Host

62.60.226.90

Tags: Blocklisted

As of our latest check on 2026-05-21, 62.60.226.90 (FEMO IT SOLUTIONS LIMITED, AS214351, Germany) had 3 open ports (22, 80, 443) and 26 known CVEs, 1 known to be exploited. It is on 2 current blocklists.

Known CVEs on this host

3open ports
0names pointing here
26known CVEs
1known exploited

Open ports and CVEs as of our latest check of this host, 2026-05-21.

CVEs by severity: CRITICAL 1 HIGH 9 MEDIUM 10 LOW 6

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 2 on a distribution build — the fix may be backported (openssh 10.2p1). See them

Network
FEMO IT SOLUTIONS LIMITED AS214351
Open ports
22, 80, 443 · at our latest check, 2026-05-21
Location
Frankfurt · Germany DE
Route
62.60.226.0/24 · announced by FEMO IT SOLUTIONS LIMITED AS214351 no RPKI authorisation
Organisation
FEMO IT SOLUTIONS LIMITED
Registry network
FEMOITSOLUTIONS-DE-RENTNET · 62.60.226.0 - 62.60.226.255 · RIPE
Abuse contact
[email protected] · for FEMOITSOLUTIONS-DE-RENTNET
First seen
2026-05-21 06:27 UTC
Last seen alive
2026-05-21 06:29 UTC
Hosted domains
No host name points here

Reputation

Blocklists
blocklisted on 2 current lists About blocklists
ListCategoryListed networkSince
aggregated attack lists (level 1) aggregated attack lists 62.60.226.0/24 2026-10-04
hijacked or criminal-operated networks (do-not-route list) hijacked or criminal network 62.60.226.0/24 2026-10-04

Services (3)

22/tcp SSH OpenSSH_10.2p1 26 CVEs first 2026-05-21 · last 2026-05-21
Server
SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3
Host key
ssh-ed25519 9ce5c828c981c2f4…
Raw response
SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3
80/tcp HTTP nginx/1.28.3 (Ubuntu) first 2026-05-21 · last 2026-05-21
Status
200 OK
Title
Welcome to nginx!
Server
nginx/1.28.3 (Ubuntu)
Raw response
HTTP/1.1 200 OK
Server: nginx/1.28.3 (Ubuntu)
Date: Thu, 21 May 2026 06:28:02 GMT
Content-Type: text/html
Last-Modified: Mon, 13 Oct 2025 16:20:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"68ed26e9-267"
Content-Encoding: gzip

18d
�uRMo�0��W�='цbG30t+�S{6��X�%D%73����q�SwғH>�G��|}�?�|����*�vZ�U_�?(t9�i�����k@�RgIPK��.����9��@���`�O{����Βr����>Q�CD�>N5�U�S��}�8��7���b��=�
Le[�}���*�h�j^-F>��[^����<A!1�|���� ��(A~!���먔~
a�J��&�ΙO>
;x�X�YF�z?L����3��<��=�ji��r
>��M�R]��Pz�c�
c ,$ս�֬����[W��h}Y�.��o�+6۝9�n�}�����])E��xX�C)��R
^)ߤ���a:]�׋����uj�P��F�nA���g���g
0
443/tcp TLS first 2026-05-21 · last 2026-05-21
TLS
TLSv1.2
Certificate for
*.lxrdpanel.xyz, lxrdpanel.xyz
Issued by
CloudFlare, Inc.
Valid
2025-10-13 → 2040-10-09
Raw response
HTTP/1.1 400 Bad Request
Server: nginx/1.28.3 (Ubuntu)
Date: Thu, 21 May 2026 06:28:02 GMT
Content-Type: text/html
Content-Length: 666
Connection: close
Access-Control-Allow-Origin: https://lxrdpanel.xyz

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.28.3 (Ubuntu)</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Vulnerabilities

Distribution build — the fix may be backported (2)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.

CVEs by severity: LOW 2

CVESoftware
CVE-2026-106588 LOW 3.1 openssh 10.2p1 · port 22
CVE-2026-106589 LOW 2.9 openssh 10.2p1 · port 22

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.