Host
Tags: Expired certificate
As of our latest check on 2026-08-07, 78.137.2.82 (LLC "McLaut-Invest", AS25133, Ukraine) had 2 open ports (80, 443) and 6 known CVEs, 1 known to be exploited.
Open ports and CVEs as of our latest check of this host, 2026-08-07.
CVEs by severity: HIGH 5 MEDIUM 1
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
All of them on a software version from an earlier observation: a service of that kind is open now.
Not counted: 12 from an older observation (openssh 9.2p1; matched 2026-06-08). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 07 Aug 2026 22:50:29 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
aa
�퐱
1D{�X? D��%�(Xh�����m���{����ܙ7ð�r�r��-�>6ͺ�S̰�w!�o�)hi��K�d�m�EA=ٵ�@�%��ǧ��6=/Y)K䥃��Ͷ��x>��
�֥�3\�g�0�SItJ�e��_�� '���$
0
HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 07 Aug 2026 22:50:30 GMT Content-Type: text/html Content-Length: 650 Connection: close <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>nginx</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
These CVEs were matched on software this host reported in an earlier observation (matched 2026-06-08), not on a port that is open now, and no service of that kind was open at the latest check (2026-08-07). They are not counted above.
CVEs by severity: CRITICAL 2 HIGH 3 MEDIUM 5 LOW 2
| CVE | Software |
|---|---|
| CVE-2023-28531 CRITICAL 9.8 | openssh 9.2p1 |
| CVE-2023-38408 CRITICAL 9.8 | openssh 9.2p1 |
| CVE-2024-6387 HIGH 8.1 | openssh 9.2p1 |
| CVE-2026-35385 HIGH 8.1 | openssh 9.2p1 |
| CVE-2026-35414 HIGH 8.1 | openssh 9.2p1 |
| CVE-2025-26465 MEDIUM 6.8 | openssh 9.2p1 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 9.2p1 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 9.2p1 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 9.2p1 |
| CVE-2023-51384 MEDIUM 5.5 | openssh 9.2p1 |
| CVE-2025-32728 LOW 3.8 | openssh 9.2p1 |
| CVE-2026-35388 LOW 2.5 | openssh 9.2p1 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.
3 names · as answered by each domain's own name servers