GeneralInformation

Hostnames	interrrgztrries.bronnylebron.com
Domains	bronnylebron.com
Country	Spain
City	Madrid
Organization	EGIHosting
ISP	NTT America, Inc.
ASN	AS2914

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(3)

CVE-2024-11236

9.8In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

CVE-2024-11234

4.8In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.

CVE-2024-11233

4.8In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.

2013(1)

CVE-2013-2220

7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

2007(1)

CVE-2007-3205

5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

21 25 80 3306 33060

21 / tcp

421844285 | 2025-02-28T06:12:38.469418

220 (vsFTPd 3.0.3)
530 Login incorrect.
530 Please login with USER and PASS.
211-Features:
 EPRT
 EPSV
 MDTM
 PASV
 REST STREAM
 SIZE
 TVFS
 UTF8
211 End

25 / tcp

-957770719 | 2025-03-14T18:32:21.931910

220 localhost.localdomain.com ESMTP Sendmail 8.15.2/8.15.2; Fri, 14 Mar 2025 14:32:06 -0400
250-localhost.localdomain.com Hello 224.48.251.13 [224.48.251.13], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-STARTTLS
250-DELIVERBY
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19787 (0x4d4b)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=--, ST=SomeState, L=SomeCity, O=SomeOrganization, OU=SomeOrganizationalUnit, CN=genxlead19776/emailAddress=root@genxlead19776
        Validity
            Not Before: Jul  9 10:01:05 2024 GMT
            Not After : Jul  9 10:01:05 2025 GMT
        Subject: C=--, ST=SomeState, L=SomeCity, O=SomeOrganization, OU=SomeOrganizationalUnit, CN=genxlead19776/emailAddress=root@genxlead19776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:d3:8e:42:29:fb:97:a8:20:ff:97:ff:71:20:c6:
                    29:45:bd:72:4f:b1:00:69:47:26:0d:66:5e:f3:8f:
                    90:3e:6e:f5:b5:b8:5d:8f:71:12:f9:cf:16:6f:3c:
                    d2:48:55:9a:3e:19:c8:b9:60:7d:e9:36:34:34:b9:
                    35:f1:df:12:59:b2:f2:ef:28:f0:23:f3:3d:36:64:
                    eb:d7:0b:25:3e:56:15:b9:ac:e4:68:d4:a2:f1:ea:
                    43:3a:3a:85:88:99:ad:35:97:2e:8f:93:83:bd:ed:
                    85:25:6e:c6:55:d2:08:f4:c1:ae:c0:58:d1:83:61:
                    03:9f:6e:5d:93:61:28:5c:9d:80:32:4a:8a:27:9c:
                    bb:09:6a:97:b1:0a:1f:ae:5a:fd:e8:68:5a:9c:5f:
                    b8:01:80:52:b0:ba:e1:17:b8:d4:4d:8e:52:03:91:
                    e0:77:71:54:f3:a1:73:e4:0f:4f:b1:e2:fe:9b:12:
                    34:cf:ed:4b:98:01:97:07:84:9f:14:e0:93:54:f4:
                    3f:0a:2c:db:b2:2c:3f:bf:1d:01:39:c2:d8:80:a2:
                    88:3d:c0:bb:cf:59:ba:f6:b5:9e:9f:77:22:12:b1:
                    e9:f7:4b:48:dc:fd:43:1d:9c:7c:63:16:03:66:05:
                    00:cf:a6:36:46:b7:e5:84:87:62:1f:bd:c9:e1:3c:
                    0c:ca:f6:82:8e:ae:d9:e5:0b:85:0c:84:b0:2c:3f:
                    66:54:ef:2c:3c:a9:92:92:a4:a9:87:ce:ed:72:c1:
                    e4:55:ef:db:4f:d8:be:c2:db:b7:80:10:11:f8:8d:
                    c3:5a:88:70:2c:73:7a:2a:6a:f6:b2:62:41:32:5f:
                    4a:f3:26:30:23:e8:9f:ea:fe:a8:50:85:29:26:bb:
                    ef:34:fa:88:c3:a3:09:4d:f8:9c:58:a5:5a:54:e9:
                    a1:ce:93:4c:14:61:2f:04:e6:87:51:51:9b:d4:52:
                    8a:0e:50:f0:75:9b:b9:6f:c9:26:4c:36:a0:58:d0:
                    0f:01:0b:31:58:67:b3:81:49:1e:d1:00:dd:c7:c4:
                    2b:f8:8e:c7:9f:a3:b7:2d:d9:26:63:9f:f1:95:8c:
                    83:c9:bb:05:00:99:cd:54:69:c5:cb:db:6d:3c:ff:
                    d4:af:91:22:3d:cc:26:93:bd:2b:fa:42:2c:58:ed:
                    31:74:d7:93:c6:ce:1a:ed:ed:d8:93:84:37:cf:2e:
                    28:0e:77:04:cb:96:55:73:0f:43:fe:12:88:cb:a6:
                    77:c5:c9:b7:ea:0b:b4:7d:68:bc:6d:cc:7a:40:c8:
                    f6:5e:f5:13:87:45:0e:42:6f:d2:ee:1d:c6:da:76:
                    72:01:cc:fe:2f:f9:ff:4d:ef:d9:98:90:f4:d7:b7:
                    cd:0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                46:7C:B0:36:73:FC:CD:85:EF:00:F5:0A:8E:4C:F9:E8:65:CE:BB:C0
            X509v3 Authority Key Identifier: 
                46:7C:B0:36:73:FC:CD:85:EF:00:F5:0A:8E:4C:F9:E8:65:CE:BB:C0
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b2:7c:84:ba:01:5d:c5:e3:b8:1c:fb:3a:0d:e3:0a:e5:4c:03:
        7e:4c:10:1c:de:24:55:bd:3f:08:37:64:93:1e:0d:30:d3:c5:
        84:47:0f:d3:af:13:ec:d4:1d:6b:79:78:fb:ff:8b:a8:53:5b:
        ad:00:ee:6d:69:60:e4:1e:63:11:87:3b:a9:76:ef:88:d2:1a:
        12:15:8c:87:89:26:7d:d4:3e:0f:1f:db:11:b8:20:2a:3a:98:
        ae:07:0e:80:d8:2b:75:4b:a5:fc:b0:79:f3:56:90:f4:d6:9d:
        6e:e7:78:b1:d0:b3:65:a2:30:a2:80:bb:44:77:01:f5:1e:7a:
        66:85:88:3e:2f:72:f7:ea:45:ea:43:d4:43:84:df:cf:14:75:
        70:1f:6a:a7:ad:22:b1:fb:27:f9:a8:dd:76:03:05:9c:44:c2:
        83:55:36:66:cf:4b:3b:6f:ed:b3:2f:73:57:91:2e:98:10:68:
        9e:89:79:10:1d:72:fd:6a:3c:b9:a9:0d:9a:5a:3f:ff:ad:51:
        2b:e3:d8:b8:00:88:1b:5d:78:70:b4:e1:ce:82:0b:62:67:f6:
        5d:e0:52:a7:cd:9f:49:33:8c:c4:e4:2e:42:f2:b3:c4:c5:ef:
        0b:de:7b:d2:0f:51:b1:04:c3:1f:c4:6f:7b:29:50:93:4c:f6:
        eb:80:d8:3c:c9:04:77:ab:cb:12:cb:7d:19:4d:f9:5d:8f:37:
        89:0a:ba:ae:4a:ed:1c:48:2e:4a:2e:b2:54:cb:55:51:1c:41:
        66:91:d7:86:4f:e1:12:3d:e2:d0:27:51:0b:a3:d4:44:13:3f:
        3f:8b:d2:73:43:8d:6e:b7:9c:a0:86:b2:13:ff:e2:16:c5:c1:
        df:11:35:4b:15:a4:aa:62:93:c1:e7:f5:af:2e:be:ca:e1:0a:
        c3:c3:15:3d:0f:85:58:42:e0:4a:1b:59:e6:c9:78:43:4b:b8:
        c7:60:f4:e1:01:0e:a5:c6:66:b2:90:79:b5:79:65:c6:e3:d5:
        73:28:e1:cf:94:d8:dc:32:93:18:96:78:33:87:9b:d8:91:1b:
        fa:13:67:01:dd:d8:99:5c:81:24:f5:62:a3:29:84:a5:57:77:
        c3:d1:8d:55:fe:49:84:2b:97:84:23:d2:c3:6e:67:3e:3c:06:
        ee:46:e8:0b:ca:ab:82:d1:b1:be:cf:f9:c3:4b:f5:b2:7c:86:
        a8:b8:5b:5a:a5:50:77:c8:6e:ac:c0:8a:f1:ae:80:a8:82:db:
        98:a8:7b:ba:d2:e7:4b:a5:71:3a:4b:f3:18:64:19:b5:db:06:
        5d:25:bd:f8:e6:00:01:ea:ce:29:bf:11:b4:5a:e4:b1:55:59:
        f6:71:08:4d:68:46:0b:b6

