46.28.89.250 — 3 open ports, 0 known CVEs, network JSC "ER-Telecom Holding"

Known CVEs on this host

3open ports

0names pointing here

0known CVEs

0known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-28.

No known CVEs now

Not counted: 6 on a distribution build — the fix may be backported (nginx 1.18.0). See them

Network: JSC "ER-Telecom Holding" AS25227
Open ports: 21, 80, 443 · at our latest check, 2026-06-28
Location: Russia RU
Route: 46.28.88.0/22 · announced by JSC "ER-Telecom Holding" AS25227 no RPKI authorisation
Organisation: JSC Avantel · Access network (cable / DSL / ISP)
Registry network: Avantel-Moscow · 46.28.89.0 - 46.28.89.255 · RIPE
Abuse contact: [email protected] · for Avantel-Moscow
First seen: 2026-06-28 09:17 UTC
Last seen alive: 2026-06-28 09:20 UTC
Hosted domains: No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (3)

21/tcp FTP first 2026-06-28 · last 2026-06-28

Banner: 220 Gene6 FTP Server v3.10.0 (Build 2) ready...

Raw response

220 Gene6 FTP Server v3.10.0 (Build 2) ready...

80/tcp HTTP nginx/1.18.0 (Ubuntu) first 2026-06-28 · last 2026-06-28

Status: 301 Moved Permanently
Title: 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)

Raw response

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 28 Jun 2026 09:17:50 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://46.28.89.250/

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>

443/tcp TLS first 2026-06-28 · last 2026-06-28

TLS: TLSv1.2
Certificate for: corporate.curs.ru
Issued by: YR1
Valid: 2026-06-05 → 2026-09-03

Raw response

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 28 Jun 2026 09:17:51 GMT
Content-Type: text/html
Content-Length: 666
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Distribution build — the fix may be backported (6)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.

CVEs by severity: HIGH 5 MEDIUM 1

CVE	Software
CVE-2023-44487 HIGH 7.5 known exploited	nginx 1.18.0 · port 80
CVE-2022-41741 HIGH 7.8	nginx 1.18.0 · port 80
CVE-2021-23017 HIGH 7.7	nginx 1.18.0 · port 80
CVE-2021-3618 HIGH 7.4	nginx 1.18.0 · port 80
CVE-2022-41742 HIGH 7.1	nginx 1.18.0 · port 80
CVE-2025-23419 MEDIUM 5.3	nginx 1.18.0 · port 80

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Report an issue with this page