GeneralInformation

Hostnames	ab.lettertel.com mlrtk.com cs.mlrtk.com
Domains	lettertel.com mlrtk.com
Country	United States
City	New York City
Organization	Interserver, Inc
ISP	Interserver, Inc
ASN	AS19318

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-46118

4.9RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.

CVE-2022-31008

7.5RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.

OpenPorts

80 443 4369 5000 5001 5672 8090

1068352645 | 2024-04-15T09:53:53.453885

80 / tcp

HTTP/1.1 200 OK
Date: Mon, 15 Apr 2024 09:53:53 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked

1068352645 | 2024-04-18T23:57:54.969560

443 / tcp

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 23:57:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3f:82:a9:a3:79:a3:d3:e7:59:78:f4:eb:16:35:a7:21:a0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Feb 18 17:31:02 2024 GMT
            Not After : May 18 17:31:01 2024 GMT
        Subject: CN=ab.lettertel.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:29:ba:39:22:b8:d9:9d:05:65:c5:d7:43:
                    41:3d:2e:34:ae:2e:86:61:32:e0:44:ba:3b:f9:b8:
                    46:37:91:a7:06:5e:0b:69:fe:4f:47:b3:f6:5d:db:
                    14:95:28:d7:17:a0:f9:ca:40:43:9f:ae:f3:86:b0:
                    88:7c:bc:3d:29:59:71:a4:ff:cd:86:0c:96:cd:35:
                    95:1d:89:cd:a5:18:4b:30:d7:44:44:f6:2e:21:10:
                    5c:17:42:8a:9c:5c:2d:9a:15:40:9c:da:bd:ca:c2:
                    a0:6a:89:e6:1d:74:ac:36:9e:a5:16:58:d4:56:c5:
                    0a:e2:99:72:62:f3:b4:d6:5d:df:08:4f:60:5d:a7:
                    4d:1e:a3:d0:1b:70:0e:4f:8f:85:4b:6f:1d:19:4a:
                    f7:4f:3b:2a:43:e2:92:0d:e2:29:b9:95:19:10:5a:
                    01:c0:59:a4:c9:a8:76:68:15:85:37:67:27:60:7d:
                    5a:90:36:30:d9:21:e8:fa:05:56:5f:14:79:9b:a6:
                    4a:4b:85:f2:a4:19:ef:1b:9a:78:68:6e:fa:b1:05:
                    0e:6b:42:c4:e4:53:fe:c0:df:c9:b6:14:ce:b0:1e:
                    50:fa:cc:ed:92:36:d6:c6:39:2e:c5:ac:34:6f:4a:
                    8c:20:f3:cf:1b:75:8c:4c:02:ef:35:f0:57:1c:23:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                CF:B0:B8:9B:4D:FF:D4:B0:0B:FB:EA:BC:3D:13:96:ED:12:82:33:F9
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:ab.lettertel.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
                                65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
                    Timestamp : Feb 18 18:31:02.858 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:77:C4:C1:0C:57:D9:63:F8:4F:89:DE:02:
                                F7:96:08:FC:05:E2:92:0A:BC:ED:7C:87:77:33:DC:DE:
                                93:22:11:42:02:20:4B:0B:89:C0:F1:3E:4A:CA:D2:E8:
                                33:A2:FD:69:8A:62:BE:E2:95:5D:26:89:0F:FC:41:E0:
                                3E:15:02:A7:9D:B8
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Feb 18 18:31:02.929 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D0:0F:D2:B2:A2:A5:D0:1A:B7:73:DF:
                                EB:4C:AF:06:52:22:D5:C8:A3:AC:31:E7:D6:26:88:4C:
                                9E:01:25:C7:7F:02:20:53:A6:DE:D8:4C:0B:A6:B5:43:
                                16:B2:27:24:EA:E1:F6:72:FF:64:7E:C4:EF:AD:99:CC:
                                25:5E:7C:D5:5B:7E:66
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        93:54:7f:9b:05:fe:ed:35:2a:25:0a:e0:69:ac:dd:5f:43:58:
        34:ce:94:70:91:3f:a0:21:4f:8d:5f:6f:ba:ef:d6:56:82:a8:
        70:fa:87:5a:de:9a:cb:43:d3:fd:ec:74:cf:d6:75:c5:64:ac:
        ca:f6:81:06:30:3e:e2:2c:bf:f8:b9:08:b4:f8:b0:2e:36:42:
        c3:50:2d:76:93:a0:32:9a:5f:59:47:38:f3:dc:1f:13:73:e7:
        bf:27:55:20:aa:6d:33:f2:03:f7:84:cc:ac:48:24:3d:55:1a:
        4a:7f:19:b5:98:a1:b5:29:5e:f0:36:d0:38:a5:97:53:1d:f1:
        ec:8d:f1:f5:c5:7a:01:a3:df:18:44:df:ea:2e:f2:39:fa:85:
        7a:84:b0:2f:33:49:70:f1:55:1a:d5:f4:0e:75:e6:cb:a0:19:
        1e:dd:89:46:fe:3e:1f:db:f6:f2:cc:0f:fa:78:ef:69:3e:82:
        6b:e8:34:88:79:5e:3e:f9:7a:2d:01:bb:04:59:b1:03:27:32:
        b1:6e:13:00:c3:dc:ec:be:7a:81:dc:5f:ca:9a:50:01:b8:f7:
        51:1c:1e:b3:29:e2:ef:29:e9:a8:4a:82:89:7a:35:4c:a4:42:
        8a:01:86:59:90:58:fb:77:77:2e:8a:72:2c:63:80:45:2e:10:
        b1:46:e7:a1