80 / tcp

-330076588 | 2025-03-06T06:20:04.733504

Hashes

hash

1414431130

http.dom_hash

783940959

http.html_hash

-330076588

http.server_hash

-1340961475

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Mar 2025 06:20:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/8.2.24

Vulnerabilities

1 1 3

3306 / tcp

1730917570 | 2025-03-21T19:55:32.197708

MySQL:
  Error Message: Host '224.161.245.238' is not allowed to connect to this MySQL server
  Error Code: 1130

33060 / tcp

-795948505 | 2025-03-26T23:47:04.938897

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

104.253.99.14

Last Seen: 2025-03-26

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

21 / tcp

421844285 | 2025-02-28T06:12:38.469418

25 / tcp

-957770719 | 2025-03-14T18:32:21.931910

Sendmail8.15.2/8.15.2

80 / tcp

-330076588 | 2025-03-06T06:20:04.733504

Hashes

nginx

3306 / tcp

1730917570 | 2025-03-21T19:55:32.197708

MySQL

33060 / tcp

-795948505 | 2025-03-26T23:47:04.938897

MySQL X Protocol

Products

Pricing

Contact Us

104.253.99.14

Last Seen: 2025-03-26

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

21 / tcp 421844285 | 2025-02-28T06:12:38.469418

25 / tcp -957770719 | 2025-03-14T18:32:21.931910

Sendmail8.15.2/8.15.2

80 / tcp -330076588 | 2025-03-06T06:20:04.733504

Hashes

nginx

3306 / tcp 1730917570 | 2025-03-21T19:55:32.197708

MySQL

33060 / tcp -795948505 | 2025-03-26T23:47:04.938897

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

421844285 | 2025-02-28T06:12:38.469418

25 / tcp

-957770719 | 2025-03-14T18:32:21.931910

80 / tcp

-330076588 | 2025-03-06T06:20:04.733504

3306 / tcp

1730917570 | 2025-03-21T19:55:32.197708

33060 / tcp

-795948505 | 2025-03-26T23:47:04.938897