GeneralInformation

Country	Brazil
City	São Paulo
Organization	3NT SOLUTIONS LLP
ISP	M247 Europe SRL
ASN	AS9009

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(2)

CVE-2023-51766

5.3Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2022(1)

CVE-2022-37451

7.5Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

21 22 53 80 110 143 443 465 587 993 3306 33060

21 / tcp

-490713486 | 2025-03-20T07:11:00.912441

220 ProFTPD Server (Debian) [::ffff:38.180.79.62]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
 CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
 EPRT    EPSV    ALLO    RNFR    RNTO    DELE    MDTM    RMD     
 XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
 NOOP    FEAT    OPTS    HOST    CLNT    AUTH*   CCC*    CONF*   
 ENC*    MIC*    PBSZ*   PROT*   TYPE    STRU    MODE    RETR    
 STOR    STOU    APPE    REST    ABOR    RANG    USER    PASS    
 ACCT*   REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@v529627625.local
211-Features:
 CLNT
 EPRT
 EPSV
 HOST
 LANG en-US.UTF-8*;en-US
 MDTM
 MFF modify;UNIX.group;UNIX.mode;
 MFMT
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
 RANG STREAM
 REST STREAM
 SITE COPY
 SITE MKDIR
 SITE RMDIR
 SITE SYMLINK
 SITE UTIME
 SIZE
 TVFS
 UTF8
211 End

22 / tcp

2075724633 | 2025-03-12T11:23:44.807954

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.11
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHQIbekiUd3Dv8C8ABQiAAPx
ZIKWSHj0RBfZeMVDEsmaepWz2srC7eklev/zIHnU9/h3rLpZN/nmu//rV9vyLYA=
Fingerprint: 84:78:0b:39:21:71:9c:59:2c:02:74:66:e5:3b:15:eb

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

53 / tcp

171709530 | 2025-03-23T12:28:20.294664

Resolver name: v529627625.local

53 / udp

1802659968 | 2025-03-23T20:49:24.389073

9.18.30-0ubuntu0.22.04.2-Ubuntu
Resolver name: v529627625.local

80 / tcp

589765266 | 2025-03-23T19:51:01.607796

Hashes

hash

-378107263

http.dom_hash

1239617585

http.html_hash

589765266

http.server_hash

967792298

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 23 Mar 2025 19:51:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://38.180.79.62:443/

