GeneralInformation

Hostnames	kurtz-fernhout.com www.kurtz-fernhout.com pairserver.com
Domains	kurtz-fernhout.com pairserver.com
Country	United States
City	Pittsburgh
Organization	pair Networks
ISP	pair Networks
ASN	AS7859

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2025(2)

CVE-2025-26466

5.9A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.

CVE-2025-26465

6.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.

OpenPorts

21 22 80 443 40022

21 / tcp

383869997 | 2025-03-22T15:27:25.313438

220 ProFTPD Server (pair Networks, Inc FTP server) [216.92.28.235]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
 CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
 EPRT    EPSV    ALLO    RNFR    RNTO    DELE    MDTM    RMD     
 XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
 NOOP    FEAT    OPTS    HOST    CLNT    AUTH    CCC*    CONF*   
 ENC*    MIC*    PBSZ    PROT    TYPE    STRU    MODE    RETR    
 STOR    STOU    APPE    REST    ABOR    RANG    USER    PASS    
 ACCT*   REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@216.92.2.167
211-Features:
 AUTH TLS
 CCC
 CLNT
 EPRT
 EPSV
 HOST
 LANG bg-BG.UTF-8;bg-BG;es-ES.UTF-8;es-ES;fr-FR.UTF-8;fr-FR;it-IT.UTF-8;it-IT;ja-JP.UTF-8;ja-JP;ko-KR.UTF-8;ko-KR;ru-RU.UTF-8;ru-RU;zh-CN.UTF-8;zh-CN;zh-TW.UTF-8;zh-TW
 MDTM
 MFF modify;UNIX.group;UNIX.mode;
 MFMT
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
 PBSZ
 PROT
 RANG STREAM
 REST STREAM
 SIZE
 SSCN
 TVFS
 UTF8
211 End

