Host

72.18.131.231

Tags: Hosting Database

As of our latest check on 2026-07-29, 72.18.131.231 (Handy Networks, LLC, AS30475, United States) had 4 open ports (21, 80, 443, 3306) and 136 known CVEs.

Known CVEs on this host

4open ports
1name pointing here
136known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-07-29.

CVEs by severity: HIGH 1 MEDIUM 123 LOW 12

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
Handy Networks, LLC AS30475
Open ports
21, 80, 443, 3306 · at our latest check, 2026-07-29
Location
United States US
Hostname
server25-ptr-231.121viral.com · reverse DNS, checked 2026-11-04
Route
72.18.128.0/19 · announced by Handy Networks, LLC AS30475 no RPKI authorisation
Organisation
Handy Networks, LLC
Registry network
NET-WEHOST-1 · 72.18.128.0 - 72.18.159.255 · Handy Networks, LLC · ARIN
Abuse contact
[email protected] · for NET-WEHOST-1
First seen
2026-07-29 13:26 UTC
Last seen alive
2026-07-29 13:29 UTC
Hosted domains
1 name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (4)

21/tcp FTP first 2026-07-29 · last 2026-07-29
Banner
220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 3 of 50 allowed. 220-Local time is now 18:29. Server port: 21. 220-This is a private system - No anonymous logi
Raw response
220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 2 of 50 allowed.
220-Local time is now 18:26. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
80/tcp HTTP Apache first 2026-07-29 · last 2026-07-29
Status
301 Moved Permanently
Title
301 Moved Permanently
Server
Apache
Raw response
HTTP/1.1 301 Moved Permanently
Date: Wed, 29 Jul 2026 13:26:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Location: https://72.18.131.231/
Content-Length: 270
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://72.18.131.231/">here</a>.</p>
</body></html>
443/tcp TLS first 2026-07-29 · last 2026-07-29
TLS
TLSv1.2
Certificate for
*.luckylandmark.com, luckylandmark.com
Issued by
Sectigo Public Server Authentication CA DV R36
Valid
2026-06-12 → 2026-12-27
Raw response
HTTP/1.1 400 Bad Request
Date: Wed, 29 Jul 2026 13:26:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Length: 523
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
 Instead use the HTTPS scheme to access this URL, please.<br />
</p>
<p>Additionally, a 400 Bad Request
error was encountered while trying to use an ErrorDocument to handle the request.</p>
</body></html>
3306/tcp MYSQL mysql 8.0.39 136 CVEs first 2026-07-29 · last 2026-07-29
Protocol
8.0.39
Raw response
J
8.0.39�*S[+>NRdW��!��DR"_5"!^Domysql_native_password

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Hostnames pointing to this address

1 name · as answered by each domain's own name servers

luckylandmark.comfirst seen 2026-10-14