| Hostnames |
handyhost.ru scruffy-ip3.handyhost.ru |
| Domains | handyhost.ru |
| Country | Russian Federation |
| City | Moscow |
| Organization | System Service Ltd. |
| ISP | System Service Ltd. |
| ASN | AS50448 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
| CVE-2023-44487 | 7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
| CVE-2021-3618 | 7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer. |
1826189682 | 2024-04-13T06:11:40.05372380 / tcp
HTTP/1.1 404 Not Found Server: nginx/1.20.2 Date: Sat, 13 Apr 2024 06:11:39 GMT Content-Type: text/html Content-Length: 8451 Connection: keep-alive ETag: "5a6a3985-2103"
1826189682 | 2024-04-22T15:36:18.515807443 / tcp
HTTP/1.1 404 Not Found Server: nginx/1.20.2 Date: Mon, 22 Apr 2024 15:36:18 GMT Content-Type: text/html Content-Length: 8451 Connection: keep-alive ETag: "5a6a3985-2103"
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f5:b1:74:e7:39:03:7a:27:bb:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G4
Validity
Not Before: Dec 5 08:16:06 2023 GMT
Not After : Jan 5 08:16:05 2025 GMT
Subject: CN=*.handyhost.ru
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d9:46:ec:e7:56:d2:47:8b:8b:ed:08:62:2f:7b:
d8:09:20:3c:40:28:4d:f0:6a:bc:a8:6b:63:76:a1:
e9:1e:10:13:22:fe:25:49:1b:f7:d3:83:93:46:2f:
a9:74:ba:9f:32:1a:fb:85:7b:f9:f1:c9:66:48:95:
20:bc:73:eb:be:e9:57:79:4b:0a:3e:43:69:21:ba:
01:01:b1:2d:5a:25:a5:41:db:14:36:48:b3:4d:60:
a6:52:5e:10:2f:c1:0d:25:0c:81:e6:07:e8:4e:8f:
b9:9a:f3:8a:f3:d7:b1:53:11:28:8b:e0:14:0f:d1:
62:5a:48:77:30:0c:56:17:ed:40:3d:f1:c9:ba:10:
a4:aa:97:be:3f:47:b0:93:71:b7:7d:7b:bc:fc:5e:
26:1a:cb:19:71:78:68:30:6f:82:84:3c:5e:98:d4:
15:c0:41:b1:32:73:ce:25:fb:9d:93:5b:02:c0:87:
e3:bd:89:68:5a:65:74:44:00:31:5e:aa:3b:f2:27:
79:f1:32:11:71:ce:83:20:81:72:cc:8c:67:4e:d9:
77:e1:71:6f:c7:f2:94:0e:82:8c:9a:f4:3e:61:aa:
31:54:1e:84:73:34:35:98:6e:8d:a0:84:f8:4d:da:
c4:ef:c4:0c:54:d6:61:5e:32:8d:b9:66:ac:59:c0:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
Authority Information Access:
CA Issuers - URI:http://secure.globalsign.com/cacert/alphasslcasha256g4.crt
OCSP - URI:http://ocsp.globalsign.com/alphasslcasha256g4
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.4146.10.1.3
CPS: https://www.globalsign.com/repository/
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/alphasslcasha256g4.crl
X509v3 Subject Alternative Name:
DNS:*.handyhost.ru, DNS:handyhost.ru
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Authority Key Identifier:
4F:CB:AC:A8:C2:EF:AB:DD:83:6F:6B:BF:CE:98:3D:5C:58:25:76:15
X509v3 Subject Key Identifier:
21:D5:AB:88:69:D6:9F:8D:AF:DA:9C:00:23:37:4A:1D:AE:FF:F1:C9
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Dec 5 08:16:08.881 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:66:5A:91:A9:E2:7C:2E:25:C6:96:9A:39:
D1:88:52:A6:5B:4C:E0:FC:87:B8:05:07:F9:F7:7D:D8:
43:F9:81:F0:02:20:48:47:69:9D:CB:6A:39:A6:04:D9:
8A:50:61:EC:66:2D:13:30:6A:52:58:77:DB:1C:06:3A:
AB:93:C3:52:8F:0F
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Dec 5 08:16:08.874 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:4B:61:D2:17:05:87:C8:5A:EF:23:7A:81:
A9:FA:A6:D4:3D:BB:94:4D:25:67:71:58:90:EB:31:DE:
0A:78:32:53:02:21:00:AC:6F:D2:89:CA:2E:0F:36:62:
70:A4:9E:A5:9E:C5:3B:61:1D:65:A6:1B:35:D4:8D:F4:
F9:4D:9A:B9:A3:FA:FA
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Dec 5 08:16:08.839 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:35:3E:7F:51:3B:8B:12:4A:7A:27:70:D1:
51:0E:98:31:08:77:A5:DC:AB:64:43:44:F0:1C:9D:75:
04:E1:CC:42:02:21:00:ED:E1:5F:70:76:5B:18:86:90:
06:96:6C:4C:D9:8A:A2:4D:56:5A:A8:36:6B:9C:13:C8:
DB:8E:FE:7E:C5:1E:4E
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
5d:d0:a8:43:77:e8:4b:9b:eb:6a:75:d8:68:cf:02:1e:9b:b0:
d2:4f:64:32:4f:4a:fc:0b:7e:56:3c:73:f7:23:da:25:ea:ea:
ac:c3:ea:4a:78:8a:10:c5:a9:56:3c:66:a0:cc:51:08:50:a4:
de:44:97:e0:ea:29:f9:a3:61:5b:65:6a:e2:7f:0a:70:ad:c3:
c9:39:d9:e3:05:2c:23:35:b2:49:74:ff:28:77:b1:0c:1d:c8:
0b:98:c5:59:57:c1:95:11:08:e8:f4:05:8f:7a:a3:04:c5:39:
6a:eb:73:91:c0:27:83:96:db:c0:4a:9d:dd:7a:b0:1d:78:25:
f7:6c:d0:9d:99:8a:f7:fd:4f:a1:3e:cb:72:dd:4a:a6:e6:0d:
b4:a7:ba:4d:26:ff:fd:3e:ea:dc:77:5e:d4:8f:c9:2b:f6:82:
e3:c4:fe:5c:53:e5:c8:08:54:ed:8d:6d:de:3e:20:80:ee:9e:
9e:42:2f:26:68:76:d5:0d:d4:97:6f:0e:02:40:5c:2d:e6:2a:
57:33:14:cd:d8:c7:36:e1:08:c6:7b:03:df:de:3e:86:15:f7:
70:b0:5b:0a:d8:c5:73:8b:2b:e8:4e:a7:90:c4:fd:23:68:18:
02:24:09:e0:86:05:26:00:32:5c:1f:45:29:db:a8:53:15:59:
bf:75:99:6c
1708437265 | 2024-03-31T06:46:52.152332587 / tcp
220 scruffy.handyhost.ru ESMTP Exim 4.96.2 Sun, 31 Mar 2024 09:46:09 +0300 250-scruffy.handyhost.ru Hello 224.109.171.245 [224.109.171.245] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN CRAM-MD5 250-CHUNKING 250-STARTTLS 250 HELP
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ba:ed:a8:69:34:bc:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=scruffy.handyhost.ru/emailAddress=root@scruffy.handyhost.ru
Validity
Not Before: Dec 29 14:26:18 2017 GMT
Not After : Dec 27 14:26:18 2027 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=scruffy.handyhost.ru/emailAddress=root@scruffy.handyhost.ru
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:ab:d6:34:ad:ba:26:03:d8:e5:43:59:f5:43:b5:
d6:03:8e:67:36:1a:9c:e0:a0:b1:6e:f6:1b:3a:32:
d0:50:f0:e5:6b:6f:c9:c3:1d:42:df:88:68:4b:69:
26:12:55:3a:36:88:3f:d0:42:67:5b:92:5b:98:55:
6c:1b:7e:6f:0e:ad:5b:24:58:6c:c3:a9:f0:a6:4e:
da:42:41:86:70:08:db:04:34:66:19:11:b6:a4:bb:
20:9f:4e:61:e0:56:f1:8b:8c:dd:ee:52:70:83:6a:
e4:4c:43:9f:51:1c:88:36:d0:79:11:09:be:ac:a7:
50:78:d9:23:83:f7:92:52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:33:29:8D:CD:52:50:6F:35:A2:F1:37:66:7F:6D:5B:24:32:E3:F0
X509v3 Authority Key Identifier:
2D:33:29:8D:CD:52:50:6F:35:A2:F1:37:66:7F:6D:5B:24:32:E3:F0
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
30:bc:46:88:cd:0f:a2:8c:7f:5f:98:f0:fe:70:66:9e:a9:a8:
35:bd:51:8f:1b:ee:a4:c6:85:0d:e3:f2:d9:d1:c3:bd:98:e6:
02:a3:be:94:bc:fa:66:f0:bf:1c:3e:09:ef:11:75:f1:bb:3f:
2c:7b:95:88:2a:dc:25:e9:56:79:79:7e:85:a1:61:45:84:70:
d0:1a:dd:be:aa:ed:c7:f9:d2:52:30:f8:cc:3c:a4:59:2b:ab:
36:39:63:72:55:21:a3:fe:29:8b:37:df:3c:f5:25:59:69:c6:
d4:74:7e:a3:b1:dd:d3:0e:b0:b1:83:4b:ef:ae:34:c4:3f:f7:
8f:23
-1708341480 | 2024-03-28T05:00:54.557039993 / tcp
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready.