50704379 | 2024-04-10T22:50:57.757713

4369 / tcp

Erlang Port Mapper Daemon:
  nodes:
    rabbit: 25672

295178739 | 2024-04-14T07:52:48.049223

5000 / tcp

HTTP/1.1 200 OK
Date: Sun, 14 Apr 2024 07:52:49 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade
Last-Modified: Tue, 13 Dec 2016 05:27:41 GMT
ETag: "333-543837aa5f7cb"
Accept-Ranges: bytes
Content-Length: 819
Cache-Control: max-age=0
Expires: Sun, 14 Apr 2024 07:52:49 GMT
Vary: Accept-Encoding,User-Agent
Content-Type: text/html; charset=UTF-8

-942068244 | 2024-04-14T14:32:03.861131

5001 / tcp

HTTP/1.1 301 Moved Permanently
Date: Sun, 14 Apr 2024 14:32:05 GMT
Server: Apache
Location: https://www.mailercloud.com/servers/
Cache-Control: max-age=0
Expires: Sun, 14 Apr 2024 14:32:05 GMT
Content-Length: 244
Content-Type: text/html; charset=iso-8859-1

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4f:42:e5:df:ba:0f:b4:9b:90:7d:63:06:78:ae:b9:05:f4
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 30 17:34:20 2023 GMT
            Not After : Jun 28 17:34:19 2023 GMT
        Subject: CN=mlrtk.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:92:18:96:7e:05:a8:7c:21:86:a2:52:c8:
                    e5:de:ee:1f:54:7b:79:41:fb:6c:15:cd:85:f4:2b:
                    85:08:79:23:9b:8a:cc:a0:b0:61:8c:2d:c0:f4:37:
                    94:a8:ea:1d:26:c5:d0:31:f4:c0:a6:f8:04:d5:fa:
                    72:93:15:89:96:f0:8e:29:4d:d4:02:11:28:a2:d7:
                    2f:04:3a:a7:aa:9b:5d:12:74:28:fa:e5:f1:42:cc:
                    cb:05:41:8c:7a:2a:61:ee:d4:f4:44:2f:c7:5e:e0:
                    f2:2a:8b:0f:a9:e0:a2:89:fb:83:2b:4e:d0:c8:07:
                    9b:57:93:bf:b7:2c:af:21:e5:5b:73:91:12:ab:a9:
                    eb:22:15:85:a8:67:6b:8f:d0:48:fb:87:46:ed:1d:
                    3d:32:90:10:2f:d2:e5:55:6d:cb:62:b9:3c:77:f6:
                    30:71:3f:9d:25:12:18:37:25:01:8a:59:d8:3b:73:
                    c9:d1:ce:08:b6:c8:11:31:10:87:f5:c9:15:ad:2d:
                    33:e1:5b:78:7e:dc:13:c6:00:81:72:10:dd:ba:9d:
                    f8:63:3a:97:d0:77:76:85:a3:10:5b:2b:c7:bf:32:
                    d3:f2:9a:c0:4e:1f:8a:fd:e5:23:6f:3d:a1:d2:f1:
                    ab:99:a3:8a:8b:4b:ef:a7:6f:8f:68:ba:3b:a3:1e:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                A7:AB:00:7E:A3:FD:C8:EC:10:88:9B:53:05:37:6F:56:93:F9:CA:1A
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:mlrtk.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.letsencrypt.org
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84:
                                16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52
                    Timestamp : Mar 30 18:34:20.392 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:7D:E1:E0:7C:A7:36:17:96:37:71:C2:37:
                                8C:62:DB:E7:60:7B:63:12:9F:B0:EE:C2:42:69:E2:20:
                                21:82:3C:C1:02:21:00:87:9A:B8:35:10:D3:9E:E0:49:
                                2E:48:27:DF:EF:A2:39:77:61:AB:FA:61:1D:DF:07:BF:
                                78:29:16:60:64:A5:B1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : AD:F7:BE:FA:7C:FF:10:C8:8B:9D:3D:9C:1E:3E:18:6A:
                                B4:67:29:5D:CF:B1:0C:24:CA:85:86:34:EB:DC:82:8A
                    Timestamp : Mar 30 18:34:20.458 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:CB:98:0B:B0:11:3C:59:E6:76:0F:D2:
                                64:DA:49:F6:2C:C8:D1:BD:0C:2D:53:CF:E3:95:D4:92:
                                80:8A:9E:8F:A8:02:20:6B:15:31:B2:7B:F8:E4:96:68:
                                D7:FC:C1:95:AA:A5:E0:E8:89:A6:67:B0:DB:D5:B7:A1:
                                8B:9C:FE:BA:3D:B0:30
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        27:6d:8d:71:46:86:78:4f:03:dc:a3:1b:45:ed:dd:da:3d:c0:
        1f:52:ef:cf:1b:4b:1e:7b:54:52:17:21:cb:c9:e5:fc:90:ab:
        77:2d:1a:e9:7c:b5:f2:d0:74:98:30:bd:04:e9:3b:43:dc:25:
        55:6d:81:f0:75:d5:20:83:c6:88:20:a5:93:69:96:56:8c:3e:
        3d:c7:b4:70:07:ad:03:10:ff:c3:af:b4:dc:37:21:c2:cb:d8:
        2a:5f:55:b4:2a:81:f5:75:b6:cd:bd:f1:0b:95:f5:57:97:5a:
        2b:01:3f:b2:a1:1d:d1:26:5e:75:64:2d:a9:48:db:d3:3c:a1:
        16:94:06:eb:14:d3:e3:4b:9b:99:6d:2d:74:db:80:e9:98:77:
        b2:76:c6:91:eb:b8:a8:75:da:ee:13:a5:a5:1e:1d:05:2e:97:
        e5:e5:3b:d0:8c:77:3e:b1:90:01:c4:48:90:9a:dd:42:f9:38:
        fb:fe:31:2b:64:8d:0f:81:7d:c0:43:1e:b2:4c:fe:5a:55:c9:
        99:87:24:00:aa:39:c4:4e:1b:d6:f1:31:8b:89:bb:86:26:47:
        dd:f7:86:2f:a7:cf:88:2a:9f:38:93:c0:32:da:72:9c:21:e4:
        15:69:e5:b4:7f:88:7d:7a:22:18:92:5a:57:df:f6:ea:3e:6a:
        44:00:9c:c1

