GeneralInformation

Hostnames	apdsecuredev.southeastasia.cloudapp.azure.com
Domains	azure.com
Cloud Provider	Azure
Cloud Region	southeastasia
Cloud Service	AzureCloud
Country	Singapore
City	Singapore
Organization	Microsoft Corporation
ISP	Microsoft Corporation
ASN	AS8075
Operating System	Windows (build 6.3.9600)

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 80 1025 1028 1029 1434 3389 4949 5985 5986 56985

21 / tcp

-370734890 | 2025-01-16T20:58:35.773357

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST 
    MDTM 
    MIC *
    MKD 
    MODE 
    NLST 
    NOOP 
    OPTS 
    PASS 
    PASV 
    PBSZ 
    PORT 
    PROT 
    PWD 
    QUIT 
    REIN 
    REST 
    RETR 
    RMD 
    RNFR 
    RNTO 
    SITE 
    SIZE 
    SMNT 
    STAT 
    STOR 
    STOU 
    STRU 
    SYST 
    TYPE 
    USER 
    XCUP 
    XCWD 
    XMKD 
    XPWD 
    XRMD 
214 HELP command successful.
211-Extended features supported:
 LANG EN*
 UTF8
 AUTH TLS;TLS-C;SSL;TLS-P;
 PBSZ
 PROT C;P;
 CCC
 HOST
 SIZE
 MDTM
 REST STREAM
211 END

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:e7:34:3d:ec:ec:b5:4e:10:7b:86:cb:94:71:d6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apdsecuredev.southeastasia.cloudapp.azure.com
        Validity
            Not Before: Jul 12 14:20:28 2018 GMT
            Not After : Jul 12 14:40:28 2019 GMT
        Subject: CN=apdsecuredev.southeastasia.cloudapp.azure.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:59:4c:54:c5:32:78:f3:b4:38:97:8d:6f:
                    6c:02:d7:66:b8:d7:1d:d0:2f:fe:2e:fc:67:d2:f2:
                    5a:39:9f:0f:51:ee:17:01:7a:ac:a5:39:ba:11:80:
                    76:c0:6b:79:ca:7b:8a:b2:2a:75:5a:a5:af:ab:f1:
                    47:01:8e:ea:e1:88:c0:81:e1:68:c8:2b:bd:04:5e:
                    d7:af:d9:62:5c:8f:b0:4a:77:06:f1:57:0b:d4:c3:
                    c4:b3:e7:c6:98:5a:9a:e1:c5:59:3c:31:6c:09:87:
                    83:4e:6d:0f:3d:48:ac:a5:b9:e7:d5:82:be:7f:9b:
                    5b:5d:02:33:78:81:0d:d6:68:57:85:43:ac:01:94:
                    3e:c9:bc:85:1b:b4:0e:69:61:52:7d:5c:da:78:ad:
                    2f:92:09:7f:fb:6b:76:77:12:a0:dd:5d:86:4a:81:
                    76:42:1b:14:a2:08:6b:89:9d:3a:73:72:95:2c:0e:
                    83:34:c7:ff:52:b8:a4:9c:59:ec:9a:bf:7f:b1:91:
                    b5:8c:ef:7e:25:de:9e:4f:2f:9e:e7:34:4f:e8:16:
                    25:a6:b8:98:82:4d:90:6a:b0:21:c2:6d:6f:50:cc:
                    37:69:35:1f:0a:c8:bf:c4:84:1a:74:fc:a2:c9:47:
                    57:26:89:f5:00:9c:73:f3:be:8c:af:ff:40:35:7d:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Alternative Name: 
                DNS:apdsecuredev.southeastasia.cloudapp.azure.com
            X509v3 Subject Key Identifier: 
                49:16:78:59:1E:7E:F4:DA:3A:A5:7A:76:7C:6D:8D:BA:BD:E6:CC:03
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1d:8b:31:56:e3:e4:4c:c7:c4:62:5d:26:a5:0a:b4:de:d2:26:
        b9:94:85:ad:e9:47:04:3e:26:fb:cc:83:b1:8b:3b:61:b0:3e:
        0a:f8:a4:e8:da:ef:27:21:d9:09:09:76:47:a6:95:fa:3c:47:
        0a:3f:35:46:21:dd:78:b2:7b:f4:60:b6:a3:df:b6:17:b7:12:
        84:f4:07:b2:d5:35:a7:cf:b7:ce:89:7b:e7:87:df:b7:d6:4a:
        0e:bd:c0:02:23:fe:f8:c5:35:5c:ac:74:52:98:e0:50:ce:bf:
        62:3c:d5:53:e7:ac:9a:10:c5:ba:29:33:23:f4:e8:28:55:e0:
        9e:96:45:a0:be:6f:76:03:31:e6:87:2f:90:19:7e:42:9d:91:
        af:65:e8:41:27:4f:b7:3c:27:53:61:0b:ff:b0:ba:6f:96:a0:
        97:80:33:8d:bc:dd:d0:f3:b7:24:4d:eb:b1:0d:ce:fd:c2:64:
        b1:7b:50:a0:49:ee:9c:3a:cf:9e:fc:8a:f7:4a:01:7b:3a:c9:
        56:c1:4e:3f:fc:7b:d0:cc:8a:39:81:5a:77:44:15:95:c2:89:
        cb:45:51:0d:7b:06:fc:f4:62:29:20:51:aa:d9:72:7d:e7:60:
        82:c7:0e:92:c3:60:60:14:08:93:10:e3:d6:37:dc:51:ab:f9:
        39:15:5b:5c

