| Hostnames |
caritas.ua www.caritas.ua caritas.xen.sim-networks.com |
| Domains | caritas.ua sim-networks.com |
| Country | Germany |
| City | Frankfurt am Main |
| Organization | SIM-Networks |
| ISP | Netversor GmbH |
| ASN | AS200081 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
| CVE-2023-44487 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
| CVE-2021-3618 | 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer. |
897585984 | 2024-04-22T10:22:52.61747480 / tcp
HTTP/1.1 301 Moved Permanently Server: nginx/1.20.2 Date: Mon, 22 Apr 2024 10:22:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://185.59.103.36:443/
858985186 | 2024-03-29T18:56:20.595919123 / udp
NTP protocolversion: 3 stratum: 2 leap: 0 precision: -20 rootdelay: 0.00306701660156 rootdisp: 0.0334167480469 refid: 1334127758 reftime: 3920726456.26 poll: 3
115487969 | 2024-04-05T02:02:00.615444143 / tcp
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
89:7b:31:e5:bf:d3:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=caritas.xen.sim-networks.com/emailAddress=root@caritas.xen.sim-networks.com
Validity
Not Before: Dec 26 16:10:41 2023 GMT
Not After : Dec 23 16:10:41 2033 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=caritas.xen.sim-networks.com/emailAddress=root@caritas.xen.sim-networks.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:b6:11:53:13:79:4b:8d:90:9b:fc:bc:8f:04:bf:
17:71:25:d3:15:57:15:d2:96:66:a5:0b:fc:17:66:
6e:69:43:f1:db:79:16:57:15:9a:a6:fa:a1:f3:40:
f4:50:79:f5:63:a3:b3:23:12:9e:04:e4:65:63:98:
ce:09:17:e8:9b:51:c8:ea:aa:93:ec:e4:cf:bd:cd:
9d:08:a0:9c:25:da:a3:4d:36:cd:d4:28:3b:c4:b3:
4b:fc:a8:98:90:7b:26:76:cb:36:20:45:cd:2c:72:
46:ad:14:c2:bc:d8:24:55:d5:dd:83:c9:80:f7:65:
7a:5e:e2:c9:27:f3:46:e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:07:5F:EB:F6:2D:85:9F:14:B9:70:75:5E:BF:73:CA:58:B9:28:0E
X509v3 Authority Key Identifier:
D3:07:5F:EB:F6:2D:85:9F:14:B9:70:75:5E:BF:73:CA:58:B9:28:0E
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
9f:2b:b1:57:7a:28:c2:fb:98:ef:21:40:57:f2:aa:3d:90:53:
35:5b:80:c8:14:39:cb:f3:d8:9a:a4:c1:72:93:3d:a2:00:c1:
68:fd:f5:b8:76:b8:a3:9b:fe:4a:93:e2:f6:b2:33:db:fc:d7:
ee:e4:e0:e8:90:1b:e6:7b:b3:e2:c3:de:63:59:ca:67:ba:37:
47:86:ea:9a:de:8b:2d:44:a2:67:88:dd:67:a7:9c:07:24:24:
54:6a:75:6f:c8:10:8f:92:80:1b:33:16:1f:08:24:50:38:13:
d5:95:93:ab:88:0b:f5:02:c2:6c:44:00:35:bc:bc:0f:fa:df:
2d:6a
1672928696 | 2024-04-25T19:15:22.997830443 / tcp
HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Thu, 25 Apr 2024 19:15:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Link: <https://caritas.ua/wp-json/>; rel="https://api.w.org/", <https://caritas.ua/wp-json/wp/v2/pages/22074>; rel="alternate"; type="application/json", <https://caritas.ua/>; rel=shortlink Vary: Accept-Encoding
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:29:27:c6:65:d6:26:dd:73:02:3d:0b:c1:7d:1b:a7:ff:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Mar 14 00:09:16 2024 GMT
Not After : Jun 12 00:09:15 2024 GMT
Subject: CN=caritas.ua
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (4096 bit)
Modulus:
00:ba:f6:6d:54:00:e0:a5:fe:6a:e9:cd:63:4d:93:
b4:d2:59:dd:de:52:de:1f:17:59:a5:90:6f:0f:3f:
09:78:66:2d:13:65:09:ce:53:2a:6b:a8:de:2d:6b:
f4:23:e0:7a:15:a9:d9:7e:09:ee:c7:02:00:71:f6:
eb:d2:51:59:12:16:97:db:00:af:a1:2d:ea:a7:c0:
11:32:3c:82:06:34:cd:3f:b0:91:b8:a7:20:a2:be:
8c:1e:e4:7e:bf:58:1b:0a:3d:66:50:6d:86:14:8e:
ad:6b:d2:a2:9a:a1:17:e3:33:84:a3:bb:1d:33:07:
0c:c7:56:73:ba:81:5e:0d:62:e2:fc:fe:36:ba:7d:
61:f0:9e:fc:58:a5:83:ae:fb:78:e1:0e:55:2b:93:
42:42:21:38:ab:ba:5a:49:e5:67:0a:ef:97:a5:46:
16:4a:ed:a0:7d:4a:0d:ac:8e:7d:51:66:98:63:52:
e5:ac:48:7a:22:f4:fa:c4:33:ed:7d:c8:81:69:a2:
42:b4:37:4c:6d:49:93:6b:dd:f9:86:16:28:6d:00:
80:23:02:99:8f:ce:bd:ee:8b:d9:98:cb:b1:98:9f:
28:54:27:c4:b2:e4:78:fa:93:f7:9c:7e:c5:89:97:
d2:52:ed:4a:55:84:22:6a:ba:b8:ac:34:72:05:23:
d2:05:0c:89:fb:65:13:64:e9:64:51:81:6d:1d:73:
01:61:22:6a:0d:08:47:9c:f4:b3:55:14:39:e5:ef:
f9:e6:f6:26:83:91:9f:4e:f4:74:61:f8:9a:3a:eb:
89:81:12:83:1b:7b:32:f7:1a:5c:d2:02:04:c7:ac:
d0:97:1c:28:90:f2:fa:3d:18:40:cf:1c:d8:fb:fb:
93:ec:10:72:d9:66:7e:ec:01:60:82:38:f2:03:35:
4a:67:3a:6b:13:3a:78:43:89:0a:34:cb:a0:dc:63:
a9:39:06:51:ce:5f:34:a8:6e:25:b3:d6:39:c3:36:
19:8b:8a:ff:62:bb:f0:3f:45:97:3e:89:ce:21:d1:
ed:84:93:15:d9:fc:52:10:9e:18:eb:99:e4:b0:cc:
bf:9a:f8:d4:a3:d2:a2:09:a0:18:7a:6a:7e:1a:d1:
d8:c7:5e:7a:d6:69:49:4e:c3:0e:44:85:0e:fc:07:
7d:4f:99:31:78:1d:c7:86:0f:d3:c6:87:c2:e6:45:
6f:c5:6b:06:1e:1f:d6:15:12:3c:a1:b3:9b:73:49:
38:a0:2c:f0:2e:eb:39:eb:60:bb:5a:fe:d6:ac:64:
aa:fd:91:b2:33:87:83:9f:c0:44:ba:66:94:61:47:
8f:91:8e:6e:17:ae:b5:b5:7d:de:a5:54:1f:a0:7a:
ec:fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
9F:E1:36:4B:3A:00:2A:12:61:2B:C2:D1:74:66:55:3B:6B:5D:E0:C5
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:caritas.ua, DNS:www.caritas.ua
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
Timestamp : Mar 14 01:09:16.741 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:ED:FE:A6:C3:70:8B:2F:B2:61:33:04:
F2:02:48:31:51:33:F1:BC:3F:D2:5E:F2:AB:F5:EA:DB:
63:05:A5:9B:EA:02:21:00:DF:BB:BC:7D:65:2E:6F:84:
3E:69:56:CC:A9:16:25:E7:90:FF:39:E1:AF:27:4F:B5:
F6:C5:83:D5:14:F6:DC:E8
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : Mar 14 01:09:16.817 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:2E:8C:86:D8:F2:BE:3C:80:19:B6:0C:64:
73:6D:1E:D9:C9:D6:1E:16:63:E3:DF:A9:43:5B:76:AD:
4C:64:19:D5:02:20:3A:27:7D:F4:3F:67:1B:45:6C:E2:
CA:79:7F:3B:E3:75:E8:C2:51:2D:04:78:84:72:B2:16:
CD:86:43:86:9D:7F
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
9e:67:65:33:fc:94:62:1b:60:c1:93:90:34:8c:39:60:e5:a1:
cd:5a:63:1b:0c:71:92:c4:8a:2f:9a:18:d5:f6:13:3d:55:07:
1f:5a:41:79:f5:6e:1a:4b:78:ea:d9:34:13:f1:2a:a6:81:c7:
13:2b:19:98:b8:f6:34:c1:d5:bc:00:61:d9:f1:75:d6:6d:16:
d2:fe:27:b2:61:ea:eb:d3:87:d3:60:5b:79:cd:3d:8f:71:12:
35:3d:25:b6:32:8e:b6:5d:c1:25:cd:20:60:cb:59:1b:83:1d:
19:7e:10:4f:18:f9:2a:88:2e:fc:87:a2:35:18:a7:ee:1d:60:
05:13:31:b7:1d:a8:85:0e:89:be:5f:a3:ca:23:48:e6:42:bf:
04:14:c1:b5:64:ba:ac:73:0a:47:43:fc:a5:79:08:50:d4:9d:
de:1a:87:76:70:66:17:ca:1a:7a:4b:6e:91:98:b6:9c:0d:cf:
28:2e:30:c8:25:0f:9b:03:78:99:7b:54:e2:86:97:2f:9e:0d:
13:a4:7b:de:6d:dc:55:9a:8f:d9:7d:82:de:80:35:fe:a4:be:
2a:8f:42:a8:f8:e7:21:9c:71:0d:fd:74:f4:f5:20:ac:d0:ac:
a6:58:3f:9d:44:74:30:3e:62:26:28:04:f4:e3:79:74:37:4f:
52:23:a9:20
