GeneralInformation

Hostnames	hdycrm.roperind.net www.hdycrm.roperind.net
Domains	roperind.net
Cloud Provider	Azure
Cloud Region	centralus
Cloud Service	AzureCloud
Country	United States
City	Des Moines
Organization	Microsoft Corp
ISP	Microsoft Corporation
ASN	AS8075
Operating System	Windows (build 6.1.7601)

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2010-3972	10.0Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.
CVE-2010-2730	9.3Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."
CVE-2010-1899	4.3Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."

OpenPorts

80 443

1489525118 | 2024-04-26T20:31:06.260158

80 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 26 Apr 2024 20:31:14 GMT
Connection: close
Content-Length: 315

1723685881 | 2024-05-01T14:14:57.991875

443 / tcp

HTTP/1.1 401 Unauthorized
Cache-Control: private
Transfer-Encoding: chunked
Content-Type: text/plain
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
Set-Cookie: ReqClientId=55983d4b-f5f3-448c-86d8-a356cf296259; expires=Tue, 01-May-2074 14:15:15 GMT; path=/; secure; HttpOnly
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
X-Powered-By: ASP.NET
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Wed, 01 May 2024 14:15:15 GMT


HTTP NTLM Info:
  OS: Windows 7/Windows Server 2008 R2
  OS Build: 6.1.7601
  Target Name: ROPERIND
  NetBIOS Domain Name: ROPERIND
  NetBIOS Computer Name: HOUESCAPP34
  DNS Domain Name: ROPERIND.NET
  DNS Tree Name: schema.root
  FQDN: HOUESCAPP34.ROPERIND.NET