Vulnerabilities

110 / tcp

-542153081 | 2025-03-20T04:30:02.746007

+OK Dovecot (Ubuntu) ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
STLS
USER
SASL PLAIN LOGIN CRAM-MD5
.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:44:1d:ff:74:ff:66:af:5e:d4:2e:95:66:62:3f:ec:bc:69:d5:1f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=server, O=LTD, C=RU
        Validity
            Not Before: Apr  4 05:08:48 2024 GMT
            Not After : Aug 20 05:08:48 2051 GMT
        Subject: CN=server, O=LTD, C=RU
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:0d:d9:84:a8:8b:1e:a5:14:0f:78:23:9d:
                    86:ae:56:90:1b:d4:66:c8:b4:08:6b:a1:44:54:b2:
                    30:b5:b6:34:b7:76:cd:a0:73:f7:57:6b:d5:42:01:
                    c7:00:5a:1f:cd:ee:62:86:c1:0a:13:f8:48:1c:5f:
                    28:83:d6:7d:13:13:56:58:15:99:8b:5c:7a:a1:57:
                    4c:45:37:7b:02:10:50:57:c0:08:e2:27:29:ba:1e:
                    04:fa:f1:0a:c7:73:2f:fb:a3:db:bc:e7:e4:5e:10:
                    fc:2a:20:9f:49:9b:30:8a:c3:64:23:7a:6d:16:5a:
                    49:89:4e:17:a3:b6:22:d9:9a:a5:40:fa:78:11:32:
                    00:54:fb:18:93:24:fb:32:6c:df:d3:ab:9e:4a:fc:
                    92:25:e9:b7:9d:88:01:a8:f2:11:e0:24:16:69:2f:
                    c3:64:50:6d:fc:a3:a0:8c:96:1f:1b:89:09:7a:88:
                    4b:19:88:e8:ee:95:f4:9a:50:6e:d8:e1:3a:11:6b:
                    19:9c:fc:89:dc:af:31:bf:4d:c7:ba:f2:20:27:f8:
                    6c:52:04:56:70:b0:34:4e:87:d9:40:d6:4c:42:d1:
                    0b:41:be:ab:b2:ed:7c:bc:72:ec:c8:87:fd:e2:fa:
                    02:42:46:a0:c8:c6:a7:a6:e4:43:b5:58:76:51:88:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Authority Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a3:12:26:c9:98:93:6c:15:51:89:4b:f7:be:81:1a:57:7e:bb:
        a5:71:eb:47:51:17:fd:44:dc:02:5b:9c:b3:aa:0d:f6:f3:6f:
        86:33:29:42:05:60:5b:2b:bc:8e:9d:ad:56:48:a7:8c:dd:01:
        5c:67:55:e8:dd:ee:b4:73:24:a7:2c:a0:83:15:3c:39:fe:a6:
        2a:7c:dd:93:32:97:06:bf:33:f7:0e:cd:2b:c4:c3:08:d7:1b:
        90:ab:9e:1f:9f:8a:56:5d:b8:d5:11:de:77:f5:1d:6f:9c:33:
        dd:24:d4:c3:68:48:23:96:bb:7d:57:5b:a6:d8:65:b0:42:6f:
        d3:86:85:b0:2b:a9:f0:b6:df:03:5f:2a:5f:7c:e8:94:ab:cf:
        aa:bb:e4:91:3d:0b:0e:b0:9e:f3:db:d0:c3:d8:5d:30:14:44:
        d8:13:b8:e8:67:dc:75:78:b0:f2:ae:b4:af:46:d7:6f:b0:00:
        13:48:dd:dc:25:8a:63:ef:c5:67:fd:3a:2f:81:62:43:41:0a:
        6a:6e:80:62:a3:93:f4:24:3f:89:57:3b:f7:42:04:de:6b:69:
        08:70:8f:d5:36:31:91:e1:79:4b:65:45:18:3d:a8:22:24:c6:
        3b:7f:0e:fc:ca:fd:44:ff:06:56:f4:1e:eb:68:1b:21:cb:94:
        c4:27:d3:a2

