Host

104.237.6.41

Tags: Remote access Self-signed certificate

As of our latest check on 2026-08-27, 104.237.6.41 (Nodisto IT, LLC, AS394727, United States) had 3 open ports (21, 80, 3389) and 31 known CVEs.

Known CVEs on this host

3open ports
0names pointing here
31known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-27.

CVEs by severity: CRITICAL 8 HIGH 17 MEDIUM 6

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
Nodisto IT, LLC AS394727
Open ports
21, 80, 3389 · at our latest check, 2026-08-27
Location
United States US
Route
104.237.6.0/24 · announced by Nodisto IT, LLC AS394727 no RPKI authorisation
Organisation
Nodisto IT, LLC
Registry network
HOSTEROS · 104.237.0.0 - 104.237.15.255 · Hosteros LLC · ARIN
First seen
2026-08-27 22:54 UTC
Last seen alive
2026-08-27 22:57 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (3)

21/tcp FTP first 2026-08-27 · last 2026-08-27
Banner
220-FileZilla Server 1.7.0 220 Please visit https://filezilla-project.org/
Raw response
220-FileZilla Server 1.7.0
220 Please visit https://filezilla-project.org/
501 What are you trying to do? Go away.
80/tcp HTTP Microsoft-IIS/10.0 31 CVEs first 2026-08-27 · last 2026-08-27
Status
302 Found
Title
Redirecting to http://104.237.6.41/login
Server
Microsoft-IIS/10.0
Powered by
PHP/7.0.30
Raw response
HTTP/1.1 302 Found
Cache-Control: no-cache, private
Content-Type: text/html; charset=UTF-8
Location: http://104.237.6.41/login
Server: Microsoft-IIS/10.0
X-Powered-By: PHP/7.0.30
Set-Cookie: laravel_session=eyJpdiI6IjVmODBPbVwvUVl0R1J0cllLXC9wNDBpQT09IiwidmFsdWUiOiJUYlJpbUsrcVI2XC9cL0xMQkFMXC9YamphOW1WYzJ4S1NtcjU5aVhsM2JYUmEzOElhQVRvV2VcL3Yyd0JubEE5UVhJNVB4R3M1VzJYU1FTUE54dmtPRmNBZFE9PSIsIm1hYyI6ImEyZDQzNzE5ZTlmYzNlNjhhM2RjMmIzZDRkOTQ3ODU4ZDFlZjM3MmE2NTRmM2I1ODQwNTIxZGI0MWU2N2Q5NDgifQ%3D%3D; expires=Fri, 28-Aug-2026 04:55:02 GMT; Max-Age=21600; path=/; HttpOnly
X-Powered-By: ASP.NET
Date: Thu, 27 Aug 2026 22:55:02 GMT
Content-Length: 344

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=http://104.237.6.41/login" />

        <title>Redirecting to http://104.237.6.41/login</title>
    </head>
    <body>
        Redirecting to <a href="http://104.237.6.41/login">http://104.237.6.4
3389/tcp TLS first 2026-08-27 · last 2026-08-27
TLS
TLSv1.2
Certificate for
vm89062
Issued by
vm89062
Valid
2026-05-24 → 2026-11-23
Note
self-signed certificate
Raw response
�Mj��H���H�=0N�F�z�))�>?+��ý wH�.��"�e`�	�p=a�6?j�b8{�;��/����0��0���`/������A����"�0
	*�H��
010Uvm890620
260524082128Z
261123082128Z010Uvm890620�"0
	*�H��
�0�
��i��ـ�?�� �B��r'�2�}5ZŸ�����Nw|:;^�1a8�����:�V��L�7956���m�h���ӧ�:9��ݠ|gF�a�@ı>�JTMzpCBAI��<�`�d/C��K�����F��9ݡX~��@r�>7�0�·H�^+t�ؗ��;iz'�K.,]��S�W�;�P7�`;W~���_�0�K:�~����n����Ń"?pZ����.�u1X<+r_E�
���̀��>��1��
0�}X���$0"0U%0
+0U00
	*�H��
�g��I\A�Ѻ�G�Dxg���g<!�a��3����u��\$���D�}�R��Z��E��7M��L����5��B��@y�M��>�O-�8>��FC�A��v?p��-�I0�!���ݵ�&������3*TT�֘�w�+^�˲���<;N�3�uk��Z+.���...<truncated>

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.