GeneralInformation

Hostnames	partspoint.ru admin.partspoint.ru www.partspoint.ru
Domains	partspoint.ru
Country	Russian Federation
City	Moscow
Organization	JSC IOT
ISP	JSC IOT
ASN	AS29182

WebTechnologies

Programming languages

Ruby

Web frameworks

Ruby on Rails

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 5432 8181

505394290 | 2024-04-25T20:51:26.157564

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCwBAqmHN6iB2a5E4z2kKghtb4oKV0jKb9R5sO4TM1RvjbJ
6EmD7vP3MAe7TKwvjh3ZjUgtZ4ZNQja/Z2Aeb4EcVX0oWuoy/OsIVg2l29cwM9bRnQZbNgTqkXeY
1riFHXmVY2ogKGsCvcUpQmB7g9atKQsWhIGvEVcnPGcVVzut9fEdRuP6NMyNmO6Z6nTRKq9ibCH3
HUQGUfdn7xeZyzLyg/dAiNrmo/Wncx6gWes8VX+cWCSHWdOKkmTm9FQ90J3a2UxegbQrOoSyFPM4
8QXSG9yam0n++QILw+FS1AEj1RP68cQyt27GD/DyH2r6HPhKzS9GXFUx/RU+5qdICBZyHpyB3X3z
LH015Pr07+jd418jPlYbJ94fbMQW37WuYh2r5XzY4XSQK6bU6a+vTnocHISNZG14H9g6hh/n4ppA
N0xhoJ5HIbFoGV+SJ1q++t/jhtGYzpg91hRGv0SmPWp7mIGFsYfhhhtV8jLD9b+8JgufS5JPNOgL
W2+J7FP/BBc=
Fingerprint: 19:59:3e:c8:27:b2:72:65:32:0e:32:fd:86:25:2c:b4

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

1794148310 | 2024-04-28T17:03:07.963090

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.19.9
Date: Sun, 28 Apr 2024 17:03:07 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
ETag: W/"48eadcd4d039d4cc164baa443bde5c4b"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: user_id=addb579d-0631-5720-0304-7292b19d7e8f; path=/; expires=Wed, 28 Apr 2027 17:03:07 GMT
Set-Cookie: _session_id=c83126a44ea64ace910b65984516ac8a; path=/; HttpOnly
X-Request-Id: 04d1c9f8-ea6d-496c-ba6c-eded993f5748
X-Runtime: 0.032224

1890604590 | 2024-04-30T21:22:17.654878

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.19.9
Date: Tue, 30 Apr 2024 21:22:17 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
ETag: W/"6a53d3343da3cbeca3f6c88d637887d9"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: user_id=7aa346e2-41c1-a937-2660-0bfd40df5b5b; path=/; expires=Fri, 30 Apr 2027 21:22:17 GMT
Set-Cookie: _session_id=50353a1b94245d4a5e929dbfb496ff7a; path=/; HttpOnly
X-Request-Id: a8de7197-0575-4bf6-8a41-6bd3c48531e2
X-Runtime: 0.022225
Strict-Transport-Security: max-age=604800