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ae:b7:92:9e:ff:6c:b5:d9:ec:f3:90:9c:e1:b6:00:1c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Dec  3 00:00:00 2024 GMT
            Not After : Jan  3 23:59:59 2026 GMT
        Subject: CN=*.pairserver.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:d4:4c:db:4a:6f:8f:85:fc:a1:4e:46:bc:
                    df:cf:72:3b:3e:04:06:6d:4d:c2:02:63:b2:86:68:
                    6f:9c:aa:66:88:9c:d2:4d:ba:e2:b3:41:5e:13:7f:
                    d1:dd:47:cc:9d:61:6c:eb:fb:08:84:1a:74:c4:76:
                    59:c8:d5:cc:cf:0a:80:d4:15:18:60:1e:0c:4f:8c:
                    ce:cb:d2:f0:80:98:c4:4e:0c:75:f2:84:f6:35:5c:
                    dd:1f:52:c6:5c:d6:27:c3:b4:a5:eb:63:f1:da:95:
                    93:f6:5a:7f:f0:50:01:30:7f:23:d2:9c:90:6a:f3:
                    3a:27:47:6d:76:2c:9d:f6:31:55:f7:ac:3d:ed:c6:
                    b7:00:95:a4:f0:75:81:41:77:b1:fa:1f:14:13:ff:
                    62:cd:a5:8a:04:9b:a9:6b:9d:3d:8e:a9:11:80:e0:
                    23:f3:3b:b7:34:b5:35:99:5c:28:83:2a:31:7e:b0:
                    53:1f:da:7d:6a:c6:aa:72:59:75:23:7f:58:18:1e:
                    97:18:3e:39:3f:a5:e5:b2:ab:d0:8e:b1:c6:42:b4:
                    cf:9c:e1:c2:66:6a:0b:23:95:a4:00:16:fb:fe:f2:
                    fd:33:79:c6:64:20:4a:3f:e8:62:86:0c:df:b4:a0:
                    cd:50:9e:9b:32:60:90:b2:e3:1d:88:5c:80:80:6b:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                10:38:62:A4:07:B1:D0:A2:DA:EE:9C:AC:8B:69:1B:67:84:E3:94:C0
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.pairserver.com, DNS:pairserver.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
                                E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
                    Timestamp : Dec  3 15:00:11.117 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:8D:9C:25:88:C7:95:0B:30:4A:34:26:
                                E8:C8:62:5F:7B:D9:C5:DD:1E:B4:6B:9D:E3:7C:EC:EE:
                                11:84:EB:61:65:02:21:00:C2:90:A9:5F:BA:4B:29:4C:
                                50:45:DB:AC:68:4F:5C:63:74:D7:0E:E8:22:2F:4D:F8:
                                1E:D0:8D:06:10:C3:E9:A7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:86:D4:C7:28:AA:6F:FE:BA:03:6F:78:2A:4D:01:91:
                                AA:CE:2D:72:31:0F:AE:CE:5D:70:41:2D:25:4C:C7:D4
                    Timestamp : Dec  3 15:00:11.085 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BF:6A:19:31:68:08:BE:7D:21:01:34:
                                54:1E:D0:F6:08:60:D3:5C:3C:76:C7:0A:68:29:FF:45:
                                DF:EA:18:5D:40:02:21:00:85:21:0F:16:17:75:CE:E2:
                                80:DF:30:2F:12:AF:EE:ED:7C:FA:17:A1:7D:B6:0E:C8:
                                87:33:88:60:51:16:BA:E1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
                                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
                    Timestamp : Dec  3 15:00:11.137 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CE:B3:AB:5E:EA:45:AA:E5:1B:41:34:
                                F5:80:28:CF:27:B6:37:2A:4E:E7:77:B3:42:46:91:C2:
                                BA:39:67:54:F4:02:21:00:B1:E1:44:B0:DA:CE:D8:55:
                                53:07:B2:F5:CB:0A:96:AE:F1:96:28:1B:7C:C2:BB:B3:
                                3A:1B:30:13:0E:AD:D8:A9
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6b:6a:f5:c5:f5:e4:55:7d:1e:0d:af:6f:77:d0:b9:d7:b7:e0:
        34:c9:f7:0b:77:c8:10:04:9a:44:59:3c:9d:a8:5d:1e:f9:e7:
        98:05:ad:b3:39:f5:7f:43:b0:bb:aa:9e:35:cf:0f:d5:33:5e:
        c6:49:51:f2:d0:8f:a2:8b:7a:50:07:54:6e:04:79:6b:82:d6:
        39:5f:c5:c2:77:ac:08:a3:e1:f2:28:5c:41:8d:c3:85:cb:c2:
        4f:57:1c:5b:2f:70:ec:67:c3:be:9b:bc:74:ba:e4:b5:0d:0a:
        f7:3e:9a:c1:cc:04:56:2b:44:89:93:b7:ed:32:03:54:eb:06:
        61:f7:68:e0:1b:63:f6:25:4e:e8:f4:65:b0:3b:53:22:4d:5b:
        1b:69:3d:ec:8c:af:ca:2b:2a:7d:c0:c4:16:da:93:74:9b:cf:
        be:18:45:ee:84:e8:d7:78:98:a6:e0:eb:91:d0:38:58:af:05:
        6d:c2:a0:1e:97:19:84:83:30:e9:0f:81:bc:92:ad:c1:5e:cb:
        70:8c:dc:05:fe:1c:ef:85:ec:0b:ea:de:9b:84:81:5e:70:cc:
        c4:83:81:df:6c:59:0f:53:73:db:88:78:d0:3a:7c:b5:e6:d1:
        bd:33:34:25:c4:49:7e:66:10:71:2f:37:0a:90:17:75:c5:55:
        88:94:38:7d

22 / tcp

-771398968 | 2025-03-17T09:20:49.644745

SSH-2.0-OpenSSH_9.9
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDA7QnjuD351UJQMMwOJM4PPchxNukTW+VfMvdpzulvPTM5
AXEpezLU1nOpDWcvMiEhLZbeOUSHTXRhafhX2DfjmcmXeLsSi3W+6S6FQDu7WoezaZssdrwRvpTO
yRzS9maLPe2F1hHDdMq15fB1xtC+LobOrPq4Np62ZtNvtsgo++Lw1+dGUFCFhwegTwD5wJv3ZxiY
SZySS8/4d62VK/NVf1bBDqQQmKH7foEbCGeFRmWl5klsgzvKPZokPhhhah+byZa2yS02jVlFgGgc
eOlZyi8PXfbGPi3uAgKnt/Ul6+rAoLNGFYUxAC+i5qyzW/vbs+GY08vqiy8BXLPWFOp3
Fingerprint: 92:9e:c8:03:56:89:25:97:b5:fe:c9:ab:dc:cf:94:fc

