GeneralInformation

Hostnames	1372499-cz70628.tw1.ru
Domains	tw1.ru
Country	Russian Federation
City	Saint Petersburg
Organization	TimeWeb Ltd.
ISP	TimeWeb Ltd.
ASN	AS9123
Operating System	Unix

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 22 25 53 80 110 143 443 587 993

1340886486 | 2025-01-08T22:11:51.616316

21 / tcp

220 FTP Server ready.\r\n

602263574 | 2025-01-08T11:38:13.515508

22 / tcp

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQCkYoDRbpP5WYW9UQ48+DZefOkmxIT+lduj1hOGNzc7Q36V
nySoq7XLxNlCvLk7qMq+1SDvlr542xDzJhI/RW5fY7ZjQ4C4ECladbrDM9w8PQNDpiv50yb9YEeN
X8n1TkdItYfIY2YdOW1fc3EJCoZGN+YZoGSe0SCi+jJI3XkXZNarEMUpuBedhyTDHHvivb+6W+e1
t31R3NJjNrdQgrYfbnOTF0N6AekmJLR3LmvIB5HYW2yQE28Qd575c5MietkyF8Ub+xdq82fugMgm
PGFmwizJmtWuUGvTXBAw5vXy+coFkfPrN9/PoUDbgzAixqbuvLejnfSVS80R/1d+ILAX
Fingerprint: 96:7a:6a:11:d5:f3:07:db:66:cd:ec:2d:23:30:44:e5

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	aes192-cbc
	aes256-cbc
	blowfish-cbc
	cast128-cbc
	3des-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

1301959475 | 2024-12-28T18:12:49.065673

25 / tcp

220 dytri.ru ESMTP Exim 4.96 Sat, 28 Dec 2024 21:12:48 +0300\r\n

CVE-2023-51766

-257365059 | 2024-12-27T18:35:00.473018

53 / tcp

9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.13

1303899628 | 2025-01-05T06:36:58.476883

53 / udp

9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.13
Resolver name: dytri.ru

897585984 | 2025-01-06T03:46:18.230358

80 / tcp

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.2
Date: Mon, 06 Jan 2025 03:46:17 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://46.19.64.125:443/

CVE-2023-44487 CVE-2021-3618

1685649979 | 2025-01-02T20:46:45.379727

110 / tcp

+OK Dovecot ready.\r\n

312936668 | 2024-12-31T20:34:39.960122

143 / tcp

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready.
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fd:0d:19:c8:a6:04:9f:de
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=1372499-cz70628.tw1.ru/emailAddress=root@1372499-cz70628.tw1.ru
        Validity
            Not Before: Apr  1 13:22:44 2023 GMT
            Not After : Mar 29 13:22:44 2033 GMT
        Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=1372499-cz70628.tw1.ru/emailAddress=root@1372499-cz70628.tw1.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d5:f6:d4:76:2c:3a:f3:ba:2e:72:1d:06:bd:33:
                    81:81:ed:8d:d8:d1:8c:9b:71:e3:e6:e4:55:8c:5d:
                    44:20:5c:f6:69:b3:de:81:f5:87:1a:8d:9e:7e:da:
                    9b:42:0c:3e:e2:05:73:f1:d3:08:41:f7:28:58:22:
                    56:9c:04:a0:3e:49:c4:95:31:12:af:c0:4e:8a:bd:
                    51:c6:df:cb:ea:78:37:22:88:7f:34:8a:d0:c0:e2:
                    54:a3:26:b9:4d:ec:ca:77:d4:e0:76:83:5c:f0:08:
                    32:76:74:af:91:4b:85:7e:e1:d7:bd:db:da:98:19:
                    7d:be:7c:ba:9a:59:af:14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                86:C4:75:89:5B:B3:AF:C3:A1:AA:EE:C7:46:17:D5:57:15:04:1D:2A
            X509v3 Authority Key Identifier: 
                86:C4:75:89:5B:B3:AF:C3:A1:AA:EE:C7:46:17:D5:57:15:04:1D:2A
            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6f:b3:35:14:9a:cb:eb:42:83:cc:0f:25:39:ce:99:98:88:6d:
        89:d2:f8:e8:ba:d6:9f:39:c1:40:90:22:33:3a:1e:c0:f7:d2:
        98:d5:35:ae:15:69:41:d9:9f:1c:8a:ac:84:4a:37:02:68:0b:
        30:30:b7:25:d0:51:8d:61:78:63:0f:72:39:59:1e:7d:26:54:
        e4:42:36:bc:e2:00:c5:10:d5:81:35:0f:5e:50:2a:53:4d:49:
        10:63:9b:ec:59:d1:b1:dc:d6:7c:ea:07:76:ed:f5:f4:1d:c4:
        96:10:f0:eb:73:2e:79:03:ea:3f:d1:65:67:39:01:88:81:55:
        1a:9a

-445176209 | 2025-01-03T00:24:24.541576

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Fri, 03 Jan 2025 00:24:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive

CVE-2023-44487 CVE-2021-3618

1402877660 | 2024-12-31T19:56:27.280414

587 / tcp

220 dytri.ru ESMTP Exim 4.96 Tue, 31 Dec 2024 22:55:37 +0300
250-dytri.ru Hello 224.45.217.204 [224.45.217.204]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH PLAIN LOGIN CRAM-MD5
250-CHUNKING
250-STARTTLS
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fd:0d:19:c8:a6:04:9f:de
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=1372499-cz70628.tw1.ru/emailAddress=root@1372499-cz70628.tw1.ru
        Validity
            Not Before: Apr  1 13:22:44 2023 GMT
            Not After : Mar 29 13:22:44 2033 GMT
        Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=1372499-cz70628.tw1.ru/emailAddress=root@1372499-cz70628.tw1.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d5:f6:d4:76:2c:3a:f3:ba:2e:72:1d:06:bd:33:
                    81:81:ed:8d:d8:d1:8c:9b:71:e3:e6:e4:55:8c:5d:
                    44:20:5c:f6:69:b3:de:81:f5:87:1a:8d:9e:7e:da:
                    9b:42:0c:3e:e2:05:73:f1:d3:08:41:f7:28:58:22:
                    56:9c:04:a0:3e:49:c4:95:31:12:af:c0:4e:8a:bd:
                    51:c6:df:cb:ea:78:37:22:88:7f:34:8a:d0:c0:e2:
                    54:a3:26:b9:4d:ec:ca:77:d4:e0:76:83:5c:f0:08:
                    32:76:74:af:91:4b:85:7e:e1:d7:bd:db:da:98:19:
                    7d:be:7c:ba:9a:59:af:14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                86:C4:75:89:5B:B3:AF:C3:A1:AA:EE:C7:46:17:D5:57:15:04:1D:2A
            X509v3 Authority Key Identifier: 
                86:C4:75:89:5B:B3:AF:C3:A1:AA:EE:C7:46:17:D5:57:15:04:1D:2A
            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6f:b3:35:14:9a:cb:eb:42:83:cc:0f:25:39:ce:99:98:88:6d:
        89:d2:f8:e8:ba:d6:9f:39:c1:40:90:22:33:3a:1e:c0:f7:d2:
        98:d5:35:ae:15:69:41:d9:9f:1c:8a:ac:84:4a:37:02:68:0b:
        30:30:b7:25:d0:51:8d:61:78:63:0f:72:39:59:1e:7d:26:54:
        e4:42:36:bc:e2:00:c5:10:d5:81:35:0f:5e:50:2a:53:4d:49:
        10:63:9b:ec:59:d1:b1:dc:d6:7c:ea:07:76:ed:f5:f4:1d:c4:
        96:10:f0:eb:73:2e:79:03:ea:3f:d1:65:67:39:01:88:81:55:
        1a:9a

CVE-2023-51766

-1708341480 | 2024-12-15T20:13:12.232004

993 / tcp

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready.
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

46.19.64.125

Last Seen: 2025-01-08

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1340886486 | 2025-01-08T22:11:51.616316
21 / tcp

ProFTPD or KnFTPD

602263574 | 2025-01-08T11:38:13.515508
22 / tcp

OpenSSH7.4

1301959475 | 2024-12-28T18:12:49.065673
25 / tcp

Exim smtpd4.96

-257365059 | 2024-12-27T18:35:00.473018
53 / tcp

1303899628 | 2025-01-05T06:36:58.476883
53 / udp

897585984 | 2025-01-06T03:46:18.230358
80 / tcp

nginx1.20.2

1685649979 | 2025-01-02T20:46:45.379727
110 / tcp

Dovecot pop3d

312936668 | 2024-12-31T20:34:39.960122
143 / tcp

-445176209 | 2025-01-03T00:24:24.541576
443 / tcp

nginx1.20.2

1402877660 | 2024-12-31T19:56:27.280414
587 / tcp

Exim smtpd4.96

-1708341480 | 2024-12-15T20:13:12.232004
993 / tcp

Products

Pricing

Contact Us

46.19.64.125

Last Seen: 2025-01-08

Tags:

GeneralInformation

Vulnerabilities All ports Port 22 Port 25 Port 80 Port 443 Port 587 Latest CVSS

OpenPorts

1340886486 | 2025-01-08T22:11:51.616316 21 / tcp

ProFTPD or KnFTPD

602263574 | 2025-01-08T11:38:13.515508 22 / tcp

OpenSSH7.4

1301959475 | 2024-12-28T18:12:49.065673 25 / tcp

Exim smtpd4.96

-257365059 | 2024-12-27T18:35:00.473018 53 / tcp

1303899628 | 2025-01-05T06:36:58.476883 53 / udp

897585984 | 2025-01-06T03:46:18.230358 80 / tcp

nginx1.20.2

1685649979 | 2025-01-02T20:46:45.379727 110 / tcp

Dovecot pop3d

312936668 | 2024-12-31T20:34:39.960122 143 / tcp

-445176209 | 2025-01-03T00:24:24.541576 443 / tcp

nginx1.20.2

1402877660 | 2024-12-31T19:56:27.280414 587 / tcp

Exim smtpd4.96

-1708341480 | 2024-12-15T20:13:12.232004 993 / tcp

Products

Pricing

Contact Us

Vulnerabilities

1340886486 | 2025-01-08T22:11:51.616316
21 / tcp

602263574 | 2025-01-08T11:38:13.515508
22 / tcp

1301959475 | 2024-12-28T18:12:49.065673
25 / tcp

-257365059 | 2024-12-27T18:35:00.473018
53 / tcp

1303899628 | 2025-01-05T06:36:58.476883
53 / udp

897585984 | 2025-01-06T03:46:18.230358
80 / tcp

1685649979 | 2025-01-02T20:46:45.379727
110 / tcp

312936668 | 2024-12-31T20:34:39.960122
143 / tcp

-445176209 | 2025-01-03T00:24:24.541576
443 / tcp

1402877660 | 2024-12-31T19:56:27.280414
587 / tcp

-1708341480 | 2024-12-15T20:13:12.232004
993 / tcp