GeneralInformation

Hostnames	8ballpoolguides.com cpanel.8ballpoolguides.com cpcalendars.8ballpoolguides.com cpcontacts.8ballpoolguides.com mail.8ballpoolguides.com webdisk.8ballpoolguides.com webmail.8ballpoolguides.com www.8ballpoolguides.com 142-4-12-20.unifiedlayer.com 142-4-12-20.webhostbox.net
Domains	8ballpoolguides.com unifiedlayer.com webhostbox.net
Country	United States
City	Provo
Organization	Unified Layer
ISP	Unified Layer
ASN	AS46606

WebTechnologies

Blogs

CMS

Databases

JavaScript libraries

Programming languages

PHP

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-5561	5.3WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack
CVE-2023-51766	Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.
CVE-2023-39999	4.3Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4 through 5.4.13, from 5.3 through 5.3.15, from 5.2 through 5.2.18, from 5.1 through 5.1.16, from 5.0 through 5.0.19, from 4.9 through 4.9.23, from 4.8 through 4.8.22, from 4.7 through 4.7.26, from 4.6 through 4.6.26, from 4.5 through 4.5.29, from 4.4 through 4.4.30, from 4.3 through 4.3.31, from 4.2 through 4.2.35, from 4.1 through 4.1.38.
CVE-2023-38000	5.4Auth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin <= 16.8.0 versions.
CVE-2022-37452	Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
CVE-2022-37451	Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.
CVE-2021-38371	5.0The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.
CVE-2021-27216	6.3Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.
CVE-2020-8015	7.2A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.
CVE-2020-28026	9.3Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary commands as root.
CVE-2020-28025	5.0Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory.
CVE-2020-28024	7.5Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp_ungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF.
CVE-2020-28023	5.0Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information from process memory to an unauthenticated SMTP client.
CVE-2020-28022	7.5Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands.
CVE-2020-28021	9.0Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command.
CVE-2020-28019	5.0Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA.
CVE-2020-28018	7.5Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.
CVE-2020-28017	7.5Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be difficult because of resource consumption.
CVE-2020-28016	7.2Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parse_fix_phrase.
CVE-2020-28015	7.2Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root processes because a recipient address can have a newline character.
CVE-2020-28014	5.6Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten.
CVE-2020-28013	7.2Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the command line, and thus may allow privilege escalation from any user to root. This occurs because of the interpretation of negative sizes in strncpy.
CVE-2020-28012	7.2Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rda_interpret uses a privileged pipe that lacks a close-on-exec flag.
CVE-2020-28011	7.2Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause privilege escalation from exim to root.
CVE-2020-28010	7.2Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small (on some common platforms).
CVE-2020-28009	7.2Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow (multiple days).
CVE-2020-28008	7.2Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input spool header file, in which a crafted recipient address can indirectly lead to command execution.
CVE-2020-28007	7.2Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (owned by a non-root user), a symlink or hard link attack allows overwriting critical root-owned files anywhere on the filesystem.
CVE-2020-12783	5.0Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.
CVE-2013-5918	Cross-site scripting (XSS) vulnerability in platinum_seo_pack.php in the Platinum SEO plugin before 1.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2012-2920	Cross-site scripting (XSS) vulnerability in the userphoto_options_page function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to wp-admin/options-general.php. NOTE: some of these details are obtained from third party information.
CVE-2012-2917	Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the CDN API Key (cnd-key) in a share-and-follow-menu page to wp-admin/admin.php.
CVE-2012-2916	Cross-site scripting (XSS) vulnerability in sabre_class_admin.php in the SABRE plugin before 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the active_option parameter to wp-admin/tools.php.
CVE-2012-2913	Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) leaflet_layer.php or (2) leaflet_marker.php, as reachable through wp-admin/admin.php.
CVE-2012-2912	Multiple cross-site scripting (XSS) vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter in the show-league page or (2) season parameter in the team page to wp-admin/admin.php.
CVE-2012-2759	Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php.
CVE-2012-1786	The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors.
CVE-2012-1785	kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors.
CVE-2012-1205	PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
CVE-2012-1068	Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging.
CVE-2012-1067	SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2012-1011	actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.
CVE-2012-1010	Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.
CVE-2012-0934	PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter.
CVE-2012-0898	Directory traversal vulnerability in meb_download.php in the myEASYbackup plugin 1.0.8.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dwn_file parameter.
CVE-2012-0896	Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter.
CVE-2012-0895	Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter.
CVE-2011-5082	Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field).
CVE-2011-5051	Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2) uploadify/upload_profile_avatar.php, then accessing it via a direct request to the file in an unspecified directory inside the webroot.
CVE-2011-4803	SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2011-4673	SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2011-4671	SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL).
CVE-2011-4669	SQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the uid parameter to index.php.
CVE-2011-4646	SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a post. NOTE: some of these details are obtained from third party information.
CVE-2011-4568	Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI.
CVE-2011-4562	Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view/admin/log_item_details.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header in a request to a post that does not exist.
CVE-2011-3981	PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
CVE-2011-3865	Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
CVE-2011-3864	Cross-site scripting (XSS) vulnerability in the The Erudite theme before 2.7.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.
CVE-2011-3863	Cross-site scripting (XSS) vulnerability in the RedLine theme before 1.66 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2011-3862	Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
CVE-2011-3861	Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
CVE-2011-3860	Cross-site scripting (XSS) vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2011-3859	Cross-site scripting (XSS) vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.
CVE-2011-3858	Cross-site scripting (XSS) vulnerability in the Pixiv Custom theme before 2.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2011-3857	Cross-site scripting (XSS) vulnerability in the Antisnews theme before 1.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2011-3856	Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2011-3855	Cross-site scripting (XSS) vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2011-3854	Cross-site scripting (XSS) vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2011-3853	Cross-site scripting (XSS) vulnerability in the Hybrid theme before 0.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.
CVE-2011-3852	Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2011-3851	Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.
CVE-2011-3850	Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2011-1669	Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.
CVE-2011-1047	Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) search_max parameter in a search action to index.php, which is not properly handled by wpf.class.php, (2) id parameter in an editpost action to index.php, which is not properly handled by wpf-post.php, or (3) topic parameter to feed.php.
CVE-2011-0760	Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the (1) wp_relatedposts_title, (2) wp_relatedposts_num, or (3) wp_relatedposts_type parameter.
CVE-2011-0759	Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration page in the Recaptcha (aka WP-reCAPTCHA) plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting (XSS) sequences via the (1) recaptcha_opt_pubkey, (2) recaptcha_opt_privkey, (3) re_tabindex, (4) error_blank, (5) error_incorrect, (6) mailhide_pub, (7) mailhide_priv, (8) mh_replace_link, or (9) mh_replace_title parameter.
CVE-2011-0740	Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rss_url parameter.
CVE-2011-0641	Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) what1, (2) what2, (3) what3, (4) what4, and (5) what5 parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2010-4875	Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery Plugin 3.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gid parameter.
CVE-2010-4839	SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the event_id parameter in a register action.
CVE-2010-4825	Cross-site scripting (XSS) vulnerability in magpie_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
CVE-2010-4779	Cross-site scripting (XSS) vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wptouch_settings parameter to include/adsense-new.php. NOTE: some of these details are obtained from third party information.
CVE-2010-4747	Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pluginurl parameter.
CVE-2010-4637	Cross-site scripting (XSS) vulnerability in feedlist/handler_image.php in the FeedList plugin 2.61.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.
CVE-2010-4630	Cross-site scripting (XSS) vulnerability in pages/admin/surveys/create.php in the WP Survey And Quiz Tool plugin 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVE-2010-4518	Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the v1 parameter.
CVE-2010-4403	The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message.
CVE-2010-4402	Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) firstname, (2) lastname, (3) website, (4) aim, (5) yahoo, (6) jabber, (7) about, (8) pass1, and (9) pass2 parameters in a register action.
CVE-2010-4277	Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php.
CVE-2010-3977	Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.
CVE-2010-2924	SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the url parameter. NOTE: some of these details are obtained from third party information.
CVE-2010-1186	Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
CVE-2010-0673	SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter.
CVE-2009-4748	SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter in an act_OrderCategories action to wp-admin/post-new.php.
CVE-2009-4672	Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pg parameter.
CVE-2009-4424	SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2009-4170	WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message.
CVE-2009-4169	Cross-site scripting (XSS) vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2009-4168	Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site scripting (XSS) vulnerability in tagcloud.swf in the WP-Cumulus Plug-in before 1.23 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter.
CVE-2009-3703	Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the search_max parameter in a search action to the default URI, related to wpf.class.php; (2) the forum parameter to an unspecified component, related to wpf.class.php; (3) the topic parameter in a viewforum action to the default URI, related to the remove_topic function in wpf.class.php; or the id parameter in a (4) editpost or (5) viewtopic action to the default URI, related to wpf-post.php.
CVE-2009-2852	WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via the test_filter[wp_head] array parameter to test/index.php, which is used in a call to the call_user_func_array function.
CVE-2009-2396	PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter.
CVE-2009-2383	SQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the guid parameter.
CVE-2009-2144	SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2009-2143	PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fs_javascript parameter.
CVE-2009-2122	SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2009-0968	SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information.
CVE-2008-7175	Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.
CVE-2008-7040	SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.
CVE-2008-6811	Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/plugins/wp-shopping-cart/.
CVE-2008-5752	Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information.
CVE-2008-4734	Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a request that sets the wpcr_hidden_form_input parameter.
CVE-2008-4733	Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7) tagheadersep, (8) taglabel, and (9) tagheaderlabel parameters.
CVE-2008-4732	SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVE-2008-4625	SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683.
CVE-2008-1982	SQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ss_id parameter.
CVE-2007-5800	Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary PHP code via a URL in the bkpwp_plugin_path parameter to (1) plugins/BackUp/Archive.php; and (2) Predicate.php, (3) Writer.php, (4) Reader.php, and other unspecified scripts under plugins/BackUp/Archive/.
CVE-2007-2627	Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get_sidebar are used, allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF), a different vulnerability than CVE-2007-1622.

