GeneralInformation

Hostnames	s79.r53.com.ua
Domains	r53.com.ua
Country	Ukraine
City	Kyiv
Organization	ON-LINE Ltd
ISP	ON-LINE Ltd
ASN	AS42655

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-51766	5.3Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.
CVE-2022-37452	9.8Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
CVE-2022-37451	7.5Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.
CVE-2021-38371	7.5The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.

OpenPorts

21 53 80 443 465 873 3306

-1956522628 | 2024-04-03T18:14:35.295309

21 / tcp

220 ProFTPD Server ready.
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
 CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
 EPRT    EPSV    ALLO    RNFR    RNTO    DELE    MDTM    RMD     
 XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
 NOOP    FEAT    OPTS    HOST    CLNT    AUTH    CCC*    CONF*   
 ENC*    MIC*    PBSZ    PROT    TYPE    STRU    MODE    RETR    
 STOR    STOU    APPE    REST    ABOR    RANG    USER    PASS    
 ACCT*   REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@194.28.172.226
211-Features:
 AUTH TLS
 CCC
 CLNT
 EPRT
 EPSV
 HOST
 LANG it-IT;es-ES;zh-CN;zh-TW;ko-KR;en-US;bg-BG;ru-RU;fr-FR;ja-JP
 MDTM
 MFF modify;UNIX.group;UNIX.mode;
 MFMT
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
 PBSZ
 PROT
 RANG STREAM
 REST STREAM
 SIZE
 SSCN
 TVFS
 UTF8
211 End

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            c1:f5:54:aa:96:b4:cf:9d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Someprovince, L=Sometown, O=none, OU=none, CN=localhost/emailAddress=webmaster@localhost
        Validity
            Not Before: Jul  7 21:12:23 2020 GMT
            Not After : Nov 22 21:12:23 2047 GMT
        Subject: C=GB, ST=Someprovince, L=Sometown, O=none, OU=none, CN=localhost/emailAddress=webmaster@localhost
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:3f:6a:44:b0:c5:61:09:22:dd:91:26:6e:
                    62:ab:76:77:a0:10:09:d4:fc:7a:76:a6:cc:33:b3:
                    e1:82:79:36:c1:89:6c:51:95:b6:b0:77:68:51:81:
                    c2:e7:f9:32:e3:b0:f5:1f:3f:82:23:12:ce:45:c3:
                    a6:dd:1d:e2:86:cf:40:0e:d8:3b:62:65:55:df:c9:
                    ba:2a:38:7c:55:3a:84:5b:c6:6e:46:9f:31:41:e1:
                    fe:65:46:20:8b:ff:e0:c6:39:47:e4:17:48:2f:c5:
                    a0:81:2c:ed:93:a3:34:b3:27:06:23:59:02:d8:6d:
                    13:17:ee:bb:ec:42:a7:2c:cf:02:ca:f5:f1:de:3e:
                    86:41:ae:be:13:9b:ec:09:12:ab:e0:c7:a3:d1:a6:
                    08:10:45:68:70:70:ea:23:85:04:b6:a8:f9:fb:09:
                    b4:03:dd:80:18:e2:9a:97:38:2f:1b:32:fa:10:39:
                    68:71:68:62:bd:83:2e:af:62:d5:82:d7:d9:61:03:
                    46:33:29:be:46:85:d4:03:8b:8f:ad:d6:cb:ba:20:
                    61:83:e6:d8:65:b5:63:2e:01:b7:88:a3:96:65:e5:
                    40:ff:4a:54:7b:f3:65:37:9c:da:19:90:cb:7c:9d:
                    b2:a8:56:8b:b3:dd:72:6e:8a:f7:42:94:c8:dc:55:
                    ad:47
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5f:58:4b:b7:46:1c:c6:88:02:fb:33:ac:38:da:ff:8f:fb:62:
        2c:79:a2:ac:13:67:98:4e:12:e2:44:ac:a3:6f:b0:fc:97:f2:
        6c:c1:43:e1:c9:9a:7e:a7:6d:ea:61:cf:ef:b7:1a:5d:51:cd:
        14:3a:f4:a9:ea:5b:37:34:28:27:2a:78:13:51:d0:63:88:e9:
        5e:5d:f5:1b:68:db:8f:e7:bb:59:14:d7:cd:10:19:85:eb:f2:
        b6:3f:7f:7e:30:07:7b:1f:a9:bf:a2:88:6b:b8:07:60:80:ce:
        3a:53:88:55:0a:5f:c3:e6:66:68:83:fb:30:79:05:56:39:cb:
        57:bc:e4:39:72:06:fd:e6:d9:a7:6b:33:81:c8:a5:95:57:08:
        80:17:9d:57:be:81:15:91:9f:f1:c7:2e:11:c8:d1:d2:8f:7f:
        25:80:e6:97:2b:1c:fe:bc:c4:88:38:23:d9:58:3b:d0:08:b5:
        47:aa:f2:60:ef:85:fe:d4:bc:20:4b:26:4a:2f:ef:2e:a7:a8:
        d3:05:a0:04:e0:c6:4d:6a:a1:10:95:50:8c:df:46:03:0a:0d:
        44:40:48:c6:6c:f5:e4:a1:3d:9e:38:f7:8a:8b:20:1d:ca:67:
        62:37:5b:46:c9:da:0d:b5:74:f1:1b:7c:b7:fd:25:c0:37:d8:
        84:6f:85:83

