GeneralInformation

Hostnames	100letmetropole.cz www.100letmetropole.cz cst2-26-218.cust.vodafone.cz
Domains	100letmetropole.cz vodafone.cz
Country	Czechia
City	Lahovice
Organization	Vodafone Czech Republic a.s.
ISP	Vodafone Czech Republic a.s.
ASN	AS16019

WebTechnologies

Analytics

Blogs

CMS

Databases

Font scripts

Form builders

JavaScript libraries

Page builders

Programming languages

PHP

WordPress plugins

WordPress themes

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2019-0190	5.0A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts.
CVE-2009-3767	4.3libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVE-2009-3766	6.8mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2009-3765	6.8mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVE-2009-1390	6.8Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack.

OpenPorts

21 80 443

-1665012402 | 2024-05-17T22:39:56.288897

21 / tcp

220 server
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
 CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
 EPRT    EPSV    ALLO*   RNFR    RNTO    DELE    MDTM    RMD     
 XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
 NOOP    FEAT    OPTS    AUTH*   CCC*    CONF*   ENC*    MIC*    
 PBSZ*   PROT*   TYPE    STRU    MODE    RETR    STOR    STOU    
 APPE    REST    ABOR    USER    PASS    ACCT*   REIN*   LIST    
 NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@localhost
211-Features:
 MDTM
 TVFS
 MFMT
 SIZE
 LANG ja-JP;en-US;fr-FR;ko-KR;es-ES;zh-TW;it-IT;zh-CN;bg-BG;ru-RU
 MFF modify;UNIX.group;UNIX.mode;
 REST STREAM
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*;
 UTF8
 EPRT
 EPSV
211 End

1400438843 | 2024-05-17T19:18:52.925507

80 / tcp

HTTP/1.1 403 Forbidden
Date: Fri, 17 May 2024 19:18:52 GMT
Server: Apache/2.4.59 (centos) OpenSSL/3.0.13 PHP/7.4.32 Phusion_Passenger/4.0.53
Last-Modified: Tue, 27 Jul 2021 06:29:32 GMT
ETag: "b82-5c814fe208b00"
Accept-Ranges: bytes
Content-Length: 2946
Content-Type: text/html

