GeneralInformation

Hostnames	www.oldsite.openmoves.com www.stage.openmoves.com server.orange-moves.com autoconfig.server.orange-moves.com autodiscover.server.orange-moves.com cpanel.server.orange-moves.com cpcalendars.server.orange-moves.com cpcontacts.server.orange-moves.com ipv6.server.orange-moves.com mail.server.orange-moves.com webdisk.server.orange-moves.com webmail.server.orange-moves.com whm.server.orange-moves.com www.server.orange-moves.com
Domains	openmoves.com orange-moves.com
Country	United States
City	Detroit
Organization	A2 Hosting, Inc.
ISP	A2 Hosting, Inc.
ASN	AS55293

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 53 80 443 2077 2095 33060

2132306985 | 2024-10-03T17:19:09.859803

21 / tcp

220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 1 of 80 allowed.
220-Local time is now 13:18. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
530 Login authentication failed
214-The following SITE commands are recognized
 ALIAS
 CHMOD
 IDLE
 UTIME
214 Pure-FTPd - http://pureftpd.org/
211-Extensions supported:
 UTF8
 EPRT
 IDLE
 MDTM
 SIZE
 MFMT
 REST STREAM
 MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
 MLSD
 PRET
 AUTH TLS
 PBSZ
 PROT
 TVFS
 ESTA
 PASV
 EPSV
 ESTP
211 End.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:59:58:ca:be:b5:7c:d8:12:38:56:7a:e4:c8:9e:a2:5f:f6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Sep 15 22:53:40 2024 GMT
            Not After : Dec 14 22:53:39 2024 GMT
        Subject: CN=server.orange-moves.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:28:09:d8:1d:4d:b2:02:c4:18:3e:3f:fe:
                    f4:ca:ee:89:52:91:91:9f:2e:71:3f:e9:16:cc:22:
                    97:5b:e5:cc:d5:6e:cd:70:15:af:23:f6:8b:a5:7e:
                    da:ec:f6:d6:be:35:82:0d:71:0f:a5:8f:ee:d1:0f:
                    78:0f:d5:0f:9b:4a:e8:98:96:2f:bd:f6:02:b9:16:
                    af:b5:31:33:85:8e:4e:6a:ab:fb:65:38:36:b3:46:
                    22:f9:f9:34:21:2c:a1:ef:6d:9e:75:e4:36:cd:7a:
                    44:76:cf:83:03:35:84:88:4b:21:70:62:1b:a6:d9:
                    df:43:1a:f3:ab:22:03:e2:34:77:d5:08:b8:34:5c:
                    b2:eb:07:bf:cd:8d:09:15:f5:aa:0e:bd:7a:8e:69:
                    5f:6a:bc:14:20:5d:f4:14:00:aa:da:1b:3c:98:c9:
                    ea:52:39:cf:95:e0:39:37:42:3f:1e:0d:1d:4a:e2:
                    78:8c:ee:5f:3b:08:6d:d5:e9:3e:ac:a7:37:fa:8c:
                    65:55:a5:c1:9c:31:34:e5:64:c4:81:38:8c:c3:a6:
                    a3:88:71:ee:70:06:27:4f:3d:a2:84:73:c2:d5:42:
                    61:5b:6d:a9:af:44:2a:c4:bd:9e:8b:03:dd:29:6c:
