| Hostnames |
service.afam.com ftp.dc-afam.com hosted.by.qweb.net |
| Domains | afam.com dc-afam.com qweb.net |
| Country | Netherlands |
| City | Aalsmeer |
| Organization | Dedicated Servers Range 1 |
| ISP | Infopact Netwerkdiensten B.V. |
| ASN | AS21221 |
| Operating System | Windows |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
| CVE-2014-4078 | 5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability." |
1321296854 | 2024-05-03T10:28:58.05732221 / tcp
220 Welcome to the DC-AFAM FTP server 530 Login or password incorrect! 214-The following commands are recognized: ABOR ADAT ALLO APPE AUTH CDUP CLNT CWD DELE EPRT EPSV FEAT HASH HELP LIST MDTM MFMT MKD MLSD MLST MODE NLST NOOP NOP OPTS PASS PASV PBSZ PORT PROT PWD QUIT REST RETR RMD RNFR RNTO SITE SIZE STOR STRU SYST TYPE USER XCUP XCWD XMKD XPWD XRMD 214 Have a nice day. 211-Features: MDTM REST STREAM SIZE MLST type*;size*;modify*; MLSD AUTH SSL AUTH TLS PROT PBSZ UTF8 CLNT MFMT EPSV EPRT 211 End
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:54:2e:a8:4d:4f:1a:a3:98:73:1b:a4:76:fc:c5:48:56:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Apr 2 08:16:58 2024 GMT
Not After : Jul 1 08:16:57 2024 GMT
Subject: CN=ftp.dc-afam.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:92:f0:d5:53:b2:a7:47:f1:4a:7b:d7:80:47:7f:
c1:be:fe:cb:66:50:7f:96:ba:1b:0d:eb:15:20:05:
32:fd:40:ab:e9:57:e9:b5:0a:b6:21:cf:00:37:bc:
8c:4a:f8:73:6c:c1:f4:05:d6:0b:b1:ca:e5:26:f3:
45:7d:df:14:e1:70:9d:94:78:63:39:6d:78:d6:70:
2c:79:b9:33:08:b3:d9:a0:f4:7c:8b:3e:10:62:59:
ca:35:51:fb:b7:ba:77:21:e4:14:0b:94:5e:1a:5e:
3c:5c:ed:52:71:0d:20:87:6c:12:d4:34:05:12:56:
97:50:a5:7d:c2:19:6b:1c:31:cc:bd:b7:99:2b:f7:
31:9f:7d:0b:db:bb:d8:c6:96:b7:9e:44:9a:1c:72:
05:b9:1b:eb:5f:9c:8a:f5:db:7e:6c:39:c7:7d:62:
cc:be:fc:bb:75:21:f5:b5:8b:7e:e7:75:11:f3:da:
bd:45:e0:db:22:33:86:62:f2:08:01:f6:53:64:78:
93:d0:f3:24:77:fb:dc:4f:80:fe:d8:4d:5e:53:25:
f9:fb:ed:f8:f0:45:fe:58:95:c1:2f:49:57:04:b7:
dd:25:b5:27:b6:3c:30:60:13:5f:99:6e:a5:29:db:
57:1f:1b:b3:e6:72:cd:9b:0b:5f:8f:c3:a8:78:81:
1f:64:b3:67:5b:4a:ad:5b:49:b3:6f:7b:1d:7d:4c:
35:68:8e:ed:56:8a:17:22:ac:14:74:6c:e3:e8:ee:
5d:9c:fa:9e:fb:ca:f0:b5:66:da:5c:10:9b:2b:aa:
76:e0:5b:aa:5f:b9:09:ce:21:4f:1e:13:8c:23:2f:
81:89:8d:b1:c2:ba:6d:a0:ed:c6:0c:f6:5c:88:6d:
a4:7f:d9:2c:21:39:b8:73:47:eb:e6:ba:f1:fd:cb:
b0:99:8d:c0:04:32:08:c2:83:e7:5e:0c:59:1b:0a:
f8:15:ef:0e:76:c1:57:82:44:98:00:51:cf:dd:a5:
88:8a:fb:d9:2c:1b:a6:a9:f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
4D:4E:15:D7:35:37:A9:C9:55:B8:80:53:4A:23:44:A1:BD:8E:0E:B8