80 / tcp

1489525118 | 2025-02-11T14:24:13.757046

Hashes

hash

-1678040338

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 11 Feb 2025 14:24:12 GMT
Connection: close
Content-Length: 315

1025 / tcp

2068779293 | 2025-02-04T10:10:37.356968

220 Microsoft FTP Service\r\n

1028 / tcp

2068779293 | 2025-01-21T18:48:33.779943

220 Microsoft FTP Service\r\n

1029 / tcp

2068779293 | 2025-01-18T04:49:17.533533

220 Microsoft FTP Service\r\n

1434 / tcp

951517768 | 2025-02-07T18:21:03.310784

MS-SQL NTLM Info:
  OS: Windows 8.1/Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: APDMY-WIN-VM
  NetBIOS Domain Name: APDMY-WIN-VM
  NetBIOS Computer Name: APDMY-WIN-VM
  DNS Domain Name: APDMY-Win-VM
  FQDN: APDMY-Win-VM

1434 / udp

998269607 | 2025-02-13T15:45:47.750244

SQL Server Browser Service:
  Instance #1:
    Server Name: APDMY-WIN-VM
    Instance Name: MSSQLSERVER2014
    Is Clustered: False
    Version: 12.0.5000.0
    TCP Port: 1433
    Version Name: MS-SQL Server 2014 SP2RTW/PCU2
  Instance #2:
    Server Name: APDMY-WIN-VM
    Instance Name: SQLEXPRESS
    Is Clustered: False
    Version: 13.0.1601.5
    Version Name: MS-SQL Server 2016 RTM
  Instance #3:
    Server Name: APDMY-WIN-VM
    Instance Name: SQLEXPRESS01
    Is Clustered: False
    Version: 14.0.1000.169
    Version Name: MS-SQL Server 2017 RTM
  Instance #4:
    Server Name: APDMY-WIN-VM
    Instance Name: MSSQLSERVER
    Is Clustered: False
    Version: 11.0.2100.60
    TCP Port: 1434
    Version Name: MS-SQL Server 2012 RTM
  Instance #5:
    Server Name: APDMY-WIN-VM
    Instance Name: SQLEXPRESS02
    Is Clustered: False
    Version: 14.0.1000.169
    TCP Port: 56985
    Version Name: MS-SQL Server 2017 RTM

3389 / tcp

1912799764 | 2025-01-20T13:00:57.368563

Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x0f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
  OS: Windows 8.1/Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: APDMY-WIN-VM
  NetBIOS Domain Name: APDMY-WIN-VM
  NetBIOS Computer Name: APDMY-WIN-VM
  DNS Domain Name: APDMY-Win-VM
  FQDN: APDMY-Win-VM

4949 / tcp

-187990368 | 2025-02-09T22:37:46.970910

Hashes

hash

200102541

http.dom_hash

1090936359

http.html_hash

-187990368

http.server_hash

-945770239

http.title_hash

1185571986

Document Not Found

HTTP/1.1 404 Not Found
Cache-Control: no-cache,must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0
Pragma: no-cache,no-cache
Content-Type: text/html; charset=utf-8
Expires: -1,0
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Date: Sun, 09 Feb 2025 22:37:47 GMT
Content-Length: 3116