                    f8:9a:7a:47:65:4c:4e:74:31:33:0d:03:c0:19:46:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                5E:6A:E7:95:E0:5A:D2:97:80:57:CF:E8:59:17:06:C4:82:F1:7C:DF
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:autoconfig.server.orange-moves.com, DNS:autodiscover.server.orange-moves.com, DNS:cpanel.server.orange-moves.com, DNS:cpcalendars.server.orange-moves.com, DNS:cpcontacts.server.orange-moves.com, DNS:ipv6.server.orange-moves.com, DNS:mail.server.orange-moves.com, DNS:server.orange-moves.com, DNS:webdisk.server.orange-moves.com, DNS:webmail.server.orange-moves.com, DNS:whm.server.orange-moves.com, DNS:www.server.orange-moves.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Sep 15 23:52:10.646 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:86:39:1F:BB:3F:E4:3B:68:19:7A:70:
                                EF:95:83:CE:E6:2F:EC:84:1E:E1:12:A3:17:D5:90:3D:
                                57:93:87:31:2A:02:20:08:9F:8B:A2:D7:4E:EF:C5:45:
                                19:96:1F:DD:16:6F:5C:15:23:3D:47:A3:41:7F:F6:9B:
                                F6:13:D7:24:6E:82:E4
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : Sep 15 23:52:10.796 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:A4:5D:7A:19:AF:EC:07:0F:E9:99:15:
                                F7:45:C6:BD:0A:92:BB:34:BA:14:C4:01:95:23:9E:C4:
                                5A:EA:0A:DA:F2:02:21:00:D2:74:68:43:A8:D9:5B:6E:
                                98:D5:69:0E:F5:1E:F7:1A:44:24:1C:11:72:A8:CC:F2:
                                81:4E:6B:BF:19:64:3D:60
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        cd:5e:32:d6:15:1a:7c:42:d3:cc:9c:b4:ec:9e:a4:34:3e:63:
        e2:6a:d9:27:21:39:e9:df:d0:7b:66:03:12:34:da:b5:f9:71:
        c8:e7:38:6d:18:ba:45:3f:34:3a:4c:a0:12:68:b7:f7:53:8a:
        16:ab:3d:94:16:41:40:a0:7d:49:d0:2a:23:90:61:2d:02:c1:
        91:95:89:9c:f4:15:2d:96:0b:65:62:a6:28:4e:c0:22:6c:0c:
        68:1a:05:71:60:f6:6c:9c:97:6c:40:9d:c8:ef:fd:21:f3:fa:
        0e:bc:35:23:a7:39:af:b5:f2:6d:db:28:54:c4:0a:76:46:4b:
        e3:91:26:3f:69:8c:0e:6d:91:de:0b:f9:a3:f7:cb:cd:51:24:
        f7:81:13:2a:24:7c:d1:7e:0d:7c:a6:93:2f:26:eb:62:4a:d6:
        1e:5b:3b:9d:12:14:2d:dd:e4:3a:12:ee:51:07:4e:56:e8:5a:
        ad:7c:69:11:67:5a:67:16:16:f8:04:02:27:14:99:7d:13:4f:
        ce:02:3e:18:85:16:30:16:34:72:07:94:19:87:ad:d5:b2:d4:
        40:5f:2c:29:37:51:ab:e2:80:eb:56:2e:c6:be:22:ce:c8:47:
        94:87:cd:11:e5:26:11:9b:21:38:69:54:cb:5a:7c:03:ff:67:
        c5:a2:2f:ef