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ba:ed:a8:69:34:bc:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=scruffy.handyhost.ru/emailAddress=root@scruffy.handyhost.ru
Validity
Not Before: Dec 29 14:26:18 2017 GMT
Not After : Dec 27 14:26:18 2027 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=scruffy.handyhost.ru/emailAddress=root@scruffy.handyhost.ru
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:ab:d6:34:ad:ba:26:03:d8:e5:43:59:f5:43:b5:
d6:03:8e:67:36:1a:9c:e0:a0:b1:6e:f6:1b:3a:32:
d0:50:f0:e5:6b:6f:c9:c3:1d:42:df:88:68:4b:69:
26:12:55:3a:36:88:3f:d0:42:67:5b:92:5b:98:55:
6c:1b:7e:6f:0e:ad:5b:24:58:6c:c3:a9:f0:a6:4e:
da:42:41:86:70:08:db:04:34:66:19:11:b6:a4:bb:
20:9f:4e:61:e0:56:f1:8b:8c:dd:ee:52:70:83:6a:
e4:4c:43:9f:51:1c:88:36:d0:79:11:09:be:ac:a7:
50:78:d9:23:83:f7:92:52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:33:29:8D:CD:52:50:6F:35:A2:F1:37:66:7F:6D:5B:24:32:E3:F0
X509v3 Authority Key Identifier:
2D:33:29:8D:CD:52:50:6F:35:A2:F1:37:66:7F:6D:5B:24:32:E3:F0
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
30:bc:46:88:cd:0f:a2:8c:7f:5f:98:f0:fe:70:66:9e:a9:a8:
35:bd:51:8f:1b:ee:a4:c6:85:0d:e3:f2:d9:d1:c3:bd:98:e6:
02:a3:be:94:bc:fa:66:f0:bf:1c:3e:09:ef:11:75:f1:bb:3f:
2c:7b:95:88:2a:dc:25:e9:56:79:79:7e:85:a1:61:45:84:70:
d0:1a:dd:be:aa:ed:c7:f9:d2:52:30:f8:cc:3c:a4:59:2b:ab:
36:39:63:72:55:21:a3:fe:29:8b:37:df:3c:f5:25:59:69:c6:
d4:74:7e:a3:b1:dd:d3:0e:b0:b1:83:4b:ef:ae:34:c4:3f:f7:
8f:23
-1830824801 | 2024-04-08T23:56:33.995938995 / tcp
+OK Dovecot ready. +OK CAPA TOP UIDL RESP-CODES PIPELINING AUTH-RESP-CODE USER SASL PLAIN LOGIN CRAM-MD5 .
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ba:ed:a8:69:34:bc:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=scruffy.handyhost.ru/emailAddress=root@scruffy.handyhost.ru
Validity
Not Before: Dec 29 14:26:18 2017 GMT
Not After : Dec 27 14:26:18 2027 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=scruffy.handyhost.ru/emailAddress=root@scruffy.handyhost.ru
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:ab:d6:34:ad:ba:26:03:d8:e5:43:59:f5:43:b5:
d6:03:8e:67:36:1a:9c:e0:a0:b1:6e:f6:1b:3a:32:
d0:50:f0:e5:6b:6f:c9:c3:1d:42:df:88:68:4b:69:
26:12:55:3a:36:88:3f:d0:42:67:5b:92:5b:98:55:
6c:1b:7e:6f:0e:ad:5b:24:58:6c:c3:a9:f0:a6:4e:
da:42:41:86:70:08:db:04:34:66:19:11:b6:a4:bb:
20:9f:4e:61:e0:56:f1:8b:8c:dd:ee:52:70:83:6a:
e4:4c:43:9f:51:1c:88:36:d0:79:11:09:be:ac:a7:
50:78:d9:23:83:f7:92:52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:33:29:8D:CD:52:50:6F:35:A2:F1:37:66:7F:6D:5B:24:32:E3:F0
X509v3 Authority Key Identifier:
2D:33:29:8D:CD:52:50:6F:35:A2:F1:37:66:7F:6D:5B:24:32:E3:F0
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
30:bc:46:88:cd:0f:a2:8c:7f:5f:98:f0:fe:70:66:9e:a9:a8:
35:bd:51:8f:1b:ee:a4:c6:85:0d:e3:f2:d9:d1:c3:bd:98:e6:
02:a3:be:94:bc:fa:66:f0:bf:1c:3e:09:ef:11:75:f1:bb:3f:
2c:7b:95:88:2a:dc:25:e9:56:79:79:7e:85:a1:61:45:84:70:
d0:1a:dd:be:aa:ed:c7:f9:d2:52:30:f8:cc:3c:a4:59:2b:ab:
36:39:63:72:55:21:a3:fe:29:8b:37:df:3c:f5:25:59:69:c6:
d4:74:7e:a3:b1:dd:d3:0e:b0:b1:83:4b:ef:ae:34:c4:3f:f7:
8f:23