GeneralInformation

Hostnames	game-by.ru
Domains	game-by.ru
Country	Russian Federation
City	Saint Petersburg
Organization	TimeWeb Ltd.
ISP	TimeWeb Ltd.
ASN	AS9123

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-51766

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

OpenPorts

21 25 80 443 465 3306 7777 8888

615287567 | 2024-04-18T22:22:32.849917

21 / tcp

220 ProFTPD Server (Debian) [::ffff:94.228.117.228]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
 CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
 EPRT    EPSV    ALLO    RNFR    RNTO    DELE    MDTM    RMD     
 XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
 NOOP    FEAT    OPTS    HOST    CLNT    AUTH*   CCC*    CONF*   
 ENC*    MIC*    PBSZ*   PROT*   TYPE    STRU    MODE    RETR    
 STOR    STOU    APPE    REST    ABOR    RANG    USER    PASS    
 ACCT*   REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@0.0.0.0
211-Features:
 CLNT
 CSID
 EPRT
 EPSV
 HOST
 LANG en-US.UTF-8*;en-US
 MDTM
 MFF modify;UNIX.group;UNIX.mode;
 MFMT
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
 RANG STREAM
 REST STREAM
 SITE COPY
 SITE MKDIR
 SITE RMDIR
 SITE SYMLINK
 SITE UTIME
 SIZE
 TVFS
 UTF8
211 End

1742318718 | 2024-04-01T21:30:34.397817

25 / tcp

220 game-by.ru ESMTP Exim 4.96 Tue, 02 Apr 2024 00:30:19 +0300
250-game-by.ru Hello odb31ynrdduj.net [224.188.44.237]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250-CHUNKING
250-STARTTLS
250-SMTPUTF8
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=EE, ST=Tallinn, L=Tallinn, O=CompanyName, OU=User, CN=etc
        Validity
            Not Before: Feb 22 17:37:41 2024 GMT
            Not After : Feb 21 17:37:41 2025 GMT
        Subject: C=EE, ST=Tallinn, L=Tallinn, O=CompanyName, OU=User, CN=etc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:a2:b7:83:c9:aa:5c:be:ee:ed:64:d0:60:
                    7a:8e:1f:91:96:d2:1b:ca:ab:23:fb:dc:03:04:c6:
                    67:2a:da:c7:dc:e3:d4:6a:56:0e:f6:b2:5b:c4:a9:
                    10:d8:76:8e:37:61:54:68:47:69:de:d5:bc:13:84:
                    ae:dc:bc:15:b8:14:c9:82:52:ff:49:89:78:61:2b:
                    fe:24:a8:e9:74:a1:b3:ce:be:90:c6:e7:b6:78:cf:
                    1c:74:3a:f8:9b:12:93:aa:8e:ed:a8:b3:a1:7b:22:
                    9e:8e:76:7c:b7:fb:57:b2:b2:71:45:80:8d:22:0f:
                    c8:58:d6:57:0b:24:e6:b6:a0:95:09:b2:5d:a5:04:
                    90:f4:13:19:b4:2b:c8:a5:b1:4a:83:c9:fb:3d:bb:
                    6a:79:a7:7b:b0:91:17:a2:b1:a8:d2:7a:48:73:42:
                    06:40:ec:0f:3e:c7:fb:f6:8a:18:6a:d1:45:69:3b:
                    9a:06:88:6a:e6:21:66:46:0e:da:8b:90:05:1e:ca:
                    2f:09:8c:ad:4d:6d:a8:ec:bb:ac:68:26:bc:ab:3b:
                    db:82:67:a3:12:0b:74:57:3a:6b:04:cc:eb:a0:01:
                    79:7c:cd:16:42:07:23:c7:37:c8:6c:a0:57:cd:a3:
                    d2:41:6a:25:ff:2d:4e:e6:ad:37:a5:dd:68:75:5a:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        82:f7:3c:93:71:ed:89:57:d6:9a:22:eb:4b:41:77:0e:3b:d5:
        62:77:89:a5:fd:54:7e:84:c8:01:65:8f:0e:5b:d2:4e:4e:9a:
        7c:43:4e:bb:45:d2:d1:9c:bd:24:59:00:ac:0c:33:68:82:a7:
        b5:5c:87:22:48:e5:77:8a:96:7f:4d:83:79:f0:df:b8:fd:cb:
        60:ae:9a:7f:fb:82:3f:9e:66:b5:5b:23:88:6b:1f:d3:fd:3d:
        c2:c7:1c:2e:f2:55:e7:02:f3:19:d0:57:e9:d2:55:a6:b4:07:
        95:79:31:c8:08:0f:c8:5d:59:47:00:8f:a9:07:cc:b7:6e:22:
        fd:f9:28:a7:ec:2c:95:9a:57:10:f9:be:50:db:ec:98:f0:26:
        ac:cb:96:25:9e:26:f9:18:49:34:66:fc:5e:50:f2:14:da:99:
        7c:3a:05:44:bb:e5:fb:ed:58:2b:5b:cc:9b:23:44:5c:84:ce:
        f4:0b:50:ff:6c:da:6b:2e:1b:fe:89:49:1c:af:33:de:4c:f9:
        23:4e:3c:e3:6f:b5:f1:26:78:d3:aa:3c:43:51:71:3e:cf:18:
        e0:e3:f8:4a:90:a8:e0:fe:1f:c6:8e:6f:3b:a4:1d:a7:1a:49:
        63:03:9b:4b:8b:c0:8b:c6:a0:ee:88:dd:94:9f:72:05:f1:a3:
        1c:f7:79:64