CVE-2014-4078

5985 / tcp

1489525118 | 2025-02-09T19:06:52.353346

Hashes

hash

1470785223

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sun, 09 Feb 2025 19:06:52 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: APDMY-WIN-VM
  NetBIOS Domain Name: APDMY-WIN-VM
  NetBIOS Computer Name: APDMY-WIN-VM
  DNS Domain Name: APDMY-Win-VM
  FQDN: APDMY-Win-VM

5986 / tcp

1489525118 | 2025-02-09T18:04:09.101015

Hashes

hash

-1148246279

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sun, 09 Feb 2025 18:04:09 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: APDMY-WIN-VM
  NetBIOS Domain Name: APDMY-WIN-VM
  NetBIOS Computer Name: APDMY-WIN-VM
  DNS Domain Name: APDMY-Win-VM
  FQDN: APDMY-Win-VM

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:e7:34:3d:ec:ec:b5:4e:10:7b:86:cb:94:71:d6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apdsecuredev.southeastasia.cloudapp.azure.com
        Validity
            Not Before: Jul 12 14:20:28 2018 GMT
            Not After : Jul 12 14:40:28 2019 GMT
        Subject: CN=apdsecuredev.southeastasia.cloudapp.azure.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:59:4c:54:c5:32:78:f3:b4:38:97:8d:6f:
                    6c:02:d7:66:b8:d7:1d:d0:2f:fe:2e:fc:67:d2:f2:
                    5a:39:9f:0f:51:ee:17:01:7a:ac:a5:39:ba:11:80:
                    76:c0:6b:79:ca:7b:8a:b2:2a:75:5a:a5:af:ab:f1:
                    47:01:8e:ea:e1:88:c0:81:e1:68:c8:2b:bd:04:5e:
                    d7:af:d9:62:5c:8f:b0:4a:77:06:f1:57:0b:d4:c3:
                    c4:b3:e7:c6:98:5a:9a:e1:c5:59:3c:31:6c:09:87:
                    83:4e:6d:0f:3d:48:ac:a5:b9:e7:d5:82:be:7f:9b:
                    5b:5d:02:33:78:81:0d:d6:68:57:85:43:ac:01:94:
                    3e:c9:bc:85:1b:b4:0e:69:61:52:7d:5c:da:78:ad:
                    2f:92:09:7f:fb:6b:76:77:12:a0:dd:5d:86:4a:81:
                    76:42:1b:14:a2:08:6b:89:9d:3a:73:72:95:2c:0e:
                    83:34:c7:ff:52:b8:a4:9c:59:ec:9a:bf:7f:b1:91:
                    b5:8c:ef:7e:25:de:9e:4f:2f:9e:e7:34:4f:e8:16:
                    25:a6:b8:98:82:4d:90:6a:b0:21:c2:6d:6f:50:cc:
                    37:69:35:1f:0a:c8:bf:c4:84:1a:74:fc:a2:c9:47:
                    57:26:89:f5:00:9c:73:f3:be:8c:af:ff:40:35:7d:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Alternative Name: 
                DNS:apdsecuredev.southeastasia.cloudapp.azure.com
            X509v3 Subject Key Identifier: 
                49:16:78:59:1E:7E:F4:DA:3A:A5:7A:76:7C:6D:8D:BA:BD:E6:CC:03
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1d:8b:31:56:e3:e4:4c:c7:c4:62:5d:26:a5:0a:b4:de:d2:26:
        b9:94:85:ad:e9:47:04:3e:26:fb:cc:83:b1:8b:3b:61:b0:3e:
        0a:f8:a4:e8:da:ef:27:21:d9:09:09:76:47:a6:95:fa:3c:47:
        0a:3f:35:46:21:dd:78:b2:7b:f4:60:b6:a3:df:b6:17:b7:12:
        84:f4:07:b2:d5:35:a7:cf:b7:ce:89:7b:e7:87:df:b7:d6:4a:
        0e:bd:c0:02:23:fe:f8:c5:35:5c:ac:74:52:98:e0:50:ce:bf:
        62:3c:d5:53:e7:ac:9a:10:c5:ba:29:33:23:f4:e8:28:55:e0:
        9e:96:45:a0:be:6f:76:03:31:e6:87:2f:90:19:7e:42:9d:91:
        af:65:e8:41:27:4f:b7:3c:27:53:61:0b:ff:b0:ba:6f:96:a0:
        97:80:33:8d:bc:dd:d0:f3:b7:24:4d:eb:b1:0d:ce:fd:c2:64:
        b1:7b:50:a0:49:ee:9c:3a:cf:9e:fc:8a:f7:4a:01:7b:3a:c9:
        56:c1:4e:3f:fc:7b:d0:cc:8a:39:81:5a:77:44:15:95:c2:89:
        cb:45:51:0d:7b:06:fc:f4:62:29:20:51:aa:d9:72:7d:e7:60:
        82:c7:0e:92:c3:60:60:14:08:93:10:e3:d6:37:dc:51:ab:f9:
        39:15:5b:5c

