GeneralInformation

Hostnames	927435-cu46572.tmweb.ru
Domains	tmweb.ru
Country	Russian Federation
City	Saint Petersburg
Organization	TimeWeb Ltd.
ISP	TimeWeb Ltd.
ASN	AS9123

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 22 53 80 123 443 465 993 995 10050

-1105655830 | 2024-12-14T02:37:35.193129

21 / tcp

220 ProFTPD 1.3.5e Server (Debian) [::ffff:85.193.91.81]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
214-CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
214-EPRT    EPSV    ALLO*   RNFR    RNTO    DELE    MDTM    RMD     
214-XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
214-NOOP    FEAT    OPTS    AUTH    CCC*    CONF*   ENC*    MIC*    
214-PBSZ    PROT    TYPE    STRU    MODE    RETR    STOR    STOU    
214-APPE    REST    ABOR    USER    PASS    ACCT*   REIN*   LIST    
214-NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@localhost
211-Features:
 SITE UTIME
 MDTM
 SITE RMDIR
 SSCN
 TVFS
 SITE COPY
 MFMT
 SIZE
 PROT
 CCC
 SITE MKDIR
 PBSZ
 AUTH TLS
 MFF modify;UNIX.group;UNIX.mode;
 REST STREAM
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*;
 UTF8
 LANG en-US*
 EPRT
 SITE SYMLINK
 EPSV
211 End

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d9:10:66:69:8f:67:49:6d:f5:a4:0b:71:72:6e:de:c5:97:b5:86
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=927435-cu46572.tmweb.ru/emailAddress=root@927435-cu46572.tmweb.ru
        Validity
            Not Before: Jun  6 08:34:58 2022 GMT
            Not After : Jun  3 08:34:58 2032 GMT
        Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=927435-cu46572.tmweb.ru/emailAddress=root@927435-cu46572.tmweb.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:be:0a:f7:79:ed:f2:61:f7:47:27:aa:13:d0:c5:
                    46:4f:5b:4b:07:51:ca:cb:fa:99:57:b3:24:5d:be:
                    99:d6:a0:e1:24:f6:be:76:2c:2f:46:5f:44:9b:92:
                    94:e0:f7:3b:12:e9:11:b6:f1:c8:44:97:83:f6:1d:
                    e5:3b:c5:1c:66:18:39:77:87:34:ff:59:cc:f7:62:
                    c8:1b:b2:f2:e4:7b:64:71:05:6d:ae:42:64:1d:98:
                    3f:14:2f:e8:4b:ff:e2:aa:13:03:0c:0e:cc:f4:d1:
                    e4:9c:25:98:55:cc:45:80:3e:4e:48:54:af:5d:ec:
                    66:65:9d:47:d6:ed:5c:12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:86:37:F3:39:F7:60:48:5B:56:A5:56:47:D1:97:7B:7C:F9:13:C2
            X509v3 Authority Key Identifier: 
                A4:86:37:F3:39:F7:60:48:5B:56:A5:56:47:D1:97:7B:7C:F9:13:C2
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2a:1a:5e:f7:85:c7:01:46:ec:e9:e6:d6:2d:f3:06:67:70:96:
        1c:66:f2:be:fa:da:0d:97:b4:40:12:5d:85:a7:4f:f5:91:77:
        67:6c:49:13:93:9a:22:aa:ab:72:3a:32:fb:03:a5:41:24:f8:
        17:1f:c2:7a:94:51:33:cf:cc:b3:8b:5a:97:fd:40:f5:69:8c:
        5c:f3:83:7e:6e:5e:04:ee:7d:fb:e3:93:fc:68:9c:1c:17:45:
        58:a6:70:20:92:96:fb:42:54:2d:b0:05:3f:dd:97:c0:1b:28:
        bd:c3:23:6e:62:a1:8c:e0:61:5c:49:17:c1:3f:1f:a1:fb:0c:
        32:15

CVE-2023-51713 CVE-2021-46854 CVE-2020-9272 CVE-2019-19272 CVE-2019-19271 2 moreCVE-2023-48795 CVE-2019-19269

-1049196639 | 2024-12-19T10:29:44.737511

22 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.7
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDROp+LMxFl2rkBUT9juDjYpUZ24vaWSdyupKLcxosTEt8Y
nWkgL7eYDh9yWuotDq9YOX6TG0FYjOw9FzI6KhrjyUuN3GL0+BtookL+bDJHOtJ7zcR3XgPkNArX
K+6pPrfgekcOfhwehk+Ac2bBYTLlKpPYNoNTC7NPmDje5wVg3l7jaY/8CqwgWdnAoW1M1d29etFJ
wSUBQw8BEiOGX4ZtgzBN41n2VXYPIJsSaM06xU+An2niiIY4KsJANsOOIWr1oEzQGr7AjfnwBOaW
UjDJcfPtCmoTpp3pxVeREM/9oBIUPGWIgSejsWuK/zQ3hdzgjw3jy39OB/tlfGMBWNw1
Fingerprint: be:ad:63:6a:2f:00:95:00:4e:22:1a:76:1b:6f:e3:d1

