GeneralInformation

Country	United States
City	San Jose
Organization	PEG TECH INC
ISP	PEG TECH INC
ASN	AS54600
Operating System	Windows Server 2012 R2 (build 6.3.9600)

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

034(1)

MS15-034

10HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."

2015(1)

CVE-2015-1635

2014(1)

CVE-2014-4078

5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."

OpenPorts

21 80 3306 5985

21 / tcp

-1521289231 | 2025-03-15T16:03:19.984244

220 FileZilla Server version 0.9.46 beta written by Tim Kosse (Tim.Kosse@gmx.de) Please visit http://sourceforge.
530 Login or password incorrect!
214-The following commands are recognized:
   ABOR   ADAT   ALLO   APPE   AUTH   CDUP   CLNT   CWD 
   DELE   EPRT   EPSV   FEAT   HASH   HELP   LIST   MDTM
   MFMT   MKD    MLSD   MLST   MODE   NLST   NOOP   NOP 
   OPTS   P@SW   PASS   PASV   PBSZ   PORT   PROT   PWD 
   QUIT   REST   RETR   RMD    RNFR   RNTO   SITE   SIZE
   STOR   STRU   SYST   TYPE   USER   XCUP   XCWD   XMKD
   XPWD   XRMD
214 Have a nice day.
211-Features:
 MDTM
 REST STREAM
 SIZE
 MLST type*;size*;modify*;
 MLSD
 UTF8
 CLNT
 MFMT
211 End

80 / tcp

1138219898 | 2025-03-16T16:43:54.333370

Hashes

hash

36213345

http.dom_hash

-1389411298

http.html_hash

1138219898

http.server_hash

-945770239

http.title_hash

-1871926727

IIS Windows Server

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Thu, 27 Feb 2025 05:04:11 GMT
Accept-Ranges: bytes
ETag: "55fff49d588db1:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 16 Mar 2025 16:43:53 GMT
Content-Length: 701

Vulnerabilities

3306 / tcp

1730917570 | 2025-03-06T04:46:54.252589

MySQL:
  Error Message: Host '224.40.30.238' is not allowed to connect to this MySQL server
  Error Code: 1130

5985 / tcp

1489525118 | 2025-03-21T12:28:54.346535

Hashes

hash

995624601

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 21 Mar 2025 12:28:53 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: S202501161517
  NetBIOS Domain Name: S202501161517
  NetBIOS Computer Name: S202501161517
  DNS Domain Name: S202501161517
  FQDN: S202501161517

107.149.42.200

Last Seen: 2025-03-21

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

21 / tcp

-1521289231 | 2025-03-15T16:03:19.984244

80 / tcp

1138219898 | 2025-03-16T16:43:54.333370

Hashes

Microsoft IIS httpd8.5

3306 / tcp

1730917570 | 2025-03-06T04:46:54.252589

MySQL

5985 / tcp

1489525118 | 2025-03-21T12:28:54.346535

Hashes

WinRM

Products

Pricing

Contact Us

107.149.42.200

Last Seen: 2025-03-21

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

21 / tcp -1521289231 | 2025-03-15T16:03:19.984244

80 / tcp 1138219898 | 2025-03-16T16:43:54.333370

Hashes

Microsoft IIS httpd8.5

3306 / tcp 1730917570 | 2025-03-06T04:46:54.252589

MySQL

5985 / tcp 1489525118 | 2025-03-21T12:28:54.346535

Hashes

WinRM

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

-1521289231 | 2025-03-15T16:03:19.984244

80 / tcp

1138219898 | 2025-03-16T16:43:54.333370

3306 / tcp

1730917570 | 2025-03-06T04:46:54.252589

5985 / tcp

1489525118 | 2025-03-21T12:28:54.346535