Host

95.67.9.102

Tags: Remote access Self-signed certificate

As of our latest check on 2026-08-13, 95.67.9.102 (Cosmonova LLC, AS34867, Ukraine) had 2 open ports (80, 3389) and 1 known CVE.

Known CVEs on this host

2open ports
0names pointing here
1known CVE
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-13.

CVEs by severity: MEDIUM 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
Cosmonova LLC AS34867
Open ports
80, 3389 · at our latest check, 2026-08-13
Location
Ukraine UA
Route
95.67.0.0/17 · announced by Cosmonova LLC AS34867 RPKI valid
Organisation
Cosmonova LLC · Access network (cable / DSL / ISP)
Registry network
UA-CMNV-20091130 · 95.67.0.0 - 95.67.127.255 · Cosmonova LLC · RIPE
Abuse contact
[email protected] · for UA-CMNV-20091130
First seen
2026-08-13 18:23 UTC
Last seen alive
2026-08-13 18:26 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (2)

80/tcp HTTP Microsoft-IIS/8.5 1 CVE first 2026-08-13 · last 2026-08-13
Status
200 OK
Title
IIS Windows Server
Server
Microsoft-IIS/8.5
Raw response
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Sun, 16 Apr 2017 09:37:57 GMT
Accept-Ranges: bytes
ETag: "8d9d492195b6d21:0"
Server: Microsoft-IIS/8.5
Date: Thu, 13 Aug 2026 18:23:58 GMT
Content-Length: 701

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IIS Windows Server</title>
<style type="text/css">
<!--
body {
	color:#000000;
	background-color:#0072C6;
	margin:0;
}

#container {
	margin-left:auto;
	margin-right:auto;
	text-align:center;
	}

a img {
	border:none;
}

-->
</style>
</head>
<body>
<div id="container">
<a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iis-85.png" alt="IIS" width="960" height="600" /></a>
</div>
</body>
</html>
3389/tcp TLS first 2026-08-13 · last 2026-08-13
TLS
TLSv1.2
Certificate for
WIN-HD5OEUTI4KN
Issued by
WIN-HD5OEUTI4KN
Valid
2026-06-23 → 2026-12-23
Note
self-signed certificate
Raw response
�Mj~�n�ļy�2Mz:�l�B.�+��a�[ �Y���}@�^�rk���H�m4�B�������0��0�ʠ.�e�`5]�O�@��!�	0
	*�H��
010UWIN-HD5OEUTI4KN0
260623141706Z
261223141706Z010UWIN-HD5OEUTI4KN0�"0
	*�H��
�0�
��>����a9��:�zy�F��~$f�b?��&�dz~ѽ��y����C���\��E]:��Rì�Lhk��m����11�>�X�}�#z�w�t�H��� ���N-�"[N��%�(�`vp蟂�~xq�Ν�̠��?.�Ѥ���������^Zr	�>��>��/RA�G�LM2~����D�WbŢ�	y�~��;	Y�o�"�D�N}�əQ�*���6t�k��3$������+.i�17e�/7�wI�[w�@B�0$"1�$0"0U%0
+0U00
	*�H��
��"U8���Q`��s���~���	�o(�bE�?��S�e!CXU���ˍ���,p�������Y�>���,�8�Ϩ*Z?�Sbw~���r�:lk~㫭�#]���+���{�x�%���h���Ţ�D��r�s��W6h��DYRmQ�ON��[@...<truncated>

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.