OpenPorts

26 53 80 110 123 443 465 587 993 995 2077 2079 2082 2083 2086 2087 2095 2096 3306

1587642901 | 2024-04-18T09:48:27.081380

26 / tcp

220-142-4-12-20.webhostbox.net ESMTP Exim 4.93 #2 Thu, 18 Apr 2024 09:48:26 +0000 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n

-1189185394 | 2024-04-01T00:02:48.615148

53 / tcp

Resolver name: 142-4-12-20.webhostbox.net

741382102 | 2024-04-23T20:28:43.631341

53 / udp

9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.8
Resolver name: 142-4-12-20.webhostbox.net

-950665795 | 2024-04-19T04:48:41.456205

80 / tcp

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 04:48:41 GMT
Server: Apache
Transfer-Encoding: chunked
Content-Type: text/html

1952082069 | 2024-04-23T20:18:31.283263

110 / tcp

+OK Dovecot ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
STLS
USER
SASL PLAIN LOGIN
.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9013845791 (0x219445f1f)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Validity
            Not Before: May  5 08:50:51 2023 GMT
            Not After : May  4 08:50:51 2024 GMT
        Subject: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:05:48:0e:fe:51:90:ae:c4:a3:53:55:eb:
                    da:25:0a:49:bc:ff:cf:11:7e:62:ec:65:71:6e:3e:
                    c1:3a:ce:d9:4c:e5:47:f7:75:3a:4b:5a:d7:b6:7a:
                    ff:5c:df:8c:de:e1:87:23:12:62:06:07:ea:d6:3e:
                    25:5f:26:22:6f:f4:cf:47:5b:c2:34:89:d7:49:d5:
                    24:c2:26:88:32:d4:1a:dc:fc:bc:6a:65:5b:da:60:
                    16:38:68:2a:fe:fc:71:68:2a:3c:e9:f0:c3:21:4e:
                    91:31:a0:c7:df:5a:ba:50:ba:68:9f:24:60:1b:17:
                    c6:06:c9:c3:d6:ca:b3:d1:ea:e6:fc:65:0b:09:eb:
                    bf:a6:cc:8a:70:1c:96:ee:f8:04:02:65:ac:3d:46:
                    50:a1:bb:1c:db:03:ac:8b:e8:5f:fc:69:e4:d0:2e:
                    18:41:74:6a:a8:f3:3c:88:54:65:df:24:2e:d5:d0:
                    7d:86:3f:c9:bf:d9:75:b5:4c:34:d7:24:48:d1:2e:
                    d2:89:77:6a:13:5c:2f:1d:0a:38:16:2e:f2:72:e1:
                    4a:3d:52:59:02:f8:fb:35:a0:05:b8:a0:42:c2:d0:
                    b3:fe:6a:fd:82:1b:54:b4:43:b0:69:6b:96:1c:af:
                    ad:4f:25:79:05:52:29:85:56:e7:25:77:d6:eb:8f:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                70:92:72:78:95:16:4F:3B:2B:CD:7B:CA:C7:98:F1:15:5B:C9:74:56
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:70:92:72:78:95:16:4F:3B:2B:CD:7B:CA:C7:98:F1:15:5B:C9:74:56
                DirName:/CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
                serial:02:19:44:5F:1F
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:142-4-12-20.webhostbox.net
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4c:36:31:60:2d:6d:51:55:39:e6:77:f1:0f:97:88:ed:b2:9a:
        c3:8c:32:65:61:30:b5:7c:9f:f4:78:75:a1:be:b8:01:da:b7:
        09:cc:65:68:19:f6:7e:a2:19:51:f2:35:f8:dd:a7:56:49:52:
        70:41:e3:87:c8:8e:cb:3d:12:ec:09:29:7b:9a:20:93:47:a3:
        d9:f6:0c:72:85:f8:cf:9a:7f:9b:51:86:5f:b9:d8:86:6f:11:
        3e:9b:43:4e:b8:0f:77:ca:b8:72:60:36:f3:1c:f3:63:7d:e1:
        74:a7:3b:df:6b:5c:db:6d:f0:9b:f2:fd:3a:1f:e3:4a:c6:d8:
        1d:43:61:f7:06:c6:62:cd:67:0f:1a:fd:fc:34:b5:d9:17:38:
        f8:19:ac:b5:92:85:90:4a:f7:0e:9d:9a:93:b6:25:4b:05:e0:
        c9:3a:98:3a:1e:e2:23:6c:a2:c9:fc:e2:b2:90:5c:0b:9f:c5:
        a6:b3:34:4f:96:03:15:2b:06:8e:96:af:d3:20:5b:6e:b4:15:
        b3:2e:e3:03:c1:99:c4:93:c4:14:35:7c:7e:be:58:f7:16:1f:
        0a:e5:6e:29:ae:0e:c6:fc:8e:b4:d9:81:23:00:f2:e3:d3:c7:
        5b:3d:2a:be:79:0b:15:c9:a7:ab:59:bd:48:ff:08:a5:d0:a2:
        49:72:fb:7a

1055047343 | 2024-03-28T03:28:29.026391

123 / udp

NTP
protocolversion: 3
stratum: 4
leap: 0
precision: -20
rootdelay: 0.0593109130859
rootdisp: 0.0654449462891
refid: 1170439820
reftime: 3920583408.22
poll: 3

1608029045 | 2024-04-13T12:31:16.667266

443 / tcp

HTTP/1.1 200 OK
