GeneralInformation

Hostnames	900dat9.ip-ptr.tech roastrootsrendezvous.com
Domains	ip-ptr.tech roastrootsrendezvous.com
Country	Germany
City	Frankfurt am Main
Organization	GLOBAL INTERNET SOLUTIONS LLC
ISP	GLOBAL INTERNET SOLUTIONS LLC
ASN	AS207713

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-51766	Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.
CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2022-37452	Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
CVE-2022-37451	Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.
CVE-2021-38371	5.0The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

21 53 80 443 587

-1075854322 | 2024-04-16T13:35:28.713116

21 / tcp

220 ProFTPD Server (Debian) [::ffff:195.133.88.155]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
 CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
 EPRT    EPSV    ALLO    RNFR    RNTO    DELE    MDTM    RMD     
 XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
 NOOP    FEAT    OPTS    HOST    CLNT    AUTH*   CCC*    CONF*   
 ENC*    MIC*    PBSZ*   PROT*   TYPE    STRU    MODE    RETR    
 STOR    STOU    APPE    REST    ABOR    RANG    USER    PASS    
 ACCT*   REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@debian11.templates
211-Features:
 CLNT
 EPRT
 EPSV
 HOST
 LANG en-US*
 MDTM
 MFF modify;UNIX.group;UNIX.mode;
 MFMT
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
 RANG STREAM
 REST STREAM
 SITE COPY
 SITE MKDIR
 SITE RMDIR
 SITE SYMLINK
 SITE UTIME
 SIZE
 TVFS
 UTF8
211 End

820329592 | 2024-04-20T20:07:29.727072

53 / udp

9.16.48-Debian
Resolver name: 900DAT9.ip-ptr.tech

-570141518 | 2024-04-23T10:17:50.989424

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0
Date: Tue, 23 Apr 2024 10:18:24 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
X-Redirect-By: WordPress
Location: https://beanblendbistro.com/

1087360504 | 2024-04-22T01:49:06.186912

443 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0
Date: Mon, 22 Apr 2024 01:49:33 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
X-Redirect-By: WordPress
Location: https://beanblendbistro.com/

