182.78.91.86
{
"scan_id": 1737351220,
"ip": "182.78.91.86",
"is_ipv4": true,
"is_ipv6": false,
"location": {
"network": "182.78.91.0/24",
"postal_code": "",
"coordinates": {
"latitude": "21.9974",
"longitude": "79.0011"
},
"geo_point": "21.9974, 79.0011",
"locale_code": "en",
"continent": "Asia",
"country_code": "IN",
"country_name": "India",
"city": ""
},
"location_updated_at": "2025-01-21T16:41:40Z",
"asn": {
"number": "AS9498",
"organization": "BHARTI Airtel Ltd.",
"country_code": ""
},
"asn_updated_at": "0001-01-01T00:00:00Z",
"whois": {
"network": "182.78.64.0/19",
"organization": "Bharti Airtel Limited",
"descr": "Bharti Airtel Limited,\nTransport Network Group,\n234, Okhla Phase III",
"_encoding": {
"raw": "BASE64"
}
},
"whois_updated_at": "2024-12-09T11:27:59Z",
"tags": [
{
"name": "is_anonymous_proxy",
"pretty_name": "Anonymous Proxy",
"value": false,
"last_updated_at": "2025-01-21T16:41:40Z"
},
{
"name": "is_cdn",
"pretty_name": "CDN",
"value": false,
"last_updated_at": "2025-01-21T20:25:37Z"
},
{
"name": "is_satellite_provider",
"pretty_name": "Satellite Provider",
"value": false,
"last_updated_at": "2025-01-21T16:41:40Z"
}
],
"services": [
{
"port": 22,
"protocol": "tcp",
"name": "ssh",
"version": "",
"product": "",
"extra_info": "protocol 2.0",
"tunnel": "",
"modules": {
"ssh": {
"banner": "SSH-2.0-DUtO-",
"client_to_server_ciphers": [
"[email protected]",
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"[email protected]",
"[email protected]"
],
"client_to_server_compression": [
"none",
"[email protected]"
],
"client_to_server_macs": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"hmac-sha2-256",
"hmac-sha2-512",
"hmac-sha1",
"[email protected]",
"hmac-ripemd160",
"[email protected]"
],
"host_key_algorithms": [
"ssh-rsa",
"ssh-ed25519"
],
"kex_algorithms": [
"[email protected]",
"diffie-hellman-group-exchange-sha256",
"diffie-hellman-group-exchange-sha1",
"diffie-hellman-group14-sha1"
],
"key": {
"algorithm": "ssh-rsa",
"fingerprint_sha256": "5af1913ea86a1787c7801fa158bc7b6363ccab1b6fcf4360d877bc1b645b19c3",
"raw": "AAAAB3NzaC1yc2EAAAADAQABAAAAgQC8aPxZWpDA9KaKThDXen1v6p4p/6xCkBT91xYT1i6dTcuvcU8TDjgk3aUXI8jys0rWHZ2QRpAdJ7LJyEyAyMQTT4xuYIEJkXUGmaBOoX/S9wrC66r5t56w2fzZwIUkd/0fWz1rZoVATV6n5sUIheu1wDBKSq3p1dgPXJQerSBYhQ=="
},
"server_to_client_ciphers": [
"[email protected]",
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"[email protected]",
"[email protected]"
],
"server_to_client_compression": [
"none",
"[email protected]"
],
"server_to_client_macs": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"hmac-sha2-256",
"hmac-sha2-512",
"hmac-sha1",
"[email protected]",
"hmac-ripemd160",
"[email protected]"
],
"software": "DUtO-",
"version": "2.0"
}
},
"_meta": {
"name": "",
"desc": "",
"category": ""
},
"last_updated_at": "2025-01-18T03:42:05.103Z"
},
{
"port": 23,
"protocol": "tcp",
"name": "telnet",
"version": "",
"product": "Linux telnetd",
"extra_info": "",
"tunnel": "",
"softwares": [
{
"uri": "cpe:/o:linux:linux_kernel",
"part": "o",
"vendor": "linux",
"product": "linux_kernel",
"version": "ANY",