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ca:30:55:b3:e6:55:bf:06:ed:9d:57:dd:1b:ea:5a:bc:78
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  6 05:43:57 2024 GMT
            Not After : Jul  5 05:43:56 2024 GMT
        Subject: CN=partspoint.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:01:85:0f:13:5d:8f:da:7a:5f:8a:47:8a:
                    b0:c4:99:cd:78:76:f2:32:b9:e2:6d:eb:d3:c8:2a:
                    87:41:cb:fc:e6:ea:58:a0:10:c9:db:01:bf:c8:87:
                    83:8b:1e:76:bc:eb:81:d0:9f:63:e3:fe:45:84:22:
                    41:96:f2:63:73:3b:c2:73:5a:e2:94:1b:ac:81:f9:
                    23:ee:3a:ab:78:1a:4c:91:d5:f0:61:e5:40:5c:44:
                    4d:40:7e:a9:66:86:29:e3:44:ec:a1:c7:ab:58:b9:
                    78:1e:6c:b0:a6:24:87:f7:b8:52:fe:80:40:59:3b:
                    0a:ed:15:28:b1:d8:09:a9:39:55:46:66:52:15:f1:
                    80:e4:3b:b7:0b:35:4e:af:0c:33:fb:10:49:e6:38:
                    4f:3f:d4:8a:dc:a7:d1:4e:c5:34:8d:86:6b:1a:01:
                    a7:ab:e9:8a:1f:33:e0:d8:6d:11:7e:b4:bd:ba:d9:
                    68:cc:73:f2:33:05:b5:5b:cc:d6:aa:81:f4:91:01:
                    7d:82:8c:dd:d3:46:44:a9:a6:53:3a:75:31:ad:10:
                    72:bc:6d:84:37:16:39:e7:30:f5:3b:d8:d1:93:f5:
                    52:c3:07:56:6d:04:21:12:96:f3:8c:9c:fe:b4:86:
                    38:85:ec:dd:64:08:f8:68:e6:40:27:d7:bd:aa:f6:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                51:9E:A2:E3:FC:03:EF:7F:F8:7D:25:94:BE:FC:A5:AD:B3:41:7C:CB
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:admin.partspoint.ru, DNS:partspoint.ru, DNS:www.partspoint.ru
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr  6 06:43:57.620 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E5:2A:0B:FB:6B:AD:AC:2D:73:06:AB:
                                77:65:94:9E:B1:66:F0:44:78:18:FC:CD:A3:8C:94:B8:
                                69:54:46:E8:BC:02:20:5E:0D:88:C9:11:6F:8F:1A:33:
                                02:1C:5C:EE:C9:2A:B5:AB:0E:47:6D:49:03:63:61:D9:
                                E9:94:99:85:78:47:B4
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Apr  6 06:43:57.636 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:85:FA:7D:E7:2B:EA:82:16:48:30:BA:
                                71:1B:E3:73:EA:5A:A4:53:C6:4F:7C:05:CB:DF:DC:A2:
                                64:20:9F:C4:FC:02:20:0F:F6:C0:DD:AA:76:5C:3B:C8:
                                20:97:E4:74:2B:1B:EC:04:C3:1A:52:78:77:B1:AC:29:
                                E3:78:FA:F8:97:12:BF
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        60:92:9b:8e:88:af:85:de:13:ee:9e:91:14:32:2c:eb:5e:ef:
        f2:c5:0f:10:02:34:36:d9:07:83:60:bd:83:70:b1:3f:88:cf:
        ce:f1:51:81:bd:23:14:d4:6c:4a:d3:8f:dd:c1:95:5e:63:77:
        91:7d:21:78:2c:37:5d:21:0b:67:c7:dd:cc:f8:4d:74:13:d8:
        8c:bf:61:51:30:87:e2:d9:73:03:46:c2:b6:fb:a4:ab:93:ba:
        6b:77:0f:8b:f6:2d:36:23:e0:8a:ca:6c:01:b4:79:c1:17:d8:
        8f:eb:60:92:36:77:f7:ab:43:e7:c3:7e:ef:71:c1:95:93:0b:
        31:af:84:89:5b:75:d2:57:18:32:05:1c:f6:12:dc:3f:20:d5:
        b5:b0:9a:28:a4:43:0f:0d:99:dc:ab:de:56:40:2f:c8:79:33:
        5a:2a:ef:18:b1:03:41:f6:48:ed:72:20:d8:12:3a:72:da:cd:
        d9:ee:77:05:90:42:ef:95:d9:13:34:d9:f6:b4:42:14:b4:19:
        48:5f:61:ed:c6:ff:79:67:1b:51:05:24:32:d9:60:c7:1c:8d:
        50:5d:bc:54:88:1c:37:0b:9e:b5:e8:ac:09:cf:21:89:c8:89:
        97:6f:c6:bc:72:4c:49:68:49:78:05:80:ae:51:b8:5e:d8:a6:
        ed:0a:19:ca

123602867 | 2024-04-24T15:20:45.899001

5432 / tcp

PostgreSQL
FATAL:  no pg_hba.conf entry for host "224.57.11.174", user "postgres", database "template0", SSL on
FATAL:  no pg_hba.conf entry for host "224.57.11.174", user "postgres", database "template0", SSL off

