GeneralInformation

Hostnames	smtp.saviletours.com
Domains	saviletours.com
Country	United Kingdom
City	London
Organization	OVH Ltd
ISP	OVH SAS
ASN	AS16276

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 3306 3389 5357 5985 8080 33060

-10308456 | 2025-01-08T16:49:40.321409

22 / tcp

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDQ+iMoCQFKF6nNCFA1C21dKLHf0AX+OcM1m5BLuCtpfGLa
QFwOwDa3BWcKf1XxqG9JoAn6Oy/xO9F27wmdMM0t6QRZRbnRrYZP7DurBOjDrzUqXcN8JTuji84N
MYmTIlfP05NS7IekkyNIvJKRQIG6p7n6W2x3/20pYmGI/mRbD/fKFVEyx4G1RA4as1niFOL3yIeO
CX/C4xpe5WNNXIJBWlDBuKO1BNe5LDYg7FG0yrhY5MtSguelDZDKUTtfo3KCJwveDVZamnUXqTkZ
80mrlbNMphiH+8TZrcO5a2ySX445C3sy9lMOeHlokwTLIMeIMrVVfmH4xROLd7BfyCq5
Fingerprint: ab:a1:3d:54:2f:e3:19:1f:53:ea:69:51:58:10:9d:29

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	aes192-cbc
	aes256-cbc
	blowfish-cbc
	cast128-cbc
	3des-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-1064395677 | 2024-12-15T06:32:46.548132

3306 / tcp

MySQL:
  Error Message: Host '224.187.136.131' is not allowed to connect to this MySQL server
  Error Code: 1130

-1642837855 | 2024-12-15T10:49:50.351523

3389 / tcp

Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
  OS: Windows Server 2022
  OS Build: 10.0.20348
  Target Name: WIN-UTGSCM38AS4
  NetBIOS Domain Name: WIN-UTGSCM38AS4
  NetBIOS Computer Name: WIN-UTGSCM38AS4
  DNS Domain Name: WIN-UTGSCM38AS4
  FQDN: WIN-UTGSCM38AS4

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:b2:2c:80:55:f9:85:44:ec:8b:f0:f6:89:c2:b0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=WIN-UTGSCM38AS4
        Validity
            Not Before: Aug  1 12:47:46 2024 GMT
            Not After : Jan 31 12:47:46 2025 GMT
        Subject: CN=WIN-UTGSCM38AS4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:64:f2:4d:09:82:96:45:f8:f1:62:1d:d8:
                    52:93:f5:3e:f5:e8:f3:a9:40:6a:58:55:18:6e:4e:
                    a2:e4:7b:40:80:9e:0f:8f:dc:0f:1a:55:f8:a9:48:
                    28:5d:2c:b8:30:44:50:c3:1a:64:1e:86:26:f6:4a:
                    1b:c3:43:0a:6d:60:75:70:58:74:e0:15:16:6e:69:
                    cf:a7:56:de:9f:07:95:cc:80:47:f7:21:59:5c:8b:
                    72:94:49:99:e5:02:8e:f0:b5:75:f7:8c:41:ed:82:
                    e7:8c:4b:7f:14:9f:0c:59:c4:63:4c:92:1a:c6:cb:
                    9a:98:f2:ef:37:d8:47:c2:95:15:1a:47:a9:78:52:
                    13:41:a5:d7:e0:eb:34:9e:a9:0b:70:e6:44:3f:bc:
                    3d:38:24:cf:32:bc:66:36:0e:8e:7f:20:26:68:87:
                    b1:b1:58:12:24:1d:cb:32:7a:8f:94:82:12:64:80:
                    da:37:c4:34:98:cf:06:b9:61:f2:3d:8d:a7:6e:3b:
                    a5:26:07:6c:a3:14:5f:a1:a1:e9:93:b3:52:43:46:
                    29:d2:cc:42:0d:61:a2:c9:4c:b4:7d:89:85:f7:c6:
                    2b:e8:a1:a1:96:9f:99:c9:49:33:b5:5e:db:4a:b2:
                    a5:bb:33:a6:b8:f9:36:e7:7b:79:88:1f:18:c0:51:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Key Usage: 
                Key Encipherment, Data Encipherment
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1c:38:8c:14:cd:0b:b7:bc:49:fd:ea:30:fd:83:6e:bc:0b:7d:
        5e:e5:5e:73:68:17:5a:e1:6e:82:b1:40:67:8c:04:01:15:69:
        66:4d:ef:b0:60:ed:3f:79:cf:6d:5d:d3:15:a2:ea:9f:cd:13:
        5a:e1:9d:05:16:e7:56:38:5b:f7:3e:ca:f0:a8:32:26:ee:37:
        1b:f4:54:e8:fa:d1:8e:bf:1a:5b:ca:95:12:5d:8d:22:8b:d8:
        6c:9c:ae:1a:d7:79:64:65:d5:c7:77:6f:67:30:74:17:c5:92:
        de:f8:e0:22:c6:22:c6:dd:d9:0a:34:3e:38:3a:ba:5b:c1:bf:
        f3:02:58:9a:28:2c:65:15:c0:9c:ee:31:7e:22:41:cf:bd:8d:
        66:a0:d0:89:73:f8:02:d4:84:86:5f:33:a3:48:80:b5:91:35:
        22:5f:fc:51:19:34:5a:8e:1f:f5:ce:1c:09:e1:e8:bd:40:f6:
        08:bd:d9:78:8c:6c:bb:f6:a6:3f:87:a0:24:60:9e:71:e7:0f:
        31:46:cc:99:bc:cc:96:3e:9c:4f:67:60:5e:8c:98:90:93:5f:
        79:a0:2b:27:00:84:62:93:7a:b3:8a:af:69:7c:31:a0:33:46:
        e7:28:5a:1b:cf:5a:01:db:c4:98:56:01:86:5e:aa:fc:f1:80:
        3a:d9:01:0e