143 / tcp

284488918 | 2025-03-22T07:55:16.536288

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot (Ubuntu) ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:44:1d:ff:74:ff:66:af:5e:d4:2e:95:66:62:3f:ec:bc:69:d5:1f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=server, O=LTD, C=RU
        Validity
            Not Before: Apr  4 05:08:48 2024 GMT
            Not After : Aug 20 05:08:48 2051 GMT
        Subject: CN=server, O=LTD, C=RU
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:0d:d9:84:a8:8b:1e:a5:14:0f:78:23:9d:
                    86:ae:56:90:1b:d4:66:c8:b4:08:6b:a1:44:54:b2:
                    30:b5:b6:34:b7:76:cd:a0:73:f7:57:6b:d5:42:01:
                    c7:00:5a:1f:cd:ee:62:86:c1:0a:13:f8:48:1c:5f:
                    28:83:d6:7d:13:13:56:58:15:99:8b:5c:7a:a1:57:
                    4c:45:37:7b:02:10:50:57:c0:08:e2:27:29:ba:1e:
                    04:fa:f1:0a:c7:73:2f:fb:a3:db:bc:e7:e4:5e:10:
                    fc:2a:20:9f:49:9b:30:8a:c3:64:23:7a:6d:16:5a:
                    49:89:4e:17:a3:b6:22:d9:9a:a5:40:fa:78:11:32:
                    00:54:fb:18:93:24:fb:32:6c:df:d3:ab:9e:4a:fc:
                    92:25:e9:b7:9d:88:01:a8:f2:11:e0:24:16:69:2f:
                    c3:64:50:6d:fc:a3:a0:8c:96:1f:1b:89:09:7a:88:
                    4b:19:88:e8:ee:95:f4:9a:50:6e:d8:e1:3a:11:6b:
                    19:9c:fc:89:dc:af:31:bf:4d:c7:ba:f2:20:27:f8:
                    6c:52:04:56:70:b0:34:4e:87:d9:40:d6:4c:42:d1:
                    0b:41:be:ab:b2:ed:7c:bc:72:ec:c8:87:fd:e2:fa:
                    02:42:46:a0:c8:c6:a7:a6:e4:43:b5:58:76:51:88:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Authority Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a3:12:26:c9:98:93:6c:15:51:89:4b:f7:be:81:1a:57:7e:bb:
        a5:71:eb:47:51:17:fd:44:dc:02:5b:9c:b3:aa:0d:f6:f3:6f:
        86:33:29:42:05:60:5b:2b:bc:8e:9d:ad:56:48:a7:8c:dd:01:
        5c:67:55:e8:dd:ee:b4:73:24:a7:2c:a0:83:15:3c:39:fe:a6:
        2a:7c:dd:93:32:97:06:bf:33:f7:0e:cd:2b:c4:c3:08:d7:1b:
        90:ab:9e:1f:9f:8a:56:5d:b8:d5:11:de:77:f5:1d:6f:9c:33:
        dd:24:d4:c3:68:48:23:96:bb:7d:57:5b:a6:d8:65:b0:42:6f:
        d3:86:85:b0:2b:a9:f0:b6:df:03:5f:2a:5f:7c:e8:94:ab:cf:
        aa:bb:e4:91:3d:0b:0e:b0:9e:f3:db:d0:c3:d8:5d:30:14:44:
        d8:13:b8:e8:67:dc:75:78:b0:f2:ae:b4:af:46:d7:6f:b0:00:
        13:48:dd:dc:25:8a:63:ef:c5:67:fd:3a:2f:81:62:43:41:0a:
        6a:6e:80:62:a3:93:f4:24:3f:89:57:3b:f7:42:04:de:6b:69:
        08:70:8f:d5:36:31:91:e1:79:4b:65:45:18:3d:a8:22:24:c6:
        3b:7f:0e:fc:ca:fd:44:ff:06:56:f4:1e:eb:68:1b:21:cb:94:
        c4:27:d3:a2

443 / tcp

2013617963 | 2025-03-23T22:18:31.153482

Hashes

hash

-729474521

http.dom_hash

1678420308

http.html_hash

2013617963

http.server_hash

967792298

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 23 Mar 2025 22:18:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close

