Host

85.209.148.163

Tags: Database Remote access Expired certificate

As of our latest check on 2026-08-10, 85.209.148.163 (Support Chain LLC, AS60591, Belarus) had 4 open ports (443, 3306, 3389, 8080) and 43 known CVEs.

Known CVEs on this host

4open ports
1name pointing here
43known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-10.

CVEs by severity: MEDIUM 42 LOW 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
Support Chain LLC AS60591
Open ports
443, 3306, 3389, 8080 · at our latest check, 2026-08-10
Location
Belarus BY
Hostname
163.148.209.85.static.hostflyby.net · reverse DNS, checked 2026-10-04
Route
85.209.148.0/24 · announced by Support Chain LLC AS60591 no RPKI authorisation
Organisation
Support Chain LLC
Registry network
BY-SUPPORTCHAIN · 85.209.148.128 - 85.209.148.255 · RIPE
Abuse contact
[email protected] · for BY-SUPPORTCHAIN
First seen
2026-08-10 06:47 UTC
Last seen alive
2026-08-10 06:50 UTC
Hosted domains
1 name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (4)

443/tcp TLS first 2026-08-10 · last 2026-08-10
TLS
TLSv1.2
Certificate for
*.athleticsport.by, athleticsport.by
Issued by
GlobalSign GCC R6 AlphaSSL CA 2025
Valid
2026-04-07 → 2026-10-23
Raw response
HTTP/1.1 400 Bad Request
Server: nginx/1.20.1
Date: Mon, 10 Aug 2026 06:47:57 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.20.1</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
3306/tcp MYSQL mysql 8.2.0 43 CVEs first 2026-08-10 · last 2026-08-10
Protocol
8.2.0
Raw response
I
8.2.0Q'ME(3�����Iwr]L%|g;caching_sha2_password
3389/tcp TLS first 2026-08-10 · last 2026-08-10
TLS
TLSv1.2
Certificate for
sportshop
Issued by
sportshop
Valid
2026-05-05 → 2026-11-04
Note
self-signed certificate
Raw response
�Mjyt!V �K��{�^�e6����h5��k�� �J�b�¨_Յ����A��frp�٫?���/����0��0���cˋ��T�H�V��с0
	*�H��
010U	sportshop0
260505160054Z
261104160054Z010U	sportshop0�"0
	*�H��
�0�
�����X�Z�c{�e��b���B�E�D���y+O������>*R�w���C�P��~��C�/Y��fOm��ŬVJ|v��\�-�֔8),ג��Id�Fk޵�V���8:�Ny/�=`���A
�s�*_i��
�ri?x�q5�x�k���l"aO���{��-�	�*�׭oDr�up�
´Bx�
f�&�'2U�w�W�\ү� 'կ"�;���19�G���y�m!"OEet�I��RP/_��pf�#|a�$0"0U%0
+0U00
	*�H��
��g�s���2:�8��_�,<++★�)�,�����A�BV�r@'<ia})TX�����9+��W|Ĝ���x,X�IT=1�����u���4��A��eؼ�i�謸	W,��:w-V��~]�o��Rq�U�ᑞx�ܔ��!Q��^�}����G�tiD�������A8h�k�r�...<truncated>
8080/tcp HTTP first 2026-08-10 · last 2026-08-10
Status
404
Raw response
HTTP/1.1 404 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/json
Transfer-Encoding: chunked
Date: Mon, 10 Aug 2026 06:47:57 GMT

47
{"timestamp":1786344477749,"status":404,"error":"Not Found","path":"/"}

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Hostnames pointing to this address

1 name · as answered by each domain's own name servers

athleticsport.byfirst seen 2026-10-03