Host
Tags: Hosting Self-signed certificate
As of our latest check on 2026-08-12, 91.239.232.40 (HOSTPRO LAB LLC, AS196645, Ukraine) had 4 open ports (21, 22, 80, 443) and 30 known CVEs.
Open ports and CVEs as of our latest check of this host, 2026-08-12.
CVEs by severity: HIGH 7 MEDIUM 12 LOW 11
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 15 on a distribution build — the fix may be backported (openssh 7.4). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 05:31. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity. 500 HTTP command: [get]
SSH-2.0-OpenSSH_7.4
HTTP/1.1 200 OK Server: nginx Date: Wed, 12 Aug 2026 02:31:24 GMT Content-Type: text/html Content-Length: 163 Connection: keep-alive Last-Modified: Mon, 18 May 2026 15:45:32 GMT Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 <html><head><META HTTP-EQUIV="Cache-control" CONTENT="no-cache"><META HTTP-EQUIV="refresh" CONTENT="0;URL=/cgi-sys/defaultwebpage.cgi"></head><body></body></html>
HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 12 Aug 2026 02:31:24 GMT Content-Type: text/html Content-Length: 666 Connection: close <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body bgcolor="white"> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>nginx</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: CRITICAL 1 HIGH 2 MEDIUM 11 LOW 1
| CVE | Software |
|---|---|
| CVE-2023-38408 CRITICAL 9.8 | openssh 7.4 · port 22 |
| CVE-2020-15778 HIGH 7.4 | openssh 7.4 · port 22 |
| CVE-2021-41617 HIGH 7.0 | openssh 7.4 · port 22 |
| CVE-2019-6109 MEDIUM 6.8 | openssh 7.4 · port 22 |
| CVE-2019-6110 MEDIUM 6.8 | openssh 7.4 · port 22 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 7.4 · port 22 |
| CVE-2019-6111 MEDIUM 5.9 | openssh 7.4 · port 22 |
| CVE-2020-14145 MEDIUM 5.9 | openssh 7.4 · port 22 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 7.4 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2017-15906 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2018-15473 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2018-15919 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2018-20685 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 7.4 · port 22 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.
2 names · as answered by each domain's own name servers