Host
Tags: End-of-life software
As of our latest check on 2026-05-22, 77.228.223.78 (VODAFONE ESPANA S.A.U., AS12430, Spain) had 2 open ports (80, 443) and 229 known CVEs, 1 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-05-22.
CVEs by severity: CRITICAL 58 HIGH 96 MEDIUM 71 LOW 4
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 81 on a distribution build — the fix may be backported (http_server 2.2.10). See them
Not counted: 6 only affect another platform (http_server 2.2.10, php 5.3.8). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
HTTP/1.1 302 Found Date: Fri, 22 May 2026 09:22:28 GMT Server: Apache/2.2.10 (Linux/SUSE) X-Powered-By: PHP/5.3.8 Location: http://www.institutbonanova.cat Content-Length: 0 Content-Type: text/html
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<title>Bad request!</title>
<link rev="made" href="mailto:%5bno%20address%20given%5d" />
<style type="text/css"><!--/*--><![CDATA[/*><!--*/
body { color: #000000; background-color: #FFFFFF; }
a:link { color: #0000CC; }
p, address {margin-left: 3em;}
span {font-size: smaller;}
/*]]>*/--></style>
</head>
<body>
<h1>Bad request!</h1>
<p>
Your browser (or proxy) sent a request that
this server could not understand.
</p>
<p>
If you think this is a server error, please contact
the <a href="mailto:%5bno%20address%20given%5d">webmaster</a>.
</p>
<h2>Error 400</h2>
<address>
<a href="/">fbonalin1.parcdesalutmar.cat</a><br />
<span>Fri May 22 11:22:28 2026<br />
Apache/2.2.10 (Linux/SUSE)</span>
</ad
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.
CVEs by severity: CRITICAL 13 HIGH 22 MEDIUM 42 LOW 4
| CVE | Software |
|---|---|
| CVE-2021-40438 CRITICAL 9.0 known exploited | http_server 2.2.10 · port 80 |
| CVE-2009-3555 CRITICAL 9.8 | http_server 2.2.10 · port 80 |
| CVE-2017-3167 CRITICAL 9.8 | http_server 2.2.10 · port 80 |
| CVE-2017-7679 CRITICAL 9.8 | http_server 2.2.10 · port 80 |
| CVE-2021-39275 CRITICAL 9.8 | http_server 2.2.10 · port 80 |
| CVE-2021-44790 CRITICAL 9.8 | http_server 2.2.10 · port 80 |
| CVE-2022-22720 CRITICAL 9.8 | http_server 2.2.10 · port 80 |
| CVE-2022-31813 CRITICAL 9.8 | http_server 2.2.10 · port 80 |
| CVE-2026-28780 CRITICAL 9.8 | http_server 2.2.10 · port 80 |
| CVE-2017-9788 CRITICAL 9.1 | http_server 2.2.10 · port 80 |
| CVE-2022-22721 CRITICAL 9.1 | http_server 2.2.10 · port 80 |
| CVE-2022-28615 CRITICAL 9.1 | http_server 2.2.10 · port 80 |
| CVE-2026-42535 CRITICAL 9.1 | http_server 2.2.10 · port 80 |
| CVE-2026-24072 HIGH 8.8 | http_server 2.2.10 · port 80 |
| CVE-2026-93546 HIGH 8.8 | http_server 2.2.10 · port 80 |
| CVE-2025-58098 HIGH 8.3 | http_server 2.2.10 · port 80 |
| CVE-2016-5387 HIGH 8.1 | http_server 2.2.10 · port 80 |
| CVE-2011-3192 HIGH 7.8 | http_server 2.2.10 · port 80 |
| CVE-2006-20001 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2009-1955 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2009-2699 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2016-8743 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2017-9798 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2018-1303 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2021-34798 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2022-22719 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2022-29404 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2022-30556 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2023-31122 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2026-29169 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2026-34059 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2025-49812 HIGH 7.4 | http_server 2.2.10 · port 80 |
| CVE-2023-38709 HIGH 7.3 | http_server 2.2.10 · port 80 |
| CVE-2009-1890 HIGH 7.1 | http_server 2.2.10 · port 80 |
| CVE-2009-1891 HIGH 7.1 | http_server 2.2.10 · port 80 |
| CVE-2012-0883 MEDIUM 6.9 | http_server 2.2.10 · port 80 |
| CVE-2014-0226 MEDIUM 6.8 | http_server 2.2.10 · port 80 |
| CVE-2009-1956 MEDIUM 6.4 | http_server 2.2.10 · port 80 |
| CVE-2016-4975 MEDIUM 6.1 | http_server 2.2.10 · port 80 |
| CVE-2026-29170 MEDIUM 6.1 | http_server 2.2.10 · port 80 |
| CVE-2018-1301 MEDIUM 5.9 | http_server 2.2.10 · port 80 |
| CVE-2018-1302 MEDIUM 5.9 | http_server 2.2.10 · port 80 |
| CVE-2022-28614 MEDIUM 5.3 | http_server 2.2.10 · port 80 |
| CVE-2022-37436 MEDIUM 5.3 | http_server 2.2.10 · port 80 |
| CVE-2026-33857 MEDIUM 5.3 | http_server 2.2.10 · port 80 |
| CVE-2026-34032 MEDIUM 5.3 | http_server 2.2.10 · port 80 |
| CVE-2013-1862 MEDIUM 5.1 | http_server 2.2.10 · port 80 |
| CVE-2007-6750 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2009-3095 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2009-3560 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2009-3720 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2010-1452 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2010-1623 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2010-2068 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2011-3368 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2013-5704 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2013-6438 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2014-0098 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2014-0231 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2015-0228 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2015-3183 MEDIUM 5.0 | http_server 2.2.10 · port 80 |
| CVE-2009-1195 MEDIUM 4.9 | http_server 2.2.10 · port 80 |
| CVE-2026-33006 MEDIUM 4.8 | http_server 2.2.10 · port 80 |
| CVE-2012-0031 MEDIUM 4.6 | http_server 2.2.10 · port 80 |
| CVE-2011-3607 MEDIUM 4.4 | http_server 2.2.10 · port 80 |
| CVE-2008-0455 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2009-0023 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2010-0434 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2011-0419 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2011-3639 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2011-4317 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2012-0053 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2012-3499 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2012-4558 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2013-1896 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2014-0118 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2016-8612 MEDIUM 4.3 | http_server 2.2.10 · port 80 |
| CVE-2008-0456 LOW 2.6 | http_server 2.2.10 · port 80 |
| CVE-2009-3094 LOW 2.6 | http_server 2.2.10 · port 80 |
| CVE-2012-2687 LOW 2.6 | http_server 2.2.10 · port 80 |
| CVE-2011-4415 LOW 1.2 | http_server 2.2.10 · port 80 |
These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.
CVEs by severity: CRITICAL 2 HIGH 3 MEDIUM 1
| CVE | Software |
|---|---|
| CVE-2010-0425 HIGH 10.0 | http_server 2.2.10 · port 80 |
| CVE-2012-2376 HIGH 10.0 | php 5.3.8 · port 80 |
| CVE-2015-4642 CRITICAL 9.8 | php 5.3.8 · port 80 |
| CVE-2024-3566 CRITICAL 9.8 | php 5.3.8 · port 80 |
| CVE-2024-40898 HIGH 7.5 | http_server 2.2.10 · port 80 |
| CVE-2022-28330 MEDIUM 5.3 | http_server 2.2.10 · port 80 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.