Vulnerabilities

465 / tcp

1073150357 | 2025-03-15T00:25:24.116709

220 v529627625.local ESMTP Exim 4.95 Ubuntu Sat, 15 Mar 2025 00:25:03 +0000
250-v529627625.local Hello 224.229.166.73 [224.229.166.73]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN CRAM-MD5
250-CHUNKING
250-SMTPUTF8
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:44:1d:ff:74:ff:66:af:5e:d4:2e:95:66:62:3f:ec:bc:69:d5:1f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=server, O=LTD, C=RU
        Validity
            Not Before: Apr  4 05:08:48 2024 GMT
            Not After : Aug 20 05:08:48 2051 GMT
        Subject: CN=server, O=LTD, C=RU
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:0d:d9:84:a8:8b:1e:a5:14:0f:78:23:9d:
                    86:ae:56:90:1b:d4:66:c8:b4:08:6b:a1:44:54:b2:
                    30:b5:b6:34:b7:76:cd:a0:73:f7:57:6b:d5:42:01:
                    c7:00:5a:1f:cd:ee:62:86:c1:0a:13:f8:48:1c:5f:
                    28:83:d6:7d:13:13:56:58:15:99:8b:5c:7a:a1:57:
                    4c:45:37:7b:02:10:50:57:c0:08:e2:27:29:ba:1e:
                    04:fa:f1:0a:c7:73:2f:fb:a3:db:bc:e7:e4:5e:10:
                    fc:2a:20:9f:49:9b:30:8a:c3:64:23:7a:6d:16:5a:
                    49:89:4e:17:a3:b6:22:d9:9a:a5:40:fa:78:11:32:
                    00:54:fb:18:93:24:fb:32:6c:df:d3:ab:9e:4a:fc:
                    92:25:e9:b7:9d:88:01:a8:f2:11:e0:24:16:69:2f:
                    c3:64:50:6d:fc:a3:a0:8c:96:1f:1b:89:09:7a:88:
                    4b:19:88:e8:ee:95:f4:9a:50:6e:d8:e1:3a:11:6b:
                    19:9c:fc:89:dc:af:31:bf:4d:c7:ba:f2:20:27:f8:
                    6c:52:04:56:70:b0:34:4e:87:d9:40:d6:4c:42:d1:
                    0b:41:be:ab:b2:ed:7c:bc:72:ec:c8:87:fd:e2:fa:
                    02:42:46:a0:c8:c6:a7:a6:e4:43:b5:58:76:51:88:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Authority Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a3:12:26:c9:98:93:6c:15:51:89:4b:f7:be:81:1a:57:7e:bb:
        a5:71:eb:47:51:17:fd:44:dc:02:5b:9c:b3:aa:0d:f6:f3:6f:
        86:33:29:42:05:60:5b:2b:bc:8e:9d:ad:56:48:a7:8c:dd:01:
        5c:67:55:e8:dd:ee:b4:73:24:a7:2c:a0:83:15:3c:39:fe:a6:
        2a:7c:dd:93:32:97:06:bf:33:f7:0e:cd:2b:c4:c3:08:d7:1b:
        90:ab:9e:1f:9f:8a:56:5d:b8:d5:11:de:77:f5:1d:6f:9c:33:
        dd:24:d4:c3:68:48:23:96:bb:7d:57:5b:a6:d8:65:b0:42:6f:
        d3:86:85:b0:2b:a9:f0:b6:df:03:5f:2a:5f:7c:e8:94:ab:cf:
        aa:bb:e4:91:3d:0b:0e:b0:9e:f3:db:d0:c3:d8:5d:30:14:44:
        d8:13:b8:e8:67:dc:75:78:b0:f2:ae:b4:af:46:d7:6f:b0:00:
        13:48:dd:dc:25:8a:63:ef:c5:67:fd:3a:2f:81:62:43:41:0a:
        6a:6e:80:62:a3:93:f4:24:3f:89:57:3b:f7:42:04:de:6b:69:
        08:70:8f:d5:36:31:91:e1:79:4b:65:45:18:3d:a8:22:24:c6:
        3b:7f:0e:fc:ca:fd:44:ff:06:56:f4:1e:eb:68:1b:21:cb:94:
        c4:27:d3:a2