"language": "ANY",
"edition": "ANY",
"update": "ANY"
}
],
"modules": {
"telnet": {
"banner": "\r\nMHWNN-CHN105-IN-RTR1091 login: "
}
},
"cve": [
{
"id": "CVE-1999-0431",
"score": 5,
"severity": "medium"
},
{
"id": "CVE-1999-0656",
"score": 5,
"severity": "medium"
},
{
"id": "CVE-1999-1285",
"score": 2.1,
"severity": "low"
}
],
"_meta": {
"name": "",
"desc": "",
"category": ""
},
"last_updated_at": "2025-01-16T12:45:48.589Z"
},
{
"port": 80,
"protocol": "tcp",
"name": "http",
"version": "",
"product": "",
"extra_info": "",
"tunnel": "",
"modules": {
"http": {
"body": "<!DOCTYPE html>\n<html lang=\"en\" class=\"main-app\">\n <head>\n <meta charset=\"UTF-8\">\n <meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n <meta name=\"apple-itunes-app\" content=\"app-id=1157004084, app-argument={{::host_addr}}\">\n <base href=\"/ng/\">\n <title ng-bind=\"::state.model_name + ' - ' + state.hostname\"></title>\n\n <script>\n function login_redirect() {\n 'use strict';\n var url = window.location.pathname + window.location.search + window.location.hash;\n window.location.href = '/logout?redir=' + encodeURIComponent(url);\n }\n\n /**\n * Install a global error handler which can be used to report JS errors back to the\n * FortiGate for inclusion in the httpsd debug log.\n *\n * The global error handler is loaded here because:\n * - It needs to be set prior to the other scripts loading.\n * - If it's installed in the context of another script, the error reporting only\n * applies to script errors in that script file (i.e. fweb_all.js).\n */\n window.onerror = function(message, source, lineno, colno, error) {\n 'use strict';\n if (fweb && fweb.log && fweb.log.error) {\n fweb.log.error(error);\n }\n };\n window.onunhandledrejection = function(rejectionEvent) {\n 'use strict';\n if (fweb && fweb.log && fweb.log.warn) {\n fweb.log.warn(`Unhandled promise rejection: \"${rejectionEvent.reason}\"`);\n }\n }\n </script>\n\n <!-- If we fail to load any of these scripts then redirect to the login page. Note that\n these checks alone are not sufficient as they may be cached. Similiar logic exists\n in requireJS, $http interceptor, and jQuery.ajax -->\n\n <script src=\"/dd195f29174a2468987ae5df86784c3d/ng/ng.bundle.js\" onerror=\"login_redirect()\"></script>\n </head>\n <body class=\"ng-cloak\" ng-controller=\"App\">\n <f-header haSync=\"haSync\" currentVdom=\"currentVdom\"\n ng-if=\"!guestAdmin && !structure.isViewOnly && !structure.isFullscreen\"></f-header>\n <f-guest-header ng-if=\"guestAdmin && !structure.isViewOnly && !structure.isFullscreen\"></f-guest-header>\n\n <f-disconnection-notice></f-disconnection-notice>\n <f-shortcuts-help></f-shortcuts-help>\n <f-firmware-upgrade></f-firmware-upgrade>\n <f-terminal></f-terminal>\n <f-release-overview></f-release-overview>\n <f-debugger-capture-notice></f-debugger-capture-notice>\n\n <f-navbar-view-section id=\"navbar-view-section\">\n </f-navbar-view-section>\n </body>\n</html>\n",
"body_murmur": 390931134,
"body_sha256": "139dcb3dd29b1727eb6ee73f90dcc674ec148c2f09d009411aaa94a13fdabde5",
"content_length": -1,
"headers": {
