- Banner
- 220 ProFTPD 1.3.5 Server (Debian) [94.100.6.15]
Raw response
220 ProFTPD 1.3.5 Server (Debian) [94.100.6.15]
Host
94.100.6.15
As of our latest check on 2026-11-06, 94.100.6.15 (IPV1 SIA, AS213934, Latvia) had 2 open ports (21, 22) and 46 known CVEs, 1 known to be exploited.
Known CVEs on this host
2open ports
0names pointing here
46known CVEs
1known exploited
Open ports and CVEs as of our latest check of this host, 2026-11-06.
CVEs by severity: CRITICAL 2 HIGH 12 MEDIUM 20 LOW 12
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 1 possible, version too vague to tell (proftpd 1.3.5). See them
Not counted: 20 on a distribution build — the fix may be backported (proftpd 1.3.5). See them
Earlier software versions of this host and the CVEs they had are kept as its history. See the history
- Network
- IPV1 SIA AS213934
- Open ports
- 21, 22 · at our latest check, 2026-11-06
- Location
- Latvia LV
- Route
- 94.100.6.0/24 · announced by IPV1 SIA AS213934 RPKI valid
- Organisation
- IPV1 SIA
- Registry network
- DC-OGRE · 94.100.6.0 - 94.100.6.255 · RIPE
- Abuse contact
- [email protected] · for DC-OGRE
- First seen
- 2026-05-30 18:21 UTC
- Last seen alive
- 2026-11-06 10:39 UTC
- Hosted domains
- No host name points here
Reputation
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
Services (2)
- Server
- SSH-2.0-OpenSSH_7.8
- Host key
- ssh-rsa 7db5276db897129d…
Raw response
SSH-2.0-OpenSSH_7.8
Vulnerabilities
Distribution build — the fix may be backported (20)
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.
CVEs by severity: CRITICAL 1 HIGH 13 MEDIUM 6
| CVE | Software |
|---|---|
| CVE-2015-3306 CRITICAL 10.0 known exploited | proftpd 1.3.5 · port 21 |
| CVE-2026-63090 HIGH 8.8 | proftpd 1.3.5 · port 21 |
| CVE-2026-42167 HIGH 8.1 | proftpd 1.3.5 · port 21 |
| CVE-2026-44331 HIGH 8.1 | proftpd 1.3.5 · port 21 |
| CVE-2016-3125 HIGH 7.5 | proftpd 1.3.5 · port 21 |
| CVE-2019-18217 HIGH 7.5 | proftpd 1.3.5 · port 21 |
| CVE-2019-19270 HIGH 7.5 | proftpd 1.3.5 · port 21 |
| CVE-2019-19271 HIGH 7.5 | proftpd 1.3.5 · port 21 |
| CVE-2019-19272 HIGH 7.5 | proftpd 1.3.5 · port 21 |
| CVE-2020-9272 HIGH 7.5 | proftpd 1.3.5 · port 21 |
| CVE-2021-46854 HIGH 7.5 | proftpd 1.3.5 · port 21 |
| CVE-2023-51713 HIGH 7.5 | proftpd 1.3.5 · port 21 |
| CVE-2024-48651 HIGH 7.5 | proftpd 1.3.5 · port 21 |
| CVE-2026-63091 HIGH 7.1 | proftpd 1.3.5 · port 21 |
| CVE-2026-53994 MEDIUM 6.5 | proftpd 1.3.5 · port 21 |
| CVE-2026-119146 MEDIUM 6.3 | proftpd 1.3.5 · port 21 |
| CVE-2026-119364 MEDIUM 6.0 | proftpd 1.3.5 · port 21 |
| CVE-2017-7418 MEDIUM 5.5 | proftpd 1.3.5 · port 21 |
| CVE-2026-119147 MEDIUM 5.3 | proftpd 1.3.5 · port 21 |
| CVE-2019-19269 MEDIUM 4.9 | proftpd 1.3.5 · port 21 |
Possible, version too vague to tell (1)
These CVEs were matched on a software version that names only a major release (such as “2”) or no version at all: whether the release running here is affected cannot be told. They are not counted anywhere on this site.
| CVE | Software |
|---|---|
| CVE-2013-4359 MEDIUM 5.0 | proftpd 1.3.5 · port 21 |
CVE history
Software versions this host showed earlier, when we saw each, why it no longer applies, and the CVEs matched on it then. None of them is counted.
Port history
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.