Vulnerabilities

1 1

587 / tcp

-1935773583 | 2025-03-13T11:07:17.584333

220 v529627625.local ESMTP Exim 4.95 Ubuntu Thu, 13 Mar 2025 11:06:45 +0000
250-v529627625.local Hello hbb9g9t4bq45c.net [224.217.243.45]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN CRAM-MD5
250-CHUNKING
250-STARTTLS
250-SMTPUTF8
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:44:1d:ff:74:ff:66:af:5e:d4:2e:95:66:62:3f:ec:bc:69:d5:1f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=server, O=LTD, C=RU
        Validity
            Not Before: Apr  4 05:08:48 2024 GMT
            Not After : Aug 20 05:08:48 2051 GMT
        Subject: CN=server, O=LTD, C=RU
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:0d:d9:84:a8:8b:1e:a5:14:0f:78:23:9d:
                    86:ae:56:90:1b:d4:66:c8:b4:08:6b:a1:44:54:b2:
                    30:b5:b6:34:b7:76:cd:a0:73:f7:57:6b:d5:42:01:
                    c7:00:5a:1f:cd:ee:62:86:c1:0a:13:f8:48:1c:5f:
                    28:83:d6:7d:13:13:56:58:15:99:8b:5c:7a:a1:57:
                    4c:45:37:7b:02:10:50:57:c0:08:e2:27:29:ba:1e:
                    04:fa:f1:0a:c7:73:2f:fb:a3:db:bc:e7:e4:5e:10:
                    fc:2a:20:9f:49:9b:30:8a:c3:64:23:7a:6d:16:5a:
                    49:89:4e:17:a3:b6:22:d9:9a:a5:40:fa:78:11:32:
                    00:54:fb:18:93:24:fb:32:6c:df:d3:ab:9e:4a:fc:
                    92:25:e9:b7:9d:88:01:a8:f2:11:e0:24:16:69:2f:
                    c3:64:50:6d:fc:a3:a0:8c:96:1f:1b:89:09:7a:88:
                    4b:19:88:e8:ee:95:f4:9a:50:6e:d8:e1:3a:11:6b:
                    19:9c:fc:89:dc:af:31:bf:4d:c7:ba:f2:20:27:f8:
                    6c:52:04:56:70:b0:34:4e:87:d9:40:d6:4c:42:d1:
                    0b:41:be:ab:b2:ed:7c:bc:72:ec:c8:87:fd:e2:fa:
                    02:42:46:a0:c8:c6:a7:a6:e4:43:b5:58:76:51:88:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Authority Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a3:12:26:c9:98:93:6c:15:51:89:4b:f7:be:81:1a:57:7e:bb:
        a5:71:eb:47:51:17:fd:44:dc:02:5b:9c:b3:aa:0d:f6:f3:6f:
        86:33:29:42:05:60:5b:2b:bc:8e:9d:ad:56:48:a7:8c:dd:01:
        5c:67:55:e8:dd:ee:b4:73:24:a7:2c:a0:83:15:3c:39:fe:a6:
        2a:7c:dd:93:32:97:06:bf:33:f7:0e:cd:2b:c4:c3:08:d7:1b:
        90:ab:9e:1f:9f:8a:56:5d:b8:d5:11:de:77:f5:1d:6f:9c:33:
        dd:24:d4:c3:68:48:23:96:bb:7d:57:5b:a6:d8:65:b0:42:6f:
        d3:86:85:b0:2b:a9:f0:b6:df:03:5f:2a:5f:7c:e8:94:ab:cf:
        aa:bb:e4:91:3d:0b:0e:b0:9e:f3:db:d0:c3:d8:5d:30:14:44:
        d8:13:b8:e8:67:dc:75:78:b0:f2:ae:b4:af:46:d7:6f:b0:00:
        13:48:dd:dc:25:8a:63:ef:c5:67:fd:3a:2f:81:62:43:41:0a:
        6a:6e:80:62:a3:93:f4:24:3f:89:57:3b:f7:42:04:de:6b:69:
        08:70:8f:d5:36:31:91:e1:79:4b:65:45:18:3d:a8:22:24:c6:
        3b:7f:0e:fc:ca:fd:44:ff:06:56:f4:1e:eb:68:1b:21:cb:94:
        c4:27:d3:a2