813302503 | 2024-04-20T08:30:50.063305

80 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 20 Apr 2024 08:30:49 GMT
Content-Type: text/html
Content-Length: 17821
Last-Modified: Thu, 14 Dec 2023 02:22:09 GMT
Connection: keep-alive
ETag: "657a66d1-459d"
Accept-Ranges: bytes

813302503 | 2024-04-15T16:32:35.982348

443 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 15 Apr 2024 16:32:35 GMT
Content-Type: text/html
Content-Length: 17821
Last-Modified: Thu, 14 Dec 2023 02:22:09 GMT
Connection: keep-alive
ETag: "657a66d1-459d"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=, ST=, L=, O=FASTPANEL, OU=, CN=parking
        Validity
            Not Before: Feb 22 17:37:19 2024 GMT
            Not After : Feb 21 17:37:19 2025 GMT
        Subject: C=, ST=, L=, O=FASTPANEL, OU=, CN=parking
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f9:ef:93:22:18:7c:8d:35:8a:32:4c:2c:be:de:
                    9f:ae:42:80:bb:00:38:39:9a:29:79:9a:d1:5a:8c:
                    80:14:af:56:cb:3e:cf:b9:40:fe:8b:19:76:57:c2:
                    ff:3a:b0:96:c4:37:22:2e:89:b6:a2:14:6d:92:ee:
                    ae:80:15:fa:df:cb:85:62:2c:17:8a:66:95:e5:c9:
                    83:2c:af:57:4a:1b:db:94:d5:ff:5e:9f:03:af:59:
                    41:72:3f:f7:b2:e1:ea:34:61:49:88:cd:ee:b1:e6:
                    6e:c9:9d:70:a4:a6:e9:7e:c2:47:89:ec:77:68:ff:
                    2a:6e:2d:9b:13:58:28:da:4b:0b:47:bd:54:e2:8f:
                    5c:93:0e:54:69:57:dc:3e:ff:58:9d:c5:de:17:a2:
                    8d:0d:3b:2b:e4:d0:df:23:cd:c8:e6:39:a1:cd:fb:
                    d8:58:96:31:1e:3c:83:36:33:30:7e:17:24:2b:23:
                    a8:f8:4d:40:35:26:cc:7e:ab:d2:ba:00:ce:f7:0e:
                    e0:aa:20:e7:62:00:54:3f:c5:5e:8e:e6:b7:36:77:
                    72:da:42:aa:97:8d:f9:88:05:9b:49:cc:e0:b7:0a:
                    0d:89:d7:92:f1:65:19:d1:b8:de:7f:0a:fa:64:29:
                    82:54:97:07:ae:5e:d4:ad:b5:e4:28:a4:3c:01:4e:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0c:ba:63:ef:61:d5:dc:53:b2:49:b2:46:7e:88:22:33:be:34:
        98:f2:38:ee:7d:ce:ce:cf:48:4d:82:84:1f:6b:94:6f:6b:1b:
        73:6c:7e:ba:42:0e:14:62:e9:97:74:d3:40:48:36:f0:be:ae:
        53:4c:ee:db:b9:08:c8:cd:16:ed:b8:3c:d8:30:ae:a9:d7:19:
        12:92:1b:60:8f:8b:be:da:40:73:db:23:ff:0c:2b:97:d2:1f:
        55:53:98:7c:84:48:6a:dd:d2:0a:a0:c1:14:ba:c5:7f:a8:9f:
        1d:84:26:36:d6:bc:84:ac:be:41:4d:3e:0a:c0:59:16:79:84:
        34:5d:e1:b1:fa:05:a5:4c:cb:21:db:09:85:c9:18:a6:28:0f:
        f5:aa:4e:70:61:63:a8:52:ff:fc:36:1a:9d:15:3e:aa:c9:64:
        ef:6c:74:71:d0:22:af:3c:94:a3:d1:b4:aa:db:ee:15:0b:16:
        46:7c:0c:21:4e:aa:9c:7b:63:9d:0b:8c:13:15:37:21:5e:8f:
        c7:b5:7e:aa:f6:9b:5e:f5:43:18:8b:4c:e2:44:22:66:b0:dc:
        ff:8d:32:48:5c:c6:39:46:9b:40:d8:2c:0f:fd:35:37:4d:a2:
        2c:d7:31:5e:a1:d0:11:c1:3a:cc:8a:01:e6:ff:a4:01:2f:64:
        b6:85:64:6b