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475145670626398316 (0x6980e785240506c)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Nov 28 16:22:25 2023 GMT
            Not After : Dec 29 16:22:25 2024 GMT
        Subject: CN=hdycrm.roperind.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:3c:bc:04:f4:03:7e:23:d6:65:cb:83:95:
                    d0:fc:4a:05:27:24:9d:ec:b9:4d:1d:70:b7:c6:8f:
                    37:b1:22:47:e1:f5:5c:cb:44:2b:b6:10:ed:d1:83:
                    e7:c3:66:28:35:b8:f3:9e:23:04:96:ca:b7:a6:ca:
                    a2:5d:0e:76:34:c5:13:ef:44:24:b2:bf:3d:91:fd:
                    44:12:4c:25:76:19:36:35:eb:d0:92:18:e1:6b:47:
                    96:4e:d1:a4:ed:10:6d:de:43:43:b0:db:1e:49:24:
                    95:72:26:e3:70:44:b7:5b:63:f3:98:8f:42:09:d9:
                    99:b1:48:4a:ae:c6:b3:76:ae:2a:80:11:7d:01:e7:
                    a5:be:b9:d3:7f:7f:6b:a4:04:61:2f:8b:d7:c1:c4:
                    94:50:e5:d2:3f:43:59:0d:a8:27:01:73:a3:f2:8f:
                    1a:ed:6c:4f:82:3a:52:ce:c4:65:00:c3:d5:2a:e0:
                    83:ec:62:53:37:b4:bf:ef:8f:6f:f2:bd:7b:1f:ea:
                    4a:84:8d:75:d1:9c:92:20:9d:55:7a:1d:78:d4:0f:
                    17:3d:0d:19:e9:c8:8f:88:9d:47:10:98:81:35:9c:
                    f8:2b:1d:c2:64:a8:fa:73:20:e9:51:93:e0:c4:09:
                    51:1a:d1:b3:ac:96:7c:4a:e4:df:52:01:36:c2:ab:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s1-12550.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.1
                  CPS: http://certificates.godaddy.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Alternative Name: 
                DNS:hdycrm.roperind.net, DNS:www.hdycrm.roperind.net
            X509v3 Subject Key Identifier: 
                DD:80:C1:F1:F5:ED:0F:16:D9:DF:E3:06:A6:C5:3D:0D:89:A5:B4:B4
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Nov 28 16:22:26.355 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B2:1B:EF:C6:1F:53:A4:38:3F:6B:51:
                                2C:FD:50:F4:BD:AB:99:AC:5B:FE:B7:EC:32:F0:A5:12:
                                B2:AA:75:45:0B:02:21:00:F2:9F:14:8A:FC:DE:32:BB:
                                DE:09:2A:FC:1D:58:FA:2A:75:98:1E:23:17:C4:D2:0D:
                                F8:C9:95:80:E0:43:E4:8A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Nov 28 16:22:26.601 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E5:E3:54:A8:3A:13:B8:78:00:D6:37:
                                5D:4C:B1:F1:E8:B0:9F:F2:5D:3B:BE:2A:8E:8C:9A:01:
                                9F:9C:B8:76:C6:02:20:21:2F:5D:69:EA:E6:97:E9:E4:
                                90:81:8C:77:7C:B5:11:35:51:4C:60:84:6E:A0:47:94:
                                C8:3A:6A:4B:8C:B3:F4
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Nov 28 16:22:26.711 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:99:DE:35:06:49:6B:EF:07:C7:38:A0:
                                E7:99:2C:B1:11:13:49:C5:FD:3E:73:3C:23:F1:BF:30:
                                B6:5A:92:49:14:02:20:37:54:B2:11:23:47:2D:1E:56:
                                F1:19:88:D8:A2:2D:35:FB:8F:3A:A7:3A:75:61:3F:DB:
                                B3:AB:86:61:36:32:FE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9e:95:c5:0e:fb:78:3d:47:c0:a8:1b:d3:9b:c7:96:4a:7d:15:
        75:db:05:42:f0:18:cd:d5:a7:fe:58:5b:c2:2a:af:95:f0:30:
        91:64:04:95:c5:c5:3a:59:16:4b:ee:36:d9:33:53:95:c4:6b:
        cd:bd:a3:3c:cf:d8:a6:07:e4:d7:29:07:b9:b9:e0:9e:b9:c2:
        b8:4b:05:3f:19:c5:ea:fc:57:54:0f:58:48:47:ff:c0:03:14:
        50:96:38:9b:0b:d6:58:eb:96:89:3e:03:cb:e0:b1:90:3a:00:
        db:ec:ff:55:9a:fa:02:2d:88:aa:0e:fd:0a:40:a4:78:04:85:
        d5:a4:6d:f2:f0:da:e0:e4:6a:97:fd:2f:22:58:eb:71:1b:fe:
        95:be:77:96:c4:49:36:95:8a:ed:29:02:b6:9f:da:e9:44:ad:
        70:4c:95:74:04:75:36:b1:01:bf:b5:c5:84:40:ef:d7:31:5f:
        a6:46:bc:df:42:e6:aa:db:34:bc:ca:08:9c:da:2a:5b:b6:5f:
        2c:24:4e:01:7e:81:18:89:04:a0:44:13:af:cc:31:f8:93:5d:
        e4:b0:06:48:65:4b:8d:b8:ad:98:6d:69:89:0b:ce:2a:03:fd:
        2a:68:a7:5e:e8:7c:7c:c2:f9:eb:b8:e1:67:70:2f:6b:ac:ed:
        fa:77:9e:91

168.61.145.240

Last Seen: 2024-05-01

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1489525118 | 2024-04-26T20:31:06.260158
80 / tcp

Microsoft HTTPAPI httpd2.0

1723685881 | 2024-05-01T14:14:57.991875
443 / tcp

Microsoft IIS httpd7.5

Products

Pricing

Contact Us

168.61.145.240

Last Seen: 2024-05-01

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1489525118 | 2024-04-26T20:31:06.260158 80 / tcp

Microsoft HTTPAPI httpd2.0

1723685881 | 2024-05-01T14:14:57.991875 443 / tcp

Microsoft IIS httpd7.5

Products

Pricing

Contact Us

1489525118 | 2024-04-26T20:31:06.260158
80 / tcp

1723685881 | 2024-05-01T14:14:57.991875
443 / tcp