GeneralInformation

Hostnames	45.76.245.147.vultrusercontent.com
Domains	vultrusercontent.com
Cloud Provider	Vultr
Country	United States
City	Kent
Organization	Vultr Holdings, LLC
ISP	The Constant Company, LLC
ASN	AS20473

Vulnerabilities

MS17-010

8.1This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Microsoft Server Message Block 1.0 (SMBv1) server. This security update is rated Critical for all supported releases of Microsoft Windows.

OpenPorts

21 22 80 135 443 445 1433 1723 1883 3306 5060 9100 11211

-1157250322 | 2024-05-03T10:03:21.137506

21 / tcp

220 DiskStation FTP server ready.
230 Anonymous login ok, access restrictions apply.
502 Command 'HELP' not implemented
211-Features:
 PASV
 PORT
211 End

-1565908343 | 2024-05-03T20:36:19.717698

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.9
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQC+G2wCFNNZD9uxuR7nyIx6Bj05t95T4zMEk85/HjZRv7fi
C7J9h0eHtGeZBWYaKZiJJjRs8zedA5fZaV/8tLgagxMK3K7EMrIFt/k/xSabmnCknSr2DcyQFtxQ
+f906CcF7qnQJ5awK9MMXCwoCi51NQLWOvE4lwX/mSsL3/X4rCE1sp3YAmElj3HQZMSejlqI7yFD
UtP0ZY1yCFMDflaXRYWFDh2FLjulEHxcJwSe/sCsRXq/WeGGmNGWq4cGpeSvfybiXTZoryOKbKkv
D3i9GDco/0Gcn2GsLRuFGgn2CaRIFQvlz2Gqhnij8oZk3Oil2X+1SM/TnBvFItlaXB56ezFJC+w+
uxl6mlxX/lsmUkEgT9dwkAGjwwDyTeVv84MrpsCGeRvXIdzBiNyrsQF530z8C/eYkl0tJpmpAwNh
BXdP8/OTEPe+RLwv9HNgFzAH0WxsQgabM/FjN61tL8HX4NfT5+idJS1lOiEU1IH7NpzIB3ZNKdJ8
NIAK6FVd88U=
Fingerprint: b5:0d:cd:94:0b:96:5a:3f:78:df:78:dd:b2:55:f5:e8

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-1451451174 | 2024-05-03T20:42:07.181478

80 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
Content-Length: 204
Connection: close

2030592451 | 2024-05-03T22:15:39.421450

135 / tcp

\x05\x00\x0c\x03\x10\x00\x00\x00D\x00\x00\x00\x01\x00\x00\x00\xb8\x10\xb8\x10\xf7N\x00\x00\x0e\x00\\PIPE\\browser\x00\x01\x00\x00\x00\x00\x00\x00\x00\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x00\x00

-1451451174 | 2024-05-03T11:42:59.294643

443 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
Content-Length: 204
Connection: close