"accept_ranges": [
"bytes"
],
"cache_control": [
"no-cache"
],
"content_security_policy": [
"frame-ancestors 'self'"
],
"content_type": [
"text/html"
],
"date": [
"Wed, 22 Jan 2025 06:00:32 GMT"
],
"last_modified": [
"Thu, 29 Jul 2021 23:34:56 GMT"
],
"strict_transport_security": [
"max-age=15552000"
],
"vary": [
"Accept-encoding"
],
"x_frame_options": [
"SAMEORIGIN"
],
"x_xss_protection": [
"1; mode=block"
]
},
"protocol": "HTTP/1.1",
"redirects": [
{
"body": "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>302 Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The document has moved <a href=\"https://182.78.91.86:443/\">here</a>.</p>\n</body></html>\n",
"body_murmur": -1134078237,
"body_sha256": "32443e2cfe489f01c9b436ec289652b41283f85cddf70d2e0815bc52a6838cb4",
"content_length": 209,
"headers": {
"content_length": [
"209"
],
"content_security_policy": [
"frame-ancestors 'self'"
],
"content_type": [
"text/html; charset=iso-8859-1"
],
"date": [
"Wed, 22 Jan 2025 06:00:31 GMT"
],
"location": [
"https://182.78.91.86:443/"
],
"x_frame_options": [
"SAMEORIGIN"
],
"x_xss_protection": [
"1; mode=block"
]
},
"location": "https://182.78.91.86:443/",
"protocol": "HTTP/1.1",
"status_code": 302,
"status_line": "302 Found"
},
{
"body": "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>302 Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The document has moved <a href=\"https://182.78.91.86/ng\">here</a>.</p>\n</body></html>\n",
"body_murmur": -1900813419,
"body_sha256": "b1cee04cee86c9dcd0af2aac4fac4ee5178d6e38e19a8570ea7083661505e2d6",
"content_length": 207,
"headers": {
"content_length": [
"207"
],
"content_security_policy": [
"frame-ancestors 'self'"
],
"content_type": [
"text/html; charset=iso-8859-1"
],
"date": [
"Wed, 22 Jan 2025 06:00:32 GMT"
],
"location": [
"https://182.78.91.86/ng"
],
"strict_transport_security": [
"max-age=15552000"
],
"x_frame_options": [
"SAMEORIGIN"
],
"x_xss_protection": [
"1; mode=block"
]
},
"location": "https://182.78.91.86/ng",
"protocol": "HTTP/1.1",
"status_code": 302,
"status_line": "302 Found"
}
],
"request": {
"headers": {
"accept": [
"*/*"
],
"referer": [
"https://182.78.91.86:443/"
],
"user_agent": [
"Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)"
]
},
"method": "GET",
"url": {
"host": "182.78.91.86",
"path": "/ng",
"scheme": "https"
}
},
"status_code": 200
}
},
"url": "http://182.78.91.86/",
"_meta": {
"name": "",
"desc": "",
"category": ""
},
"last_updated_at": "2025-01-22T06:00:33.834Z"
},
{
"port": 443,
"protocol": "tcp",
"name": "https",
"version": "",
"product": "",
"extra_info": "",
"tunnel": "ssl",
"modules": {
"http": {