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-1073413241 | 2024-12-12T19:48:14.313182

53 / tcp

9.11.3-1ubuntu1.18-Ubuntu
Resolver name: 927435-cu46572.tmweb.ru

-1116883598 | 2024-12-22T00:54:50.481541

53 / udp

Resolver name: 927435-cu46572.tmweb.ru

897585984 | 2025-01-07T12:37:16.780318

80 / tcp

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.2
Date: Tue, 07 Jan 2025 12:37:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://85.193.91.81:443/

CVE-2023-44487 CVE-2021-3618

1923918210 | 2025-01-07T14:35:46.348336

123 / udp

NTP
protocolversion: 3
stratum: 3
leap: 0
precision: -24
rootdelay: 0.0119018554688
rootdisp: 0.0334625244141
refid: 1500379929
reftime: 3945248620.85
poll: 3

383770581 | 2025-01-07T13:26:07.916587

443 / tcp

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx/1.20.2
Date: Tue, 07 Jan 2025 13:26:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close

CVE-2023-44487 CVE-2021-3618

865343182 | 2024-12-11T04:44:16.652886

465 / tcp

220 927435-cu46572.tmweb.ru ESMTP Exim 4.90_1 Ubuntu Wed, 11 Dec 2024 07:44:04 +0300
250-927435-cu46572.tmweb.ru Hello 224.146.215.79 [224.146.215.79]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN CRAM-MD5
250-CHUNKING
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d0:bc:8f:a0:c7:3b:1d:e3:01:df:d0:bc:4d:15:c9:6c:0f:e6:19
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=927435-cu46572.tmweb.ru/emailAddress=root@927435-cu46572.tmweb.ru
        Validity
            Not Before: Jun  6 08:34:11 2022 GMT
            Not After : Jun  3 08:34:11 2032 GMT
        Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=927435-cu46572.tmweb.ru/emailAddress=root@927435-cu46572.tmweb.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c8:1d:97:18:c9:f6:50:43:e7:94:04:a5:aa:a4:
                    bb:8f:d8:85:78:02:23:03:fc:3b:31:f4:18:ee:db:
                    d0:08:32:c1:88:a8:c5:1e:cc:bb:b8:fb:65:c4:78:
                    4e:45:a3:5c:18:9f:30:e8:d9:ad:b4:62:73:41:ad:
                    a4:4d:9e:eb:67:5d:8b:ba:88:58:29:a5:cd:dc:53:
                    e2:ee:15:ab:6c:98:7f:81:07:3f:6d:56:82:bc:41:
                    74:a9:70:c8:7a:23:08:c7:c0:ef:f7:92:9a:31:21:
                    69:df:85:53:a7:b0:80:ce:20:da:96:f3:84:9b:fa:
                    6d:fe:a5:d0:74:65:ce:53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                26:83:D1:7C:4A:AD:FB:62:8C:CB:5B:FF:F4:92:C1:F1:E2:97:4E:B0
            X509v3 Authority Key Identifier: 
                26:83:D1:7C:4A:AD:FB:62:8C:CB:5B:FF:F4:92:C1:F1:E2:97:4E:B0
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        bc:88:b4:c5:1a:06:98:73:44:18:bc:aa:c8:8f:9d:39:b9:dc:
        c5:50:37:0e:4b:bc:23:00:5c:38:e5:4a:48:8e:8d:01:e0:44:
        67:a0:88:21:ae:20:59:45:bc:1e:60:72:6c:be:6a:dc:d0:d5:
        dc:9a:54:ef:4c:91:90:b7:28:17:52:4f:f0:5b:7b:0c:c5:ae:
        d4:8b:16:17:fa:d2:2f:90:b4:50:db:4b:42:ab:7e:01:d0:86:
        5a:17:0c:d4:09:c1:95:cc:ad:1d:30:fd:d9:97:bb:62:42:02:
        14:3b:22:bb:9d:07:2f:42:77:bc:cc:be:b9:e2:9e:28:e2:d2:
        11:11