-1824153356 | 2024-04-12T20:15:02.741793

5672 / tcp

AMQP:
  Protocol Version: 0-9
  Product: RabbitMQ
  Product Version: 3.10.0
  Platform: Erlang/OTP 23.3.4.11
  Capabilities:
    Exchange Exchange Bindings: True
    Connection.blocked: True
    Authentication Failure Close: True
    Direct Reply To: True
    Basic.nack: True
    Per Consumer Qos: True
    Consumer Priorities: True
    Consumer Cancel Notify: True
    Publisher Confirms: True

1877923141 | 2024-04-18T18:08:53.466262

8090 / tcp

HTTP/1.0 401 Unauthorized
Cache-Control: no-cache
Connection: close
Content-Type: text/html
WWW-Authenticate: Basic realm="Haproxy Statistics"

206.72.206.36

Last Seen: 2024-04-18

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1068352645 | 2024-04-15T09:53:53.453885
80 / tcp

1068352645 | 2024-04-18T23:57:54.969560
443 / tcp

50704379 | 2024-04-10T22:50:57.757713
4369 / tcp

Erlang Port Mapper Daemon

295178739 | 2024-04-14T07:52:48.049223
5000 / tcp

Apache httpd

-942068244 | 2024-04-14T14:32:03.861131
5001 / tcp

-1824153356 | 2024-04-12T20:15:02.741793
5672 / tcp

RabbitMQ3.10.0

1877923141 | 2024-04-18T18:08:53.466262
8090 / tcp

Products

Pricing

Contact Us

206.72.206.36

Last Seen: 2024-04-18

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1068352645 | 2024-04-15T09:53:53.453885 80 / tcp

1068352645 | 2024-04-18T23:57:54.969560 443 / tcp

50704379 | 2024-04-10T22:50:57.757713 4369 / tcp

Erlang Port Mapper Daemon

295178739 | 2024-04-14T07:52:48.049223 5000 / tcp

Apache httpd

-942068244 | 2024-04-14T14:32:03.861131 5001 / tcp

-1824153356 | 2024-04-12T20:15:02.741793 5672 / tcp

RabbitMQ3.10.0

1877923141 | 2024-04-18T18:08:53.466262 8090 / tcp

Products

Pricing

Contact Us

1068352645 | 2024-04-15T09:53:53.453885
80 / tcp

1068352645 | 2024-04-18T23:57:54.969560
443 / tcp

50704379 | 2024-04-10T22:50:57.757713
4369 / tcp

295178739 | 2024-04-14T07:52:48.049223
5000 / tcp

-942068244 | 2024-04-14T14:32:03.861131
5001 / tcp

-1824153356 | 2024-04-12T20:15:02.741793
5672 / tcp

1877923141 | 2024-04-18T18:08:53.466262
8090 / tcp