"body": "<!DOCTYPE html>\n<html lang=\"en\" class=\"main-app\">\n <head>\n <meta charset=\"UTF-8\">\n <meta http-equiv=\"X-UA-Compatible\" content=\"IE=8; IE=EDGE\">\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n <meta name=\"apple-itunes-app\" content=\"app-id=1157004084, app-argument={{::host_addr}}\">\n <base href=\"/ng/\">\n <title ng-bind=\"::state.model_name + ' - ' + state.hostname\"></title>\n\n <script>\n function login_redirect() {\n 'use strict';\n var url = window.location.pathname + window.location.search + window.location.hash;\n window.location.href = '/logout?redir=' + encodeURIComponent(url);\n }\n\n /**\n * Install a global error handler which can be used to report JS errors back to the\n * FortiGate for inclusion in the httpsd debug log.\n *\n * The global error handler is loaded here because:\n * - It needs to be set prior to the other scripts loading.\n * - If it's installed in the context of another script, the error reporting only\n * applies to script errors in that script file (i.e. fweb_all.js).\n */\n window.onerror = function(message, source, lineno, colno, error) {\n 'use strict';\n if (fweb && fweb.log && fweb.log.error) {\n fweb.log.error(error);\n }\n };\n window.onunhandledrejection = function(rejectionEvent) {\n 'use strict';\n if (fweb && fweb.log && fweb.log.warn) {\n fweb.log.warn(`Unhandled promise rejection: \"${rejectionEvent.reason}\"`);\n }\n }\n </script>\n\n <!-- If we fail to load any of these scripts then redirect to the login page. Note that\n these checks alone are not sufficient as they may be cached. Similiar logic exists\n in requireJS, $http interceptor, and jQuery.ajax -->\n\n <script src=\"/dd195f29174a2468987ae5df86784c3d/ng/ng.bundle.js\" onerror=\"login_redirect()\"></script>\n </head>\n <body class=\"ng-cloak\" ng-controller=\"App\">\n <f-header haSync=\"haSync\" currentVdom=\"currentVdom\"\n ng-if=\"!guestAdmin && !structure.isViewOnly && !structure.isFullscreen\"></f-header>\n <f-guest-header ng-if=\"guestAdmin && !structure.isViewOnly && !structure.isFullscreen\"></f-guest-header>\n\n <f-disconnection-notice></f-disconnection-notice>\n <f-shortcuts-help></f-shortcuts-help>\n <f-firmware-upgrade></f-firmware-upgrade>\n <f-terminal></f-terminal>\n <f-release-overview></f-release-overview>\n <f-debugger-capture-notice></f-debugger-capture-notice>\n\n <f-navbar-view-section id=\"navbar-view-section\">\n </f-navbar-view-section>\n </body>\n</html>\n",
"body_murmur": 390931134,
"body_sha256": "139dcb3dd29b1727eb6ee73f90dcc674ec148c2f09d009411aaa94a13fdabde5",
"content_length": -1,
"headers": {
"accept_ranges": [
"bytes"
],
"cache_control": [
"no-cache"
],
"content_security_policy": [
"frame-ancestors 'self'"
],
"content_type": [
"text/html"
],
"date": [
"Tue, 21 Jan 2025 21:29:35 GMT"
],
"last_modified": [
"Thu, 29 Jul 2021 23:34:56 GMT"
],
"strict_transport_security": [
"max-age=15552000"
],
"vary": [
"Accept-encoding"
],
"x_frame_options": [
"SAMEORIGIN"
],
"x_xss_protection": [
"1; mode=block"
]
},
"protocol": "HTTP/1.1",
"redirects": [
{
"body": "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>302 Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The document has moved <a href=\"https://182.78.91.86/ng\">here</a>.</p>\n</body></html>\n",
"body_murmur": -1900813419,
"body_sha256": "b1cee04cee86c9dcd0af2aac4fac4ee5178d6e38e19a8570ea7083661505e2d6",
"content_length": 207,
"headers": {
"content_length": [
"207"
],
"content_security_policy": [
"frame-ancestors 'self'"
],
"content_type": [
"text/html; charset=iso-8859-1"
