GeneralInformation

Hostnames	nt4.com audio.nt4.com backgrounds.nt4.com bid.nt4.com blockwriter.nt4.com blog.nt4.com blog2.nt4.com chips3.nt4.com coding.nt4.com console.nt4.com cyrus.nt4.com d.nt4.com demarchy.nt4.com dev.nt4.com feedback.nt4.com fonts.nt4.com git.nt4.com gta5struc.nt4.com hextile.nt4.com staging.hextile.nt4.com ionic-list.nt4.com ip.nt4.com iphinder.nt4.com www.iphinder.nt4.com js.nt4.com konsole.nt4.com macintrash.nt4.com download.manok.nt4.com markle.nt4.com markle1.nt4.com mirror.nt4.com music.nt4.com osx.nt4.com pen.nt4.com poker.nt4.com reboot.nt4.com cyrus.su.nt4.com text.nt4.com tv.nt4.com type.nt4.com ub.nt4.com update.nt4.com vps.nt4.com will-recover-deleted-files-for-bb-ammo.nt4.com wpad.nt4.com www.nt4.com xn--co8h.nt4.com zynga.nt4.com zynga1-a.nt4.com mail.spamtrak.org
Domains	nt4.com spamtrak.org
Country	Australia
City	Melbourne
Organization	Micron21 Melbourne Datacentre Co-Location Dedicated Servers Web Hosting
ISP	Micron21 Datacentre Pty Ltd
ASN	AS38880
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 22 25 80 443 4444 8060 9094

21 / tcp

840276667 | 2025-01-21T00:23:52.197422

220 ProFTPD Server (Debian) [::ffff:119.31.231.50]
230-behold...
         __     _____
   _____/  |_  /  |  |     ____  ____   _____
  /    \   __\/   |  |_  _/ ___\/  _ \ /     \
 |   |  \  | /    ^   /  \  \__(  <_> )  Y Y  \
 |___|  /__| \____   | /\ \___  >____/|__|_|  /
      \/          |__| \/     \/            \/
 
 Tue Jan 21 00:23:51 2025
 
230 Anonymous access granted, restrictions apply
214-The following commands are recognized (* =>'s unimplemented):
 CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
 EPRT    EPSV    ALLO    RNFR    RNTO    DELE    MDTM    RMD     
 XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
 NOOP    FEAT    OPTS    HOST    CLNT    AUTH*   CCC*    CONF*   
 ENC*    MIC*    PBSZ*   PROT*   TYPE    STRU    MODE    RETR    
 STOR    STOU    APPE    REST    ABOR    RANG    USER    PASS    
 ACCT*   REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@mail.spamtrak.org
211-Features:
 CLNT
 EPRT
 EPSV
 HOST
 LANG en-US.UTF-8*;en-US
 MDTM
 MFF modify;UNIX.group;UNIX.mode;
 MFMT
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
 RANG STREAM
 REST STREAM
 SITE COPY
 SITE MKDIR
 SITE RMDIR
 SITE SYMLINK
 SITE UTIME
 SIZE
 TVFS
 UTF8
211 End

22 / tcp

1035181170 | 2025-01-20T15:06:22.054679

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNqLdKKSc6QxOfBv3ahBlYHH
MBB8yBfqDmIjmNFJUnVFlLK5FtmNZIgbLmSdcTBXnJ14gmLJn7SsJb8E4bhLNJg=
Fingerprint: 7c:ae:38:c4:5a:7d:5d:75:63:9a:9c:90:fa:1d:e9:76

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

25 / tcp

992960546 | 2025-01-30T14:46:59.785373

220 mail Service Ready
250 mail Pleased to meet you  2q2gzexrqfu5m3w.net

80 / tcp

589765266 | 2025-01-30T18:33:49.080489

Hashes

hash

-2054312083

http.dom_hash

1239617585

http.html_hash

589765266

http.server_hash

967792298

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 30 Jan 2025 18:33:48 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://119.31.231.50/

