OSN

Host

85.21.240.32

Tags: Remote access Self-signed certificate Expired certificate

As of our latest check on 2026-08-09, 85.21.240.32 (PJSC "Vimpelcom", AS8402, Russia) had 2 open ports (80, 3389) and 50 known CVEs, 3 known to be exploited.

Known CVEs on this host

2open ports
0names pointing here
50known CVEs
3known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-09.

CVEs by severity: CRITICAL 11 HIGH 16 MEDIUM 21 LOW 2

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
PJSC "Vimpelcom" AS8402
Open ports
80, 3389 · at our latest check, 2026-08-09
Location
Russia RU
Hostname
85-21-240-32.static.corbina.ru · reverse DNS, checked 2026-10-04
Route
85.21.240.0/24 · announced by PJSC "Vimpelcom" AS8402 no RPKI authorisation
Organisation
Corbina Telecom · Access network (cable / DSL / ISP)
Registry network
CORBINA-BROADBAND-STATIC · 85.21.240.0 - 85.21.240.255 · RIPE
Abuse contact
[email protected] · for CORBINA-BROADBAND-STATIC
First seen
2026-08-09 20:24 UTC
Last seen alive
2026-08-09 20:26 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (2)

80/tcp HTTP Microsoft-IIS/10.0 50 CVEs first 2026-08-09 · last 2026-08-09
Status
302 Found
Server
Microsoft-IIS/10.0
Powered by
PHP/8.2.8
Raw response 
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: /?controller=AuthController&action=login
Server: Microsoft-IIS/10.0
X-Powered-By: PHP/8.2.8
Set-Cookie: KB_SID=m4k49thho72ligqhpf5jdis6r0; path=/; HttpOnly
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; img-src * data:;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
X-Frame-Options: DENY
X-Powered-By: ASP.NET
Date: Sun, 09 Aug 2026 20:25:20 GMT
Content-Length: 0
3389/tcp TLS first 2026-08-09 · last 2026-08-09
TLS
TLSv1.2
Certificate for
SERVER.home.local
Issued by
SERVER.home.local
Valid
2026-04-18 → 2026-10-18
Note
self-signed certificate
Raw response 
IMjx�0t�u�UAwG�����HٛpJ_��d�l̚ S��3�}��vg-��5cC�L&�UwO5����0��0�ΠN����o�B*���W0
	*�H��
010USERVER.home.local0
260418154755Z
261018154755Z010USERVER.home.local0�"0
	*�H��
�0�
�ۚ\��U>��Jۍ��R���lDt v({�ӽ^: N*s�ul�l'I�cn��凟y��,��8�����+�V7tL2�v{Y� >�������n�sA9'�"�Y��q(���|��%�1E��+,��h�[�O��#���X[���j7b�7��W%�[�E_�\O����3G�+b�#:H�[;�2���q}e����8>H��|��|\yJZ��:y-)�L"���Oi��`���R!8�}1�j��$0"0U%0
+0U00
	*�H��
����i%(�:������w�»V��m�6����VMJ/1�5�`���M4;B�����'d@w$���{����9^#�i#9�`������N*���8���AS�<�����F�	���Wt�lj�������Ħe 2S��?�*�{iS����e��Ȃ�p�	�)��bH...<truncated>

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Report an issue with this page