341291672 | 2024-04-13T14:07:35.343062

465 / tcp

220 game-by.ru ESMTP Exim 4.96 Sat, 13 Apr 2024 17:07:25 +0300
250-game-by.ru Hello 224.134.142.118 [224.134.142.118]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250-CHUNKING
250-SMTPUTF8
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=EE, ST=Tallinn, L=Tallinn, O=CompanyName, OU=User, CN=etc
        Validity
            Not Before: Feb 22 17:37:41 2024 GMT
            Not After : Feb 21 17:37:41 2025 GMT
        Subject: C=EE, ST=Tallinn, L=Tallinn, O=CompanyName, OU=User, CN=etc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:a2:b7:83:c9:aa:5c:be:ee:ed:64:d0:60:
                    7a:8e:1f:91:96:d2:1b:ca:ab:23:fb:dc:03:04:c6:
                    67:2a:da:c7:dc:e3:d4:6a:56:0e:f6:b2:5b:c4:a9:
                    10:d8:76:8e:37:61:54:68:47:69:de:d5:bc:13:84:
                    ae:dc:bc:15:b8:14:c9:82:52:ff:49:89:78:61:2b:
                    fe:24:a8:e9:74:a1:b3:ce:be:90:c6:e7:b6:78:cf:
                    1c:74:3a:f8:9b:12:93:aa:8e:ed:a8:b3:a1:7b:22:
                    9e:8e:76:7c:b7:fb:57:b2:b2:71:45:80:8d:22:0f:
                    c8:58:d6:57:0b:24:e6:b6:a0:95:09:b2:5d:a5:04:
                    90:f4:13:19:b4:2b:c8:a5:b1:4a:83:c9:fb:3d:bb:
                    6a:79:a7:7b:b0:91:17:a2:b1:a8:d2:7a:48:73:42:
                    06:40:ec:0f:3e:c7:fb:f6:8a:18:6a:d1:45:69:3b:
                    9a:06:88:6a:e6:21:66:46:0e:da:8b:90:05:1e:ca:
                    2f:09:8c:ad:4d:6d:a8:ec:bb:ac:68:26:bc:ab:3b:
                    db:82:67:a3:12:0b:74:57:3a:6b:04:cc:eb:a0:01:
                    79:7c:cd:16:42:07:23:c7:37:c8:6c:a0:57:cd:a3:
                    d2:41:6a:25:ff:2d:4e:e6:ad:37:a5:dd:68:75:5a:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        82:f7:3c:93:71:ed:89:57:d6:9a:22:eb:4b:41:77:0e:3b:d5:
        62:77:89:a5:fd:54:7e:84:c8:01:65:8f:0e:5b:d2:4e:4e:9a:
        7c:43:4e:bb:45:d2:d1:9c:bd:24:59:00:ac:0c:33:68:82:a7:
        b5:5c:87:22:48:e5:77:8a:96:7f:4d:83:79:f0:df:b8:fd:cb:
        60:ae:9a:7f:fb:82:3f:9e:66:b5:5b:23:88:6b:1f:d3:fd:3d:
        c2:c7:1c:2e:f2:55:e7:02:f3:19:d0:57:e9:d2:55:a6:b4:07:
        95:79:31:c8:08:0f:c8:5d:59:47:00:8f:a9:07:cc:b7:6e:22:
        fd:f9:28:a7:ec:2c:95:9a:57:10:f9:be:50:db:ec:98:f0:26:
        ac:cb:96:25:9e:26:f9:18:49:34:66:fc:5e:50:f2:14:da:99:
        7c:3a:05:44:bb:e5:fb:ed:58:2b:5b:cc:9b:23:44:5c:84:ce:
        f4:0b:50:ff:6c:da:6b:2e:1b:fe:89:49:1c:af:33:de:4c:f9:
        23:4e:3c:e3:6f:b5:f1:26:78:d3:aa:3c:43:51:71:3e:cf:18:
        e0:e3:f8:4a:90:a8:e0:fe:1f:c6:8e:6f:3b:a4:1d:a7:1a:49:
        63:03:9b:4b:8b:c0:8b:c6:a0:ee:88:dd:94:9f:72:05:f1:a3:
        1c:f7:79:64