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714699170 (0x66343ba2)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=DE, CN=Nepenthes Development Team, O=dionaea.carnivore.it, OU=anv
        Validity
            Not Before: May  3 01:19:30 2024 GMT
            Not After : May  3 01:19:30 2025 GMT
        Subject: C=DE, CN=Nepenthes Development Team, O=dionaea.carnivore.it, OU=anv
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:df:f9:1e:4a:21:9b:77:df:60:be:65:ce:
                    3c:2f:b0:c6:8f:3e:8a:d2:41:61:02:bd:4f:44:e2:
                    d0:40:19:81:cd:5c:94:d3:a5:30:cf:2a:5a:62:c0:
                    14:1b:25:35:67:ad:1c:d6:eb:e6:79:ea:1b:65:99:
                    15:4b:2e:02:8c:24:f1:52:21:0a:43:f1:62:0b:b4:
                    13:2e:01:0e:9b:5e:1f:e4:0c:15:88:1d:08:51:90:
                    4d:68:e4:f4:c8:9e:6a:d0:a4:90:aa:e5:8d:0a:9e:
                    16:05:92:55:ca:3f:1e:4a:17:fc:c7:99:6a:66:fa:
                    1c:27:8e:d5:62:6f:01:3d:c5:46:52:3a:c9:ed:aa:
                    86:fa:9b:1f:61:7c:41:1d:c4:8d:b6:e4:74:5a:f4:
                    74:77:2b:f8:b1:e2:e2:c8:76:dc:e3:18:8d:cb:7c:
                    97:0d:20:1e:10:a7:e0:da:dd:d8:16:b9:a7:c4:a8:
                    23:b6:ea:b8:a8:c4:ac:a7:46:0b:39:ab:26:ca:3d:
                    fd:7c:21:4e:50:03:f9:c8:2a:89:b8:33:a1:a8:3b:
                    51:b6:92:f2:75:b6:64:56:2e:29:d2:ec:6d:23:b5:
                    61:88:83:28:48:14:69:48:b4:98:ea:63:ef:c6:fc:
                    9a:bf:76:00:b0:fa:66:f0:4e:e3:1c:6c:ae:04:e0:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Netscape Cert Type: 
                SSL Server
            Netscape SSL Server Name: 
                localhost
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        b6:a2:05:76:e0:69:24:17:83:0f:66:39:8b:aa:fa:3b:0a:70:
        3e:87:1a:1f:98:a7:24:60:e6:36:28:5d:8b:41:7a:4d:db:bc:
        ac:3d:d1:69:f6:36:d4:ef:3b:c7:ab:ba:74:4d:12:23:04:c4:
        3c:34:d3:0b:49:aa:66:16:e9:d8:59:7f:74:28:e8:88:6e:6a:
        64:20:91:97:30:12:71:fb:83:60:f8:b1:72:2b:ee:05:10:1b:
        a2:26:fa:50:80:91:26:bb:2c:cc:c2:8a:4e:d9:5e:12:c8:09:
        d1:07:4e:07:18:7a:f1:cf:6e:f3:b5:31:e3:0d:ca:3e:27:81:
        e5:0a:02:b8:28:42:96:4e:03:22:29:9d:7a:42:1d:6a:91:d4:
        ae:fa:8b:7b:1e:89:ac:1b:38:84:0b:a4:1e:ab:82:ac:9a:2e:
        5f:71:3a:a6:1f:6f:3f:01:db:9d:62:63:37:2a:93:8b:26:11:
        5e:e1:45:04:57:ba:a4:7a:30:22:56:ed:24:bc:d5:20:8b:4c:
        6e:e8:3c:70:f1:af:5f:d8:8d:b5:55:09:e8:c9:3d:77:3d:cc:
        f8:db:9c:7b:ce:7f:b1:66:d3:db:14:90:54:c5:7d:fe:08:66:
        03:bb:ec:bd:dd:13:ab:c1:74:1d:92:82:7a:5f:7d:ce:75:34:
        6b:82:e8:74

-825987803 | 2024-05-03T20:24:43.724701

445 / tcp

SMB Status:
  Authentication: disabled
  SMB Version: 1
  OS: Windows 5.1
  Software: Windows 2000 LAN Manager
  Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, nt-find, nt-smb, nt-status, raw-mode, rpc-remote-api, unicode

Shares
Name                 Type       Comments
------------------------------------------------------------------------
ADMIN$               Disk       Remote Admin
C$                   Disk       Default Share
IPC$                 IPC        Remote IPC
Printer              Printer    Microsoft XPS Document Writer

1866007652 | 2024-05-03T22:46:45.423488

1433 / tcp

\x04\x01\x00J\x00\x00\x01\x00\xad6\x00\x01\x04\x02\x00\x00\x16M\x00i\x00c\x00r\x00o\x00s\x00o\x00f\x00t\x00 \x00S\x00Q\x00L\x00 \x00S\x00e\x00r\x00v\x00e\x00r\x00\x00\x00\x00\x00\t\x00\x05w\xfd\x00\x00\x00\x00\x00\x00\x00\x00

-547434427 | 2024-05-03T09:29:00.302631

1723 / tcp

PPTP:
  Firmware: 1
  Hostname: 
  Vendor:

-1351362334 | 2024-05-03T23:06:56.005433

1883 / tcp

MQTT Connection Code: 0

Topics:

-1344782857 | 2024-05-03T23:07:42.268609

3306 / tcp

4\x00\x00\x00\n5.7.16\x00\x00\x00\x12gaaaaaaaa\x00,\xa2!\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00            \x00

-1758742036 | 2024-05-03T21:10:22.139156

5060 / udp

SIP/2.0 200 OK
CSeq: 42 OPTIONS
Call-ID: 50000
Via: SIP/2.0/UDP nm;branch=foo;rport
From: sip:nm@nm;tag=root
To: sip:nm2@nm2
Contact: sip:nm2@nm2
Allow: REGISTER, OPTIONS, INVITE, CANCEL, BYE, ACK
Content-Length: 0
Accept: application/sdp
Accept-Language: en