],
"date": [
"Tue, 21 Jan 2025 21:29:35 GMT"
],
"location": [
"https://182.78.91.86/ng"
],
"strict_transport_security": [
"max-age=15552000"
],
"x_frame_options": [
"SAMEORIGIN"
],
"x_xss_protection": [
"1; mode=block"
]
},
"location": "https://182.78.91.86/ng",
"protocol": "HTTP/1.1",
"status_code": 302,
"status_line": "302 Found"
}
],
"request": {
"headers": {
"accept": [
"*/*"
],
"referer": [
"https://182.78.91.86"
],
"user_agent": [
"Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)"
]
},
"method": "GET",
"url": {
"host": "182.78.91.86",
"path": "/ng",
"scheme": "https"
}
},
"status_code": 200
},
"tls": {
"certificate": {
"extensions": {
"basic_constraints": {
"is_ca": true
},
"extended_key_usage": {
"any": false,
"apple_code_signing": false,
"apple_code_signing_development": false,
"apple_code_signing_third_party": false,
"apple_crypto_development_env": false,
"apple_crypto_env": false,
"apple_crypto_maintenance_env": false,
"apple_crypto_production_env": false,
"apple_crypto_qos": false,
"apple_crypto_test_env": false,
"apple_crypto_tier0_qos": false,
"apple_crypto_tier1_qos": false,
"apple_crypto_tier2_qos": false,
"apple_crypto_tier3_qos": false,
"apple_ichat_encryption": false,
"apple_ichat_signing": false,
"apple_resource_signing": false,
"apple_software_update_signing": false,
"apple_system_identity": false,
"client_auth": false,
"code_signing": false,
"dvcs": false,
"eap_over_lan": false,
"eap_over_ppp": false,
"email_protection": false,
"ipsec_end_system": false,
"ipsec_intermediate_system_usage": false,
"ipsec_tunnel": false,
"ipsec_user": false,
"microsoft_ca_exchange": false,
"microsoft_cert_trust_list_signing": false,
"microsoft_csp_signature": false,
"microsoft_document_signing": false,
"microsoft_drm": false,
"microsoft_drm_individualization": false,
"microsoft_efs_recovery": false,
"microsoft_embedded_nt_crypto": false,
"microsoft_encrypted_file_system": false,
"microsoft_enrollment_agent": false,
"microsoft_kernel_mode_code_signing": false,
"microsoft_key_recovery_21": false,
"microsoft_key_recovery_3": false,
"microsoft_license_server": false,
"microsoft_licenses": false,
"microsoft_lifetime_signing": false,
"microsoft_mobile_device_software": false,
"microsoft_nt5_crypto": false,
"microsoft_oem_whql_crypto": false,
"microsoft_qualified_subordinate": false,
"microsoft_root_list_signer": false,
"microsoft_server_gated_crypto": false,
"microsoft_sgc_serialized": false,
"microsoft_smart_display": false,
"microsoft_smartcard_logon": false,
"microsoft_system_health": false,
"microsoft_system_health_loophole": false,
"microsoft_timestamp_signing": false,
"microsoft_whql_crypto": false,
"netscape_server_gated_crypto": false,
"ocsp_signing": false,
"sbgp_cert_aa_service_auth": false,
"server_auth": true,
"time_stamping": false
}
},
"fingerprint_md5": "AB312FEE26CC7BC062CD3C3096135A75",
"fingerprint_sha1": "72ACD23A1C2892BE44BE6A9973266EA8C949839B",
"fingerprint_sha256": "79072EE4B6B15C1A1B043EC70D7D23CE217E7DBDBDE83D046AD2414A0F02FEDB",
"issuer": {
"common_name": [
"FortiGate"
],
"organization": [
"Fortinet Ltd."
