Host
As of our latest check on 2026-08-13, 95.40.112.96 (Amazon.com, Inc., AS16509, Hong Kong) had 3 open ports (21, 22, 80) and no known CVEs.
Open ports and CVEs as of our latest check of this host, 2026-08-13.
No known CVEs now
Not counted: 37 on a distribution build — the fix may be backported (openssh 8.7). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 23:34. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity. 500 HTTP command: [get]
SSH-2.0-OpenSSH_8.7
HTTP/1.1 200 OK Server: nginx Date: Thu, 13 Aug 2026 15:34:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Set-Cookie: PHPSESSID=jv4vdlsgg46ibktogjhsc0jl9l; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Encoding: gzip 1a ���T03���J� 0
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: CRITICAL 1 HIGH 6 MEDIUM 14 LOW 16
| CVE | Software |
|---|---|
| CVE-2023-38408 CRITICAL 9.8 | openssh 8.7 · port 22 |
| CVE-2024-6387 HIGH 8.1 | openssh 8.7 · port 22 |
| CVE-2026-35385 HIGH 8.1 | openssh 8.7 · port 22 |
| CVE-2026-35414 HIGH 8.1 | openssh 8.7 · port 22 |
| CVE-2026-60002 HIGH 7.7 | openssh 8.7 · port 22 |
| CVE-2026-60000 HIGH 7.5 | openssh 8.7 · port 22 |
| CVE-2021-41617 HIGH 7.0 | openssh 8.7 · port 22 |
| CVE-2025-26465 MEDIUM 6.8 | openssh 8.7 · port 22 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-106585 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-35387 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-59998 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2026-60001 MEDIUM 6.5 | openssh 8.7 · port 22 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 8.7 · port 22 |
| CVE-2026-59999 MEDIUM 5.9 | openssh 8.7 · port 22 |
| CVE-2026-59995 MEDIUM 5.4 | openssh 8.7 · port 22 |
| CVE-2026-59996 MEDIUM 5.4 | openssh 8.7 · port 22 |
| CVE-2026-59997 MEDIUM 5.4 | openssh 8.7 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 8.7 · port 22 |
| CVE-2026-73282 MEDIUM 4.8 | openssh 8.7 · port 22 |
| CVE-2026-106552 MEDIUM 4.2 | openssh 8.7 · port 22 |
| CVE-2025-32728 LOW 3.8 | openssh 8.7 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 8.7 · port 22 |
| CVE-2026-106582 LOW 3.7 | openssh 8.7 · port 22 |
| CVE-2025-61984 LOW 3.6 | openssh 8.7 · port 22 |
| CVE-2025-61985 LOW 3.6 | openssh 8.7 · port 22 |
| CVE-2026-73281 LOW 3.5 | openssh 8.7 · port 22 |
| CVE-2026-106587 LOW 3.3 | openssh 8.7 · port 22 |
| CVE-2026-106588 LOW 3.1 | openssh 8.7 · port 22 |
| CVE-2026-106589 LOW 2.9 | openssh 8.7 · port 22 |
| CVE-2026-106583 LOW 2.5 | openssh 8.7 · port 22 |
| CVE-2026-106584 LOW 2.5 | openssh 8.7 · port 22 |
| CVE-2026-106586 LOW 2.5 | openssh 8.7 · port 22 |
| CVE-2026-35388 LOW 2.5 | openssh 8.7 · port 22 |
| CVE-2026-73283 LOW 2.5 | openssh 8.7 · port 22 |
| CVE-2026-106553 LOW 2.2 | openssh 8.7 · port 22 |
| CVE-2026-106555 LOW 2.2 | openssh 8.7 · port 22 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.