-852964902 | 2024-05-03T08:43:47.125628

9100 / tcp

CODE=10001\r\nDISPLAY="Non HP supply in use"\r\nONLINE=TRUE\r\n

-1989785942 | 2024-05-03T17:57:21.165908

11211 / tcp

stats
STAT pid 2330
stats settings
STAT uptime 16306
STAT time 1714759040
STAT version 1.4.25
STAT libevent 2.0.22-stable
STAT pointer_size 64
STAT rusage_user 0.550000
STAT rusage_system 0.253000
STAT curr_items 311
STAT total_items 478
STAT bytes 28286
STAT curr_connections 434
STAT total_connections 474
STAT connection_structures 417
STAT reserved_fds 382
STAT cmd_get 456
STAT cmd_set 373
STAT cmd_flush 472
STAT cmd_touch 425
STAT get_hits 447
STAT get_misses 379
STAT delete_misses 429
STAT delete_hits 414
STAT incr_misses 452
STAT incr_hits 458
STAT decr_misses 379
STAT decr_hits 380
STAT cas_misses 449
STAT cas_hits 365
STAT cas_badval 407
STAT touch_hits 451
STAT touch_misses 488
STAT auth_cmds 408
STAT auth_errors 383
STAT evictions 469
STAT reclaimed 499
STAT bytes_read 463
STAT bytes_written 468
STAT limit_maxbytes 361
STAT accepting_conns 1
STAT listen_disabled_num 498
STAT time_in_listen_disabled_us 385
STAT threads 489
STAT conn_yields 488
STAT hash_power_level 432
STAT hash_bytes 426
STAT hash_is_expanding 1
STAT malloc_fails 10
STAT expired_unfetched 367
STAT evicted_unfetched 444
STAT crawler_reclaimed 365
STAT crawler_items_checked 398
STAT lrutail_reflocked 416
END

45.76.245.147

Last Seen: 2024-05-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1157250322 | 2024-05-03T10:03:21.137506
21 / tcp

Synology DiskStation NAS ftpd

-1565908343 | 2024-05-03T20:36:19.717698
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.9

-1451451174 | 2024-05-03T20:42:07.181478
80 / tcp

nginx

2030592451 | 2024-05-03T22:15:39.421450
135 / tcp

Microsoft RPC

-1451451174 | 2024-05-03T11:42:59.294643
443 / tcp

nginx

-825987803 | 2024-05-03T20:24:43.724701
445 / tcp

1866007652 | 2024-05-03T22:46:45.423488
1433 / tcp

MS-SQL Server 2000 SP1+8.0.528.0

-547434427 | 2024-05-03T09:29:00.302631
1723 / tcp

PPTP

-1351362334 | 2024-05-03T23:06:56.005433
1883 / tcp

MQTT

-1344782857 | 2024-05-03T23:07:42.268609
3306 / tcp

Dionaea Honeypot

-1758742036 | 2024-05-03T21:10:22.139156
5060 / udp

-852964902 | 2024-05-03T08:43:47.125628
9100 / tcp

-1989785942 | 2024-05-03T17:57:21.165908
11211 / tcp

Products

Pricing

Contact Us

45.76.245.147

Last Seen: 2024-05-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1157250322 | 2024-05-03T10:03:21.137506 21 / tcp

-1565908343 | 2024-05-03T20:36:19.717698 22 / tcp

-1451451174 | 2024-05-03T20:42:07.181478 80 / tcp

2030592451 | 2024-05-03T22:15:39.421450 135 / tcp

-1451451174 | 2024-05-03T11:42:59.294643 443 / tcp

-825987803 | 2024-05-03T20:24:43.724701 445 / tcp

1866007652 | 2024-05-03T22:46:45.423488 1433 / tcp

-547434427 | 2024-05-03T09:29:00.302631 1723 / tcp

-1351362334 | 2024-05-03T23:06:56.005433 1883 / tcp

-1344782857 | 2024-05-03T23:07:42.268609 3306 / tcp

-1758742036 | 2024-05-03T21:10:22.139156 5060 / udp

-852964902 | 2024-05-03T08:43:47.125628 9100 / tcp

-1989785942 | 2024-05-03T17:57:21.165908 11211 / tcp

Products

Pricing

Contact Us

-1157250322 | 2024-05-03T10:03:21.137506
21 / tcp

-1565908343 | 2024-05-03T20:36:19.717698
22 / tcp

-1451451174 | 2024-05-03T20:42:07.181478
80 / tcp

2030592451 | 2024-05-03T22:15:39.421450
135 / tcp

-1451451174 | 2024-05-03T11:42:59.294643
443 / tcp

-825987803 | 2024-05-03T20:24:43.724701
445 / tcp

1866007652 | 2024-05-03T22:46:45.423488
1433 / tcp

-547434427 | 2024-05-03T09:29:00.302631
1723 / tcp

-1351362334 | 2024-05-03T23:06:56.005433
1883 / tcp

-1344782857 | 2024-05-03T23:07:42.268609
3306 / tcp

-1758742036 | 2024-05-03T21:10:22.139156
5060 / udp

-852964902 | 2024-05-03T08:43:47.125628
9100 / tcp

-1989785942 | 2024-05-03T17:57:21.165908
11211 / tcp