]
},
"issuer_dn": "/O=Fortinet Ltd./CN=FortiGate",
"jarm": "07d0bd0fd21d21d07c42d43d0000009424803a662b126a748cf4f90707a33c",
"redacted": false,
"revocation": {
"ocsp": {
"reason": "UNKNOWN",
"revoked": false
}
},
"serial_number": "6474686451224820485",
"signature": {
"algorithm": {
"name": "SHA256-RSA",
"oid": "1.2.840.113549.1.1.11"
},
"self_signed": true,
"value": "NmEwMTg5MDYxYmFmMDA1NDJkZDQxNzI0OTUyM2Q3ZWU2ZDBjMDhmNjk5ZWVmNjljNjM5Nzk1MTlmZWU1OWY3MWViMjA3YWNjMGIzNzc3ODc1NzI0MGEwNDNlYmE5Njc2MDdkZjYxMWQxZDM0N2U0YmE4ZjE4MzBiYWJiN2I2ZmY5MWEzMTExZmEwNTcwOGQzZjYzNzM2ZWEzZWQxOTkwNjYzY2IyODQ4N2FlZjkyZDZlNzIxMTFhMDBjOTM2MzAzMjM0M2EyOWM5MTRhNTdlNDk5MDgzYmRhOWYyMzgzMjU1YzQ2MmMxYTIyZGVlNWE5YTI5NzRhMTM3ZjllZTQ0MTJmY2VlNTgwMTllZTg2MmFjMjBkNTI4OTA3MTg2Zjg4ZmQ3ZmZlZDRjYWI4MDhhZmU5MDlkMDA5NjRlZGNkNWMxNWZhYzQxMGM5NWI0OGIxNzU1ZGJiZWYzYTMxNzA4ZjJhZDg4ODQ2NjI2MzNjOWQ0ZmQyZjZjYTM3NjI1NTE1NWE3OWNmNWQyODc0MzJhMmRhZWZjNGI5M2Q0M2U5MGU4ZTExMjgyMmEwNWQzZjAzZGQ4YTVjN2EyYWIwY2VlYmZlNTY1NjlmNzI5NzFkOWJhZTg4M2ZmNzdmZGI0ZGViNDU3YTlmNzZmNGJjYTRjMjI1ZTdlNGM0NWU1NzU0Mzc="
},
"subject": {
"common_name": [
"FortiGate"
],
"organization": [
"Fortinet Ltd."
]
},
"subject_alt_name": {
"dns_names": [
"FortiGate"
],
"extended_dns_names": []
},
"subject_dn": "/O=Fortinet Ltd./CN=FortiGate",
"subject_key_info": {
"_key": "rsa",
"dh": [],
"dsa": [],
"ecdsa": [],
"fingerprint_sha256": "dc509728461068050a493ea2b38c0ec8edd36aa2fa72a2d08cb01b69be864416",
"key_algorithm": "RSA",
"rsa": {
"exponent": 65537,
"length": 2048,
"modulus": "MHhkOGM0ODFjYWM5NDMzNGQzNWNiZjU5YmUwNWU1YTM0ZWE0YmMwOTY5NTYyOGNkZDg0MWZkNjVjNGI0YjcxZjY0YzRkYmI1NjEzZDEwZmIzZDE2NzIxMTQ0NWRjNjQzOGRkZDdmNDE1YmU5MmU1YzZmYjY2MzNjN2I5MzRmMjYyYjEzODEzNzU1YTBhOTVmN2Y1MDBiZmNhOGE4MmM2NTk2M2RkM2FlMGY4Mjk0NjdjNzk4NzE0NGQ5MWFkYzU2MzVjMjk1OWJjNjAwZjg4OGZiZjNiMDc3NmU2ZWMzMTEwMmViNGNlMjM5Y2M0MTZiYThjODM3NDg0MzRkNTA0ZTdjZWZjNTYxZTI5NjAyMjg5NzI0ODQ5N2I1ZTMwY2I3MTRmMDM0MjdjOWZhMTQ5OGYxYmM5ZjFkNTg4MWI1NmFjMTllYTY0MjQ2MDkwNzAwZjFjMjZlZmY2M2QxZTM2MjE4NzBkN2VhNjAxYTYwOTI1NDlkOTc0OTUxOTY4NGE2NDJiMDIyMTUxYTlhNGFlN2I3ODM5Y2M2YWY5MjM0MDgxMmFjZGEzYzRhMzgyYmM5ZTdjYzY3NWFkNWZmYjZlOWE5NzBlYTliZGNjZWZhMjU0YmQ4MzY1NzI4ZmQ2YWFmN2VjY2E0MDFjMDU3YjZhZTc0YjRlZmU4NTIwZmY3OTcyMQ=="
}
},
"tbs_fingerprint": "5063ce20d5161b815bf8386b3e5688233b718bc543b093b7aecf86e9ea5330d2",
"validation_level": "OV",
"validity": {
"length_seconds": 71280000,
"not_after": "2026-04-13T12:51:54",
"not_before": "2024-01-09T12:51:54"
},
"version": 2
},
"fingerprint_sha256": "79072EE4B6B15C1A1B043EC70D7D23CE217E7DBDBDE83D046AD2414A0F02FEDB",
"precert": false,
"raw": "MIIC/DCCAeSgAwIBAgIIWdq1BeVKOwUwDQYJKoZIhvcNAQELBQAwLDEWMBQGA1UECgwNRm9ydGluZXQgTHRkLjESMBAGA1UEAwwJRm9ydGlHYXRlMB4XDTI0MDEwOTEyNTE1NFoXDTI2MDQxMzEyNTE1NFowLDEWMBQGA1UECgwNRm9ydGluZXQgTHRkLjESMBAGA1UEAwwJRm9ydGlHYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MSByslDNNNcv1m+BeWjTqS8CWlWKM3YQf1lxLS3H2TE27VhPRD7PRZyEURdxkON3X9BW+kuXG+2Yzx7k08mKxOBN1WgqV9/UAv8qKgsZZY9064PgpRnx5hxRNka3FY1wpWbxgD4iPvzsHdubsMRAutM4jnMQWuoyDdIQ01QTnzvxWHilgIolySEl7XjDLcU8DQnyfoUmPG8nx1YgbVqwZ6mQkYJBwDxwm7/Y9HjYhhw1+pgGmCSVJ2XSVGWhKZCsCIVGppK57eDnMavkjQIEqzaPEo4K8nnzGda1f