Host

125.178.112.28

Tags: Database

As of our latest check on 2026-10-05, 125.178.112.28 (LG POWERCOMM, AS17858, South Korea) had 5 open ports (80, 3000, 3306, 8443, 9443) and 24 known CVEs, 1 known to be exploited.

Known CVEs on this host

5open ports
0names pointing here
24known CVEs
1known exploited

Open ports and CVEs as of our latest check of this host, 2026-10-05.

CVEs by severity: CRITICAL 4 HIGH 12 MEDIUM 8

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Earlier software versions of this host and the CVEs they had are kept as its history. See the history

Network
LG POWERCOMM AS17858
Open ports
80, 3000, 3306, 8443, 9443 · at our latest check, 2026-10-05
Location
South Korea KR
Route
125.176.0.0/14 · announced by LG POWERCOMM AS17858 no RPKI authorisation
Organisation
LG POWERCOMM
Registry network
Xpeed-KR · 125.176.0.0 - 125.191.255.255 · APNIC
Abuse contact
[email protected] · for Xpeed-KR
First seen
2026-10-05 19:38 UTC
Last seen alive
2026-10-05 23:37 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (5)

80/tcp HTTP nginx first 2026-10-05 · last 2026-10-05
Status
200
Server
nginx
Raw response
HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 05 Oct 2026 23:35:44 GMT
Content-Type: text/html
Content-Length: 150
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx</center>
</body>
</html>
3000/tcp HTTP nginx/1.22.1 2 CVEs first 2026-10-05 · last 2026-10-05
Status
401 Unauthorized
Title
401 Authorization Required
Server
nginx/1.22.1
Raw response
HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Mon, 05 Oct 2026 23:35:44 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>
3306/tcp MYSQL mariadb 10.11.11 22 CVEs first 2026-10-05 · last 2026-10-05
Protocol
5.5.5-10.11.11-MariaDB
Raw response
Z
5.5.5-10.11.11-MariaDB�
h*8yzxk2��!��V9W.|KABeV``mysql_native_password
8443/tcp TLS first 2026-10-05 · last 2026-10-05
TLS
TLSv1.2
Certificate for
regs.jajaksystem.co.kr
Issued by
YE2
Valid
2026-09-12 → 2026-12-11
Raw response
HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 05 Oct 2026 23:35:43 GMT
Content-Type: text/html
Content-Length: 650
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
9443/tcp TLS first 2026-10-05 · last 2026-10-05
TLS
TLSv1.2
Certificate for
www.jajaksystem.co.kr
Issued by
YE1
Valid
2026-09-08 → 2026-12-07
Raw response
HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 05 Oct 2026 23:35:43 GMT
Content-Type: text/html
Content-Length: 650
Connection: close
Strict-Transport-Security: max-age=15768000; includeSubdomains; preload

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Vulnerabilities

CVE history

Software versions this host showed earlier, when we saw each, why it no longer applies, and the CVEs matched on it then. None of them is counted.

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.