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e6:7f:93:54:a9:4c:a8:80:a1:7a:bc:be:c0:d0:35:4a:d3
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr 16 09:30:09 2024 GMT
            Not After : Jul 15 09:30:08 2024 GMT
        Subject: CN=roastrootsrendezvous.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:23:03:63:3a:a5:9a:dd:ac:08:7a:df:3d:
                    6a:2f:e6:2e:fe:90:6e:1c:54:02:cd:68:d4:9a:f7:
                    2d:70:96:95:1b:11:2b:4c:db:6c:a5:6a:86:93:d4:
                    10:7d:97:ac:f1:b1:2a:3f:87:a8:17:8b:e3:05:ae:
                    5e:9d:a0:8b:09:f2:a3:5d:56:a5:dc:76:c9:6d:6f:
                    f8:3f:46:de:8d:11:3f:0e:2d:71:9a:23:ea:ac:0f:
                    c7:a5:7b:ab:b1:96:bd:26:01:87:68:4d:4d:92:e0:
                    38:39:12:c0:c7:5d:37:5e:df:db:0f:29:67:0b:76:
                    b6:60:99:bb:32:80:a9:a0:18:d6:58:6c:25:d9:29:
                    2c:c7:87:19:97:3c:be:cb:2b:99:66:d2:11:c7:7c:
                    94:3f:93:d7:99:e3:ae:46:fe:de:e3:a8:f2:ef:21:
                    c6:5e:68:24:ce:0a:ba:97:5d:dc:33:34:20:ce:58:
                    f7:b6:8d:a0:16:03:16:94:9c:5e:00:44:31:00:a6:
                    c0:4d:18:e9:22:f2:09:5e:2b:09:63:34:5d:7b:5a:
                    b5:1d:00:5a:2b:b8:36:fc:4a:2b:4f:fb:eb:77:1d:
                    c3:f9:92:3a:b9:31:b5:58:c1:e2:24:7d:5a:86:5e:
                    1a:10:7f:f6:76:da:ec:64:e6:3e:8e:97:36:a8:79:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                D1:90:BE:DA:EA:F1:D3:22:4C:45:BB:4E:0E:27:36:41:D3:6F:67:9E
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:roastrootsrendezvous.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr 16 10:30:09.115 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:1D:89:39:14:46:8B:79:97:C1:11:08:14:
                                53:F4:CC:D3:1B:F2:A8:BE:24:C3:BF:7A:8D:DA:85:75:
                                7D:62:F0:FB:02:20:7D:5A:D2:0E:91:8E:0F:C7:FA:26:
                                AA:EA:8F:90:8F:51:B9:C9:CC:23:6D:B4:D1:23:C7:1E:
                                F9:C2:8B:98:CE:96
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Apr 16 10:30:09.114 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:CF:A7:EA:A5:01:CA:0C:35:0B:7A:B0:
                                3E:6F:FD:8D:5F:B2:59:3E:7F:5A:CB:FD:0B:2A:81:C4:
                                28:BA:C0:14:68:02:20:0F:AA:D8:7F:2F:38:34:07:61:
                                91:DE:D0:6A:FB:34:BD:3C:6C:8F:FB:C9:BD:AB:FE:00:
                                99:08:E6:1F:64:89:0B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        18:49:a2:e9:4e:1d:17:34:04:ed:1c:9b:a6:98:02:f0:1e:17:
        8f:f5:e9:0e:76:be:28:87:91:eb:97:f0:99:21:91:61:ee:db:
        1d:67:2d:f1:40:71:2e:6f:a6:a3:e9:14:14:d4:7e:49:df:ab:
        ca:26:52:9e:bc:3f:9a:b1:fc:f5:99:9a:b6:02:0b:b5:9e:93:
        7e:06:74:36:7e:f4:1b:85:78:dd:16:0f:85:a4:d6:7c:cd:34:
        71:35:17:7c:06:43:08:a9:27:31:7c:67:98:0e:83:dd:61:93:
        2e:bc:7c:55:cc:4a:57:c6:9e:1b:ee:ea:18:e6:8c:b3:cd:26:
        8a:bd:7d:6a:e6:53:dc:03:aa:1b:79:ae:dc:7e:1c:6e:42:5d:
        22:3e:ef:42:31:e9:8b:81:5f:f0:c2:07:e2:dc:ea:4b:7d:f9:
        cb:9e:66:8c:99:bd:6a:70:e6:48:8a:5d:b8:66:34:23:56:3b:
        7c:3f:f3:07:bf:46:86:db:76:66:85:06:12:9e:88:82:b8:50:
        53:ac:87:e7:bb:6a:57:9c:b4:27:c8:fd:72:28:6b:be:a7:09:
        a1:55:7d:01:5d:23:82:3b:2e:f9:b5:ad:48:b7:c7:cc:55:9e:
        f8:27:98:7f:1b:28:7a:bf:47:28:80:95:82:16:1f:54:47:a7:
        2d:68:e1:5b

