Host

94.181.32.228

Tags: Remote access Self-signed certificate

As of our latest check on 2026-08-13, 94.181.32.228 (JSC "ER-Telecom Holding", AS41661, Russia) had 2 open ports (80, 3389) and 1 known CVE.

Known CVEs on this host

2open ports
0names pointing here
1known CVE
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-13.

CVEs by severity: MEDIUM 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
JSC "ER-Telecom Holding" AS41661
Open ports
80, 3389 · at our latest check, 2026-08-13
Location
Russia RU
Hostname
94x181x32x228.static-business.chel.ertelecom.ru · reverse DNS, checked 2026-10-04
Route
94.181.32.0/20 · announced by JSC "ER-Telecom Holding" AS41661 no RPKI authorisation
Organisation
JSC "ER-Telecom Holding"
Registry network
ERTH-CHEL-94-181-32 · 94.181.32.0 - 94.181.47.255 · RIPE
Abuse contact
[email protected] · for ERTH-CHEL-94-181-32
First seen
2026-08-13 05:06 UTC
Last seen alive
2026-08-13 05:09 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (2)

80/tcp HTTP Microsoft-IIS/8.5 1 CVE first 2026-08-13 · last 2026-08-13
Status
200 OK
Title
IIS Windows Server
Server
Microsoft-IIS/8.5
Powered by
ASP.NET
Raw response
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Fri, 24 Dec 2021 08:28:46 GMT
Accept-Ranges: bytes
ETag: "db9cca44a0f8d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 13 Aug 2026 05:07:12 GMT
Content-Length: 701

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IIS Windows Server</title>
<style type="text/css">
<!--
body {
	color:#000000;
	background-color:#0072C6;
	margin:0;
}

#container {
	margin-left:auto;
	margin-right:auto;
	text-align:center;
	}

a img {
	border:none;
}

-->
</style>
</head>
<body>
<div id="container">
<a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iis-85.png" alt="IIS" width="960" height="600" /></a>
</div>
</body>
</html>
3389/tcp TLS first 2026-08-13 · last 2026-08-13
TLS
TLSv1.2
Certificate for
WIN-S88M7EAT537
Issued by
WIN-S88M7EAT537
Valid
2026-07-13 → 2027-01-12
Note
self-signed certificate
Raw response
�Mj}Q		WPw�]}z׭g��}!��¯=O� ��#��[gnXMBM�P!-���ݔ9�?�����0��0�ʠj��y��A���cBIB0
	*�H��
010UWIN-S88M7EAT5370
260713190159Z
270112190159Z010UWIN-S88M7EAT5370�"0
	*�H��
�0�
�����}��_6{�7w�C��H��1�'W��
�h71։�G�|�G��3�g�����dP]�����P�{��&�\�ᒩ}P�=���5π�(�ֺ�
�Q��F�C>m���l4lUf������dT�Ҝ����9�-���~߳I"В�mT�t��*$&��\��C_��J	
��\�8�?Rp����/}/��46n�m*N%�ĸ|�o�5���ke���D�e�z��zV��a��,�EG�b����힍%r��״�1�$0"0U%0
+0U00
	*�H��
�J::��hP?��8��s��%��Ϡ��E\�����	��%���f޿�аߚJ��a�Yl���|Ο{�z�Ġ�����g�ۉ��q�%|�B�s䰾 eQJhnS��
�n ��;�Y*=4�[ZpY;x}dy��j$��������=Ǫ
�
�s{H�<�a>��n�...<truncated>

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.