Date: Sat, 13 Apr 2024 12:31:13 GMT
Server: Apache
Link: <https://8ballpoolguides.com/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:11:b7:b8:ae:59:5e:d7:54:2e:8b:34:76:f6:6e:82:2e:cf
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Feb 12 23:01:27 2024 GMT
            Not After : May 12 23:01:26 2024 GMT
        Subject: CN=8ballpoolguides.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:1e:0a:c5:3d:c2:31:dc:2e:10:fa:70:bc:
                    f8:28:9f:89:f0:94:3b:b0:45:00:0d:11:7f:37:0d:
                    60:57:fd:e0:c5:12:38:bb:9c:36:d5:bb:52:44:d7:
                    4e:23:07:0f:9d:47:ce:c4:d8:02:59:00:dd:68:2c:
                    89:86:3a:9c:df:c8:ed:ca:36:ff:b3:01:f3:2e:86:
                    41:fb:fe:6f:4b:f3:78:5c:48:d6:e8:f0:78:34:c6:
                    58:0c:7a:a3:ed:26:21:e5:37:1d:39:43:51:f6:06:
                    67:da:72:bb:d7:69:a6:b1:27:8a:39:7d:b6:1a:f8:
                    77:70:a2:47:c0:32:ba:41:97:82:5a:1d:ee:cf:47:
                    73:66:fb:dd:31:95:3d:22:71:4f:54:8b:47:55:f5:
                    dc:fd:3b:fa:de:a3:01:01:c3:21:e2:39:27:5d:d3:
                    09:23:07:e7:10:56:09:9b:7e:f0:6c:2e:a5:3c:84:
                    03:1a:20:d0:42:be:50:aa:93:59:d0:bd:ce:40:cf:
                    95:3a:11:fe:1b:d8:56:26:3a:27:7e:32:28:49:b9:
                    c1:40:2c:1e:23:6a:3c:e4:9d:d2:6d:a2:f4:99:5b:
                    66:e0:65:14:b8:91:33:22:3e:61:ea:95:ca:a6:1b:
                    12:b0:ba:ec:2a:08:c7:4c:b2:a2:bf:4a:e5:6e:1e:
                    75:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                93:3C:11:90:EE:20:20:16:CF:9F:F2:D8:F1:75:80:6A:EE:07:B1:D5
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:8ballpoolguides.com, DNS:cpanel.8ballpoolguides.com, DNS:cpcalendars.8ballpoolguides.com, DNS:cpcontacts.8ballpoolguides.com, DNS:mail.8ballpoolguides.com, DNS:webdisk.8ballpoolguides.com, DNS:webmail.8ballpoolguides.com, DNS:www.8ballpoolguides.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Feb 13 00:01:28.039 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F9:20:11:4F:BC:BF:BA:86:63:12:C9:
                                F0:E8:81:C7:09:4D:45:BE:2B:CB:A1:C7:80:10:94:43:
                                35:F2:FA:B8:19:02:21:00:EC:3D:00:E5:8C:97:1D:71:
                                A8:B6:AF:6F:8A:7B:AA:A9:5C:56:AF:A6:B1:53:AD:00:
                                07:B7:3A:64:43:93:FA:9F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
                                65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
                    Timestamp : Feb 13 00:01:28.161 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AA:D4:7B:1C:8F:59:48:6E:9E:08:23:
                                0C:6B:3F:93:46:2B:55:31:CB:BA:3E:31:78:43:9E:B4:
                                66:6E:9F:90:4D:02:21:00:80:B4:F5:C2:D8:D4:34:92:
                                98:7A:BA:20:18:4F:D9:E3:07:AD:73:53:FB:40:21:94:
                                92:14:06:7E:F9:E6:B9:DA
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0f:41:4a:46:28:50:ae:f0:d0:01:c1:2d:f7:af:9a:64:27:bd:
        fd:16:12:b5:ab:24:98:2e:0a:6b:04:31:da:ad:30:08:5e:cb:
        f7:af:7f:78:ca:38:5d:b4:6c:7c:08:71:c1:be:4c:00:e5:ad:
        69:c8:14:0a:3a:1f:c8:96:01:a8:87:4c:c4:cb:0a:5a:4f:31:
        27:d3:fa:d3:53:fd:f3:22:33:c1:1a:2e:99:03:69:dc:c3:6b:
        d8:b7:25:78:ac:7f:7c:5d:7a:af:2f:c2:a6:57:ae:9e:78:b3:
        bd:0e:d2:b9:7a:25:ad:b8:f0:1b:a3:c8:7b:5e:27:6f:a0:d4:
        80:b4:8d:d4:45:7a:06:5d:34:b6:13:a2:b8:7e:21:7b:a1:e0:
        c0:f6:6b:fb:87:98:b7:c0:c1:69:9c:04:d6:4d:d3:74:60:68:
        5a:49:62:b8:49:09:8a:55:04:79:91:ae:59:9c:05:ae:05:5d:
        e7:7a:c8:b4:1a:3f:ac:53:8b:eb:6c:b1:46:7f:84:cf:9b:23:
        63:f9:e4:da:a0:9e:e0:0f:a0:1f:c3:a3:15:00:de:cf:78:da:
        b5:44:91:91:ae:32:c4:ec:ab:ac:c6:62:68:70:a4:43:47:f1:
        f7:28:da:93:a6:63:95:87:68:18:11:c5:b7:3f:27:94:78:91:
        44:63:8f:01