Vulnerabilities

1 1

993 / tcp

1240221827 | 2025-03-24T09:43:31.511884

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot (Ubuntu) ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:44:1d:ff:74:ff:66:af:5e:d4:2e:95:66:62:3f:ec:bc:69:d5:1f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=server, O=LTD, C=RU
        Validity
            Not Before: Apr  4 05:08:48 2024 GMT
            Not After : Aug 20 05:08:48 2051 GMT
        Subject: CN=server, O=LTD, C=RU
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:0d:d9:84:a8:8b:1e:a5:14:0f:78:23:9d:
                    86:ae:56:90:1b:d4:66:c8:b4:08:6b:a1:44:54:b2:
                    30:b5:b6:34:b7:76:cd:a0:73:f7:57:6b:d5:42:01:
                    c7:00:5a:1f:cd:ee:62:86:c1:0a:13:f8:48:1c:5f:
                    28:83:d6:7d:13:13:56:58:15:99:8b:5c:7a:a1:57:
                    4c:45:37:7b:02:10:50:57:c0:08:e2:27:29:ba:1e:
                    04:fa:f1:0a:c7:73:2f:fb:a3:db:bc:e7:e4:5e:10:
                    fc:2a:20:9f:49:9b:30:8a:c3:64:23:7a:6d:16:5a:
                    49:89:4e:17:a3:b6:22:d9:9a:a5:40:fa:78:11:32:
                    00:54:fb:18:93:24:fb:32:6c:df:d3:ab:9e:4a:fc:
                    92:25:e9:b7:9d:88:01:a8:f2:11:e0:24:16:69:2f:
                    c3:64:50:6d:fc:a3:a0:8c:96:1f:1b:89:09:7a:88:
                    4b:19:88:e8:ee:95:f4:9a:50:6e:d8:e1:3a:11:6b:
                    19:9c:fc:89:dc:af:31:bf:4d:c7:ba:f2:20:27:f8:
                    6c:52:04:56:70:b0:34:4e:87:d9:40:d6:4c:42:d1:
                    0b:41:be:ab:b2:ed:7c:bc:72:ec:c8:87:fd:e2:fa:
                    02:42:46:a0:c8:c6:a7:a6:e4:43:b5:58:76:51:88:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Authority Key Identifier: 
                8A:A4:F3:B8:BD:C4:AB:04:6B:EE:73:26:07:F3:E0:3D:F7:2E:ED:44
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a3:12:26:c9:98:93:6c:15:51:89:4b:f7:be:81:1a:57:7e:bb:
        a5:71:eb:47:51:17:fd:44:dc:02:5b:9c:b3:aa:0d:f6:f3:6f:
        86:33:29:42:05:60:5b:2b:bc:8e:9d:ad:56:48:a7:8c:dd:01:
        5c:67:55:e8:dd:ee:b4:73:24:a7:2c:a0:83:15:3c:39:fe:a6:
        2a:7c:dd:93:32:97:06:bf:33:f7:0e:cd:2b:c4:c3:08:d7:1b:
        90:ab:9e:1f:9f:8a:56:5d:b8:d5:11:de:77:f5:1d:6f:9c:33:
        dd:24:d4:c3:68:48:23:96:bb:7d:57:5b:a6:d8:65:b0:42:6f:
        d3:86:85:b0:2b:a9:f0:b6:df:03:5f:2a:5f:7c:e8:94:ab:cf:
        aa:bb:e4:91:3d:0b:0e:b0:9e:f3:db:d0:c3:d8:5d:30:14:44:
        d8:13:b8:e8:67:dc:75:78:b0:f2:ae:b4:af:46:d7:6f:b0:00:
        13:48:dd:dc:25:8a:63:ef:c5:67:fd:3a:2f:81:62:43:41:0a:
        6a:6e:80:62:a3:93:f4:24:3f:89:57:3b:f7:42:04:de:6b:69:
        08:70:8f:d5:36:31:91:e1:79:4b:65:45:18:3d:a8:22:24:c6:
        3b:7f:0e:fc:ca:fd:44:ff:06:56:f4:1e:eb:68:1b:21:cb:94:
        c4:27:d3:a2

