- Banner
- 220 (vsFTPd 3.0.2)
Raw response
220 (vsFTPd 3.0.2)
Host
As of our latest check on 2026-07-17, 64.178.156.102 (EastLink, AS11260, Canada) had 3 open ports (21, 80, 8080) and 54 known CVEs, 1 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-07-17.
CVEs by severity: CRITICAL 10 HIGH 30 MEDIUM 13 LOW 1
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 63 on a distribution build — the fix may be backported (http_server 2.4.6). See them
Not counted: 5 only affect another platform (http_server 2.4.6). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
220 (vsFTPd 3.0.2)
HTTP/1.1 200 OK Date: Fri, 17 Jul 2026 01:44:06 GMT Server: Apache/2.4.6 (CentOS) Last-Modified: Wed, 15 Nov 2017 13:01:26 GMT ETag: "e7-55e0519e77580" Accept-Ranges: bytes Content-Length: 231 Content-Type: text/html; charset=UTF-8 <html> <body> <iframe width="100%" height="600px" frameborder="0" src="http://eastlink.speedtestcustom.com"></iframe> <center><p>For the Flash version, please click <a href="/index-flash.html">here</a></p></center> </body> </html>
HTTP/1.1 307 Temporary Redirect Date: Fri, 17 Jul 2026 01:44:06 GMT Connection: Keep-Alive Content-Length: 0 Location: https://server-11640.prod.hosts.ooklaserver.net:8080/
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.
CVEs by severity: CRITICAL 15 HIGH 20 MEDIUM 28
| CVE | Software |
|---|---|
| CVE-2021-40438 CRITICAL 9.0 known exploited | http_server 2.4.6 · port 80 |
| CVE-2017-3167 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2017-7679 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2018-1312 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2021-26691 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2021-39275 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2021-44790 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2022-22720 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2022-23943 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2022-31813 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2023-25690 CRITICAL 9.8 | http_server 2.4.6 · port 80 |
| CVE-2017-9788 CRITICAL 9.1 | http_server 2.4.6 · port 80 |
| CVE-2022-22721 CRITICAL 9.1 | http_server 2.4.6 · port 80 |
| CVE-2022-28615 CRITICAL 9.1 | http_server 2.4.6 · port 80 |
| CVE-2022-36760 CRITICAL 9.0 | http_server 2.4.6 · port 80 |
| CVE-2016-5387 HIGH 8.1 | http_server 2.4.6 · port 80 |
| CVE-2017-15715 HIGH 8.1 | http_server 2.4.6 · port 80 |
| CVE-2006-20001 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2016-0736 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2016-2161 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2016-8743 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2017-15710 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2017-9798 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2018-1303 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2018-17199 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2019-0217 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2021-26690 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2021-34798 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2022-22719 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2022-26377 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2022-29404 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2022-30556 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2023-31122 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2020-35452 HIGH 7.3 | http_server 2.4.6 · port 80 |
| CVE-2023-38709 HIGH 7.3 | http_server 2.4.6 · port 80 |
| CVE-2014-0226 MEDIUM 6.8 | http_server 2.4.6 · port 80 |
| CVE-2024-24795 MEDIUM 6.3 | http_server 2.4.6 · port 80 |
| CVE-2016-4975 MEDIUM 6.1 | http_server 2.4.6 · port 80 |
| CVE-2019-10092 MEDIUM 6.1 | http_server 2.4.6 · port 80 |
| CVE-2019-10098 MEDIUM 6.1 | http_server 2.4.6 · port 80 |
| CVE-2020-1927 MEDIUM 6.1 | http_server 2.4.6 · port 80 |
| CVE-2018-1301 MEDIUM 5.9 | http_server 2.4.6 · port 80 |
| CVE-2018-1302 MEDIUM 5.9 | http_server 2.4.6 · port 80 |
| CVE-2018-1283 MEDIUM 5.3 | http_server 2.4.6 · port 80 |
| CVE-2019-0220 MEDIUM 5.3 | http_server 2.4.6 · port 80 |
| CVE-2019-17567 MEDIUM 5.3 | http_server 2.4.6 · port 80 |
| CVE-2020-11985 MEDIUM 5.3 | http_server 2.4.6 · port 80 |
| CVE-2020-1934 MEDIUM 5.3 | http_server 2.4.6 · port 80 |
| CVE-2022-28614 MEDIUM 5.3 | http_server 2.4.6 · port 80 |
| CVE-2022-37436 MEDIUM 5.3 | http_server 2.4.6 · port 80 |
| CVE-2013-5704 MEDIUM 5.0 | http_server 2.4.6 · port 80 |
| CVE-2013-6438 MEDIUM 5.0 | http_server 2.4.6 · port 80 |
| CVE-2014-0098 MEDIUM 5.0 | http_server 2.4.6 · port 80 |
| CVE-2014-0231 MEDIUM 5.0 | http_server 2.4.6 · port 80 |
| CVE-2014-3581 MEDIUM 5.0 | http_server 2.4.6 · port 80 |
| CVE-2015-0228 MEDIUM 5.0 | http_server 2.4.6 · port 80 |
| CVE-2015-3183 MEDIUM 5.0 | http_server 2.4.6 · port 80 |
| CVE-2013-4352 MEDIUM 4.3 | http_server 2.4.6 · port 80 |
| CVE-2014-0117 MEDIUM 4.3 | http_server 2.4.6 · port 80 |
| CVE-2014-0118 MEDIUM 4.3 | http_server 2.4.6 · port 80 |
| CVE-2014-8109 MEDIUM 4.3 | http_server 2.4.6 · port 80 |
| CVE-2015-3185 MEDIUM 4.3 | http_server 2.4.6 · port 80 |
| CVE-2016-8612 MEDIUM 4.3 | http_server 2.4.6 · port 80 |
These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.
CVEs by severity: HIGH 2 MEDIUM 3
| CVE | Software |
|---|---|
| CVE-2024-40898 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2024-43394 HIGH 7.5 | http_server 2.4.6 · port 80 |
| CVE-2020-13938 MEDIUM 5.5 | http_server 2.4.6 · port 80 |
| CVE-2022-28330 MEDIUM 5.3 | http_server 2.4.6 · port 80 |
| CVE-2014-3523 MEDIUM 5.0 | http_server 2.4.6 · port 80 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.