-1461719953 | 2024-04-15T17:06:40.876455

465 / tcp

220-142-4-12-20.webhostbox.net ESMTP Exim 4.93 #2 Mon, 15 Apr 2024 17:06:31 +0000 
220-We do not authorize the use of this system to transport unsolicited, 
220 and/or bulk e-mail.
250-142-4-12-20.webhostbox.net Hello 224.192.197.171 [224.192.197.171]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5034373325 (0x12c1270cd)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Validity
            Not Before: Apr 28 08:51:16 2023 GMT
            Not After : Apr 27 08:51:16 2024 GMT
        Subject: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:25:3b:b2:c3:59:a1:43:e8:2a:7c:32:4f:
                    83:14:d6:87:17:fe:88:3b:f0:52:f6:39:86:29:f8:
                    04:15:76:3c:8f:3b:a7:ae:81:cc:6f:d5:d7:89:6e:
                    d4:1f:87:58:2a:df:2f:ad:d3:b5:79:ab:57:da:56:
                    e0:b1:4e:b0:10:e2:9f:39:64:21:31:0b:7e:14:85:
                    3a:96:55:f6:b1:c5:ea:a8:f4:fd:b0:f6:bd:54:7d:
                    8a:65:2e:87:b4:ab:22:ca:f2:d3:4e:f7:14:82:4a:
                    aa:78:37:a2:a0:da:e5:e3:a5:c7:ab:a4:0d:3f:45:
                    3d:87:9f:e6:35:d7:26:a7:8d:67:3f:55:93:1f:2b:
                    cc:d8:c9:08:71:00:5a:98:6a:fb:fc:ba:f4:d5:59:
                    91:53:57:b2:37:6b:c5:2f:02:47:36:35:ec:9b:61:
                    15:4d:e5:61:79:86:a1:71:2f:c1:00:b5:55:21:96:
                    96:73:39:82:49:e4:bd:43:42:b7:d6:f4:08:1c:29:
                    bb:63:ff:3f:76:e0:7c:7c:fc:b4:60:9d:91:af:2e:
                    58:23:46:10:90:2e:26:eb:84:14:73:a7:a3:93:21:
                    68:93:6a:b7:34:8b:24:44:6e:ad:9f:00:a4:fb:08:
                    46:86:3a:f3:10:81:e9:74:47:3e:ac:5c:02:aa:d1:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                46:A8:91:19:F8:4C:14:0C:C7:44:C2:D9:AF:3E:1C:36:A0:62:1C:FB
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:46:A8:91:19:F8:4C:14:0C:C7:44:C2:D9:AF:3E:1C:36:A0:62:1C:FB
                DirName:/CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
                serial:01:2C:12:70:CD
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:142-4-12-20.webhostbox.net
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b7:fd:63:e4:a7:30:3a:4c:e2:0c:f5:c5:76:c1:cd:99:48:6c:
        5f:3b:9c:63:f3:65:e8:bd:6c:ae:92:84:c8:b6:c8:fd:0c:95:
        e3:0b:aa:50:eb:c0:34:26:39:7c:c0:ab:37:a9:b9:e9:1a:5f:
        05:f0:54:9f:bb:84:45:98:21:94:83:e5:e8:e0:5d:e1:7a:16:
        8d:93:0a:7f:bd:53:98:eb:d8:6e:31:84:d3:c1:0e:c2:82:bd:
        fe:cc:6c:a4:f0:9e:99:42:7e:e0:46:98:5c:cd:a5:d8:a8:1f:
        34:3f:50:8a:0f:49:bd:19:fe:e6:55:30:01:9c:fe:40:ff:bb:
        8a:28:54:1d:cf:34:ff:02:09:2f:d1:5f:ef:5f:be:a9:a0:07:
        2b:25:4d:1c:b3:5d:a6:b1:28:84:e2:d5:0f:14:d0:a1:fe:d5:
        3f:b6:50:da:95:29:fa:b9:ae:c1:a2:59:3d:3e:32:cd:5d:d9:
        c8:01:f2:eb:4a:89:5c:ad:3d:d6:bc:db:ed:21:19:eb:cd:14:
        53:d5:c3:96:ea:c4:8a:cc:b6:20:af:8c:9e:06:24:53:23:ea:
        27:bb:22:d1:49:a6:b2:e2:6f:69:f9:c6:b1:29:fb:55:83:ec:
        5e:0e:8f:88:c3:78:5e:fe:f3:c3:47:b9:a9:b4:5b:be:bf:c9:
        08:f8:51:35

504520671 | 2024-04-23T06:05:02.369371

587 / tcp

220-142-4-12-20.webhostbox.net ESMTP Exim 4.93 #2 Tue, 23 Apr 2024 06:05:02 +0000 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n

