- Server
- SSH-1.99-OpenSSH_4.2
- Host key
- ssh-rsa ab641820093391b3…
Raw response
SSH-1.99-OpenSSH_4.2
Host
81.187.229.136
Tags: End-of-life software
As of our latest check on 2026-05-24, 81.187.229.136 (Andrews & Arnold Ltd, AS20712, United Kingdom) had 2 open ports (22, 80) and 71 known CVEs.
Known CVEs on this host
2open ports
0names pointing here
71known CVEs
0known exploited
Open ports and CVEs as of our latest check of this host, 2026-05-24.
CVEs by severity: CRITICAL 3 HIGH 23 MEDIUM 32 LOW 13
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 100 on a distribution build — the fix may be backported (http_server 2.2.0). See them
Not counted: 1 only affects a particular platform; this host's is not known (openssh 4.2). See them
Not counted: 3 only affect another platform (http_server 2.2.0). See them
- Network
- Andrews & Arnold Ltd AS20712
- Open ports
- 22, 80 · at our latest check, 2026-05-24
- Location
- United Kingdom GB
- Hostname
- 81-187-229-136.ip4.reverse-dns.uk · reverse DNS, checked 2026-10-04
- Route
- 81.187.0.0/16 · announced by Andrews & Arnold Ltd AS20712 RPKI valid
- Organisation
- Andrews & Arnold Ltd · Access network (cable / DSL / ISP)
- Registry network
- UNSPECIFIED-NETNAME · 81.187.229.136 - 81.187.229.136 · RIPE
- Abuse contact
- [email protected] · for UNSPECIFIED-NETNAME
- First seen
- 2026-05-24 07:14 UTC
- Last seen alive
- 2026-05-24 07:15 UTC
- Hosted domains
- No host name points here
Reputation
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
Services (2)
80/tcp
HTTP
Apache/2.2.0 (Linux/SUSE)
first 2026-05-24 · last 2026-05-24
- Status
- 200 OK
- Title
- Andrew's Server
- Server
- Apache/2.2.0 (Linux/SUSE)
Raw response
HTTP/1.1 200 OK Date: Sun, 24 May 2026 07:14:49 GMT Server: Apache/2.2.0 (Linux/SUSE) Last-Modified: Wed, 01 Mar 2023 15:41:41 GMT ETag: "6ad03-16f-8c693740" Accept-Ranges: bytes Content-Length: 367 Content-Type: text/html <html> <head> <title>Andrew's Server</title> <link rel="Shortcut Icon" href="./pi.ico"> </head> <body> <a href="https://control.aa.net.uk"><img src="https://quota.aa.net.uk/" border="0"></a><div style="font-family:arial,sans-serif;font-size:11px;"><p>Sign by Dealighted - <a href="http://blackfriday.dealighted.com">Black Friday Coupons</a></p></div> </body> </html>
Vulnerabilities
Distribution build — the fix may be backported (100)
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.
CVEs by severity: CRITICAL 14 HIGH 23 MEDIUM 58 LOW 5
| CVE | Software |
|---|---|
| CVE-2021-40438 CRITICAL 9.0 known exploited | http_server 2.2.0 · port 80 |
| CVE-2009-3555 CRITICAL 9.8 | http_server 2.2.0 · port 80 |
| CVE-2017-3167 CRITICAL 9.8 | http_server 2.2.0 · port 80 |
| CVE-2017-3169 CRITICAL 9.8 | http_server 2.2.0 · port 80 |
| CVE-2017-7679 CRITICAL 9.8 | http_server 2.2.0 · port 80 |
| CVE-2021-39275 CRITICAL 9.8 | http_server 2.2.0 · port 80 |
| CVE-2021-44790 CRITICAL 9.8 | http_server 2.2.0 · port 80 |
| CVE-2022-22720 CRITICAL 9.8 | http_server 2.2.0 · port 80 |
| CVE-2022-31813 CRITICAL 9.8 | http_server 2.2.0 · port 80 |
| CVE-2026-28780 CRITICAL 9.8 | http_server 2.2.0 · port 80 |
| CVE-2017-9788 CRITICAL 9.1 | http_server 2.2.0 · port 80 |
| CVE-2022-22721 CRITICAL 9.1 | http_server 2.2.0 · port 80 |
| CVE-2022-28615 CRITICAL 9.1 | http_server 2.2.0 · port 80 |
| CVE-2026-42535 CRITICAL 9.1 | http_server 2.2.0 · port 80 |
| CVE-2026-24072 HIGH 8.8 | http_server 2.2.0 · port 80 |
| CVE-2026-93546 HIGH 8.8 | http_server 2.2.0 · port 80 |
| CVE-2025-58098 HIGH 8.3 | http_server 2.2.0 · port 80 |
| CVE-2016-5387 HIGH 8.1 | http_server 2.2.0 · port 80 |
| CVE-2011-3192 HIGH 7.8 | http_server 2.2.0 · port 80 |
| CVE-2006-3747 HIGH 7.6 | http_server 2.2.0 · port 80 |
| CVE-2006-20001 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2009-1955 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2009-2699 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2016-8743 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2017-9798 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2018-1303 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2021-34798 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2022-22719 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2022-29404 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2022-30556 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2023-31122 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2026-29169 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2026-34059 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2025-49812 HIGH 7.4 | http_server 2.2.0 · port 80 |
| CVE-2023-38709 HIGH 7.3 | http_server 2.2.0 · port 80 |