-2047833726 | 2024-12-25T03:58:28.200923

993 / tcp

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot (Ubuntu) ready.
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d0:bc:8f:a0:c7:3b:1d:e3:01:df:d0:bc:4d:15:c9:6c:0f:e6:19
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=927435-cu46572.tmweb.ru/emailAddress=root@927435-cu46572.tmweb.ru
        Validity
            Not Before: Jun  6 08:34:11 2022 GMT
            Not After : Jun  3 08:34:11 2032 GMT
        Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=927435-cu46572.tmweb.ru/emailAddress=root@927435-cu46572.tmweb.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c8:1d:97:18:c9:f6:50:43:e7:94:04:a5:aa:a4:
                    bb:8f:d8:85:78:02:23:03:fc:3b:31:f4:18:ee:db:
                    d0:08:32:c1:88:a8:c5:1e:cc:bb:b8:fb:65:c4:78:
                    4e:45:a3:5c:18:9f:30:e8:d9:ad:b4:62:73:41:ad:
                    a4:4d:9e:eb:67:5d:8b:ba:88:58:29:a5:cd:dc:53:
                    e2:ee:15:ab:6c:98:7f:81:07:3f:6d:56:82:bc:41:
                    74:a9:70:c8:7a:23:08:c7:c0:ef:f7:92:9a:31:21:
                    69:df:85:53:a7:b0:80:ce:20:da:96:f3:84:9b:fa:
                    6d:fe:a5:d0:74:65:ce:53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                26:83:D1:7C:4A:AD:FB:62:8C:CB:5B:FF:F4:92:C1:F1:E2:97:4E:B0
            X509v3 Authority Key Identifier: 
                26:83:D1:7C:4A:AD:FB:62:8C:CB:5B:FF:F4:92:C1:F1:E2:97:4E:B0
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        bc:88:b4:c5:1a:06:98:73:44:18:bc:aa:c8:8f:9d:39:b9:dc:
        c5:50:37:0e:4b:bc:23:00:5c:38:e5:4a:48:8e:8d:01:e0:44:
        67:a0:88:21:ae:20:59:45:bc:1e:60:72:6c:be:6a:dc:d0:d5:
        dc:9a:54:ef:4c:91:90:b7:28:17:52:4f:f0:5b:7b:0c:c5:ae:
        d4:8b:16:17:fa:d2:2f:90:b4:50:db:4b:42:ab:7e:01:d0:86:
        5a:17:0c:d4:09:c1:95:cc:ad:1d:30:fd:d9:97:bb:62:42:02:
        14:3b:22:bb:9d:07:2f:42:77:bc:cc:be:b9:e2:9e:28:e2:d2:
        11:11

958054138 | 2024-12-27T20:13:17.265427

995 / tcp

+OK Dovecot (Ubuntu) ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
USER
SASL PLAIN LOGIN CRAM-MD5
.

85.193.91.81

Last Seen: 2025-01-07

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1105655830 | 2024-12-14T02:37:35.193129
21 / tcp

ProFTPD1.3.5e

-1049196639 | 2024-12-19T10:29:44.737511
22 / tcp

OpenSSH7.6p1 Ubuntu 4ubuntu0.7

-1073413241 | 2024-12-12T19:48:14.313182
53 / tcp

-1116883598 | 2024-12-22T00:54:50.481541
53 / udp

897585984 | 2025-01-07T12:37:16.780318
80 / tcp

nginx1.20.2

1923918210 | 2025-01-07T14:35:46.348336
123 / udp

383770581 | 2025-01-07T13:26:07.916587
443 / tcp

nginx1.20.2

865343182 | 2024-12-11T04:44:16.652886
465 / tcp

Exim smtpd4.90_1

-2047833726 | 2024-12-25T03:58:28.200923
993 / tcp

958054138 | 2024-12-27T20:13:17.265427
995 / tcp

Products

Pricing

Contact Us

85.193.91.81

Last Seen: 2025-01-07

Tags:

GeneralInformation

Vulnerabilities All ports Port 21 Port 80 Port 443 Latest CVSS

OpenPorts

-1105655830 | 2024-12-14T02:37:35.193129 21 / tcp

ProFTPD1.3.5e

-1049196639 | 2024-12-19T10:29:44.737511 22 / tcp

OpenSSH7.6p1 Ubuntu 4ubuntu0.7

-1073413241 | 2024-12-12T19:48:14.313182 53 / tcp

-1116883598 | 2024-12-22T00:54:50.481541 53 / udp

897585984 | 2025-01-07T12:37:16.780318 80 / tcp

nginx1.20.2

1923918210 | 2025-01-07T14:35:46.348336 123 / udp

383770581 | 2025-01-07T13:26:07.916587 443 / tcp

nginx1.20.2

865343182 | 2024-12-11T04:44:16.652886 465 / tcp

Exim smtpd4.90_1

-2047833726 | 2024-12-25T03:58:28.200923 993 / tcp

958054138 | 2024-12-27T20:13:17.265427 995 / tcp

Products

Pricing

Contact Us

Vulnerabilities

-1105655830 | 2024-12-14T02:37:35.193129
21 / tcp

-1049196639 | 2024-12-19T10:29:44.737511
22 / tcp

-1073413241 | 2024-12-12T19:48:14.313182
53 / tcp

-1116883598 | 2024-12-22T00:54:50.481541
53 / udp

897585984 | 2025-01-07T12:37:16.780318
80 / tcp

1923918210 | 2025-01-07T14:35:46.348336
123 / udp

383770581 | 2025-01-07T13:26:07.916587
443 / tcp

865343182 | 2024-12-11T04:44:16.652886
465 / tcp

-2047833726 | 2024-12-25T03:58:28.200923
993 / tcp

958054138 | 2024-12-27T20:13:17.265427
995 / tcp