878956273 | 2024-10-06T18:47:34.457701

53 / tcp

PowerDNS Authoritative Server 4.9.1 (built Sep  3 2024 16:15:48 by root@bh-centos-8.dev.cpanel.net)
Resolver ID: server.orange-moves.com

528746443 | 2024-10-24T22:28:35.245741

80 / tcp

Default Web Site Page

HTTP/1.1 200 OK
Date: Thu, 24 Oct 2024 22:28:35 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Upgrade: h2,h2c
Connection: Upgrade
Transfer-Encoding: chunked
Content-Type: text/html

-268201046 | 2024-10-30T06:02:50.127988

443 / tcp

HTTP/1.1 200 OK
Date: Wed, 30 Oct 2024 06:02:50 GMT
Server: Apache
X-Powered-By: PHP/7.1.33
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Upgrade: h2,h2c
Connection: Upgrade
Content-Length: 0
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:eb:ef:61:8f:51:e7:fa:a2:49:14:5e:f0:e1:4a:2f:fe:66
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr 17 07:32:31 2023 GMT
            Not After : Jul 16 07:32:30 2023 GMT
        Subject: CN=*.openmoves.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:8e:ce:45:90:d4:06:e7:ff:23:f3:6e:b2:
                    26:d0:7b:3e:b4:73:7e:00:fd:27:01:58:c9:eb:5a:
                    ac:f7:43:cd:8e:dd:68:f8:a9:90:ec:b5:1f:dc:a9:
                    03:74:2b:5e:93:a7:df:c5:af:9b:d5:b0:e0:0f:6f:
                    ef:ff:e1:db:3a:a3:de:9e:e9:51:7b:25:64:b5:d8:
                    7f:ce:4b:5c:81:d7:63:7a:5e:20:b0:21:2e:84:8b:
                    63:7f:57:75:5d:04:fd:63:54:ad:18:77:ba:61:1e:
                    24:44:3f:96:aa:b7:86:16:3c:4a:85:46:53:e6:14:
                    c4:60:4d:1b:be:a5:16:76:f2:03:dc:15:4c:c3:c6:
                    1d:85:8b:34:07:c5:c1:a6:5f:80:c8:0c:48:2a:d5:
                    41:69:03:09:f2:6e:b2:6e:3f:70:76:10:a9:68:11:
                    7c:99:87:7b:24:ce:10:09:a6:59:94:ca:75:01:72:
                    b3:2f:d9:26:b8:a8:f0:8e:42:6c:db:2a:28:fb:6f:
                    31:c7:bd:05:b5:02:8a:2d:5d:94:ac:ee:aa:36:97:
                    e9:10:a4:57:68:81:5e:2a:e7:5c:9e:b5:27:a4:de:
                    c2:3a:4d:bf:bf:8c:22:ee:fd:ca:3e:36:1c:fa:75:
                    fe:85:18:6c:d9:5b:6b:9b:dc:69:9e:d5:1d:6e:f6:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                ED:0F:51:EE:60:16:E1:55:5C:09:EC:BF:ED:91:9A:96:66:EC:E6:EE
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.openmoves.com, DNS:www.oldsite.openmoves.com, DNS:www.stage.openmoves.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.letsencrypt.org
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : B7:3E:FB:24:DF:9C:4D:BA:75:F2:39:C5:BA:58:F4:6C:
                                5D:FC:42:CF:7A:9F:35:C4:9E:1D:09:81:25:ED:B4:99
                    Timestamp : Apr 17 08:32:31.734 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5D:2E:D3:8F:20:B8:0E:61:90:A2:85:F2:
                                7F:CB:D2:EB:00:D5:E3:61:C8:B7:19:20:6E:C5:35:C2:
                                C9:D5:3C:20:02:21:00:96:E0:BB:F4:C2:A3:D6:4A:62:
                                51:C7:96:0C:79:7B:74:C2:05:92:DA:6E:B8:82:A6:EA:
                                8E:7B:00:FF:34:F4:98
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84:
                                16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52
                    Timestamp : Apr 17 08:32:31.749 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:69:68:F5:16:90:9C:2D:3F:E5:56:8D:99:
                                6A:2F:E8:A7:03:F9:FE:5F:1D:15:4C:30:85:7F:E5:AD:
                                00:45:B3:BF:02:20:4B:B6:F4:C0:05:A4:C1:8B:93:E7:
                                70:38:78:38:E2:92:E3:60:AA:C4:E6:5A:94:1F:98:1A:
                                B5:BD:09:AE:E7:1D
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        12:8b:e2:f4:d5:c0:89:71:39:bb:42:ab:c2:7b:70:5d:65:e8:
        97:e3:ef:63:b8:e4:46:df:78:3b:69:95:70:47:52:49:17:bb:
        f4:93:74:e4:73:f6:78:30:15:2c:aa:eb:11:13:6d:78:fd:ae:
        60:fe:63:b4:8f:35:dc:6a:c4:f4:77:48:37:66:99:3a:11:1a:
        cb:b4:1d:7d:e9:54:c4:61:c2:30:ce:86:95:42:31:9b:41:37:
        15:11:3a:bc:bf:8f:34:45:9b:18:de:33:b5:28:89:18:24:fe:
        0e:08:cf:14:31:a9:e3:36:17:e6:e6:72:f4:00:ff:2e:14:97:
        ed:13:1a:6a:f4:0c:d1:c0:f5:78:8e:9a:dc:fd:d2:42:8c:63:
        f6:c8:0f:c4:a2:60:2c:fd:33:99:5c:95:da:9d:38:b7:8f:e6:
        c8:04:f8:70:b1:78:15:53:76:75:cc:d8:cb:35:61:48:c6:6f:
        e5:cf:2d:4a:36:e8:f8:9d:fe:09:3c:77:ec:fc:7a:bb:87:ab:
        89:29:6a:b5:72:dd:14:fa:be:92:4b:94:7b:28:bd:22:7b:3c:
        b1:a2:c9:26:36:ff:69:c8:db:32:d8:8f:cf:8c:e3:34:82:ea:
        b9:8a:b1:d6:c1:b4:fc:04:62:61:57:c1:01:8a:e1:21:91:a2:
        05:65:72:1b