-1566364621 | 2024-04-11T01:16:52.401513

3306 / tcp

MariaDB:
  Protocol Version: 10
  Version: 10.11.6-MariaDB-0+deb12u1
  Capabilities: 63486
  Server Language: 33
  Server Status: 2
  Extended Server Capabilities: 33279
  Authentication Plugin: mysql_native_password

1637199859 | 2024-04-14T04:05:54.873586

7777 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 14 Apr 2024 04:05:54 GMT
Content-Type: text/html
Content-Length: 615
Last-Modified: Thu, 05 Oct 2023 11:31:00 GMT
Connection: keep-alive
ETag: "651e9e74-267"
Accept-Ranges: bytes

-23674247 | 2024-04-11T21:07:16.477640

8888 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 11 Apr 2024 21:07:16 GMT
Content-Type: text/html
Content-Length: 138
Connection: close
Location: https://94.228.117.228:8888/

94.228.117.228

Last Seen: 2024-04-20

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

615287567 | 2024-04-18T22:22:32.849917
21 / tcp

1742318718 | 2024-04-01T21:30:34.397817
25 / tcp

Exim smtpd4.96

813302503 | 2024-04-20T08:30:50.063305
80 / tcp

nginx

813302503 | 2024-04-15T16:32:35.982348
443 / tcp

nginx

341291672 | 2024-04-13T14:07:35.343062
465 / tcp

Exim smtpd4.96

-1566364621 | 2024-04-11T01:16:52.401513
3306 / tcp

MariaDB10.11.6-MariaDB-0+deb12u1

1637199859 | 2024-04-14T04:05:54.873586
7777 / tcp

nginx

-23674247 | 2024-04-11T21:07:16.477640
8888 / tcp

nginx

Products

Pricing

Contact Us

94.228.117.228

Last Seen: 2024-04-20

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

615287567 | 2024-04-18T22:22:32.849917 21 / tcp

1742318718 | 2024-04-01T21:30:34.397817 25 / tcp

Exim smtpd4.96

813302503 | 2024-04-20T08:30:50.063305 80 / tcp

nginx

813302503 | 2024-04-15T16:32:35.982348 443 / tcp

nginx

341291672 | 2024-04-13T14:07:35.343062 465 / tcp

Exim smtpd4.96

-1566364621 | 2024-04-11T01:16:52.401513 3306 / tcp

MariaDB10.11.6-MariaDB-0+deb12u1

1637199859 | 2024-04-14T04:05:54.873586 7777 / tcp

nginx

-23674247 | 2024-04-11T21:07:16.477640 8888 / tcp

nginx

Products

Pricing

Contact Us

615287567 | 2024-04-18T22:22:32.849917
21 / tcp

1742318718 | 2024-04-01T21:30:34.397817
25 / tcp

813302503 | 2024-04-20T08:30:50.063305
80 / tcp

813302503 | 2024-04-15T16:32:35.982348
443 / tcp

341291672 | 2024-04-13T14:07:35.343062
465 / tcp

-1566364621 | 2024-04-11T01:16:52.401513
3306 / tcp

1637199859 | 2024-04-14T04:05:54.873586
7777 / tcp

-23674247 | 2024-04-11T21:07:16.477640
8888 / tcp