GeneralInformation

Hostnames	aruba.it websn3s096.aruba.it
Domains	aruba.it
Country	Italy
City	Arezzo
Organization	Aruba S.p.A. - Shared Hosting Windows
ISP	Aruba S.p.A.
ASN	AS31034
Operating System	Windows

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2014-4078

5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."

OpenPorts

21 80

-370734890 | 2024-03-22T04:52:31.280238

21 / tcp

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST 
    MDTM 
    MIC *
    MKD 
    MODE 
    NLST 
    NOOP 
    OPTS 
    PASS 
    PASV 
    PBSZ 
    PORT 
    PROT 
    PWD 
    QUIT 
    REIN 
    REST 
    RETR 
    RMD 
    RNFR 
    RNTO 
    SITE 
    SIZE 
    SMNT 
    STAT 
    STOR 
    STOU 
    STRU 
    SYST 
    TYPE 
    USER 
    XCUP 
    XCWD 
    XMKD 
    XPWD 
    XRMD 
214 HELP command successful.
211-Extended features supported:
 LANG EN*
 UTF8
 AUTH TLS;TLS-C;SSL;TLS-P;
 PBSZ
 PROT C;P;
 CCC
 HOST
 SIZE
 MDTM
 REST STREAM
211 END

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d5:51:5f:2b:d9:de:46:7e:c0:8a:8d:94:ae:0e:c1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis S.p.A., CN=Actalis Organization Validated Server CA G3
        Validity
            Not Before: Jan 22 07:39:35 2024 GMT
            Not After : Jan 22 07:39:35 2025 GMT
        Subject: C=IT, ST=Bergamo, L=Ponte San Pietro, O=Aruba S.p.A., CN=aruba.it
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ef:4a:47:39:81:40:c8:33:52:25:ce:fb:1b:df:
                    4f:eb:65:49:12:b1:75:e3:03:fb:c2:fd:8b:87:e5:
                    6b:57:22:22:fe:de:e1:d4:4a:8d:d8:1b:1c:6d:e6:
                    71:52:ba:b7:11:08:f0:54:74:a4:11:10:16:6b:45:
                    4a:7f:f7:a5:71:d6:7d:f2:c1:fd:f2:da:88:9b:4c:
                    26:36:93:bc:5d:2b:76:cc:9b:46:86:c3:51:2f:88:
                    30:7a:5f:0d:8f:52:e3:c3:5a:a5:06:81:74:0a:79:
                    26:7f:2d:2e:57:fa:54:23:27:8d:5c:3c:32:29:d7:
                    ba:bc:9e:43:a1:1b:dc:71:87:d9:3b:5d:f5:0a:c2:
                    ff:a8:09:36:ed:9f:20:b1:a5:30:22:eb:3b:72:e9:
                    77:6f:c0:7b:94:bf:6c:fb:b4:fb:91:db:88:5d:de:
                    d3:b0:e4:cb:39:3b:7f:5b:01:8d:ad:c6:09:08:a6:
                    b4:a9:83:a7:1d:6b:1b:18:c6:e1:bb:1b:3b:5d:73:
                    67:ba:2f:eb:0e:e7:39:41:a6:74:1a:c1:c8:8c:3c:
                    e9:b7:c1:df:88:a1:a2:dc:b0:80:93:a4:ad:18:da:
                    8f:b1:91:ee:9e:0d:ca:6d:3c:96:52:1d:0d:5e:32:
                    75:0a:b3:4f:77:e0:6a:45:38:1d:8f:2f:10:0a:4e:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                9F:8A:B1:B5:F1:B1:DE:82:F4:27:7C:BE:88:CD:DE:A9:43:81:A3:4B
            Authority Information Access: 
                CA Issuers - URI:http://cacert.actalis.it/certs/actalis-authovg3
                OCSP - URI:http://ocsp09.actalis.it/VA/AUTHOV-G3
            X509v3 Subject Alternative Name: 
                DNS:*.aruba.it, DNS:aruba.it
            X509v3 Certificate Policies: 
                Policy: 1.3.159.1.19.1
                  CPS: https://www.actalis.it/area-download
                Policy: 2.23.140.1.2.2
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL
            X509v3 Subject Key Identifier: 
                1B:74:56:4C:05:46:B7:C1:67:2C:C4:C4:86:11:72:D0:66:38:00:4A
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Jan 22 07:49:36.256 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:1F:4D:F8:76:34:B7:B8:C4:69:BA:DF:51:
                                F7:60:7D:DB:CB:72:98:75:77:FB:92:9D:11:50:33:CE:
