5.166.219.127 — 3 open ports, 62 known CVEs, network JSC "ER-Telecom Holding"

Known CVEs on this host

3open ports

0names pointing here

62known CVEs

0known exploited

Open ports and CVEs as of our latest check of this host, 2026-06-13.

CVEs by severity: CRITICAL 2 HIGH 16 MEDIUM 29 LOW 15

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 14 on a distribution build — the fix may be backported (nginx 1.10.3). See them

Network: JSC "ER-Telecom Holding" AS42682
Open ports: 22, 80, 443 · at our latest check, 2026-06-13
Location: Russia RU
Hostname: 5x166x219x127.static-business.nn.ertelecom.ru · reverse DNS, checked 2026-10-05
Route: 5.166.192.0/19 · announced by JSC "ER-Telecom Holding" AS42682 no RPKI authorisation
Organisation: JSC "ER-Telecom Holding"
Registry network: ERTH-NNOV-PPPOE-62-NET · 5.166.216.0 - 5.166.223.255 · RIPE
Abuse contact: [email protected] · for ERTH-NNOV-PPPOE-62-NET
First seen: 2026-06-13 19:19 UTC
Last seen alive: 2026-06-13 19:20 UTC
Hosted domains: No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (3)

22/tcp SSH OpenSSH_5.9 62 CVEs first 2026-06-13 · last 2026-06-13

Server: SSH-2.0-OpenSSH_5.9
Host key: ecdsa-sha2-nistp256 322f53fea39d58a8…

Raw response

SSH-2.0-OpenSSH_5.9

80/tcp HTTP nginx/1.10.3 (Ubuntu) first 2026-06-13 · last 2026-06-13

Status: 301 Moved Permanently
Title: 301 Moved Permanently
Server: nginx/1.10.3 (Ubuntu)

Raw response

HTTP/1.1 301 Moved Permanently
Server: nginx/1.10.3 (Ubuntu)
Date: Sat, 13 Jun 2026 19:19:08 GMT
Content-Type: text/html
Content-Length: 194
Connection: keep-alive
Location: https://nn.api.resanta.ru/

<html>
<head><title>301 Moved Permanently</title></head>
<body bgcolor="white">
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.10.3 (Ubuntu)</center>
</body>
</html>

443/tcp TLS first 2026-06-13 · last 2026-06-13

TLS: TLSv1.2
Certificate for: nn.api.resanta.ru
Issued by: R12
Valid: 2026-05-12 → 2026-08-10

Raw response

HTTP/1.1 400 Bad Request
Server: nginx/1.10.3 (Ubuntu)
Date: Sat, 13 Jun 2026 19:19:08 GMT
Content-Type: text/html
Content-Length: 682
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body bgcolor="white">
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.10.3 (Ubuntu)</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Vulnerabilities

Distribution build — the fix may be backported (14)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted. 1 of them is known to be exploited.

CVEs by severity: CRITICAL 1 HIGH 10 MEDIUM 3

CVE	Software
CVE-2023-44487 HIGH 7.5 known exploited	nginx 1.10.3 · port 80
CVE-2017-20005 CRITICAL 9.8	nginx 1.10.3 · port 80
CVE-2022-41741 HIGH 7.8	nginx 1.10.3 · port 80
CVE-2021-23017 HIGH 7.7	nginx 1.10.3 · port 80
CVE-2017-7529 HIGH 7.5	nginx 1.10.3 · port 80
CVE-2018-16843 HIGH 7.5	nginx 1.10.3 · port 80
CVE-2018-16844 HIGH 7.5	nginx 1.10.3 · port 80
CVE-2019-9511 HIGH 7.5	nginx 1.10.3 · port 80
CVE-2019-9513 HIGH 7.5	nginx 1.10.3 · port 80
CVE-2021-3618 HIGH 7.4	nginx 1.10.3 · port 80
CVE-2022-41742 HIGH 7.1	nginx 1.10.3 · port 80
CVE-2019-9516 MEDIUM 6.5	nginx 1.10.3 · port 80
CVE-2018-16845 MEDIUM 6.1	nginx 1.10.3 · port 80
CVE-2019-20372 MEDIUM 5.3	nginx 1.10.3 · port 80

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Report an issue with this page