21/tcp
FTP
first 2026-06-27 · last 2026-06-27
- Banner
- 220 ProFTPD Server (Debian) [::ffff:45.89.66.42]
Raw response
220 ProFTPD Server (Debian) [::ffff:45.89.66.42]
Host
45.89.66.42
As of our latest check on 2026-06-27, 45.89.66.42 (IHOR HOSTING LTD, AS209641, Russia) had 4 open ports (21, 22, 25, 80) and 10 known CVEs, 1 known to be exploited.
Known CVEs on this host
4open ports
0names pointing here
10known CVEs
1known exploited
Open ports and CVEs as of our latest check of this host, 2026-06-27.
CVEs by severity: CRITICAL 1 HIGH 4 MEDIUM 4 LOW 1
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 66 on a distribution build — the fix may be backported (exim 4.93, openssh 8.2p1). See them
Not counted: 1 fixed by the distribution (openssh 8.2p1). See them
- Network
- IHOR HOSTING LTD AS209641
- Open ports
- 21, 22, 25, 80 · at our latest check, 2026-06-27
- Location
- Moscow, RU-MOW · Russia RU
- Hostname
- tonelib.ru · reverse DNS, checked 2026-10-04
- Route
- 45.89.66.0/24 · announced by IHOR HOSTING LTD AS209641 RPKI valid
- Organisation
- Tomas Kempinsky · Educational/Research
- Registry network
- PSERVERS-CLOUD-HOSTING · 45.89.66.0 - 45.89.66.255 · RIPE
- Abuse contact
- [email protected] · for PSERVERS-CLOUD-HOSTING
- First seen
- 2026-06-27 06:55 UTC
- Last seen alive
- 2026-06-27 06:59 UTC
- Hosted domains
- No host name points here
Reputation
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
Services (4)
- Server
- SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3
- Host key
- ssh-ed25519 5ef41bb2ac212897…
Raw response
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3
25/tcp
SMTP
first 2026-06-27 · last 2026-06-27
- Banner
- 220 tonelib.ru ESMTP Exim 4.93 Ubuntu Sat, 27 Jun 2026 09:58:58 +0300
Raw response
554 SMTP synchronization error
- Status
- 302 Moved Temporarily
- Title
- 302 Found
- Server
- nginx/1.22.0
Raw response
HTTP/1.1 302 Moved Temporarily Server: nginx/1.22.0 Date: Sat, 27 Jun 2026 06:56:08 GMT Content-Type: text/html Content-Length: 145 Connection: keep-alive Location: http://45.89.66.42/index.html <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx/1.22.0</center> </body> </html>
Vulnerabilities
Distribution build — the fix may be backported (66)
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: CRITICAL 12 HIGH 28 MEDIUM 18 LOW 8
| CVE | Software |
|---|---|
| CVE-2020-28017 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2020-28018 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2020-28022 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2020-28024 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2020-28026 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2022-37452 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2023-42115 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2023-42116 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2023-42117 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2025-67896 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2026-40685 CRITICAL 9.8 | exim 4.93 · port 25 |
| CVE-2026-40687 CRITICAL 9.1 | exim 4.93 · port 25 |
| CVE-2020-28021 HIGH 8.8 | exim 4.93 · port 25 |
| CVE-2026-35385 HIGH 8.1 | openssh 8.2p1 · port 22 |
| CVE-2026-35414 HIGH 8.1 | openssh 8.2p1 · port 22 |
| CVE-2020-28007 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2020-28008 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2020-28009 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2020-28010 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2020-28011 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2020-28012 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2020-28013 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2020-28015 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2020-28016 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2026-66140 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2026-66141 HIGH 7.8 | exim 4.93 · port 25 |
| CVE-2026-60002 HIGH 7.7 | openssh 8.2p1 · port 22 |
| CVE-2020-12062 HIGH 7.5 | openssh 8.2p1 · port 22 |
| CVE-2020-12783 HIGH 7.5 | exim 4.93 · port 25 |
| CVE-2020-28019 HIGH 7.5 | exim 4.93 · port 25 |
| CVE-2020-28023 HIGH 7.5 | exim 4.93 · port 25 |
| CVE-2020-28025 HIGH 7.5 | exim 4.93 · port 25 |
| CVE-2021-38371 HIGH 7.5 | exim 4.93 · port 25 |
| CVE-2022-3559 HIGH 7.5 | exim 4.93 · port 25 |
| CVE-2022-37451 HIGH 7.5 | exim 4.93 · port 25 |
| CVE-2026-40684 HIGH 7.5 | exim 4.93 · port 25 |
| CVE-2026-60000 HIGH 7.5 | openssh 8.2p1 · port 22 |
| CVE-2026-94056 HIGH 7.5 | exim 4.93 · port 25 |
| CVE-2020-15778 HIGH 7.4 | openssh 8.2p1 · port 22 |
| CVE-2026-94054 HIGH 7.0 | exim 4.93 · port 25 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 8.2p1 · port 22 |
| CVE-2026-59998 MEDIUM 6.5 | openssh 8.2p1 · port 22 |
| CVE-2026-60001 MEDIUM 6.5 | openssh 8.2p1 · port 22 |
| CVE-2021-27216 MEDIUM 6.3 | exim 4.93 · port 25 |
| CVE-2020-28014 MEDIUM 6.1 | exim 4.93 · port 25 |
| CVE-2020-14145 MEDIUM 5.9 | openssh 8.2p1 · port 22 |
| CVE-2026-59999 MEDIUM 5.9 | openssh 8.2p1 · port 22 |
| CVE-2024-39929 MEDIUM 5.4 | exim 4.93 · port 25 |
| CVE-2026-59995 MEDIUM 5.4 | openssh 8.2p1 · port 22 |
| CVE-2026-59996 MEDIUM 5.4 | openssh 8.2p1 · port 22 |
| CVE-2026-59997 MEDIUM 5.4 | openssh 8.2p1 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 8.2p1 · port 22 |
| CVE-2023-42114 MEDIUM 5.3 | exim 4.93 · port 25 |
| CVE-2023-51766 MEDIUM 5.3 | exim 4.93 · port 25 |
| CVE-2026-40686 MEDIUM 5.3 | exim 4.93 · port 25 |
| CVE-2026-48840 MEDIUM 5.3 | exim 4.93 · port 25 |
| CVE-2026-94057 MEDIUM 5.3 | exim 4.93 · port 25 |
| CVE-2026-73282 MEDIUM 4.8 | openssh 8.2p1 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 8.2p1 · port 22 |
| CVE-2026-94055 LOW 3.7 | exim 4.93 · port 25 |
| CVE-2025-61984 LOW 3.6 | openssh 8.2p1 · port 22 |
| CVE-2025-61985 LOW 3.6 | openssh 8.2p1 · port 22 |
| CVE-2026-73281 LOW 3.5 | openssh 8.2p1 · port 22 |
| CVE-2023-42119 LOW 3.1 | exim 4.93 · port 25 |
| CVE-2026-35388 LOW 2.5 | openssh 8.2p1 · port 22 |
| CVE-2026-73283 LOW 2.5 | openssh 8.2p1 · port 22 |
Fixed by the distribution (1)
The distribution's security data says the package revision this service shows already has the fix for these CVEs, or that its build is not affected. They are not counted.
CVEs by severity: HIGH 1
| CVE | Software |
|---|---|
| CVE-2021-28041 HIGH 7.1 | openssh 8.2p1 · port 22 |
Port history
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.