-1132241830 | 2024-04-16T08:39:39.976269

993 / tcp

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9013845791 (0x219445f1f)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Validity
            Not Before: May  5 08:50:51 2023 GMT
            Not After : May  4 08:50:51 2024 GMT
        Subject: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:05:48:0e:fe:51:90:ae:c4:a3:53:55:eb:
                    da:25:0a:49:bc:ff:cf:11:7e:62:ec:65:71:6e:3e:
                    c1:3a:ce:d9:4c:e5:47:f7:75:3a:4b:5a:d7:b6:7a:
                    ff:5c:df:8c:de:e1:87:23:12:62:06:07:ea:d6:3e:
                    25:5f:26:22:6f:f4:cf:47:5b:c2:34:89:d7:49:d5:
                    24:c2:26:88:32:d4:1a:dc:fc:bc:6a:65:5b:da:60:
                    16:38:68:2a:fe:fc:71:68:2a:3c:e9:f0:c3:21:4e:
                    91:31:a0:c7:df:5a:ba:50:ba:68:9f:24:60:1b:17:
                    c6:06:c9:c3:d6:ca:b3:d1:ea:e6:fc:65:0b:09:eb:
                    bf:a6:cc:8a:70:1c:96:ee:f8:04:02:65:ac:3d:46:
                    50:a1:bb:1c:db:03:ac:8b:e8:5f:fc:69:e4:d0:2e:
                    18:41:74:6a:a8:f3:3c:88:54:65:df:24:2e:d5:d0:
                    7d:86:3f:c9:bf:d9:75:b5:4c:34:d7:24:48:d1:2e:
                    d2:89:77:6a:13:5c:2f:1d:0a:38:16:2e:f2:72:e1:
                    4a:3d:52:59:02:f8:fb:35:a0:05:b8:a0:42:c2:d0:
                    b3:fe:6a:fd:82:1b:54:b4:43:b0:69:6b:96:1c:af:
                    ad:4f:25:79:05:52:29:85:56:e7:25:77:d6:eb:8f:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                70:92:72:78:95:16:4F:3B:2B:CD:7B:CA:C7:98:F1:15:5B:C9:74:56
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:70:92:72:78:95:16:4F:3B:2B:CD:7B:CA:C7:98:F1:15:5B:C9:74:56
                DirName:/CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
                serial:02:19:44:5F:1F
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:142-4-12-20.webhostbox.net
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4c:36:31:60:2d:6d:51:55:39:e6:77:f1:0f:97:88:ed:b2:9a:
        c3:8c:32:65:61:30:b5:7c:9f:f4:78:75:a1:be:b8:01:da:b7:
        09:cc:65:68:19:f6:7e:a2:19:51:f2:35:f8:dd:a7:56:49:52:
        70:41:e3:87:c8:8e:cb:3d:12:ec:09:29:7b:9a:20:93:47:a3:
        d9:f6:0c:72:85:f8:cf:9a:7f:9b:51:86:5f:b9:d8:86:6f:11:
        3e:9b:43:4e:b8:0f:77:ca:b8:72:60:36:f3:1c:f3:63:7d:e1:
        74:a7:3b:df:6b:5c:db:6d:f0:9b:f2:fd:3a:1f:e3:4a:c6:d8:
        1d:43:61:f7:06:c6:62:cd:67:0f:1a:fd:fc:34:b5:d9:17:38:
        f8:19:ac:b5:92:85:90:4a:f7:0e:9d:9a:93:b6:25:4b:05:e0:
        c9:3a:98:3a:1e:e2:23:6c:a2:c9:fc:e2:b2:90:5c:0b:9f:c5:
        a6:b3:34:4f:96:03:15:2b:06:8e:96:af:d3:20:5b:6e:b4:15:
        b3:2e:e3:03:c1:99:c4:93:c4:14:35:7c:7e:be:58:f7:16:1f:
        0a:e5:6e:29:ae:0e:c6:fc:8e:b4:d9:81:23:00:f2:e3:d3:c7:
        5b:3d:2a:be:79:0b:15:c9:a7:ab:59:bd:48:ff:08:a5:d0:a2:
        49:72:fb:7a

-1001764030 | 2024-04-23T14:46:26.975791

995 / tcp

+OK Dovecot ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
USER
SASL PLAIN LOGIN
.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9013845791 (0x219445f1f)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Validity
            Not Before: May  5 08:50:51 2023 GMT
            Not After : May  4 08:50:51 2024 GMT
        Subject: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:05:48:0e:fe:51:90:ae:c4:a3:53:55:eb:
                    da:25:0a:49:bc:ff:cf:11:7e:62:ec:65:71:6e:3e:
                    c1:3a:ce:d9:4c:e5:47:f7:75:3a:4b:5a:d7:b6:7a:
                    ff:5c:df:8c:de:e1:87:23:12:62:06:07:ea:d6:3e:
                    25:5f:26:22:6f:f4:cf:47:5b:c2:34:89:d7:49:d5:
                    24:c2:26:88:32:d4:1a:dc:fc:bc:6a:65:5b:da:60:
                    16:38:68:2a:fe:fc:71:68:2a:3c:e9:f0:c3:21:4e:
                    91:31:a0:c7:df:5a:ba:50:ba:68:9f:24:60:1b:17:
                    c6:06:c9:c3:d6:ca:b3:d1:ea:e6:fc:65:0b:09:eb:
                    bf:a6:cc:8a:70:1c:96:ee:f8:04:02:65:ac:3d:46:
                    50:a1:bb:1c:db:03:ac:8b:e8:5f:fc:69:e4:d0:2e:
                    18:41:74:6a:a8:f3:3c:88:54:65:df:24:2e:d5:d0:
                    7d:86:3f:c9:bf:d9:75:b5:4c:34:d7:24:48:d1:2e:
                    d2:89:77:6a:13:5c:2f:1d:0a:38:16:2e:f2:72:e1:
                    4a:3d:52:59:02:f8:fb:35:a0:05:b8:a0:42:c2:d0:
                    b3:fe:6a:fd:82:1b:54:b4:43:b0:69:6b:96:1c:af:
                    ad:4f:25:79:05:52:29:85:56:e7:25:77:d6:eb:8f:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                70:92:72:78:95:16:4F:3B:2B:CD:7B:CA:C7:98:F1:15:5B:C9:74:56
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:70:92:72:78:95:16:4F:3B:2B:CD:7B:CA:C7:98:F1:15:5B:C9:74:56
                DirName:/CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
                serial:02:19:44:5F:1F
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:142-4-12-20.webhostbox.net
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4c:36:31:60:2d:6d:51:55:39:e6:77:f1:0f:97:88:ed:b2:9a:
        c3:8c:32:65:61:30:b5:7c:9f:f4:78:75:a1:be:b8:01:da:b7:
        09:cc:65:68:19:f6:7e:a2:19:51:f2:35:f8:dd:a7:56:49:52:
        70:41:e3:87:c8:8e:cb:3d:12:ec:09:29:7b:9a:20:93:47:a3:
        d9:f6:0c:72:85:f8:cf:9a:7f:9b:51:86:5f:b9:d8:86:6f:11:
        3e:9b:43:4e:b8:0f:77:ca:b8:72:60:36:f3:1c:f3:63:7d:e1:
        74:a7:3b:df:6b:5c:db:6d:f0:9b:f2:fd:3a:1f:e3:4a:c6:d8:
        1d:43:61:f7:06:c6:62:cd:67:0f:1a:fd:fc:34:b5:d9:17:38:
        f8:19:ac:b5:92:85:90:4a:f7:0e:9d:9a:93:b6:25:4b:05:e0:
        c9:3a:98:3a:1e:e2:23:6c:a2:c9:fc:e2:b2:90:5c:0b:9f:c5:
        a6:b3:34:4f:96:03:15:2b:06:8e:96:af:d3:20:5b:6e:b4:15:
        b3:2e:e3:03:c1:99:c4:93:c4:14:35:7c:7e:be:58:f7:16:1f:
        0a:e5:6e:29:ae:0e:c6:fc:8e:b4:d9:81:23:00:f2:e3:d3:c7:
        5b:3d:2a:be:79:0b:15:c9:a7:ab:59:bd:48:ff:08:a5:d0:a2:
        49:72:fb:7a