| CVE-2009-1890 HIGH 7.1 | http_server 2.2.0 · port 80 |
| CVE-2009-1891 HIGH 7.1 | http_server 2.2.0 · port 80 |
| CVE-2012-0883 MEDIUM 6.9 | http_server 2.2.0 · port 80 |
| CVE-2006-4154 MEDIUM 6.8 | http_server 2.2.0 · port 80 |
| CVE-2014-0226 MEDIUM 6.8 | http_server 2.2.0 · port 80 |
| CVE-2009-1956 MEDIUM 6.4 | http_server 2.2.0 · port 80 |
| CVE-2007-4465 MEDIUM 6.1 | http_server 2.2.0 · port 80 |
| CVE-2016-4975 MEDIUM 6.1 | http_server 2.2.0 · port 80 |
| CVE-2026-29170 MEDIUM 6.1 | http_server 2.2.0 · port 80 |
| CVE-2018-1301 MEDIUM 5.9 | http_server 2.2.0 · port 80 |
| CVE-2018-1302 MEDIUM 5.9 | http_server 2.2.0 · port 80 |
| CVE-2022-28614 MEDIUM 5.3 | http_server 2.2.0 · port 80 |
| CVE-2022-37436 MEDIUM 5.3 | http_server 2.2.0 · port 80 |
| CVE-2026-33857 MEDIUM 5.3 | http_server 2.2.0 · port 80 |
| CVE-2026-34032 MEDIUM 5.3 | http_server 2.2.0 · port 80 |
| CVE-2013-1862 MEDIUM 5.1 | http_server 2.2.0 · port 80 |
| CVE-2007-1863 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2007-3847 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2007-6750 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2008-2364 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2009-3095 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2009-3560 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2009-3720 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2010-0408 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2010-1452 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2010-1623 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2011-3368 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2013-5704 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2013-6438 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2014-0098 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2014-0231 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2015-0228 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2015-3183 MEDIUM 5.0 | http_server 2.2.0 · port 80 |
| CVE-2009-1195 MEDIUM 4.9 | http_server 2.2.0 · port 80 |
| CVE-2026-33006 MEDIUM 4.8 | http_server 2.2.0 · port 80 |
| CVE-2007-3304 MEDIUM 4.7 | http_server 2.2.0 · port 80 |
| CVE-2012-0031 MEDIUM 4.6 | http_server 2.2.0 · port 80 |
| CVE-2011-3607 MEDIUM 4.4 | http_server 2.2.0 · port 80 |
| CVE-2005-3352 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2006-5752 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2007-5000 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2007-6203 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2007-6388 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2007-6420 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2008-0005 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2008-0455 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2008-2168 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2008-2939 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2009-0023 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2010-0434 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2011-0419 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2011-3639 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2011-4317 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2012-0053 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2012-3499 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2012-4558 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2013-1896 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2014-0118 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2016-8612 MEDIUM 4.3 | http_server 2.2.0 · port 80 |
| CVE-2007-6422 MEDIUM 4.0 | http_server 2.2.0 · port 80 |
| CVE-2007-6421 LOW 3.5 | http_server 2.2.0 · port 80 |
| CVE-2008-0456 LOW 2.6 | http_server 2.2.0 · port 80 |
| CVE-2009-3094 LOW 2.6 | http_server 2.2.0 · port 80 |
| CVE-2012-2687 LOW 2.6 | http_server 2.2.0 · port 80 |
| CVE-2011-4415 LOW 1.2 | http_server 2.2.0 · port 80 |
Only affects certain platforms (1)
These CVEs only apply when the software runs on a particular platform (for example Windows), and this host's platform is not known. They are not counted.
CVEs by severity: MEDIUM 1
| CVE | Software |
|---|---|
| CVE-2008-4109 MEDIUM 5.0 | openssh 4.2 · port 22 |
Only affects another platform (3)
These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.
CVEs by severity: HIGH 2 MEDIUM 1
| CVE | Software |
|---|---|
| CVE-2010-0425 HIGH 10.0 | http_server 2.2.0 · port 80 |
| CVE-2024-40898 HIGH 7.5 | http_server 2.2.0 · port 80 |
| CVE-2022-28330 MEDIUM 5.3 | http_server 2.2.0 · port 80 |
Port history
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.