56985 / tcp

951517768 | 2025-02-13T15:53:04.580693

MS-SQL NTLM Info:
  OS: Windows 8.1/Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: APDMY-WIN-VM
  NetBIOS Domain Name: APDMY-WIN-VM
  NetBIOS Computer Name: APDMY-WIN-VM
  DNS Domain Name: APDMY-Win-VM
  FQDN: APDMY-Win-VM

52.187.57.221

Last Seen: 2025-02-13

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

21 / tcp

-370734890 | 2025-01-16T20:58:35.773357

Microsoft ftpd

80 / tcp

1489525118 | 2025-02-11T14:24:13.757046

Hashes

Microsoft HTTPAPI httpd2.0

1025 / tcp

2068779293 | 2025-02-04T10:10:37.356968

Microsoft ftpd

1028 / tcp

2068779293 | 2025-01-21T18:48:33.779943

Microsoft ftpd

1029 / tcp

2068779293 | 2025-01-18T04:49:17.533533

Microsoft ftpd

1434 / tcp

951517768 | 2025-02-07T18:21:03.310784

MS-SQL Server 2012 RTM11.0.2100.0

1434 / udp

998269607 | 2025-02-13T15:45:47.750244

SQL Server Browser Service

3389 / tcp

1912799764 | 2025-01-20T13:00:57.368563

Remote Desktop Protocol

4949 / tcp

-187990368 | 2025-02-09T22:37:46.970910

Hashes

Microsoft IIS httpd8.5

5985 / tcp

1489525118 | 2025-02-09T19:06:52.353346

Hashes

WinRM

5986 / tcp

1489525118 | 2025-02-09T18:04:09.101015

Hashes

WinRM

56985 / tcp

951517768 | 2025-02-13T15:53:04.580693

MS-SQL Server 2017 RTM14.0.1000.0

Products

Pricing

Contact Us

52.187.57.221

Last Seen: 2025-02-13

Tags:

GeneralInformation

Vulnerabilities All ports Port 4949 Latest CVSS

OpenPorts

21 / tcp -370734890 | 2025-01-16T20:58:35.773357

80 / tcp 1489525118 | 2025-02-11T14:24:13.757046

Hashes

1025 / tcp 2068779293 | 2025-02-04T10:10:37.356968

1028 / tcp 2068779293 | 2025-01-21T18:48:33.779943

1029 / tcp 2068779293 | 2025-01-18T04:49:17.533533

1434 / tcp 951517768 | 2025-02-07T18:21:03.310784

1434 / udp 998269607 | 2025-02-13T15:45:47.750244

3389 / tcp 1912799764 | 2025-01-20T13:00:57.368563

4949 / tcp -187990368 | 2025-02-09T22:37:46.970910

Hashes

5985 / tcp 1489525118 | 2025-02-09T19:06:52.353346

Hashes

5986 / tcp 1489525118 | 2025-02-09T18:04:09.101015

Hashes

56985 / tcp 951517768 | 2025-02-13T15:53:04.580693

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

-370734890 | 2025-01-16T20:58:35.773357

80 / tcp

1489525118 | 2025-02-11T14:24:13.757046

1025 / tcp

2068779293 | 2025-02-04T10:10:37.356968

1028 / tcp

2068779293 | 2025-01-21T18:48:33.779943

1029 / tcp

2068779293 | 2025-01-18T04:49:17.533533

1434 / tcp

951517768 | 2025-02-07T18:21:03.310784

1434 / udp

998269607 | 2025-02-13T15:45:47.750244

3389 / tcp

1912799764 | 2025-01-20T13:00:57.368563

4949 / tcp

-187990368 | 2025-02-09T22:37:46.970910

5985 / tcp

1489525118 | 2025-02-09T19:06:52.353346

5986 / tcp

1489525118 | 2025-02-09T18:04:09.101015

56985 / tcp

951517768 | 2025-02-13T15:53:04.580693