3306 / tcp

-998406261 | 2025-03-21T12:04:55.343878

MySQL:
  Error Message: Host '224.66.54.178' is not allowed to connect to this MySQL server
  Error Code: 1130

33060 / tcp

-795948505 | 2025-03-22T18:55:55.483234

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

38.180.79.62

Last Seen: 2025-03-24

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

21 / tcp

-490713486 | 2025-03-20T07:11:00.912441

22 / tcp

2075724633 | 2025-03-12T11:23:44.807954

OpenSSH8.9p1 Ubuntu 3ubuntu0.11

53 / tcp

171709530 | 2025-03-23T12:28:20.294664

53 / udp

1802659968 | 2025-03-23T20:49:24.389073

80 / tcp

589765266 | 2025-03-23T19:51:01.607796

Hashes

nginx1.18.0

110 / tcp

-542153081 | 2025-03-20T04:30:02.746007

143 / tcp

284488918 | 2025-03-22T07:55:16.536288

443 / tcp

2013617963 | 2025-03-23T22:18:31.153482

Hashes

nginx1.18.0

465 / tcp

1073150357 | 2025-03-15T00:25:24.116709

Exim smtpd4.95

587 / tcp

-1935773583 | 2025-03-13T11:07:17.584333

Exim smtpd4.95

993 / tcp

1240221827 | 2025-03-24T09:43:31.511884

3306 / tcp

-998406261 | 2025-03-21T12:04:55.343878

MySQL

33060 / tcp

-795948505 | 2025-03-22T18:55:55.483234

MySQL X Protocol

Products

Pricing

Contact Us

38.180.79.62

Last Seen: 2025-03-24

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Port 465 Port 587 Latest CVSS

OpenPorts

21 / tcp -490713486 | 2025-03-20T07:11:00.912441

22 / tcp 2075724633 | 2025-03-12T11:23:44.807954

OpenSSH8.9p1 Ubuntu 3ubuntu0.11

53 / tcp 171709530 | 2025-03-23T12:28:20.294664

53 / udp 1802659968 | 2025-03-23T20:49:24.389073

80 / tcp 589765266 | 2025-03-23T19:51:01.607796

Hashes

nginx1.18.0

110 / tcp -542153081 | 2025-03-20T04:30:02.746007

143 / tcp 284488918 | 2025-03-22T07:55:16.536288

443 / tcp 2013617963 | 2025-03-23T22:18:31.153482

Hashes

nginx1.18.0

465 / tcp 1073150357 | 2025-03-15T00:25:24.116709

Exim smtpd4.95

587 / tcp -1935773583 | 2025-03-13T11:07:17.584333

Exim smtpd4.95

993 / tcp 1240221827 | 2025-03-24T09:43:31.511884

3306 / tcp -998406261 | 2025-03-21T12:04:55.343878

MySQL

33060 / tcp -795948505 | 2025-03-22T18:55:55.483234

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

-490713486 | 2025-03-20T07:11:00.912441

22 / tcp

2075724633 | 2025-03-12T11:23:44.807954

53 / tcp

171709530 | 2025-03-23T12:28:20.294664

53 / udp

1802659968 | 2025-03-23T20:49:24.389073

80 / tcp

589765266 | 2025-03-23T19:51:01.607796

110 / tcp

-542153081 | 2025-03-20T04:30:02.746007

143 / tcp

284488918 | 2025-03-22T07:55:16.536288

443 / tcp

2013617963 | 2025-03-23T22:18:31.153482

465 / tcp

1073150357 | 2025-03-15T00:25:24.116709

587 / tcp

-1935773583 | 2025-03-13T11:07:17.584333

993 / tcp

1240221827 | 2025-03-24T09:43:31.511884

3306 / tcp

-998406261 | 2025-03-21T12:04:55.343878

33060 / tcp

-795948505 | 2025-03-22T18:55:55.483234