-348661255 | 2024-04-21T00:18:13.535754

587 / tcp

220 900DAT9.ip-ptr.tech ESMTP Exim 4.94.2 Sun, 21 Apr 2024 02:18:18 +0200
250-900DAT9.ip-ptr.tech Hello 224.199.218.127 [224.199.218.127]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN CRAM-MD5
250-CHUNKING
250-STARTTLS
250-SMTPUTF8
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:89:90:87:91:bd:2c:5b:04:15:b7:e0:c4:22:f1:b9:d0:f4:e5:9b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=900DAT9.ip-ptr.tech/emailAddress=root@900DAT9.ip-ptr.tech
        Validity
            Not Before: Apr 16 07:47:57 2024 GMT
            Not After : Apr 14 07:47:57 2034 GMT
        Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=900DAT9.ip-ptr.tech/emailAddress=root@900DAT9.ip-ptr.tech
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:aa:51:48:d4:57:db:e6:28:0c:51:0a:d1:70:
                    3f:2a:ba:2a:39:85:62:f8:11:2c:d6:c8:c6:23:ba:
                    41:8f:ec:d6:0e:58:07:62:ea:0d:ad:7b:81:d6:aa:
                    05:dc:e5:85:25:bc:ed:94:11:3d:cc:cb:cf:9e:c4:
                    57:38:41:c7:f5:3c:31:88:e6:55:73:be:ae:50:8c:
                    74:9f:f2:3f:f9:d6:73:41:47:ef:a8:17:f1:a9:7f:
                    fb:c8:00:c4:f1:5f:b0:c3:15:ba:19:3a:b3:f4:1b:
                    aa:71:a4:45:3e:e9:89:37:91:12:7d:8e:92:d8:cc:
                    9a:2c:fd:27:fb:d0:04:14:1b:44:d8:9b:f5:93:70:
                    3e:99:10:b8:08:14:5b:fe:24:e0:8f:f5:7e:1b:19:
                    55:13:62:aa:38:8f:76:74:fe:e5:e4:dd:4f:e3:6f:
                    6e:06:f7:ab:ed:fd:c1:2d:2b:63:6b:80:9f:5b:fb:
                    78:8f:81:a1:cc:b4:94:1d:6f:55:9d:24:92:72:fa:
                    e5:ca:25:2a:eb:99:6b:ca:c2:e3:0b:f6:3b:f1:e7:
                    b7:f9:b6:a9:92:92:69:a5:66:74:ea:e7:ec:fe:63:
                    f4:06:e1:60:d1:b4:d4:83:af:26:5d:1d:4e:bc:c8:
                    ca:24:24:eb:3f:41:33:84:00:7f:29:50:50:47:0c:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B6:B4:F0:17:8D:99:D9:64:A6:F4:81:65:25:CD:85:23:A2:BA:1E:B8
            X509v3 Authority Key Identifier: 
                B6:B4:F0:17:8D:99:D9:64:A6:F4:81:65:25:CD:85:23:A2:BA:1E:B8
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        49:2b:7e:1d:4e:51:8e:36:31:1c:bb:e2:4d:6a:b8:e2:4d:9f:
        bd:4c:3c:11:a8:4c:cd:82:38:a9:3e:c5:e8:52:3d:3a:51:ba:
        76:94:52:ac:d3:d0:0d:f0:dc:86:c2:ed:b8:11:03:1f:63:6a:
        d1:39:ba:39:b9:23:4c:2e:6d:52:e0:86:30:17:8a:c1:6d:ca:
        83:bb:61:f3:23:83:24:83:34:21:f8:90:fa:4d:cf:57:ea:35:
        ae:f8:a1:76:7c:db:c5:bb:0b:69:49:92:15:ba:53:f2:fa:7f:
        c2:87:f0:87:f4:0c:ed:ff:6b:be:a2:7d:a5:7f:19:95:a7:e2:
        5b:27:85:94:80:80:e8:43:00:e9:53:63:6f:96:7f:41:99:7f:
        16:6b:e1:5b:a0:97:57:2c:1a:b5:9a:46:2d:15:55:66:f6:7e:
        03:e3:ff:71:bd:9c:85:42:98:71:a3:14:e1:b5:7d:7a:da:45:
        f1:ed:12:d3:20:a8:be:ea:4a:58:46:1a:dd:76:ca:49:11:4f:
        85:7d:a2:c3:1b:6a:38:f8:0e:cf:7b:1f:08:5e:0d:b1:24:46:
        c4:ce:01:70:eb:e8:45:77:6f:b2:6f:97:cf:b5:e0:e3:54:00:
        99:23:22:47:fb:cf:20:fc:04:c8:2e:ae:5e:b3:ef:ff:7f:d8:
        ab:20:6e:11

195.133.88.155

Last Seen: 2024-04-23

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1075854322 | 2024-04-16T13:35:28.713116
21 / tcp

820329592 | 2024-04-20T20:07:29.727072
53 / udp

-570141518 | 2024-04-23T10:17:50.989424
80 / tcp

nginx1.18.0

1087360504 | 2024-04-22T01:49:06.186912
443 / tcp

nginx1.18.0

-348661255 | 2024-04-21T00:18:13.535754
587 / tcp

Exim smtpd4.94.2

Products

Pricing

Contact Us

195.133.88.155

Last Seen: 2024-04-23

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1075854322 | 2024-04-16T13:35:28.713116 21 / tcp

820329592 | 2024-04-20T20:07:29.727072 53 / udp

-570141518 | 2024-04-23T10:17:50.989424 80 / tcp

nginx1.18.0

1087360504 | 2024-04-22T01:49:06.186912 443 / tcp

nginx1.18.0

-348661255 | 2024-04-21T00:18:13.535754 587 / tcp

Exim smtpd4.94.2

Products

Pricing

Contact Us

-1075854322 | 2024-04-16T13:35:28.713116
21 / tcp

820329592 | 2024-04-20T20:07:29.727072
53 / udp

-570141518 | 2024-04-23T10:17:50.989424
80 / tcp

1087360504 | 2024-04-22T01:49:06.186912
443 / tcp

-348661255 | 2024-04-21T00:18:13.535754
587 / tcp