-382852385 | 2024-03-30T19:12:54.739134

53 / udp

9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.15
Resolver name: server.s79.r53.com.ua

-42001766 | 2024-04-24T11:50:26.562668

80 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 11:50:26 GMT
Content-Type: text/html
Content-Length: 46
Connection: keep-alive
Vary: Accept-Encoding
X-Accel-Version: 0.01
Last-Modified: Thu, 27 May 2021 03:10:22 GMT
ETag: "2e-5c347198fb158"
Accept-Ranges: bytes
Vary: User-Agent

-42001766 | 2024-04-26T18:22:51.169989

443 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:22:51 GMT
Content-Type: text/html
Content-Length: 46
Connection: keep-alive
Vary: Accept-Encoding
X-Accel-Version: 0.01
Last-Modified: Thu, 27 May 2021 03:10:22 GMT
ETag: "2e-5c347198fb158"
Accept-Ranges: bytes
Vary: User-Agent

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            8d:9b:d8:02:e0:27:b8:61
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Someprovince, L=Sometown, O=none, OU=none, CN=localhost/emailAddress=webmaster@localhost
        Validity
            Not Before: Jul  7 20:58:29 2020 GMT
            Not After : Nov 22 20:58:29 2047 GMT
        Subject: C=US, ST=Someprovince, L=Sometown, O=none, OU=none, CN=localhost/emailAddress=webmaster@localhost
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:b1:57:8f:cb:93:8a:6e:a2:1c:09:d2:ae:
                    d3:20:1c:63:1b:7e:85:d3:9f:78:32:9c:e7:06:ff:
                    88:20:e2:ce:a5:e0:12:a1:5d:0a:b2:0a:e4:42:ff:
                    f7:a6:ab:76:ea:59:23:66:6a:03:8f:72:87:b2:d5:
                    c1:ae:d0:6f:b1:6b:bb:92:a7:1a:48:44:52:db:ef:
                    a3:bb:31:07:d3:ed:1c:47:d1:d9:19:7a:04:aa:cd:
                    ca:19:fa:59:a0:b8:37:fa:f6:92:81:b5:8c:49:60:
                    37:9a:9b:95:1f:51:02:20:99:c0:33:6c:03:1f:44:
                    dd:18:c5:0f:04:4f:75:8c:20:f4:f9:84:8d:5e:fb:
                    0e:88:83:8c:71:71:38:08:88:c5:e4:aa:4e:95:b0:
                    6d:20:e4:43:db:0c:29:65:3d:5f:ed:84:35:e1:fd:
                    73:13:7c:72:79:0a:d5:ad:0c:fb:af:d5:a8:9f:1e:
                    98:e3:f3:4f:30:4c:61:89:eb:27:bc:17:fe:cb:69:
                    bc:73:80:eb:c5:2b:33:37:9e:67:15:75:d1:03:3f:
                    6e:52:0a:1e:94:72:41:52:6e:f7:5f:19:22:59:bc:
                    38:9d:68:60:4b:69:7e:08:89:ba:1a:64:2f:19:04:
                    9b:ac:79:f5:f1:8a:85:2b:fc:c8:2f:66:67:8f:db:
                    6f:5b
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7b:e3:6b:a9:b4:6f:6c:20:2a:e5:4e:13:c6:a9:56:4b:c9:88:
        a1:c2:38:4d:5f:40:a4:c8:a1:42:e1:60:7a:70:0a:1f:1a:b4:
        dd:81:ef:d9:c5:a3:fb:a5:26:ad:df:8d:34:9c:f1:9f:1e:9b:
        6c:a0:9a:6e:43:a8:72:fd:e2:43:bd:1a:a7:c5:2c:2a:9b:7e:
        f6:c4:26:f1:e8:54:ad:c1:c6:25:3a:fc:f9:4c:5c:c5:da:82:
        8b:17:dd:16:dc:ef:71:29:51:f7:4f:67:a9:3f:12:96:59:35:
        ef:ea:f4:8c:c1:db:75:fc:91:33:c1:0a:8e:4f:57:c6:17:6e:
        ae:28:3d:d1:2c:4e:7d:fb:42:8a:94:3f:4e:c3:e8:46:32:f3:
        61:27:cc:7d:b1:33:94:e6:5a:70:39:0e:51:b7:6b:dd:0e:a0:
        06:9c:7f:de:5c:44:51:5b:fb:74:17:e0:37:b0:ec:fc:c4:af:
        1e:ac:f0:81:9f:0d:19:06:6b:68:bd:78:05:22:65:b2:05:8c:
        a5:3e:c7:ca:88:0e:de:fe:9b:83:e8:82:bd:c8:f6:e1:08:11:
        46:36:78:7d:a5:bf:de:e6:69:ed:34:9a:16:14:34:ba:5d:e0:
        16:63:f0:b9:73:24:50:8e:9d:30:d6:b5:fa:28:dd:ed:b4:28:
        bb:5a:a9:81