936129060 | 2024-05-20T12:36:14.690284

443 / tcp

HTTP/1.1 200 OK
Date: Mon, 20 May 2024 12:36:13 GMT
Server: Apache/2.4.59 (centos) OpenSSL/3.0.13 PHP/7.4.32 Phusion_Passenger/4.0.53
X-Powered-By: PHP/7.4.32
Link: <https://100letmetropole.cz/index.php/wp-json/>; rel="https://api.w.org/", <https://100letmetropole.cz/index.php/wp-json/wp/v2/pages/558>; rel="alternate"; type="application/json", <https://100letmetropole.cz/>; rel=shortlink
Upgrade: h2,h2c
Connection: Upgrade
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b9:58:99:4e:f9:c7:f6:85:25:1a:82:fb:06:cb:a4:9d:a2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: May 19 21:00:13 2024 GMT
            Not After : Aug 17 21:00:12 2024 GMT
        Subject: CN=100letmetropole.cz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:f0:5f:49:fd:6d:65:e7:e9:e7:b7:fe:9c:
                    6f:c9:05:9c:b6:15:c8:90:97:47:f5:56:b3:0c:5e:
                    b4:cd:f4:12:36:62:d2:e6:a0:ed:53:b2:01:68:39:
                    0d:30:be:4e:38:40:db:f3:24:15:fb:03:33:ad:5f:
                    f3:80:2c:3b:80:64:8e:d8:6d:f4:e2:29:ee:01:6e:
                    67:2b:82:f8:1d:9d:a5:71:29:c9:36:ca:72:94:89:
                    25:6b:f9:82:bd:ce:67:91:2e:e1:74:21:f5:4d:b9:
                    e2:41:bf:87:fd:9b:ae:76:75:30:10:f5:ca:75:14:
                    59:f2:08:d5:bd:4c:32:4c:9d:4e:e7:57:61:54:67:
                    99:c3:ac:99:aa:8d:6b:75:1b:96:39:db:16:5c:80:
                    6e:ea:01:31:c8:43:b2:51:3e:9e:a4:68:e7:14:05:
                    3f:02:fd:30:51:ec:5d:ef:91:df:5c:95:34:51:db:
                    e3:1a:99:4b:a4:8a:e9:4a:32:95:14:a7:a7:87:01:
                    5d:90:9c:1b:21:38:80:cd:5f:f6:12:97:82:47:9b:
                    19:cc:0d:6a:0b:10:2b:0f:a5:48:f6:1c:42:59:a2:
                    49:d2:d7:10:23:89:fe:41:fb:6a:8d:57:dc:b8:5a:
                    9d:08:a4:03:ea:5d:c5:ac:af:a5:94:32:9f:31:ba:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                1C:39:4B:8C:29:40:D6:FF:FC:04:32:DA:9C:DF:B3:07:DA:42:94:E9
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:100letmetropole.cz, DNS:www.100letmetropole.cz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : May 19 22:00:13.398 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E1:3A:A5:F9:B1:07:3E:AA:F4:05:97:
                                FD:44:61:AE:79:DB:6B:DD:38:58:94:09:4A:ED:76:61:
                                07:3A:8D:A2:33:02:20:46:E2:64:B7:82:19:DB:56:97:
                                0D:51:54:4E:5C:9D:80:A3:8F:1E:83:F9:69:69:90:C1:
                                E8:E9:F4:56:AA:A9:2A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:98:10:71:09:F0:D6:52:2E:30:80:D2:9E:3F:64:BB:
                                83:6E:28:CC:F9:0F:52:8E:EE:DF:CE:4A:3F:16:B4:CA
                    Timestamp : May 19 22:00:13.557 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3B:B0:93:EB:AA:C4:7F:B7:8C:EF:99:9D:
                                C8:4D:BA:59:1D:61:21:2D:EB:38:15:80:5C:D4:6D:19:
                                1E:72:5E:6F:02:20:3E:F4:23:12:0A:01:DC:3A:D5:4C:
                                06:AE:A4:CA:6F:F1:95:38:A3:D0:BA:B9:88:22:3A:B3:
                                D6:2F:15:F3:7A:83
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        63:27:8f:e2:82:9f:da:4c:48:52:47:e2:c3:a9:3e:a4:14:08:
        e0:39:cf:8b:ba:70:e6:1a:5f:c7:6c:96:b9:0e:2d:7f:1e:0a:
        15:ee:34:4a:90:9d:22:ab:87:f5:8f:8c:9a:4b:49:78:44:a1:
        f5:d0:9b:50:04:08:07:2d:5d:53:82:0c:8b:60:1f:8b:c1:81:
        f1:b6:a6:c6:72:17:0f:e7:0a:2b:b8:20:31:77:10:ab:1b:f6:
        e6:9a:05:cd:87:9c:2a:d7:9b:94:65:4a:24:43:1d:42:88:30:
        ca:4b:86:0c:ce:da:70:16:4f:dd:12:50:a2:c2:1f:76:fd:24:
        bb:94:80:57:89:5b:5f:83:96:56:37:7e:ad:fc:4f:e1:bd:f7:
        5d:5f:56:74:c8:99:c4:93:f1:fd:ca:60:2c:c5:5c:ee:ca:01:
        82:ab:9c:b2:12:c6:22:14:a8:1f:7b:a7:e6:d6:4c:7d:f6:00:
        38:32:67:e3:b7:c9:37:1c:dc:83:fa:39:c2:03:7e:dc:a7:ba:
        00:aa:88:63:31:7b:7c:2a:98:af:e6:a0:39:d3:af:de:1b:26:
        33:c4:33:ff:dc:69:a0:db:72:c8:a9:8d:dd:5a:ff:e9:4b:b9:
        25:f6:83:7b:e3:cf:f8:81:ad:f0:c2:20:39:99:55:7f:3c:2e:
        bb:26:ee:a0

31.30.26.218

Last Seen: 2024-05-20

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1665012402 | 2024-05-17T22:39:56.288897
21 / tcp

1400438843 | 2024-05-17T19:18:52.925507
80 / tcp

Apache httpd2.4.59

936129060 | 2024-05-20T12:36:14.690284
443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

31.30.26.218

Last Seen: 2024-05-20

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1665012402 | 2024-05-17T22:39:56.288897 21 / tcp

1400438843 | 2024-05-17T19:18:52.925507 80 / tcp

Apache httpd2.4.59

936129060 | 2024-05-20T12:36:14.690284 443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

-1665012402 | 2024-05-17T22:39:56.288897
21 / tcp

1400438843 | 2024-05-17T19:18:52.925507
80 / tcp

936129060 | 2024-05-20T12:36:14.690284
443 / tcp