Kex Algorithms:
	sntrup761x25519-sha512
	sntrup761x25519-sha512@openssh.com
	mlkem768x25519-sha256
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group1-sha1
	ext-info-s
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	3des-cbc
	aes192-cbc
	aes256-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1
	hmac-md5-etm@openssh.com
	hmac-sha1-96-etm@openssh.com
	hmac-md5-96-etm@openssh.com
	hmac-md5
	hmac-sha1-96
	hmac-md5-96

Compression Algorithms:
	none
	zlib@openssh.com

Vulnerabilities

80 / tcp

-878599894 | 2025-03-05T11:08:46.105160

Hashes

hash

-1803591438

http.dom_hash

1894649704

http.html_hash

-878599894

http.server_hash

869690771

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Date: Wed, 05 Mar 2025 11:08:46 GMT
Server: Apache
Location: https://216.92.28.235/
Content-Length: 230
Content-Type: text/html; charset=iso-8859-1

443 / tcp

1431938350 | 2025-03-24T10:28:40.237937

Hashes

hash

-1522070573

http.dom_hash

758986957

http.favicon.hash

-1184627036

http.html_hash

1431938350

http.robots_hash

-1548903087

http.server_hash

869690771

http.title_hash

-1905223143

Kurtz and Fernhout

HTTP/1.1 200 OK
Date: Mon, 24 Mar 2025 10:28:30 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Thu, 03 May 2018 13:56:29 GMT
ETag: "b75-56b4d91f6cfd7"
Accept-Ranges: bytes
Content-Length: 2933
Content-Type: text/html