215925181 | 2024-04-17T08:55:45.420728

465 / tcp

220 server.s79.r53.com.ua ESMTP Exim 4.94.2 Wed, 17 Apr 2024 11:55:33 +0300
250-server.s79.r53.com.ua Hello 224.158.162.84 [224.158.162.84]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            c1:f5:54:aa:96:b4:cf:9d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Someprovince, L=Sometown, O=none, OU=none, CN=localhost/emailAddress=webmaster@localhost
        Validity
            Not Before: Jul  7 21:12:23 2020 GMT
            Not After : Nov 22 21:12:23 2047 GMT
        Subject: C=GB, ST=Someprovince, L=Sometown, O=none, OU=none, CN=localhost/emailAddress=webmaster@localhost
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:3f:6a:44:b0:c5:61:09:22:dd:91:26:6e:
                    62:ab:76:77:a0:10:09:d4:fc:7a:76:a6:cc:33:b3:
                    e1:82:79:36:c1:89:6c:51:95:b6:b0:77:68:51:81:
                    c2:e7:f9:32:e3:b0:f5:1f:3f:82:23:12:ce:45:c3:
                    a6:dd:1d:e2:86:cf:40:0e:d8:3b:62:65:55:df:c9:
                    ba:2a:38:7c:55:3a:84:5b:c6:6e:46:9f:31:41:e1:
                    fe:65:46:20:8b:ff:e0:c6:39:47:e4:17:48:2f:c5:
                    a0:81:2c:ed:93:a3:34:b3:27:06:23:59:02:d8:6d:
                    13:17:ee:bb:ec:42:a7:2c:cf:02:ca:f5:f1:de:3e:
                    86:41:ae:be:13:9b:ec:09:12:ab:e0:c7:a3:d1:a6:
                    08:10:45:68:70:70:ea:23:85:04:b6:a8:f9:fb:09:
                    b4:03:dd:80:18:e2:9a:97:38:2f:1b:32:fa:10:39:
                    68:71:68:62:bd:83:2e:af:62:d5:82:d7:d9:61:03:
                    46:33:29:be:46:85:d4:03:8b:8f:ad:d6:cb:ba:20:
                    61:83:e6:d8:65:b5:63:2e:01:b7:88:a3:96:65:e5:
                    40:ff:4a:54:7b:f3:65:37:9c:da:19:90:cb:7c:9d:
                    b2:a8:56:8b:b3:dd:72:6e:8a:f7:42:94:c8:dc:55:
                    ad:47
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5f:58:4b:b7:46:1c:c6:88:02:fb:33:ac:38:da:ff:8f:fb:62:
        2c:79:a2:ac:13:67:98:4e:12:e2:44:ac:a3:6f:b0:fc:97:f2:
        6c:c1:43:e1:c9:9a:7e:a7:6d:ea:61:cf:ef:b7:1a:5d:51:cd:
        14:3a:f4:a9:ea:5b:37:34:28:27:2a:78:13:51:d0:63:88:e9:
        5e:5d:f5:1b:68:db:8f:e7:bb:59:14:d7:cd:10:19:85:eb:f2:
        b6:3f:7f:7e:30:07:7b:1f:a9:bf:a2:88:6b:b8:07:60:80:ce:
        3a:53:88:55:0a:5f:c3:e6:66:68:83:fb:30:79:05:56:39:cb:
        57:bc:e4:39:72:06:fd:e6:d9:a7:6b:33:81:c8:a5:95:57:08:
        80:17:9d:57:be:81:15:91:9f:f1:c7:2e:11:c8:d1:d2:8f:7f:
        25:80:e6:97:2b:1c:fe:bc:c4:88:38:23:d9:58:3b:d0:08:b5:
        47:aa:f2:60:ef:85:fe:d4:bc:20:4b:26:4a:2f:ef:2e:a7:a8:
        d3:05:a0:04:e0:c6:4d:6a:a1:10:95:50:8c:df:46:03:0a:0d:
        44:40:48:c6:6c:f5:e4:a1:3d:9e:38:f7:8a:8b:20:1d:ca:67:
        62:37:5b:46:c9:da:0d:b5:74:f1:1b:7c:b7:fd:25:c0:37:d8:
        84:6f:85:83

