Host

85.125.86.138

As of our latest check on 2026-05-26, 85.125.86.138 (T-Mobile Austria GmbH, AS8412, Austria) had 2 open ports (80, 443) and 50 known CVEs, 2 known to be exploited.

Known CVEs on this host

2open ports
0names pointing here
50known CVEs
2known exploited

Open ports and CVEs as of our latest check of this host, 2026-05-26.

CVEs by severity: CRITICAL 14 HIGH 18 MEDIUM 17 LOW 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 2 only affect a particular platform; this host's is not known (php 7.2.5). See them

Earlier software versions of this host and the CVEs they had are kept as its history. See the history

Network
T-Mobile Austria GmbH AS8412
Open ports
80, 443 · at our latest check, 2026-05-26
Location
Austria AT
Hostname
85-125-86-138.static.upcbusiness.at · reverse DNS, checked 2026-11-04
Route
85.124.0.0/15 · announced by T-Mobile Austria GmbH AS8412 RPKI valid
Organisation
Magenta Telekom · Access network (cable / DSL / ISP)
Registry network
AT-INODE-20050223 · 85.124.0.0 - 85.127.255.255 · T-Mobile Austria GmbH · RIPE
Abuse contact
[email protected] · for AT-INODE-20050223
First seen
2026-05-26 06:54 UTC
Last seen alive
2026-05-26 06:55 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (2)

80/tcp HTTP Apache 50 CVEs first 2026-05-26 · last 2026-05-26
Status
301 Moved Permanently
Server
Apache
Powered by
PHP/7.2.5
Raw response
HTTP/1.0 301 Moved Permanently
Date: Tue, 26 May 2026 06:54:34 GMT
Server: Apache
X-Powered-By: PHP/7.2.5
Location: https://shop.whisky-consultants.at/index.php?
Content-Length: 0
Connection: close
Content-Type: text/html; charset=utf-8
443/tcp HTTP Apache first 2026-05-26 · last 2026-05-26
Status
301 Moved Permanently
Server
Apache
Powered by
PHP/7.2.5
Raw response
HTTP/1.1 400 Bad Request
Date: Tue, 26 May 2026 06:54:34 GMT
Server: Apache
Vary: accept-language,accept-charset
Accept-Ranges: bytes
Connection: close
Content-Type: text/html; charset=utf-8
Content-Language: en
Expires: Tue, 26 May 2026 06:54:34 GMT

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<title>Bad request!</title>
<link rev="made" href="mailto:%5bno%20address%20given%5d" />
<style type="text/css"><!--/*--><![CDATA[/*><!--*/ 
    body { color: #000000; background-color: #FFFFFF; }
    a:link { color: #0000CC; }
    p, address {margin-left: 3em;}
    span {font-size: smaller;}
/*]]>*/--></style>
</head>

<body>
<h1>Bad request!</h1>
<p>


    Your browser (or proxy) sent a request that
    this server could not understand.

</p>
<p>
If you think this is a server

Vulnerabilities

Only affects certain platforms (2)

These CVEs only apply when the software runs on a particular platform (for example Windows), and this host's platform is not known. They are not counted.

CVEs by severity: CRITICAL 2

CVESoftware
CVE-2024-3566 CRITICAL 9.8 php 7.2.5 · port 80
CVE-2020-7061 CRITICAL 9.1 php 7.2.5 · port 80

CVE history

Software versions this host showed earlier, when we saw each, why it no longer applies, and the CVEs matched on it then. None of them is counted.

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.