CVE-2017-8923 CVE-2013-2220 CVE-2020-11579 CVE-2007-3205 CVE-2024-4577 2 moreCVE-2022-31629 CVE-2022-31628

-1429820646 | 2024-10-20T09:51:09.139169

2077 / tcp

HTTP/1.1 401 Unauthorized
Date: Sun, 20 Oct 2024 09:51:09 GMT
Server: cPanel
Persistent-Auth: false
Host: 69.48.181.40:2077
Cache-Control: no-cache, no-store, must-revalidate, private
Connection: close
Vary: Accept-Encoding
WWW-Authenticate: Basic realm="Restricted Area"
Content-Length: 36
Content-Type: text/html; charset="utf-8"
Expires: Fri, 01 Jan 1990 00:00:00 GMT

1629198998 | 2024-10-15T11:42:18.502917

2095 / tcp

Webmail Login

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset="utf-8"
Date: Tue, 15 Oct 2024 11:42:18 GMT
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Set-Cookie: webmailrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: webmailsession=%3aDVBZsZ5UBhmKcUjs%2ca6749e0446001b33a319813884e721a3; HttpOnly; path=/; port=2095
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=69.48.181.40; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: roundcube_cookies=enabled; HttpOnly; expires=Wed, 15-Oct-2025 11:42:18 GMT; path=/; port=2095
Content-Length: 37391

-795948505 | 2024-10-04T02:07:28.372166

33060 / tcp

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

69.48.181.40

Last Seen: 2024-10-30

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

2132306985 | 2024-10-03T17:19:09.859803
21 / tcp

Pure-FTPd

878956273 | 2024-10-06T18:47:34.457701
53 / tcp

528746443 | 2024-10-24T22:28:35.245741
80 / tcp

Apache httpd

-268201046 | 2024-10-30T06:02:50.127988
443 / tcp

Apache httpd

-1429820646 | 2024-10-20T09:51:09.139169
2077 / tcp

1629198998 | 2024-10-15T11:42:18.502917
2095 / tcp

-795948505 | 2024-10-04T02:07:28.372166
33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

69.48.181.40

Last Seen: 2024-10-30

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

2132306985 | 2024-10-03T17:19:09.859803 21 / tcp

Pure-FTPd

878956273 | 2024-10-06T18:47:34.457701 53 / tcp

528746443 | 2024-10-24T22:28:35.245741 80 / tcp

Apache httpd

-268201046 | 2024-10-30T06:02:50.127988 443 / tcp

Apache httpd

-1429820646 | 2024-10-20T09:51:09.139169 2077 / tcp

1629198998 | 2024-10-15T11:42:18.502917 2095 / tcp

-795948505 | 2024-10-04T02:07:28.372166 33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

2132306985 | 2024-10-03T17:19:09.859803
21 / tcp

878956273 | 2024-10-06T18:47:34.457701
53 / tcp

528746443 | 2024-10-24T22:28:35.245741
80 / tcp

-268201046 | 2024-10-30T06:02:50.127988
443 / tcp

-1429820646 | 2024-10-20T09:51:09.139169
2077 / tcp

1629198998 | 2024-10-15T11:42:18.502917
2095 / tcp

-795948505 | 2024-10-04T02:07:28.372166
33060 / tcp