1027680450 | 2024-04-02T06:21:54.461030

873 / tcp

@RSYNCD: 31.0\n
nginx          	NGINX exchange
ssl            	NGINX exchange
backup         	My Server
mysql          	My Server
plashka        	DA Backup
system         	system
@RSYNCD: EXIT

-1523222761 | 2024-04-20T01:13:53.001977

3306 / tcp

MariaDB:
  Protocol Version: 10
  Version: 10.4.13-MariaDB
  Capabilities: 63486
  Server Language: 33
  Server Status: 2
  Extended Server Capabilities: 33279
  Authentication Plugin: mysql_native_password

194.28.172.226

Last Seen: 2024-04-26

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1956522628 | 2024-04-03T18:14:35.295309
21 / tcp

ProFTPD

-382852385 | 2024-03-30T19:12:54.739134
53 / udp

-42001766 | 2024-04-24T11:50:26.562668
80 / tcp

nginx

-42001766 | 2024-04-26T18:22:51.169989
443 / tcp

nginx

215925181 | 2024-04-17T08:55:45.420728
465 / tcp

Exim smtpd4.94.2

1027680450 | 2024-04-02T06:21:54.461030
873 / tcp

rsyncd31.0

-1523222761 | 2024-04-20T01:13:53.001977
3306 / tcp

MariaDB10.4.13-MariaDB

Products

Pricing

Contact Us

194.28.172.226

Last Seen: 2024-04-26

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1956522628 | 2024-04-03T18:14:35.295309 21 / tcp

ProFTPD

-382852385 | 2024-03-30T19:12:54.739134 53 / udp

-42001766 | 2024-04-24T11:50:26.562668 80 / tcp

nginx

-42001766 | 2024-04-26T18:22:51.169989 443 / tcp

nginx

215925181 | 2024-04-17T08:55:45.420728 465 / tcp

Exim smtpd4.94.2

1027680450 | 2024-04-02T06:21:54.461030 873 / tcp

rsyncd31.0

-1523222761 | 2024-04-20T01:13:53.001977 3306 / tcp

MariaDB10.4.13-MariaDB

Products

Pricing

Contact Us

-1956522628 | 2024-04-03T18:14:35.295309
21 / tcp

-382852385 | 2024-03-30T19:12:54.739134
53 / udp

-42001766 | 2024-04-24T11:50:26.562668
80 / tcp

-42001766 | 2024-04-26T18:22:51.169989
443 / tcp

215925181 | 2024-04-17T08:55:45.420728
465 / tcp

1027680450 | 2024-04-02T06:21:54.461030
873 / tcp

-1523222761 | 2024-04-20T01:13:53.001977
3306 / tcp