Host

195.89.188.166

Tags: Self-signed certificate

As of our latest check on 2026-06-06, 195.89.188.166 (IDDQD-AS, AS1273, United Kingdom) had 7 open ports (25, 80, 443, 465, 587, 1723, 5000) and 1 known CVE.

Known CVEs on this host

7open ports
0names pointing here
1known CVE
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-06.

CVEs by severity: MEDIUM 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 109 on a distribution build — the fix may be backported (http_server 2.4.29). See them

Not counted: 4 only affect another platform (http_server 2.4.29). See them

Network
IDDQD-AS AS1273
Open ports
25, 80, 443, 465, 587, 1723, 5000 · at our latest check, 2026-06-06
Location
United Kingdom GB
Hostname
mail.intbl.co.uk · reverse DNS, checked 2026-10-05
Route
195.89.0.0/16 · announced by Vodafone Group PLC AS1273 RPKI valid
Organisation
Vodafone GlobalNet · Network service provider (transit)
Registry network
IBLCOLDSTORES · 195.89.188.164 - 195.89.188.167 · RIPE
Abuse contact
[email protected] · for IBLCOLDSTORES
First seen
2026-06-06 19:58 UTC
Last seen alive
2026-06-06 20:02 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (7)

25/tcp SMTP first 2026-06-06 · last 2026-06-06
Banner
220 mail.intbl.co.uk Microsoft ESMTP MAIL Service ready at Sat, 6 Jun 2026 21:02:32 +0100
Raw response
220 mail.intbl.co.uk Microsoft ESMTP MAIL Service ready at Sat, 6 Jun 2026 21:00:23 +0100
80/tcp HTTP Microsoft-IIS/8.5 1 CVE first 2026-06-06 · last 2026-06-06
Status
403 Forbidden
Title
403 - Forbidden: Access is denied.
Server
Microsoft-IIS/8.5
Powered by
ASP.NET
Raw response
HTTP/1.1 403 Forbidden
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 06 Jun 2026 20:00:24 GMT
Content-Length: 1233

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>403 - Forbidden: Access is denied.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;} 
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;} 
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} 
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-containe
443/tcp TLS first 2026-06-06 · last 2026-06-06
TLS
TLSv1.2
Certificate for
mail.intbl.co.uk, AutoDiscover.intbl.co.uk, intbl.co.uk
Issued by
mail.intbl.co.uk
Valid
2022-10-02 → 2027-10-02
Note
self-signed certificate
Raw response
Mj$|`9SMn\7����N�7�_����{��ɦ�� �'C���lC*�Ng(d�����M��y,��C@=0�90�!�.	`e���DܡY�}H�0
	*�H��
010Umail.intbl.co.uk0
221002150521Z
271002150521Z010Umail.intbl.co.uk0�"0
	*�H��
�0�
����$h{<];^�zi���F�G�y�����ߞ	�2��7������dOh$l~j���,kV�:iL՘O�%�o歷?�,�����k��Q�'���0!��������̹�n�ލ�S����g�l'���v�K�K͟��VO�]}'\���o�A�6��Q�B�67%��Ocz���(����_Gz����F�7�ٲ�֊n��/�|�<.N��WazxW��/c�E��a�-����6�f�[������㭧�y0w0U��0BU;09�mail.intbl.co.uk�AutoDiscover.intbl.co.uk�intbl.co.uk0U%0
+0U�00
	*�H��
�^�e��=�gt)�C�濡\��nU�x���m7���e�� �9����|����nќD8^��o�	�x���[[Y���k���,��hY��Q�i�X�Ѹ��.��...<truncated>
465/tcp SMTP first 2026-06-06 · last 2026-06-06
Banner
220 mail.intbl.co.uk Microsoft ESMTP MAIL Service ready at Sat, 6 Jun 2026 21:02:31 +0100
Raw response
220 mail.intbl.co.uk Microsoft ESMTP MAIL Service ready at Sat, 6 Jun 2026 21:00:23 +0100
587/tcp SMTP first 2026-06-06 · last 2026-06-06
Banner
220 mail.intbl.co.uk Microsoft ESMTP MAIL Service ready at Sat, 6 Jun 2026 21:02:32 +0100
Raw response
220 mail.intbl.co.uk Microsoft ESMTP MAIL Service ready at Sat, 6 Jun 2026 21:00:23 +0100
1723/tcp PPTP first 2026-06-06 · last 2026-06-06
Raw response
+<M
5000/tcp HTTP Apache/2.4.29 (Ubuntu) first 2026-06-06 · last 2026-06-06
Status
200 OK
Title
Index of /
Server
Apache/2.4.29 (Ubuntu)
Raw response
HTTP/1.1 200 OK
Date: Sat, 06 Jun 2026 20:00:24 GMT
Server: Apache/2.4.29 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 448
Content-Type: text/html;charset=UTF-8

�͔Mo�0���S���dw��W)l��RwӨ�r0�,VY@Ɖ����%[)Qz��c�����<��:�����r�\����"9_��G��?8u}��J^`<_!vBss(�	�\ra�@�2�dq)�T`�����I%�\�g�]�txjFM��P�2@���갇F��*��'/�{�!��	�M�o-�M�f3�!�2З0X����?H�����2�-xc�P	�))^��=�U�_/�L$�T�ڨ�|F��xl5�������:��1�#��ndU!�>nG��!��geq��:��5F�)�u$�h��
b�Gf�7q����X�/����X&M}�/�����m���O���<����?m������a)B˦a5Os�}w��3�t�ܕ��3l����2�әK�S�L&������y��P�V�F��z���Ee�v

Vulnerabilities

Distribution build — the fix may be backported (109)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 3 of them are known to be exploited.