1055293435 | 2024-04-26T07:58:43.965963993 / tcp
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
89:7b:31:e5:bf:d3:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=caritas.xen.sim-networks.com/emailAddress=root@caritas.xen.sim-networks.com
Validity
Not Before: Dec 26 16:10:41 2023 GMT
Not After : Dec 23 16:10:41 2033 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=caritas.xen.sim-networks.com/emailAddress=root@caritas.xen.sim-networks.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:b6:11:53:13:79:4b:8d:90:9b:fc:bc:8f:04:bf:
17:71:25:d3:15:57:15:d2:96:66:a5:0b:fc:17:66:
6e:69:43:f1:db:79:16:57:15:9a:a6:fa:a1:f3:40:
f4:50:79:f5:63:a3:b3:23:12:9e:04:e4:65:63:98:
ce:09:17:e8:9b:51:c8:ea:aa:93:ec:e4:cf:bd:cd:
9d:08:a0:9c:25:da:a3:4d:36:cd:d4:28:3b:c4:b3:
4b:fc:a8:98:90:7b:26:76:cb:36:20:45:cd:2c:72:
46:ad:14:c2:bc:d8:24:55:d5:dd:83:c9:80:f7:65:
7a:5e:e2:c9:27:f3:46:e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:07:5F:EB:F6:2D:85:9F:14:B9:70:75:5E:BF:73:CA:58:B9:28:0E
X509v3 Authority Key Identifier:
D3:07:5F:EB:F6:2D:85:9F:14:B9:70:75:5E:BF:73:CA:58:B9:28:0E
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
9f:2b:b1:57:7a:28:c2:fb:98:ef:21:40:57:f2:aa:3d:90:53:
35:5b:80:c8:14:39:cb:f3:d8:9a:a4:c1:72:93:3d:a2:00:c1:
68:fd:f5:b8:76:b8:a3:9b:fe:4a:93:e2:f6:b2:33:db:fc:d7:
ee:e4:e0:e8:90:1b:e6:7b:b3:e2:c3:de:63:59:ca:67:ba:37:
47:86:ea:9a:de:8b:2d:44:a2:67:88:dd:67:a7:9c:07:24:24:
54:6a:75:6f:c8:10:8f:92:80:1b:33:16:1f:08:24:50:38:13:
d5:95:93:ab:88:0b:f5:02:c2:6c:44:00:35:bc:bc:0f:fa:df:
2d:6a
2062522430 | 2024-04-24T04:41:39.895337995 / tcp
+OK Dovecot ready. +OK CAPA TOP UIDL RESP-CODES PIPELINING AUTH-RESP-CODE USER SASL PLAIN LOGIN DIGEST-MD5 CRAM-MD5 .
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
89:7b:31:e5:bf:d3:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=caritas.xen.sim-networks.com/emailAddress=root@caritas.xen.sim-networks.com
Validity
Not Before: Dec 26 16:10:41 2023 GMT
Not After : Dec 23 16:10:41 2033 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=caritas.xen.sim-networks.com/emailAddress=root@caritas.xen.sim-networks.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:b6:11:53:13:79:4b:8d:90:9b:fc:bc:8f:04:bf:
17:71:25:d3:15:57:15:d2:96:66:a5:0b:fc:17:66:
6e:69:43:f1:db:79:16:57:15:9a:a6:fa:a1:f3:40:
f4:50:79:f5:63:a3:b3:23:12:9e:04:e4:65:63:98:
ce:09:17:e8:9b:51:c8:ea:aa:93:ec:e4:cf:bd:cd:
9d:08:a0:9c:25:da:a3:4d:36:cd:d4:28:3b:c4:b3:
4b:fc:a8:98:90:7b:26:76:cb:36:20:45:cd:2c:72:
46:ad:14:c2:bc:d8:24:55:d5:dd:83:c9:80:f7:65:
7a:5e:e2:c9:27:f3:46:e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:07:5F:EB:F6:2D:85:9F:14:B9:70:75:5E:BF:73:CA:58:B9:28:0E
X509v3 Authority Key Identifier:
D3:07:5F:EB:F6:2D:85:9F:14:B9:70:75:5E:BF:73:CA:58:B9:28:0E
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
9f:2b:b1:57:7a:28:c2:fb:98:ef:21:40:57:f2:aa:3d:90:53:
35:5b:80:c8:14:39:cb:f3:d8:9a:a4:c1:72:93:3d:a2:00:c1:
68:fd:f5:b8:76:b8:a3:9b:fe:4a:93:e2:f6:b2:33:db:fc:d7:
ee:e4:e0:e8:90:1b:e6:7b:b3:e2:c3:de:63:59:ca:67:ba:37:
47:86:ea:9a:de:8b:2d:44:a2:67:88:dd:67:a7:9c:07:24:24:
54:6a:75:6f:c8:10:8f:92:80:1b:33:16:1f:08:24:50:38:13:
d5:95:93:ab:88:0b:f5:02:c2:6c:44:00:35:bc:bc:0f:fa:df:
2d:6a