Host

102.134.53.197

Tags: Blocklisted Database Expired certificate

As of our latest check on 2026-08-23, 102.134.53.197 (XNNET LLC, AS932, South Africa) had 3 open ports (80, 443, 3306) and 176 known CVEs, 1 known to be exploited. It is on 2 current blocklists.

Known CVEs on this host

3open ports
0names pointing here
176known CVEs
1known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-23.

CVEs by severity: HIGH 5 MEDIUM 157 LOW 14

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
XNNET LLC AS932
Open ports
80, 443, 3306 · at our latest check, 2026-08-23
Location
South Africa ZA
Route
102.134.53.0/24 · announced by VH Global Limited AS42960 no RPKI authorisation
Organisation
VH Global Limited, VH Global Limited
Registry network
TelekomSA · 102.134.48.0 - 102.134.63.255 · AFRINIC
First seen
2026-08-23 14:05 UTC
Last seen alive
2026-08-23 14:08 UTC
Hosted domains
No host name points here

Reputation

Blocklists
blocklisted on 2 current lists About blocklists
ListCategoryListed networkSince
aggregated attack lists (level 1) aggregated attack lists 102.134.32.0/19 2026-10-04
hijacked or criminal-operated networks (do-not-route list) hijacked or criminal network 102.134.32.0/19 2026-10-04

Services (3)

80/tcp HTTP nginx/1.20.1 5 CVEs first 2026-08-23 · last 2026-08-23
Status
301 Moved Permanently
Title
301 Moved Permanently
Server
nginx/1.20.1
Raw response
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Sun, 23 Aug 2026 14:06:03 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://home.gdsdxy.fun/

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.20.1</center>
</body>
</html>
443/tcp TLS first 2026-08-23 · last 2026-08-23
TLS
TLSv1.2
Certificate for
home.gdsdxy.fun
Issued by
TrustAsia DV TLS RSA CA 2025
Valid
2025-03-30 → 2025-06-28
Raw response
HTTP/1.1 400 Bad Request
Server: nginx/1.20.1
Date: Sun, 23 Aug 2026 14:06:03 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.20.1</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
3306/tcp MYSQL mysql 8.0.36 171 CVEs first 2026-08-23 · last 2026-08-23
Protocol
8.0.36
Raw response
J
8.0.36vC=uzVn`�����%<VUZV1Ud]caching_sha2_password

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.