+26alw6pvczvolS9g2Vyj9aq9+zKQBwFe2rnS07+hSD/eXIQIDAQABoyIwIDAJBgNVHRMEAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4IBAQBqAYkGG68AVC3UFySVI9fubQwI9pnu9pxjl5UZ/uWfcesgeswLN3eHVyQKBD66lnYH32EdHTR+S6jxgwurt7b/kaMRH6BXCNP2NzbqPtGZBmPLKEh675LW5yERoAyTYwMjQ6KckUpX5JkIO9qfI4MlXEYsGiLe5amil0oTf57kQS/O5YAZ7oYqwg1SiQcYb4j9f/7UyrgIr+kJ0Alk7c1cFfrEEMlbSLF1XbvvOjFwjyrYiEZiYzydT9L2yjdiVRVaec9dKHQyotrvxLk9Q+kOjhEoIqBdPwPdilx6KrDO6/5WVp9ylx2brog/93/bTetFep929LykwiXn5MReV1Q3",
"tags": [
"ov",
"trusted",
"self_signed",
"root"
]
}
},
"url": "https://182.78.91.86/",
"_meta": {
"name": "",
"desc": "",
"category": ""
},
"last_updated_at": "2025-01-21T22:27:16.543Z"
}
],
"services_hash": "2947e2116faf20c3950397e8594f6dcc7ed59145ab66043f0815d227fc47be30",
"last_updated_at": "2025-01-22T06:00:33.834Z",
"banner": [
"http",
"tls",
"ssh",
"telnet"
],
"is_vuln": true,
"cveDetails": {
"CVE-1999-0431": {
"id": "CVE-1999-0431",
"references": [
"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0431",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0431"
],
"score": 5,
"services": [
"23/telnet"
],
"severity": "medium",
"summary": "Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.",
"vector_string": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"weakness": "NVD-CWE-Other"
},
"CVE-1999-0656": {
"id": "CVE-1999-0656",
"references": [
"http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/348",
"http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/348"
],
"score": 5,
"services": [
"23/telnet"
],
"severity": "medium",
"summary": "The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.",
"vector_string": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"weakness": "CWE-16"
},
"CVE-1999-1285": {
"id": "CVE-1999-1285",
"references": [
"http://marc.info/?l=bugtraq&m=91495921611500&w=2",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/1472",
"http://marc.info/?l=bugtraq&m=91495921611500&w=2",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/1472"
],
"score": 2.1,
"services": [
"23/telnet"
],
"severity": "low",
"summary": "Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.",
"vector_string": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"weakness": "NVD-CWE-Other"
},
"CVE-1999-1442": {
"id": "CVE-1999-1442",
"references": [
"http://uwsg.iu.edu/hypermail/linux/kernel/9805.3/0855.html",
"http://www.cs.helsinki.fi/linux/linux-kernel/Year-1998/1998-25/0816.html",
"http://www.securityfocus.com/bid/105"
],
"score": 7.2,
"services": [
"23/telnet"
],
"severity": "high",
"summary": "Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence of instructions, possibly related to accessing addresses outside of segments.",
"vector_string": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"weakness": "NVD-CWE-Other"
},
"CVE-2022-3424": {
"id": "CVE-2022-3424",
"references": [
"https://bugzilla.redhat.com/show_bug.cgi?id=2132640",
"https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
"https://lore.kernel.org/all/20221019031445.901570-1-zyytlz.wz%40163.com/",
"https://security.netapp.com/advisory/ntap-20230406-0005/",
"https://www.spinics.net/lists/kernel/msg4518970.html",