                                86:E5:72:8C:02:21:00:81:E4:B0:05:BB:88:47:F4:DC:
                                80:A6:E7:51:0C:1C:58:56:CE:C4:BF:EA:99:52:0D:67:
                                7F:B9:C1:72:BC:27:3C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jan 22 07:49:36.706 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:46:20:92:34:81:53:F2:73:09:16:44:2C:
                                BF:14:35:37:FC:50:99:64:40:44:BE:70:0E:0B:38:CE:
                                07:5A:67:0E:02:21:00:AB:6E:2C:74:17:CB:B8:02:97:
                                53:B0:4E:D3:80:1C:B9:53:56:69:FA:8C:5C:9D:91:BE:
                                9F:23:B1:8E:90:37:18
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jan 22 07:49:36.957 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:3F:9A:A4:5F:DE:95:6F:7B:AB:CD:2C:FF:
                                52:F5:0B:13:0A:E7:AB:F6:9E:E6:BF:FA:FD:D1:9B:11:
                                B1:50:E4:B5:02:21:00:89:FB:F5:D9:E5:74:4A:4F:A6:
                                44:E6:1B:4E:52:76:47:6D:C0:A8:8A:F5:9E:38:64:6B:
                                3F:5F:BA:8F:F5:6E:4F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a7:49:d7:a6:f9:4b:6a:7f:ae:1e:83:80:63:46:24:84:c7:59:
        c6:4f:42:b8:e2:a7:46:4a:0f:0d:cf:30:6c:69:08:0f:91:1f:
        b2:c8:ee:09:c2:cc:70:ad:37:a7:d8:f0:1e:6d:5b:12:04:76:
        96:e7:dd:94:a9:ff:74:db:72:56:68:08:c7:ac:0b:cc:43:60:
        4c:77:7e:03:23:97:22:2d:b9:67:28:9e:13:4b:e1:0b:94:4f:
        f5:ea:37:af:49:96:d3:24:46:d2:5e:17:b0:f4:0f:b7:61:cd:
        1a:c2:c2:87:dd:a2:9f:9c:d6:e3:e5:be:d9:dc:08:92:ec:f7:
        90:5d:62:b6:80:bf:9c:ae:46:f7:6b:05:77:42:7a:2c:c4:f8:
        1f:45:01:89:91:8b:95:3c:f7:5d:fd:31:f7:6f:48:f4:54:03:
        23:b5:ee:4e:f1:8b:d8:b7:c6:3c:f5:ce:6e:24:16:ff:18:d9:
        02:ae:3d:33:4b:db:2f:f5:5d:31:17:50:16:9a:f0:4f:04:b8:
        d9:f7:d9:8a:fc:fb:2d:3a:38:d1:5b:6f:6f:70:17:03:b7:7f:
        0a:35:3f:a6:b5:f2:f8:0d:fd:a6:00:f6:3c:66:ec:e1:d1:67:
        56:5b:16:bb:9e:73:36:da:11:c0:d9:47:72:3f:78:15:7e:ae:
        4b:71:32:06:d9:5a:04:4d:df:db:c6:77:ae:e2:bc:4c:85:cd:
        ff:5d:4a:1b:32:b0:67:b9:90:32:59:e4:01:bc:a4:ac:41:5a:
        6f:fe:7d:ff:e4:41:76:03:e5:23:0c:23:2e:6c:cf:07:61:10:
        6a:62:eb:71:b7:2e:a1:00:49:23:55:9a:e0:79:f4:b8:ba:6b:
        b0:ca:e1:e5:74:29:6f:f3:5d:05:4f:14:2b:ed:30:3e:c5:c7:
        26:05:9c:96:8d:5a:46:d6:55:4c:b4:c3:7c:1e:7b:b2:75:d5:
        a5:6c:bb:1d:31:6f:aa:5d:c7:7d:85:aa:bb:39:74:81:b2:3e:
        b1:28:19:88:c0:00:11:3f:a1:d9:0a:a6:07:50:84:2d:a4:ee:
        2d:09:c4:73:9d:02:ec:80:14:c7:51:2a:70:08:ff:d7:c1:00:
        1b:90:9a:a0:8c:8c:dd:a1:9f:b0:4e:99:65:12:28:46:48:b1:
        74:a6:46:39:f3:57:5a:fb:cc:54:ac:e1:c5:b0:9d:e2:91:d0:
        0f:8a:3a:d6:82:48:59:9e:3f:9f:41:11:e8:b2:c0:e8:08:89:
        fa:a4:77:01:ec:3d:81:b3:c5:56:61:11:b0:e0:26:96:dd:02:
        d9:52:e0:17:a6:40:aa:ed:96:00:4f:41:c6:8a:12:3a:fc:ce:
        c3:f9:4e:e8:19:82:ce:bd

566471786 | 2024-03-26T05:16:36.268027

80 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Fri, 23 May 2014 15:16:22 GMT
Accept-Ranges: bytes
ETag: "87c9faf49976cf1:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Aruba2-Cache: NA
X-Aruba-Cache: NA
Date: Tue, 26 Mar 2024 05:16:35 GMT
Content-Length: 53

31.11.34.106

Last Seen: 2024-03-26

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-370734890 | 2024-03-22T04:52:31.280238
21 / tcp

Microsoft ftpd

566471786 | 2024-03-26T05:16:36.268027
80 / tcp

Microsoft IIS httpd8.5

Products

Pricing

Contact Us