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:ftp.dc-afam.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 19:98:10:71:09:F0:D6:52:2E:30:80:D2:9E:3F:64:BB:
83:6E:28:CC:F9:0F:52:8E:EE:DF:CE:4A:3F:16:B4:CA
Timestamp : Apr 2 09:16:58.699 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:F7:A9:E6:C1:11:95:55:FC:BF:E6:12:
E0:48:91:02:00:FA:A4:0B:F1:FA:89:9D:BB:8E:6F:25:
99:33:35:F4:23:02:20:50:E1:00:40:E7:0B:D0:58:23:
1C:AE:17:05:23:3F:F9:8C:F0:C9:02:8C:F4:2C:96:3E:
50:51:D4:A8:C0:35:FE
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : Apr 2 09:16:58.751 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:E7:89:20:B7:D8:A4:14:52:12:B1:1E:
4F:0B:05:5C:5D:4D:1A:D3:84:48:50:41:EE:97:0C:E7:
46:9F:C0:8A:B9:02:21:00:E3:66:23:26:F1:36:12:19:
AC:16:9A:24:E5:29:79:15:57:6D:EB:49:48:70:CE:A8:
4E:D4:E7:D9:A2:5A:DB:DD
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
ba:e4:0b:15:8e:6f:69:e5:71:21:12:82:e0:34:db:32:2f:f6:
89:61:90:db:6f:aa:16:3b:f2:4d:30:f0:cb:b3:e7:43:d0:72:
23:c4:9c:68:93:27:c0:83:79:d1:5d:ba:e6:35:5a:1c:6d:67:
75:c1:8a:af:10:a3:d8:4a:40:8a:98:5a:64:67:b5:5b:28:5f:
7f:ac:de:b6:b7:7f:3a:07:bc:08:12:b1:b3:de:a7:67:9d:ca:
eb:fb:df:98:fb:29:12:ff:80:ff:41:79:00:29:be:38:6a:9d:
c0:4b:9c:94:fd:f0:06:f7:06:67:25:65:12:e2:2e:ad:61:c7:
48:bf:46:17:82:1a:21:c9:cf:df:70:13:4c:20:6c:d5:45:e3:
18:b7:48:0e:f7:14:37:0e:33:cb:bb:92:0d:5a:c0:cc:16:2a:
a1:cd:55:f1:b5:08:eb:02:63:4e:6b:5d:fc:4a:26:e9:eb:9c:
95:0f:18:85:6c:ec:46:2a:71:5d:c7:96:dd:be:06:27:c0:b2:
ce:07:19:7c:1a:3d:7d:68:15:6b:86:45:b1:73:88:ee:ef:0d:
ef:26:60:6e:7c:83:8a:d5:71:d5:e6:7f:57:c3:3c:20:00:8f:
b0:50:b4:59:8c:e2:08:b3:4e:54:a4:06:d6:21:7c:a5:48:93:
66:37:86:ed
-1597284844 | 2024-05-06T14:34:07.39898880 / tcp
HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://service.afam.com/webshop/ Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Mon, 06 May 2024 14:34:05 GMT Content-Length: 156
1489525118 | 2024-05-06T14:34:16.603556443 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Mon, 06 May 2024 14:34:14 GMT Connection: close Content-Length: 315
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d9:87:1f:c8:7c:ab:58:8e:0a:22:2c:e7:51:4f:55:5e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Apr 2 13:58:20 2024 GMT
Not After : Jul 1 13:58:19 2024 GMT
Subject: CN=service.afam.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:c6:e8:97:47:6d:a4:af:0e:b6:7f:aa:dd:bd:93:
af:16:64:fa:f7:5f:b8:6e:a2:5b:2e:96:bd:14:6a:
62:7f:1f:64:ed:fd:63:bb:d1:95:cd:c2:87:4d:1f:
c6:79:89:50:e3:fd:81:b3:26:6c:d9:e1:db:48:96:
dd:04:54:7a:c2:c6:1e:79:6e:0e:c5:52:a9:b8:77:
c1:35:29:62:c7:ef:cf:c9:61:5e:44:a3:c5:23:f8:
33:59:d9:05:02:9c:37:1a:20:73:06:72:65:15:6c:
3e:26:39:18:96:0e:1a:be:0b:e4:79:8e:5d:df:59:
6b:c1:d1:a8:9d:3c:8d:e6:c5:50:57:0c:6a:b6:33:
99:92:de:6b:2f:6e:34:da:01:dd:6f:91:79:ff:c5:
ae:e0:07:a3:72:69:28:45:e9:90:4d:96:90:27:ea:
32:dc:64:cb:f0:b7:2f:4d:b1:66:c1:6f:6b:fa:d2:
cf:0a:2d:86:79:d7:f4:f0:98:71:48:74:09:d7:ba:
9d:69:52:55:18:4a:2f:03:4e:f3:84:b9:8b:32:53:
05:b7:fb:a7:10:17:57:e8:75:8d:fc:4a:7c:34:92:
a1:ed:27:aa:73:0d:91:e5:79:25:9a:49:b5:97:f2:
63:16:dc:70:4f:2e:b5:22:5a:94:4a:c1:1a:58:ec:
06:0f:29:81:0a:20:92:5a:32:98:31:2d:ec:06:1e:
7b:53:55:0c:2e:02:7b:cb:fc:18:19:ac:b9:68:8a:
ae:d5:ac:1e:37:42:a4:3d:f4:95:df:aa:ec:ab:09:
20:cd:55:57:f6:bc:53:c6:b8:c8:d8:7c:38:2f:fe:
14:cf:36:c0:73:7c:29:cb:92:c9:0f:36:28:a1:00:
71:c6:fc:27:14:ea:1d:25:94:07:a9:c2:6a:e6:95:
5a:6b:e7:5f:40:dc:e1:d6:97:95:9a:9a:6f:19:a2:
b2:7e:79:0c:96:0c:74:fa:86:ce:67:8d:b4:49:5e:
68:a2:44:ff:e0:90:34:01:9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
0A:AE:67:68:BA:BC:B7:17:91:76:58:9C:5E:47:85:C9:B2:0C:52:8E
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:service.afam.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Apr 2 14:58:20.451 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:0D:36:46:DD:9D:F8:82:9F:B7:BD:F9:50:
FF:AD:96:97:55:0D:49:DA:1C:BA:B7:8E:60:F5:D0:C1:
E5:EF:B5:D7:02:20:2A:E8:C3:74:AA:74:74:EC:32:12:
FB:9E:B6:75:8C:BA:52:E6:93:73:11:E0:DE:01:D9:E9:
50:6D:FA:8F:D9:89
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
Timestamp : Apr 2 14:58:20.637 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:6A:3E:84:41:3E:45:8B:80:54:6A:CD:F0:
F4:65:DF:80:CA:0F:52:A0:6A:6A:BB:0D:FE:E3:3A:9A:
8F:1D:63:9C:02:21:00:9F:B0:EE:C4:D7:A2:3D:70:FB:
54:A5:9F:9E:71:50:73:8B:68:C5:D2:C6:CA:92:69:93:
DD:1C:C3:08:5A:16:11
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
71:40:4d:19:de:fe:f3:02:70:5b:af:f8:df:94:ca:5e:f6:be:
c3:61:c2:f9:d3:70:d0:08:55:f8:81:84:59:a3:10:dc:99:8e:
d0:d7:18:34:32:a9:19:f6:71:c3:71:7d:2f:b6:72:f1:1a:96:
f1:a6:db:83:e1:47:dc:67:a8:a0:76:c3:4c:44:81:8c:1a:ec:
5e:6b:d0:f4:75:18:24:be:5c:56:04:3c:61:b4:aa:6c:62:b3:
60:2e:2c:d4:61:e9:16:89:e1:1e:61:01:4c:e8:a9:e0:1f:e4:
10:b6:40:73:af:16:0b:c3:49:f8:4f:1a:89:bb:9e:c1:ad:16:
af:1f:33:79:b1:ba:62:a0:e2:aa:fe:dd:bc:f1:2b:65:1b:a0:
25:db:14:1a:1a:0f:2c:dd:40:4b:49:55:b4:d4:1c:d7:28:34:
fd:c3:89:f5:7e:be:8d:1e:b7:0e:2d:7a:15:c0:fb:83:fc:8c:
55:50:db:49:eb:cb:a9:35:4d:ed:85:4d:6d:fb:1e:fa:54:b9:
1a:6e:a2:da:34:4a:b1:da:8d:07:38:ea:00:21:7b:3b:e2:8f:
33:90:a0:fc:6b:62:e6:4d:33:da:78:89:e4:86:d5:cf:43:f3:
c4:0a:f4:e7:95:3d:33:ca:01:9e:a7:62:81:20:b3:94:cd:fc:
91:12:b5:6d