-1684583448 | 2024-12-15T19:30:42.004019

5357 / tcp

Service Unavailable

HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sun, 15 Dec 2024 19:30:41 GMT
Connection: close
Content-Length: 326

1489525118 | 2024-12-13T22:50:01.527242

5985 / tcp

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 13 Dec 2024 22:50:01 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2022
  OS Build: 10.0.20348
  Target Name: WIN-UTGSCM38AS4
  NetBIOS Domain Name: WIN-UTGSCM38AS4
  NetBIOS Computer Name: WIN-UTGSCM38AS4
  DNS Domain Name: WIN-UTGSCM38AS4
  FQDN: WIN-UTGSCM38AS4

-168651447 | 2024-12-25T19:01:45.567135

8080 / tcp

HTTP/1.0 302 Please use HTTPS instead
Content-Type: text/html; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=0
X-Content-Security-Policy: default-src 'self'; object-src 'self'; img-src data: 'self'; style-src https://fonts.googleapis.com 'self'; font-src https://fonts.gstatic.com 'self'
X-WebKit-CSP: default-src 'self'; object-src 'self'; img-src data: 'self'; style-src https://fonts.googleapis.com 'self'; font-src https://fonts.gstatic.com 'self'
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; object-src 'self'; img-src data: 'self'; style-src https://fonts.googleapis.com 'self'; font-src https://fonts.gstatic.com 'self'
Location: https://94.23.152.130/

-795948505 | 2024-12-13T19:31:56.688660

33060 / tcp

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

94.23.152.130

Last Seen: 2025-01-08

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-10308456 | 2025-01-08T16:49:40.321409
22 / tcp

OpenSSH7.4

-1064395677 | 2024-12-15T06:32:46.548132
3306 / tcp

MySQL

-1642837855 | 2024-12-15T10:49:50.351523
3389 / tcp

Remote Desktop Protocol

-1684583448 | 2024-12-15T19:30:42.004019
5357 / tcp

1489525118 | 2024-12-13T22:50:01.527242
5985 / tcp

WinRM

-168651447 | 2024-12-25T19:01:45.567135
8080 / tcp

-795948505 | 2024-12-13T19:31:56.688660
33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

94.23.152.130

Last Seen: 2025-01-08

Tags:

GeneralInformation

Vulnerabilities All ports Port 22 Latest CVSS

OpenPorts

-10308456 | 2025-01-08T16:49:40.321409 22 / tcp

OpenSSH7.4

-1064395677 | 2024-12-15T06:32:46.548132 3306 / tcp

MySQL

-1642837855 | 2024-12-15T10:49:50.351523 3389 / tcp

Remote Desktop Protocol

-1684583448 | 2024-12-15T19:30:42.004019 5357 / tcp

1489525118 | 2024-12-13T22:50:01.527242 5985 / tcp

WinRM

-168651447 | 2024-12-25T19:01:45.567135 8080 / tcp

-795948505 | 2024-12-13T19:31:56.688660 33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

-10308456 | 2025-01-08T16:49:40.321409
22 / tcp

-1064395677 | 2024-12-15T06:32:46.548132
3306 / tcp

-1642837855 | 2024-12-15T10:49:50.351523
3389 / tcp

-1684583448 | 2024-12-15T19:30:42.004019
5357 / tcp

1489525118 | 2024-12-13T22:50:01.527242
5985 / tcp

-168651447 | 2024-12-25T19:01:45.567135
8080 / tcp

-795948505 | 2024-12-13T19:31:56.688660
33060 / tcp