Published on: 2015-08-17T18:54:04+00:00
The server hosting vistomail.com has been described as chaotic and insecure. Jonathan Wilkins, in a message shared on the bitcoin-dev mailing list, expressed concerns about the server's security practices. He noted that it is a Plesk box with a history of dubious security and numerous open ports. Wilkins provided an nmap scan report for vistomail.com (190.97.163.93), which revealed multiple services running on the server, including MailEnable smtpd, MSRPC, RDP, Microsoft IIS httpd 7.5, and more.Wilkins speculated that the server may have been compromised by someone who is using it for their own amusement. The scan report also indicated that the server is running on a Microsoft Windows operating system, but it is unclear whether it is a general-purpose device or a phone. The details suggest that it could be running on various versions of Windows Server, Windows Professional, Windows Phone, or Windows Vista. It is uncertain whether the open ports are a result of poor security practices or if the server is intentionally set up as a honeypot. Wilkins sent the email to inform the bitcoin-dev community about the potential insecurity of the vistomail.com server and to encourage further investigation into its security measures.In summary, the server hosting vistomail.com is facing security issues, with a Plesk box and multiple services with questionable histories. The nmap scan report highlighted numerous open ports and suggested that the server is running on a Microsoft Windows operating system. It remains unclear whether the open ports are due to negligence or if the server is intentionally set up as a honeypot. Wilkins' email aimed to raise awareness within the bitcoin-dev community and prompt further investigation.
Updated on: 2023-08-01T15:27:39.781591+00:00