OSN

Host

45.132.16.3

Tags: Database Remote access Self-signed certificate

As of our latest check on 2026-06-27, 45.132.16.3 (IQWeb FZ-LLC, AS59692, Russia) had 5 open ports (80, 443, 3306, 3389, 5432) and 266 known CVEs, 2 known to be exploited.

Known CVEs on this host

5open ports
1name pointing here
266known CVEs
2known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-27.

CVEs by severity: CRITICAL 5 HIGH 12 MEDIUM 231 LOW 18

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 2 only affect a particular platform; this host's is not known (php 8.1.17). See them

Network
IQWeb FZ-LLC AS59692
Open ports
80, 443, 3306, 3389, 5432 · at our latest check, 2026-06-27
Location
Moscow, RU-MOW · Russia RU
Route
45.132.16.0/24 · announced by IQWeb FZ-LLC AS59692 and others no RPKI authorisation
Organisation
IQWeb FZ LLC
Registry network
RU-RUVDS-20190909 · 45.132.16.0 - 45.132.16.255 · RIPE
Abuse contact
[email protected] · for RU-RUVDS-20190909
First seen
2026-06-27 16:12 UTC
Last seen alive
2026-06-27 16:15 UTC
Hosted domains
1 name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (5)

80/tcp HTTP ddos-guard 30 CVEs first 2026-06-27 · last 2026-06-27
Status
200 OK
Server
ddos-guard
Powered by
PHP/8.1.17
Raw response 
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: __ddg8_=cN2IUmyrsrYDq4Tw; Domain=.16.3; Path=/; Expires=Sat, 27-Jun-2026 16:32:59 GMT
Set-Cookie: __ddg10_=1782576779; Domain=.16.3; Path=/; Expires=Sat, 27-Jun-2026 16:32:59 GMT
Set-Cookie: __ddg9_=192.227.206.227; Domain=.16.3; Path=/; Expires=Sat, 27-Jun-2026 16:32:59 GMT
Set-Cookie: __ddg1_=HfjfkG91lE2mPBMXMMoU; Domain=.16.3; HttpOnly; Path=/; Expires=Sun, 27-Jun-2027 16:12:59 GMT
Date: Sat, 27 Jun 2026 16:12:59 GMT
X-Powered-By: PHP/8.1.17
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked

0
443/tcp TLS first 2026-06-27 · last 2026-06-27
TLS
TLSv1.2
Issued by
ddos-guard
Valid
2018-03-28 → 2028-03-25
Note
self-signed certificate
Raw response 
YU�o�<�&�1:���(�qG
k]�DOWNGRD >!���|r���T���B��^��������C�$�/
�����0��0��	�p:���|	0
	*�H��
0.10	UEU1
0U*10U

ddos-guard0
180328192613Z
280325192613Z0.10	UEU1
0U*10U

ddos-guard0�"0
	*�H��
�0�
�̬�X�JS�H=jx6����]F4l>�����B'?��?-��+��E]�p��U�t/������“L����#(sƒA����_Wr�:x�}�<8�)���x��SNp���) t�B5��=�U>�y�!�.�z#���|x��/�;�Y��Hz��k��Y�X��u|���/�4Ȯ�M�P���l簦�m�k�~��&�d�ق��&����Ξ��%̻�R��"Ϟ�;��`̈́���g!��))蓔$��9�{0
	*�H��
�1v%n�	��_w��4r�]7�>1���׹�Q��.���5lH�I�FZ/��R����-��0]���+�-Шl�ٞtS=�n{f�\�Dp=��.>v��x��+|�����.��y9Z���p���s�ZQ]�󯄔���2���̂4Z����...<truncated>
3306/tcp MYSQL mysql 8.0.33 236 CVEs first 2026-06-27 · last 2026-06-27
Protocol
8.0.33
Raw response 
J
8.0.33-�[+HaJ�����BS=&*)N
jcaching_sha2_password
3389/tcp TLS first 2026-06-27 · last 2026-06-27
TLS
TLSv1.2
Certificate for
WIN-YJ9K3Z3IGIX
Issued by
WIN-YJ9K3Z3IGIX
Valid
2026-02-06 → 2026-08-08
Note
self-signed certificate
Raw response 
�Mj?����	W2�8�"t��S1� |B�9+��� g307a���"�eۧe���)��������/����0��0�ʠk�A!t�Ae.r���0
	*�H��
010UWIN-YJ9K3Z3IGIX0
260206101549Z
260808101549Z010UWIN-YJ9K3Z3IGIX0�"0
	*�H��
�0�
��rUy��)¯�G�
��e���o��e����QE������t�۪�!~8��/��"34g)Ĉ5/웿�zC��f�b/��kJ�o�,�D,?�$%�z��L�J��jF�A #%��[;*b*\K4���<d�+`��Z��D*n�F��%�E����al(��
��I��mɆ^������TFý��Og���Co��ْ33x�V��;�I��5!c�M??����K�f�m�a�2��@N2�Ʈ�
�3���]O�anߛ�,)jy���$0"0U%0
+0U00
	*�H��
��(�b%oU��L���Ɖ�����=��kѩ����G�IB�+���%G��_3�����2v���4�����\A��hYVK�|Fd�Or���+ӕ�
Ѡ������{V({��:�?Ѩ��<����G��@@[�_��,]}-�...<truncated>
5432/tcp POSTGRES first 2026-06-27 · last 2026-06-27
Protocol
S�����VFATALC0A000M���������������� �������� ����������� ���������� 0.0; ������ ������������ 3.0 - 3.0Fpostmaster.cL2145RProcessStartupPacket
Raw response 
N

Vulnerabilities

Only affects certain platforms (2)

These CVEs only apply when the software runs on a particular platform (for example Windows), and this host's platform is not known. They are not counted. 1 of them is known to be exploited.

CVEs by severity: CRITICAL 2

CVESoftware
CVE-2024-4577 CRITICAL 9.8 known exploited php 8.1.17 · port 80
CVE-2024-3566 CRITICAL 9.8 php 8.1.17 · port 80

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Hostnames pointing to this address

1 name · as answered by each domain's own name servers

fininspector24.comfirst seen 2026-10-12
Report an issue with this page