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

443 / tcp

677579724 | 2025-01-30T18:33:51.924533

Hashes

hash

-1856516749

http.dom_hash

1239617585

http.html_hash

677579724

http.server_hash

967792298

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 30 Jan 2025 18:33:51 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2b:29:14:e1:69:1a:93:d1:70:16:1d:c9:b2:80:2f:06:3a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Jan 12 16:24:24 2025 GMT
            Not After : Apr 12 16:24:23 2025 GMT
        Subject: CN=nt4.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:35:87:32:55:03:bb:a8:77:e2:d1:18:61:89:80:
                    57:8f:e2:74:78:ee:0f:23:d0:6a:c7:6b:ea:b7:45:
                    17:c9:bb:48:f3:39:11:14:8c:67:b3:14:26:40:cd:
                    16:d1:b4:a2:e9:31:a7:aa:09:3b:66:22:15:f2:8e:
                    17:be:99:09:ff
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                20:B4:7C:27:ED:E5:29:B2:0A:3E:8A:C2:F5:C8:B9:50:20:B2:EB:31
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:audio.nt4.com, DNS:backgrounds.nt4.com, DNS:bid.nt4.com, DNS:blockwriter.nt4.com, DNS:blog.nt4.com, DNS:blog2.nt4.com, DNS:chips3.nt4.com, DNS:coding.nt4.com, DNS:console.nt4.com, DNS:cyrus.nt4.com, DNS:cyrus.su.nt4.com, DNS:d.nt4.com, DNS:demarchy.nt4.com, DNS:dev.nt4.com, DNS:download.manok.nt4.com, DNS:feedback.nt4.com, DNS:fonts.nt4.com, DNS:git.nt4.com, DNS:gta5struc.nt4.com, DNS:hextile.nt4.com, DNS:ionic-list.nt4.com, DNS:ip.nt4.com, DNS:iphinder.nt4.com, DNS:js.nt4.com, DNS:konsole.nt4.com, DNS:macintrash.nt4.com, DNS:markle.nt4.com, DNS:markle1.nt4.com, DNS:mirror.nt4.com, DNS:music.nt4.com, DNS:nt4.com, DNS:osx.nt4.com, DNS:pen.nt4.com, DNS:poker.nt4.com, DNS:reboot.nt4.com, DNS:staging.hextile.nt4.com, DNS:text.nt4.com, DNS:tv.nt4.com, DNS:type.nt4.com, DNS:ub.nt4.com, DNS:update.nt4.com, DNS:vps.nt4.com, DNS:will-recover-deleted-files-for-bb-ammo.nt4.com, DNS:wpad.nt4.com, DNS:www.iphinder.nt4.com, DNS:www.nt4.com, DNS:xn--co8h.nt4.com, DNS:zynga.nt4.com, DNS:zynga1-a.nt4.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DE:85:81:D7:50:24:7C:6B:CD:CB:AF:56:37:C5:E7:81:
                                C6:4C:E4:6E:D6:17:63:9F:8F:34:A7:26:C9:E2:BD:37
                    Timestamp : Jan 12 17:22:54.385 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B0:23:43:7C:8E:A9:D2:E2:8C:25:91:
                                0D:35:98:73:7A:AA:3F:7F:1B:DF:8F:CD:DF:9B:93:65:
                                FA:3F:25:52:AE:02:21:00:C5:BE:18:06:64:5D:EB:9F:
                                BF:53:F9:00:1E:C7:9E:BE:D1:07:6B:ED:83:0A:CD:96:
                                DE:B5:10:91:AB:58:1D:04
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Jan 12 17:22:54.440 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:83:A3:59:C5:F1:49:2C:59:2A:7F:29:
                                12:BC:B8:14:58:F1:3E:20:04:9C:A0:1C:66:FE:0F:46:
                                C6:2B:03:A7:99:02:21:00:CB:04:63:8C:20:E4:94:9A:
                                3D:1F:F5:F9:A2:BE:7F:0E:AD:54:8D:91:12:FE:31:53:
                                D2:2D:23:D1:E0:C5:C7:46
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:31:00:c7:4c:77:6a:86:bb:bf:3f:ff:af:0d:2c:a4:
        9b:37:31:5f:4d:05:30:cb:a8:fa:f5:d9:b6:34:40:56:be:3a:
        b1:9d:a9:b7:7f:3e:07:9c:b6:d7:6c:66:f4:6d:28:c4:dd:02:
        30:66:40:d1:4b:b0:bf:18:94:f8:17:d0:b2:e4:71:af:d7:0c:
        81:8d:05:6a:93:fb:b9:fc:2f:59:7b:15:73:b0:b0:11:8e:b4:
        84:85:d0:65:79:6d:39:35:0c:c4:50:63:04

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

8060 / tcp

-828967703 | 2025-01-09T04:50:00.782910

Hashes

hash

1963224207

http.dom_hash

1239617585

http.html_hash

-828967703

http.server_hash

356190690

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Thu, 09 Jan 2025 04:50:00 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

119.31.231.50

Last Seen: 2025-01-30

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

21 / tcp

840276667 | 2025-01-21T00:23:52.197422

22 / tcp

1035181170 | 2025-01-20T15:06:22.054679

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

25 / tcp

992960546 | 2025-01-30T14:46:59.785373

80 / tcp

589765266 | 2025-01-30T18:33:49.080489

Hashes

nginx1.18.0

443 / tcp

677579724 | 2025-01-30T18:33:51.924533

Hashes

nginx1.18.0

8060 / tcp

-828967703 | 2025-01-09T04:50:00.782910

Hashes

nginx1.24.0

Products

Pricing

Contact Us

119.31.231.50

Last Seen: 2025-01-30

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

21 / tcp 840276667 | 2025-01-21T00:23:52.197422

22 / tcp 1035181170 | 2025-01-20T15:06:22.054679

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

25 / tcp 992960546 | 2025-01-30T14:46:59.785373

80 / tcp 589765266 | 2025-01-30T18:33:49.080489

Hashes

nginx1.18.0

443 / tcp 677579724 | 2025-01-30T18:33:51.924533

Hashes

nginx1.18.0

8060 / tcp -828967703 | 2025-01-09T04:50:00.782910

Hashes

nginx1.24.0

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

840276667 | 2025-01-21T00:23:52.197422

22 / tcp

1035181170 | 2025-01-20T15:06:22.054679

25 / tcp

992960546 | 2025-01-30T14:46:59.785373

80 / tcp

589765266 | 2025-01-30T18:33:49.080489

443 / tcp

677579724 | 2025-01-30T18:33:51.924533

8060 / tcp

-828967703 | 2025-01-09T04:50:00.782910