-1922445364 | 2024-04-14T21:09:14.081690

2079 / tcp

HTTP/1.1 401 Unauthorized
Date: Sun, 14 Apr 2024 21:09:14 GMT
Server: cPanel
Persistent-Auth: false
Host: 142.4.12.20:2079
Cache-Control: no-cache, no-store, must-revalidate, private
Connection: close
Vary: Accept-Encoding
WWW-Authenticate: Basic realm="Horde DAV Server"
Content-Length: 35
Content-Type: text/html; charset="utf-8"
Expires: Fri, 01 Jan 1990 00:00:00 GMT

1214341235 | 2024-04-23T09:43:58.575800

2082 / tcp

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset="utf-8"
Date: Tue, 23 Apr 2024 09:43:58 GMT
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Set-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2082
Set-Cookie: cpsession=%3aF9T_hotjaIxi2kmM%2c73b1441e27393844ac9078b21915f6ae; HttpOnly; path=/; port=2082
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2082
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2082
Set-Cookie: Horde=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2082
Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2082
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2082
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2082
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2082
Set-Cookie: imp_key=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2082
Cache-Control: no-cache, no-store, must-revalidate, private
Content-Length: 37296

-1907121652 | 2024-04-21T18:09:07.969633

2083 / tcp

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset="utf-8"
Date: Sun, 21 Apr 2024 18:09:07 GMT
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Set-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: cpsession=%3aLcFBVDB5q9XwVwub%2c520390587e5a0cbc6389ca7d0f04b867; HttpOnly; path=/; port=2083; secure
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: Horde=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2083; secure
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: imp_key=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: Horde=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083
Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083
Cache-Control: no-cache, no-store, must-revalidate, private
Content-Length: 37296

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9324404734 (0x22bc71ffe)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Validity
            Not Before: Apr 28 08:51:06 2023 GMT
            Not After : Apr 27 08:51:06 2024 GMT
        Subject: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ec:2d:b5:d9:4b:43:d1:d8:a3:65:cf:30:e1:e3:
                    2e:32:b3:ed:6b:a7:8f:9f:48:7b:4c:7f:ed:35:05:
                    1b:1f:91:5c:a8:e0:6e:c3:dc:29:20:b3:9c:3b:be:
                    55:eb:50:1b:23:6a:7d:c9:7b:76:98:b3:0c:96:ff:
                    49:15:b4:ac:6e:c8:86:98:c8:a5:a1:fb:99:6c:1f:
                    b6:ae:d0:e7:af:10:03:e3:5b:8b:17:d0:5d:0e:fb:
                    f5:32:fa:3a:8b:64:24:bd:4c:7b:35:f7:c7:5c:01:
                    56:c5:9d:a3:95:9d:2a:a5:e9:e6:9a:37:d1:53:cb:
                    01:76:2f:f7:00:83:52:7d:a7:d3:12:93:77:56:43:
                    9b:d3:2e:45:5f:95:ad:b0:a3:9f:45:5a:fa:ec:0f:
                    fd:89:bc:e9:93:62:15:c0:05:0b:c8:91:46:3b:63:
                    e7:35:89:b7:0c:db:d2:a0:63:8c:b8:d1:85:f7:12:
                    b7:7a:79:5f:77:61:14:a9:3f:05:46:1f:44:8d:04:
                    b0:8d:75:22:94:03:2e:2e:5a:ee:be:cc:aa:05:8f:
                    56:fe:6a:8d:da:31:1c:1c:3a:90:ab:51:b4:19:ec:
                    59:4d:21:2b:c1:ce:96:62:c6:1d:d1:71:86:cd:4d:
                    80:6e:6a:1c:fe:73:3d:8c:f1:1b:23:cb:47:ea:36:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:C6:93:6B:FF:91:A1:59:83:E3:0B:84:DA:F3:43:B8:6C:29:52:A0
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:FE:C6:93:6B:FF:91:A1:59:83:E3:0B:84:DA:F3:43:B8:6C:29:52:A0
                DirName:/CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
                serial:02:2B:C7:1F:FE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:142-4-12-20.webhostbox.net
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        22:06:dc:f2:38:dc:04:64:3c:9c:9b:95:df:99:c7:14:35:62:
        d1:20:ee:47:d7:70:34:f0:ac:61:4d:98:31:bc:4a:ae:b6:45:
        63:40:78:ae:a0:e6:02:bd:c3:e5:7c:90:90:33:49:b9:a5:a1:
        ec:78:ed:06:26:d4:ad:01:c7:f8:a4:37:8d:82:5a:f1:6e:ae:
        a5:60:31:37:db:fc:74:80:c0:31:75:d5:81:81:27:0c:d8:4d:
        24:64:0d:2f:e6:6f:05:ea:da:b0:6d:ee:8b:9b:b1:12:70:7f:
        e9:dd:e3:28:b0:a5:45:35:07:d9:46:05:22:98:6c:15:22:ae:
        cc:a5:03:c1:98:45:d7:38:49:37:d0:16:f8:11:13:1d:47:36:
        16:bb:87:df:54:d2:f2:af:a4:a2:e4:f3:3f:40:c3:26:5a:0d:
        e6:0d:96:45:c6:61:e6:75:e3:8d:60:e8:23:52:79:f5:ec:fd:
        6d:83:aa:d4:f5:3e:fc:04:d9:cd:9a:80:24:dd:0e:c0:a6:05:
        89:0b:45:66:e2:94:07:e6:9e:62:31:e7:8e:39:08:94:f0:2f:
        83:f7:6b:fc:8a:aa:aa:13:e7:a1:0d:f1:5b:db:8d:b5:bc:85:
        9a:c4:fa:6e:0c:b9:d9:b8:4a:06:5e:70:2d:b1:6e:03:1a:2a:
        be:d6:12:cf

