26 → 2026-08-26
Note
self-signed certificate
Raw response 
HTTP/1.1 400 Bad Request
Date: Sat, 27 Jun 2026 00:25:26 GMT
Server: Apache/2.4.62 (AlmaLinux) OpenSSL/3.2.2
Content-Length: 362
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
 Instead use the HTTPS scheme to access this URL, please.<br />
</p>
</body></html>

Vulnerabilities

Distribution build — the fix may be backported (63)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.

CVEs by severity: CRITICAL 10 HIGH 35 MEDIUM 17 LOW 1

CVESoftware
CVE-2025-15467 CRITICAL 9.8 openssl 3.2.2 · port 80
CVE-2026-28780 CRITICAL 9.8 http_server 2.4.62 · port 80
CVE-2026-29167 CRITICAL 9.8 http_server 2.4.62 · port 80
CVE-2026-44631 CRITICAL 9.8 http_server 2.4.62 · port 80
CVE-2026-56154 CRITICAL 9.8 http_server 2.4.62 · port 80
CVE-2026-57941 CRITICAL 9.8 http_server 2.4.62 · port 80
CVE-2026-59797 CRITICAL 9.8 http_server 2.4.62 · port 80
CVE-2024-5535 CRITICAL 9.1 openssl 3.2.2 · port 80
CVE-2025-23048 CRITICAL 9.1 http_server 2.4.62 · port 80
CVE-2026-42535 CRITICAL 9.1 http_server 2.4.62 · port 80
CVE-2026-24072 HIGH 8.8 http_server 2.4.62 · port 80
CVE-2026-93546 HIGH 8.8 http_server 2.4.62 · port 80
CVE-2025-58098 HIGH 8.3 http_server 2.4.62 · port 80
CVE-2026-73636 HIGH 8.1 http_server 2.4.62 · port 80
CVE-2024-42516 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2024-43204 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2024-47252 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2024-6119 HIGH 7.5 openssl 3.2.2 · port 80
CVE-2025-49630 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2025-53020 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2025-55753 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2025-59775 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2025-9230 HIGH 7.5 openssl 3.2.2 · port 80
CVE-2026-29169 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-34059 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-34355 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-34356 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-42536 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-46729 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-47360 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-48005 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-49975 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-56153 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-56449 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-59685 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-63045 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-63292 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-63686 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2026-63718 HIGH 7.5 http_server 2.4.62 · port 80
CVE-2025-49812 HIGH 7.4 http_server 2.4.62 · port 80
CVE-2026-29168 HIGH 7.3 http_server 2.4.62 · port 80
CVE-2026-44185 HIGH 7.3 http_server 2.4.62 · port 80
CVE-2026-44186 HIGH 7.3 http_server 2.4.62 · port 80
CVE-2026-48913 HIGH 7.3 http_server 2.4.62 · port 80
CVE-2026-73637 HIGH 7.3 http_server 2.4.62 · port 80
CVE-2025-65082 MEDIUM 6.5 http_server 2.4.62 · port 80
CVE-2025-9231 MEDIUM 6.5 openssl 3.2.2 · port 80
CVE-2026-33523 MEDIUM 6.5 http_server 2.4.62 · port 80
CVE-2026-43951 MEDIUM 6.5 http_server 2.4.62 · port 80
CVE-2024-12797 MEDIUM 6.3 openssl 3.2.2 · port 80
CVE-2026-29170 MEDIUM 6.1 http_server 2.4.62 · port 80
CVE-2026-44119 MEDIUM 5.5 http_server 2.4.62 · port 80
CVE-2025-66200 MEDIUM 5.4 http_server 2.4.62 · port 80
CVE-2026-33007 MEDIUM 5.3 http_server 2.4.62 · port 80
CVE-2026-33857 MEDIUM 5.3 http_server 2.4.62 · port 80
CVE-2026-34032 MEDIUM 5.3 http_server 2.4.62 · port 80
CVE-2026-58415 MEDIUM 5.3 http_server 2.4.62 · port 80
CVE-2026-79768 MEDIUM 5.3 http_server 2.4.62 · port 80
CVE-2026-33006 MEDIUM 4.8 http_server 2.4.62 · port 80
CVE-2024-9143 MEDIUM 4.3 openssl 3.2.2 · port 80
CVE-2026-42528 MEDIUM 4.3 http_server 2.4.62 · port 80
CVE-2024-13176 MEDIUM 4.1 openssl 3.2.2 · port 80
CVE-2026-42356 LOW 3.7 http_server 2.4.62 · port 80
Only affects another platform (2)

These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.

CVEs by severity: CRITICAL 1 HIGH 1

CVESoftware
CVE-2024-3566 CRITICAL 9.8 php 8.0.30 · port 80
CVE-2024-43394 HIGH 7.5 http_server 2.4.62 · port 80

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Report an issue with this page