"https://bugzilla.redhat.com/show_bug.cgi?id=2132640",
"https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
"https://lore.kernel.org/all/20221019031445.901570-1-zyytlz.wz%40163.com/",
"https://security.netapp.com/advisory/ntap-20230406-0005/",
"https://www.spinics.net/lists/kernel/msg4518970.html"
],
"score": 7.8,
"services": [
"23/telnet"
],
"severity": "high",
"summary": "A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"vector_string": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"weakness": "CWE-416"
},
"CVE-2022-3707": {
"id": "CVE-2022-3707",
"references": [
"https://bugzilla.redhat.com/show_bug.cgi?id=2137979",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
"https://lore.kernel.org/all/20221007013708.1946061-1-zyytlz.wz%40163.com/",
"https://bugzilla.redhat.com/show_bug.cgi?id=2137979",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
"https://lore.kernel.org/all/20221007013708.1946061-1-zyytlz.wz%40163.com/"
],
"score": 5.5,
"services": [
"23/telnet"
],
"severity": "medium",
"summary": "A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system.",
"vector_string": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"weakness": "CWE-460"
},
"CVE-2023-0030": {
"id": "CVE-2023-0030",
"references": [
"https://bugzilla.redhat.com/show_bug.cgi?id=2157270",
"https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
"https://security.netapp.com/advisory/ntap-20230413-0010/",
"https://bugzilla.redhat.com/show_bug.cgi?id=2157270",
"https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
"https://security.netapp.com/advisory/ntap-20230413-0010/"
],
"score": 7.8,
"services": [
"23/telnet"
],
"severity": "high",
"summary": "A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"vector_string": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"weakness": "CWE-416"
},
"CVE-2023-1390": {
"id": "CVE-2023-1390",
"references": [
"https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5",
"https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6",
"https://infosec.exchange/%40_mattata/109427999461122360",
"https://security.netapp.com/advisory/ntap-20230420-0001/",
"https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5",
"https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6",
"https://infosec.exchange/%40_mattata/109427999461122360",
"https://security.netapp.com/advisory/ntap-20230420-0001/"
],
"score": 7.5,
"services": [
"23/telnet"
],
"severity": "high",
"summary": "A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.",
"vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"weakness": "CWE-1050"
},
"CVE-2023-28466": {
"id": "CVE-2023-28466",
"references": [
"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
"https://security.netapp.com/advisory/ntap-20230427-0006/",
"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
"https://security.netapp.com/advisory/ntap-20230427-0006/"
],
"score": 7,
"services": [
"23/telnet"
],
"severity": "high",
"summary": "do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).",
"vector_string": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"weakness": "CWE-476"
}
}
}