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:21:23:f4:19:f6:23:25:df:6d:f5:39:d2:0d:d7:9f:00:0b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Mar 10 11:52:06 2025 GMT
            Not After : Jun  8 11:52:05 2025 GMT
        Subject: CN=kurtz-fernhout.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:f8:8e:cd:2c:91:65:b8:db:a7:9f:dd:34:
                    ae:c8:e8:6b:35:61:2b:93:d8:74:5b:ff:b5:da:59:
                    c4:4d:64:bb:4c:42:05:ec:fd:bc:70:21:0c:23:ed:
                    fe:62:62:19:9b:55:40:68:3e:a6:fb:c2:aa:13:a1:
                    7a:99:48:d5:5f:7f:99:57:3b:d1:9f:e2:f4:e0:35:
                    9e:69:40:12:9f:1d:ee:84:c7:6a:50:1f:0e:fe:6e:
                    f6:df:8e:be:c3:4e:9f:63:06:af:e4:fd:ec:eb:26:
                    e3:35:31:47:17:7b:05:e5:56:36:e3:6e:5c:4f:b8:
                    39:69:0c:3d:19:b3:29:ef:ad:1f:5b:ac:b0:47:0d:
                    d6:17:77:91:2b:33:d1:d8:11:1d:e4:4d:dc:55:b9:
                    3e:94:b6:20:f1:59:2f:0b:df:13:0f:51:30:12:5b:
                    24:d8:b9:31:7b:e0:96:14:8e:60:bf:5d:54:d9:b0:
                    e0:e4:70:4a:fa:12:57:58:09:c3:13:80:30:81:03:
                    51:bc:41:49:cf:4e:3b:f0:3e:29:19:d2:40:31:5e:
                    f1:ca:76:c0:36:27:02:60:55:c9:b8:4c:93:b3:15:
                    85:48:4f:b6:23:97:17:47:0e:aa:30:47:e0:88:b4:
                    76:36:82:ce:d0:d0:a0:f5:10:5d:42:65:c7:e8:16:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                3D:22:09:90:D3:4F:A4:8B:B6:F3:3B:DB:3B:A0:70:9E:F5:2C:4D:36
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:kurtz-fernhout.com, DNS:www.kurtz-fernhout.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar 10 12:50:37.123 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:03:40:E3:4F:F3:57:8D:CF:FE:A8:DE:4D:
                                96:0C:8F:1E:C5:EF:85:2E:B0:6F:F5:3B:C0:81:B1:06:
                                02:0D:F0:86:02:21:00:D2:CD:D7:3A:E0:30:02:32:41:
                                33:39:94:4D:77:B5:40:98:5F:EB:FD:D1:5B:00:C4:F1:
                                7D:1B:49:D3:54:56:4B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar 10 12:50:37.113 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:20:9C:AD:9F:0C:D3:2E:2B:87:FB:69:4C:
                                AB:13:DB:67:C1:41:E0:0E:8F:DC:0A:AD:02:15:3E:5C:
                                6C:5F:D8:9C:02:20:35:FD:59:C5:65:A8:C5:7B:6C:41:
                                AC:91:93:3C:4A:87:77:1D:D8:CF:22:40:33:FE:94:4D:
                                60:17:B8:CE:30:99
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        75:74:b0:df:06:99:9d:5b:66:95:88:01:1f:69:79:4d:ef:c6:
        d3:86:c1:3f:91:f3:86:a8:ef:de:a3:38:62:cf:6a:24:08:94:
        4d:d8:80:13:1d:31:ea:28:6b:20:ad:a3:a3:cb:f7:5d:ff:a9:
        bf:13:4f:b3:25:93:f2:d8:8d:25:6d:25:90:f3:04:b4:94:b0:
        81:6e:6c:81:f5:a4:8b:d9:dc:b6:9b:dd:e4:35:4d:32:76:82:
        f7:c1:5f:50:09:68:ba:eb:0e:eb:c7:28:b6:0a:4f:04:4c:64:
        86:58:5d:10:0f:04:46:85:1f:4f:40:b2:ad:ba:ff:ca:1a:5b:
        95:e4:3a:b3:07:9b:4c:b5:c0:65:ff:11:49:61:e9:08:9b:cd:
        f9:ea:8f:e5:99:b6:09:3c:68:ce:02:e2:dd:a9:85:ce:60:35:
        b6:93:b7:05:20:36:94:40:34:b9:00:a3:d1:ac:24:84:5a:f4:
        e5:42:7f:35:e4:31:20:02:19:49:9b:6f:f3:15:5e:7a:b2:03:
        fa:80:16:0a:36:47:4b:f4:00:dd:28:0c:ac:b9:e2:17:3e:df:
        ed:98:42:83:f4:51:97:b9:e5:94:9d:16:43:41:9b:84:b8:06:
        f2:39:43:68:87:dd:7e:6b:78:7d:26:ac:af:51:02:31:b4:a0:
        46:c9:2b:3b

216.92.28.235

Last Seen: 2025-03-24

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

21 / tcp

383869997 | 2025-03-22T15:27:25.313438

22 / tcp

-771398968 | 2025-03-17T09:20:49.644745

OpenSSH9.9

80 / tcp

-878599894 | 2025-03-05T11:08:46.105160

Hashes

Apache httpd

443 / tcp

1431938350 | 2025-03-24T10:28:40.237937

Hashes

Apache httpd

Products

Pricing

Contact Us

216.92.28.235

Last Seen: 2025-03-24

Tags:

GeneralInformation

Vulnerabilities All ports Port 22 Latest CVSS

OpenPorts

21 / tcp 383869997 | 2025-03-22T15:27:25.313438

22 / tcp -771398968 | 2025-03-17T09:20:49.644745

OpenSSH9.9

80 / tcp -878599894 | 2025-03-05T11:08:46.105160

Hashes

Apache httpd

443 / tcp 1431938350 | 2025-03-24T10:28:40.237937

Hashes

Apache httpd

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

383869997 | 2025-03-22T15:27:25.313438

22 / tcp

-771398968 | 2025-03-17T09:20:49.644745

80 / tcp

-878599894 | 2025-03-05T11:08:46.105160

443 / tcp

1431938350 | 2025-03-24T10:28:40.237937