1108624283 | 2024-04-04T14:04:41.988279

2086 / tcp

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset="utf-8"
Date: Thu, 04 Apr 2024 14:04:41 GMT
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Set-Cookie: whostmgrrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086
Set-Cookie: whostmgrsession=%3aRk4V5XoX9JIineJc%2c25603622f27e70205381936adec6aade; HttpOnly; path=/; port=2086
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086
Set-Cookie: Horde=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086
Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2086
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086
Set-Cookie: imp_key=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086
Cache-Control: no-cache, no-store, must-revalidate, private
Content-Length: 37291

-2016882736 | 2024-04-23T14:43:41.702965

2087 / tcp

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset="utf-8"
Date: Tue, 23 Apr 2024 14:43:41 GMT
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Set-Cookie: whostmgrrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087; secure
Set-Cookie: whostmgrsession=%3a6LnmCm89CmWT1GNH%2c27d3a084adb8c40274ffafa3dafb88c0; HttpOnly; path=/; port=2087; secure
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087; secure
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087; secure
Set-Cookie: Horde=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087; secure
Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087; secure
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087; secure
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2087; secure
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087; secure
Set-Cookie: imp_key=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087; secure
Set-Cookie: Horde=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087
Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2087
Cache-Control: no-cache, no-store, must-revalidate, private
Content-Length: 37291

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9324404734 (0x22bc71ffe)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Validity
            Not Before: Apr 28 08:51:06 2023 GMT
            Not After : Apr 27 08:51:06 2024 GMT
        Subject: CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ec:2d:b5:d9:4b:43:d1:d8:a3:65:cf:30:e1:e3:
                    2e:32:b3:ed:6b:a7:8f:9f:48:7b:4c:7f:ed:35:05:
                    1b:1f:91:5c:a8:e0:6e:c3:dc:29:20:b3:9c:3b:be:
                    55:eb:50:1b:23:6a:7d:c9:7b:76:98:b3:0c:96:ff:
                    49:15:b4:ac:6e:c8:86:98:c8:a5:a1:fb:99:6c:1f:
                    b6:ae:d0:e7:af:10:03:e3:5b:8b:17:d0:5d:0e:fb:
                    f5:32:fa:3a:8b:64:24:bd:4c:7b:35:f7:c7:5c:01:
                    56:c5:9d:a3:95:9d:2a:a5:e9:e6:9a:37:d1:53:cb:
                    01:76:2f:f7:00:83:52:7d:a7:d3:12:93:77:56:43:
                    9b:d3:2e:45:5f:95:ad:b0:a3:9f:45:5a:fa:ec:0f:
                    fd:89:bc:e9:93:62:15:c0:05:0b:c8:91:46:3b:63:
                    e7:35:89:b7:0c:db:d2:a0:63:8c:b8:d1:85:f7:12:
                    b7:7a:79:5f:77:61:14:a9:3f:05:46:1f:44:8d:04:
                    b0:8d:75:22:94:03:2e:2e:5a:ee:be:cc:aa:05:8f:
                    56:fe:6a:8d:da:31:1c:1c:3a:90:ab:51:b4:19:ec:
                    59:4d:21:2b:c1:ce:96:62:c6:1d:d1:71:86:cd:4d:
                    80:6e:6a:1c:fe:73:3d:8c:f1:1b:23:cb:47:ea:36:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:C6:93:6B:FF:91:A1:59:83:E3:0B:84:DA:F3:43:B8:6C:29:52:A0
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:FE:C6:93:6B:FF:91:A1:59:83:E3:0B:84:DA:F3:43:B8:6C:29:52:A0
                DirName:/CN=142-4-12-20.webhostbox.net/emailAddress=ssl@142-4-12-20.webhostbox.net
                serial:02:2B:C7:1F:FE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:142-4-12-20.webhostbox.net
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        22:06:dc:f2:38:dc:04:64:3c:9c:9b:95:df:99:c7:14:35:62:
        d1:20:ee:47:d7:70:34:f0:ac:61:4d:98:31:bc:4a:ae:b6:45:
        63:40:78:ae:a0:e6:02:bd:c3:e5:7c:90:90:33:49:b9:a5:a1:
        ec:78:ed:06:26:d4:ad:01:c7:f8:a4:37:8d:82:5a:f1:6e:ae:
        a5:60:31:37:db:fc:74:80:c0:31:75:d5:81:81:27:0c:d8:4d:
        24:64:0d:2f:e6:6f:05:ea:da:b0:6d:ee:8b:9b:b1:12:70:7f:
        e9:dd:e3:28:b0:a5:45:35:07:d9:46:05:22:98:6c:15:22:ae:
        cc:a5:03:c1:98:45:d7:38:49:37:d0:16:f8:11:13:1d:47:36:
        16:bb:87:df:54:d2:f2:af:a4:a2:e4:f3:3f:40:c3:26:5a:0d:
        e6:0d:96:45:c6:61:e6:75:e3:8d:60:e8:23:52:79:f5:ec:fd:
        6d:83:aa:d4:f5:3e:fc:04:d9:cd:9a:80:24:dd:0e:c0:a6:05:
        89:0b:45:66:e2:94:07:e6:9e:62:31:e7:8e:39:08:94:f0:2f:
        83:f7:6b:fc:8a:aa:aa:13:e7:a1:0d:f1:5b:db:8d:b5:bc:85:
        9a:c4:fa:6e:0c:b9:d9:b8:4a:06:5e:70:2d:b1:6e:03:1a:2a:
        be:d6:12:cf