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f3:03:50:4e:e6:0a:d5:9f:20:2a:e1:bd:fb:1a:2d:3c:4c:87:05
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=partspoint.ru
        Validity
            Not Before: Aug  9 08:51:45 2023 GMT
            Not After : Aug  6 08:51:45 2033 GMT
        Subject: CN=partspoint.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:e4:9f:af:be:19:52:af:2b:c2:5d:21:f2:
                    15:5e:09:3b:a7:e6:f6:cf:7c:f3:a8:61:a5:9c:7b:
                    aa:7b:b5:1d:9d:67:0b:92:35:2b:fb:f1:3f:25:17:
                    f8:ee:f9:8c:07:f0:34:15:c0:bd:76:57:42:92:f4:
                    d5:23:c5:b8:76:39:20:8a:41:a3:1b:8f:52:1f:c9:
                    d5:6d:a4:ff:12:f8:46:55:57:92:cb:1b:a2:e5:7b:
                    89:46:ef:a4:05:39:f1:da:44:7f:98:82:8a:1a:3d:
                    91:d5:e0:2d:4a:ca:1c:57:56:51:0c:20:8b:8e:c2:
                    fe:e1:90:cd:7b:62:ed:cf:d4:c9:16:9e:13:80:82:
                    80:bf:b8:41:a2:ca:d6:a3:ea:df:fc:60:57:6b:1a:
                    bf:ac:20:6c:eb:89:bc:ab:a3:7e:4c:87:9a:4f:27:
                    f0:9d:86:f9:9f:23:66:b3:f7:c9:53:9d:ee:16:e4:
                    c1:8e:e2:0f:c4:e2:9e:9c:3a:1a:34:b9:94:95:41:
                    10:3a:80:7d:8a:32:5d:29:2c:53:ef:6a:8b:4f:e5:
                    c3:38:23:c1:ce:81:4a:f7:38:06:28:cf:32:56:9d:
                    f1:a4:1b:65:4b:57:47:d8:ac:c3:91:60:f1:b3:1f:
                    90:3c:15:97:32:69:32:9e:01:47:b2:6c:a4:48:f9:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:partspoint.ru
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        44:50:29:79:60:7b:76:24:8e:26:92:f3:67:e7:6b:41:e3:77:
        7c:a6:28:ab:6b:d1:05:2a:a6:c3:d2:25:1b:88:c3:d0:c5:4b:
        37:67:94:f8:fe:cb:b5:95:be:1f:a4:c5:6a:24:1a:3a:c0:ee:
        93:7b:1d:38:82:91:66:86:63:0d:9c:76:79:04:ac:1a:dd:a3:
        41:61:c1:72:59:9d:2e:78:a1:49:35:6a:e4:38:93:60:95:f1:
        ee:71:a4:64:3a:eb:89:d0:87:f8:43:7a:e0:b3:ca:14:81:4e:
        bf:4c:9f:44:8f:45:e3:5e:95:97:10:7a:ab:f7:db:a3:d5:e3:
        ec:44:d6:6a:64:d5:81:22:bf:13:8a:95:86:7b:98:d9:15:60:
        21:e1:1f:00:66:ab:0e:f7:ce:a7:e1:6f:08:d0:64:54:32:06:
        01:b2:10:73:2f:dd:d1:39:c4:a2:bf:6a:4c:70:3c:85:07:99:
        7d:1e:03:93:af:18:76:2b:b4:66:c4:39:d9:2e:ad:60:ad:ac:
        9f:72:c4:df:79:2f:21:51:aa:ec:8f:fc:0b:ac:b2:ee:9e:ed:
        1e:11:ec:e2:5f:fb:99:27:80:e8:08:47:16:18:e3:ee:dc:15:
        44:4b:e6:b1:db:9d:4c:b0:55:e7:db:97:6e:67:d9:76:5c:36:
        58:9d:c3:da

88486095 | 2024-04-27T13:17:44.370452

8181 / tcp

HTTP/1.0 401 Unauthorized
Date: Sat, 27 Apr 2024 13:17:44 GMT
Server: monit 5.26.0
Content-Length: 361
Connection: close
Content-Type: text/html
WWW-Authenticate: Basic realm="monit"

<html><head><title>401 Unauthorized</title></head><body bgcolor=#FFFFFF><h2>Unauthorized</h2>You are not authorized to access monit. Either you supplied the wrong credentials (e.g. bad password), or your browser doesn't understand how to supply the credentials required<hr><a href='http://mmonit.com/monit/'><font size=-1>monit 5.26.0</font></a></body></html>

92.63.193.89

Last Seen: 2024-04-30

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

505394290 | 2024-04-25T20:51:26.157564
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1794148310 | 2024-04-28T17:03:07.963090
80 / tcp

nginx1.19.9

1890604590 | 2024-04-30T21:22:17.654878
443 / tcp

nginx1.19.9

123602867 | 2024-04-24T15:20:45.899001
5432 / tcp

PostgreSQL12.14 - 12.18

88486095 | 2024-04-27T13:17:44.370452
8181 / tcp

monit httpd5.26.0

Products

Pricing

Contact Us

92.63.193.89

Last Seen: 2024-04-30

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

505394290 | 2024-04-25T20:51:26.157564 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1794148310 | 2024-04-28T17:03:07.963090 80 / tcp

nginx1.19.9

1890604590 | 2024-04-30T21:22:17.654878 443 / tcp

nginx1.19.9

123602867 | 2024-04-24T15:20:45.899001 5432 / tcp

PostgreSQL12.14 - 12.18

88486095 | 2024-04-27T13:17:44.370452 8181 / tcp

monit httpd5.26.0

Products

Pricing

Contact Us

505394290 | 2024-04-25T20:51:26.157564
22 / tcp

1794148310 | 2024-04-28T17:03:07.963090
80 / tcp

1890604590 | 2024-04-30T21:22:17.654878
443 / tcp

123602867 | 2024-04-24T15:20:45.899001
5432 / tcp

88486095 | 2024-04-27T13:17:44.370452
8181 / tcp