CVEs by severity: CRITICAL 23 HIGH 56 MEDIUM 29 LOW 1

CVESoftware
CVE-2024-38475 CRITICAL 9.1 known exploited http_server 2.4.29 · port 5000
CVE-2021-40438 CRITICAL 9.0 known exploited http_server 2.4.29 · port 5000
CVE-2019-0211 HIGH 7.8 known exploited http_server 2.4.29 · port 5000
CVE-2018-1312 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2021-26691 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2021-39275 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2021-44790 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2022-22720 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2022-23943 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2022-31813 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2023-25690 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2024-38474 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2024-38476 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2026-28780 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2026-29167 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2026-44631 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2026-56154 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2026-57941 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2026-59797 CRITICAL 9.8 http_server 2.4.29 · port 5000
CVE-2019-10082 CRITICAL 9.1 http_server 2.4.29 · port 5000
CVE-2022-22721 CRITICAL 9.1 http_server 2.4.29 · port 5000
CVE-2022-28615 CRITICAL 9.1 http_server 2.4.29 · port 5000
CVE-2026-42535 CRITICAL 9.1 http_server 2.4.29 · port 5000
CVE-2022-36760 CRITICAL 9.0 http_server 2.4.29 · port 5000
CVE-2026-24072 HIGH 8.8 http_server 2.4.29 · port 5000
CVE-2026-93546 HIGH 8.8 http_server 2.4.29 · port 5000
CVE-2025-58098 HIGH 8.3 http_server 2.4.29 · port 5000
CVE-2021-44224 HIGH 8.2 http_server 2.4.29 · port 5000
CVE-2017-15715 HIGH 8.1 http_server 2.4.29 · port 5000
CVE-2024-38473 HIGH 8.1 http_server 2.4.29 · port 5000
CVE-2026-73636 HIGH 8.1 http_server 2.4.29 · port 5000
CVE-2006-20001 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2017-15710 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2018-1303 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2018-1333 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2018-17199 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2019-0217 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2019-10081 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2019-9517 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2020-11993 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2020-9490 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2021-26690 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2021-33193 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2021-34798 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2022-22719 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2022-26377 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2022-29404 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2022-30556 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2023-31122 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2024-27316 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2024-38472 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2024-38477 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2024-39573 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2024-42516 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2024-43204 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2024-47252 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2025-49630 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2025-53020 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2025-59775 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-29169 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-34059 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-34355 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-34356 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-42536 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-46729 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-48005 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-49975 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-56153 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-56449 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-59685 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-63045 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-63292 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2026-63686 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2025-49812 HIGH 7.4 http_server 2.4.29 · port 5000
CVE-2020-35452 HIGH 7.3 http_server 2.4.29 · port 5000
CVE-2023-38709 HIGH 7.3 http_server 2.4.29 · port 5000
CVE-2026-44185 HIGH 7.3 http_server 2.4.29 · port 5000
CVE-2026-44186 HIGH 7.3 http_server 2.4.29 · port 5000
CVE-2026-73637 HIGH 7.3 http_server 2.4.29 · port 5000
CVE-2025-65082 MEDIUM 6.5 http_server 2.4.29 · port 5000
CVE-2026-33523 MEDIUM 6.5 http_server 2.4.29 · port 5000
CVE-2026-43951 MEDIUM 6.5 http_server 2.4.29 · port 5000
CVE-2024-24795 MEDIUM 6.3 http_server 2.4.29 · port 5000
CVE-2019-10092 MEDIUM 6.1 http_server 2.4.29 · port 5000
CVE-2019-10098 MEDIUM 6.1 http_server 2.4.29 · port 5000
CVE-2020-1927 MEDIUM 6.1 http_server 2.4.29 · port 5000
CVE-2026-29170 MEDIUM 6.1 http_server 2.4.29 · port 5000
CVE-2018-11763 MEDIUM 5.9 http_server 2.4.29 · port 5000
CVE-2018-1301 MEDIUM 5.9 http_server 2.4.29 · port 5000
CVE-2018-1302 MEDIUM 5.9 http_server 2.4.29 · port 5000
CVE-2023-45802 MEDIUM 5.9 http_server 2.4.29 · port 5000
CVE-2026-44119 MEDIUM 5.5 http_server 2.4.29 · port 5000
CVE-2025-66200 MEDIUM 5.4 http_server 2.4.29 · port 5000
CVE-2018-1283 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2018-17189 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2019-0196 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2019-0220 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2019-17567 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2020-1934 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2022-28614 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2022-37436 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2026-33007 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2026-33857 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2026-34032 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2026-58415 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2026-79768 MEDIUM 5.3 http_server 2.4.29 · port 5000
CVE-2026-33006 MEDIUM 4.8 http_server 2.4.29 · port 5000
CVE-2026-42528 MEDIUM 4.3 http_server 2.4.29 · port 5000
CVE-2026-42356 LOW 3.7 http_server 2.4.29 · port 5000
Only affects another platform (4)

These CVEs need a platform this host visibly does not run (for example a flaw of the Windows build on a Linux host). They are not counted.

CVEs by severity: HIGH 2 MEDIUM 2

CVESoftware
CVE-2024-40898 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2024-43394 HIGH 7.5 http_server 2.4.29 · port 5000
CVE-2020-13938 MEDIUM 5.5 http_server 2.4.29 · port 5000
CVE-2022-28330 MEDIUM 5.3 http_server 2.4.29 · port 5000

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.