1401586727 | 2024-04-09T22:38:26.126684

2095 / tcp

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset="utf-8"
Date: Tue, 09 Apr 2024 22:38:25 GMT
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Set-Cookie: webmailrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: webmailsession=%3a4giCmCccscPdqR7W%2cdb739ad1546be517c14705c86ee46fed; HttpOnly; path=/; port=2095
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: Horde=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2095
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: imp_key=expired; HttpOnly; domain=142.4.12.20; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: roundcube_cookies=enabled; HttpOnly; expires=Wed, 09-Apr-2025 22:38:25 GMT; path=/; port=2095
Cache-Control: no-cache, no-store, must-revalidate, private
Content-Length: 37308

2044097574 | 2024-03-30T07:09:54.563308

2096 / tcp

HTTP/1.1 301 Moved
Content-length: 123
Location: https://142-4-12-20.webhostbox.net:2096
Content-type: text/html; charset="utf-8"
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache

1869929217 | 2024-04-22T01:11:09.766338

3306 / tcp

MySQL:
  Error Message: Host '224.108.127.28' is not allowed to connect to this MySQL server
  Error Code: 1130

142.4.12.20

Last Seen: 2024-04-23

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1587642901 | 2024-04-18T09:48:27.081380
26 / tcp

Exim smtpd4.93

-1189185394 | 2024-04-01T00:02:48.615148
53 / tcp

741382102 | 2024-04-23T20:28:43.631341
53 / udp

-950665795 | 2024-04-19T04:48:41.456205
80 / tcp

Apache httpd

1952082069 | 2024-04-23T20:18:31.283263
110 / tcp

1055047343 | 2024-03-28T03:28:29.026391
123 / udp

1608029045 | 2024-04-13T12:31:16.667266
443 / tcp

Apache httpd

-1461719953 | 2024-04-15T17:06:40.876455
465 / tcp

Exim smtpd4.93

504520671 | 2024-04-23T06:05:02.369371
587 / tcp

Exim smtpd4.93

-1132241830 | 2024-04-16T08:39:39.976269
993 / tcp

-1001764030 | 2024-04-23T14:46:26.975791
995 / tcp

-1922445364 | 2024-04-14T21:09:14.081690
2079 / tcp

1214341235 | 2024-04-23T09:43:58.575800
2082 / tcp

cPanel

-1907121652 | 2024-04-21T18:09:07.969633
2083 / tcp

cPanel

1108624283 | 2024-04-04T14:04:41.988279
2086 / tcp

WHM

-2016882736 | 2024-04-23T14:43:41.702965
2087 / tcp

WHM

1401586727 | 2024-04-09T22:38:26.126684
2095 / tcp

2044097574 | 2024-03-30T07:09:54.563308
2096 / tcp

1869929217 | 2024-04-22T01:11:09.766338
3306 / tcp

MySQL

Products

Pricing

Contact Us

142.4.12.20

Last Seen: 2024-04-23

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1587642901 | 2024-04-18T09:48:27.081380 26 / tcp

-1189185394 | 2024-04-01T00:02:48.615148 53 / tcp

741382102 | 2024-04-23T20:28:43.631341 53 / udp

-950665795 | 2024-04-19T04:48:41.456205 80 / tcp

1952082069 | 2024-04-23T20:18:31.283263 110 / tcp

1055047343 | 2024-03-28T03:28:29.026391 123 / udp

1608029045 | 2024-04-13T12:31:16.667266 443 / tcp

-1461719953 | 2024-04-15T17:06:40.876455 465 / tcp

504520671 | 2024-04-23T06:05:02.369371 587 / tcp

-1132241830 | 2024-04-16T08:39:39.976269 993 / tcp

-1001764030 | 2024-04-23T14:46:26.975791 995 / tcp

-1922445364 | 2024-04-14T21:09:14.081690 2079 / tcp

1214341235 | 2024-04-23T09:43:58.575800 2082 / tcp

-1907121652 | 2024-04-21T18:09:07.969633 2083 / tcp

1108624283 | 2024-04-04T14:04:41.988279 2086 / tcp

-2016882736 | 2024-04-23T14:43:41.702965 2087 / tcp

1401586727 | 2024-04-09T22:38:26.126684 2095 / tcp

2044097574 | 2024-03-30T07:09:54.563308 2096 / tcp

1869929217 | 2024-04-22T01:11:09.766338 3306 / tcp

Products

Pricing

Contact Us

1587642901 | 2024-04-18T09:48:27.081380
26 / tcp

-1189185394 | 2024-04-01T00:02:48.615148
53 / tcp

741382102 | 2024-04-23T20:28:43.631341
53 / udp

-950665795 | 2024-04-19T04:48:41.456205
80 / tcp

1952082069 | 2024-04-23T20:18:31.283263
110 / tcp

1055047343 | 2024-03-28T03:28:29.026391
123 / udp

1608029045 | 2024-04-13T12:31:16.667266
443 / tcp

-1461719953 | 2024-04-15T17:06:40.876455
465 / tcp

504520671 | 2024-04-23T06:05:02.369371
587 / tcp

-1132241830 | 2024-04-16T08:39:39.976269
993 / tcp

-1001764030 | 2024-04-23T14:46:26.975791
995 / tcp

-1922445364 | 2024-04-14T21:09:14.081690
2079 / tcp

1214341235 | 2024-04-23T09:43:58.575800
2082 / tcp

-1907121652 | 2024-04-21T18:09:07.969633
2083 / tcp

1108624283 | 2024-04-04T14:04:41.988279
2086 / tcp

-2016882736 | 2024-04-23T14:43:41.702965
2087 / tcp

1401586727 | 2024-04-09T22:38:26.126684
2095 / tcp

2044097574 | 2024-03-30T07:09:54.563308
2096 / tcp

1869929217 | 2024-04-22T01:11:09.766338
3306 / tcp