45.33.32.0/24 security report

Certificate, security headers, email authentication, DNS, registration, and exposed hosts — from public sources.

72risk

Elevated

Several issues worth triaging this week.

1Critical

1High

4Medium

2Low

0Info

Collected 18 hours ago1.3sfrom cache

Certificate Transparency
DNS resolution
Network ownership0
CDN / WAF detection0
Exposed ports & CVEs12
Registration
DNS posture
Email authentication
Certificate
Security headers
Archived URLs
Analysis8

noteFound 256 addresses; enriching the first 12.
noteNetwork ownership lookup is unavailable in this runtime; ASN and org are omitted.
noteCDN/WAF detection is unavailable in this runtime.

Shodan matched these CVEs against the service banners it saw on 45.33.32.4 (mail.ai-helper.asia), which advertise nginx 1.14.0, openssh 7.6p1. These are version-fingerprint matches, not confirmed exploits: a distribution may have back-ported the fix while leaving the banner unchanged. Severity reflects the volume of known issues associated with this host, not a CVSS score. CVE-2025-23419 CVE-2023-44487 CVE-2021-23017 CVE-2021-3618 CVE-2019-20372 CVE-2019-9516 CVE-2019-9513 CVE-2019-9511 CVE-2018-16845 CVE-2018-16844 CVE-2018-16843
What to do
Confirm the running versions on 45.33.32.4 and compare them against the current security release for each package before treating any single CVE as live.
CVE-2025-23419 ↗CVE-2023-44487 ↗CVE-2021-23017 ↗CVE-2021-3618 ↗CVE-2019-20372 ↗
asset: 45.33.32.4
Shodan matched these CVEs against the service banners it saw on 45.33.32.9 (zllr.net), which advertise nginx 1.14.2. These are version-fingerprint matches, not confirmed exploits: a distribution may have back-ported the fix while leaving the banner unchanged. Severity reflects the volume of known issues associated with this host, not a CVSS score. CVE-2025-23419 CVE-2023-44487 CVE-2021-23017 CVE-2021-3618 CVE-2019-20372 CVE-2019-9516 CVE-2019-9513 CVE-2019-9511 CVE-2018-16845
What to do
Confirm the running versions on 45.33.32.9 and compare them against the current security release for each package before treating any single CVE as live.
CVE-2025-23419 ↗CVE-2023-44487 ↗CVE-2021-23017 ↗CVE-2021-3618 ↗CVE-2019-20372 ↗
asset: 45.33.32.9
45.33.32.4 (mail.ai-helper.asia) reports nginx 1.14.0, openssh 7.6p1. Publishing precise versions lets anyone match the host against a CVE feed without probing it, which is how targets get shortlisted for mass exploitation after a new advisory lands.
What to do
Suppress version tokens in server banners (for example `ServerTokens Prod` in Apache) and keep the packages current.
asset: 45.33.32.4
Public SSH invites credential stuffing and key brute force.
What to do
Restrict 22/tcp to a VPN, bastion, or allow-listed source range.
asset: 45.33.32.4:22
Public SSH invites credential stuffing and key brute force.
What to do
Restrict 22/tcp to a VPN, bastion, or allow-listed source range.
asset: 45.33.32.5:22
45.33.32.9 (zllr.net) reports nginx 1.14.2. Publishing precise versions lets anyone match the host against a CVE feed without probing it, which is how targets get shortlisted for mass exploitation after a new advisory lands.
What to do
Suppress version tokens in server banners (for example `ServerTokens Prod` in Apache) and keep the packages current.
asset: 45.33.32.9
Check it is not an open relay.
What to do
Restrict 25/tcp to a VPN, bastion, or allow-listed source range.
asset: 45.33.32.4:25
45.33.32.5 (45-33-32-5.ip.linodeusercontent.com) reports openssh 8.4p1. Publishing precise versions lets anyone match the host against a CVE feed without probing it, which is how targets get shortlisted for mass exploitation after a new advisory lands.
What to do
Suppress version tokens in server banners (for example `ServerTokens Prod` in Apache) and keep the packages current.
asset: 45.33.32.5

Address	Ports	CVEs	Edge	Network
45.33.32.4 mail.ai-helper.asia +2	222580443993	11	direct	—
45.33.32.5 45-33-32-5.ip.linodeusercontent.com	22808080	0	direct	—
45.33.32.9 zllr.net +1	80443	9	direct	—
45.33.32.10 trillium.issoasis.com +1	80443	0	direct	—
45.33.32.0	none known	0	direct	—
45.33.32.1	none known	0	direct	—
45.33.32.2	none known	0	direct	—
45.33.32.3	none known	0	direct	—
45.33.32.6	none known	0	direct	—
45.33.32.7	none known	0	direct	—
45.33.32.8	none known	0	direct	—
45.33.32.11	none known	0	direct	—

45.33.32.0/24 security report

Elevated

Findings

Hosts