GeneralInformation

Hostnames	static.173.159.203.116.clients.your-server.de new.zoodom.kiev.ua
Domains	your-server.de zoodom.kiev.ua
Country	Germany
City	Nürnberg
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 3306 6379 33060

-1118733948 | 2024-05-23T18:36:56.634926

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.1
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDPRm3lKgHpUtlKkRzVityL2a0Qg5uq4Hebt0i+Utemo/JR
sQB5hyxh8uuW9sZZrtjcoZroN7tXcmj4ZpJEU6KrOslwyBmo1drc8hmdIdNo/37ayIiqKTyy7kAG
OHASag7TdED5IgoPl3CqNcSZjZWa2RdwuRPPDM9SDa/CWpzxr77kRhV5KizZBDQU5afJv8PFTQKw
uN6WVswD6GX1xxXXo0P938uz249mF0GKAhhb0W9Pr3svwli2w+ctrq5HhvD4O8/FglxWJArjqA80
uCPRevf5uRriPkZWcZTSjX5vnUDXNwWRauMJVvLroyg3Ij/DTHUX2Iy69KhPrYAZ6ORnnvSS3ISa
fHpCqTgN93n9oDC9q3w2bc4AeEd4OBo6k2gP9LBZh+W2sVS64s1Ut58qDot7EdVhmRKOxMqwatYY
WCyG8Y3lJeo7ton3JyhN79l+P0b3tyafcxMG4nrD31NCpXPD5RMdmbBImLWLFDtK8le50BA+o/SI
AjEQv1bsyZk=
Fingerprint: 28:ab:be:da:4e:64:dd:c6:41:7f:fb:eb:fd:2b:57:e2

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

619675094 | 2024-05-24T06:19:43.375177

80 / tcp

HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 24 May 2024 06:19:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=a8tugi72nv616939828ju06lq5; expires=Mon, 27-May-2024 06:19:42 GMT; Max-Age=259200; path=/; HttpOnly

-554746519 | 2024-05-28T03:59:20.291803

443 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 28 May 2024 03:59:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4a:ea:08:71:31:a9:00:9d:d0:7f:d1:0b:ad:b3:a0:c7:d0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Jan 29 01:59:17 2021 GMT
            Not After : Apr 29 01:59:17 2021 GMT
        Subject: CN=new.zoodom.kiev.ua
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:66:8e:7f:71:8c:ee:df:af:a8:4e:8b:13:
                    28:62:85:11:17:cc:ce:2d:88:9b:d4:b7:c7:ef:47:
                    eb:c0:3c:4a:87:03:46:82:1d:0a:41:b1:1c:50:80:
                    2c:d3:16:5a:c6:39:f7:08:3d:bf:02:80:ea:07:30:
                    df:00:0d:6f:90:81:a7:64:3f:e9:8e:71:de:8f:36:
                    21:6a:25:7e:6c:e8:ab:62:97:35:c1:99:b9:b9:9b:
                    28:79:ad:db:ea:69:17:0d:60:1d:2f:83:3a:64:59:
                    75:f8:e5:a5:4a:5d:f8:f1:f7:68:06:8d:e1:8c:a5:
                    f9:4e:4a:eb:18:73:46:82:85:27:c7:4b:e2:e4:8b:
                    b5:61:c0:dd:b9:ae:42:cc:66:dd:45:01:a9:2b:d7:
                    e2:ee:99:bc:24:27:0a:ef:09:ac:8c:7f:14:65:47:
                    d4:28:c1:c6:05:da:9a:76:b7:56:e7:01:5d:1d:f2:
                    b9:8d:de:9f:f3:93:1b:16:71:0c:3f:8a:8d:b2:2f:
                    b0:fe:3e:35:16:d8:bf:6b:ae:69:e8:26:03:88:39:
                    16:5a:d2:a0:f9:9e:6d:10:ab:8a:6d:18:4e:c8:d8:
                    a6:49:86:18:12:f1:db:5f:37:9a:7d:da:11:69:1e:
                    d2:83:81:0f:58:f6:bd:c7:4c:b3:4d:c5:26:0c:db:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                F5:97:BD:21:29:71:53:07:79:15:D7:C9:B6:8C:B9:2F:F4:35:F4:17
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:new.zoodom.kiev.ua
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.letsencrypt.org
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : F6:5C:94:2F:D1:77:30:22:14:54:18:08:30:94:56:8E:
                                E3:4D:13:19:33:BF:DF:0C:2F:20:0B:CC:4E:F1:64:E3
                    Timestamp : Jan 29 02:59:17.271 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A7:87:73:1E:5A:C8:8B:18:39:1F:FD:
                                01:0F:28:AA:C9:05:CB:E1:32:F8:9F:64:3D:39:86:EC:
                                EA:48:76:7E:6A:02:20:0B:D0:DF:3A:3C:05:50:18:D8:
                                D0:6B:AA:E5:C6:B5:69:6F:C4:B5:2F:3A:10:34:F5:CA:
                                50:2C:1D:7C:4F:29:BC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77:
                                15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13
                    Timestamp : Jan 29 02:59:17.325 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:84:2F:30:98:17:1A:21:BF:16:F1:C9:
                                7F:3A:22:38:4E:54:42:F5:91:79:EC:CB:99:CB:F7:D7:
                                E4:EC:D1:04:A7:02:21:00:BA:B3:6B:43:DD:5A:26:80:
                                0D:35:58:4F:75:40:00:82:78:68:36:6A:BC:E6:E2:E9:
                                11:10:5E:7D:77:21:85:9A
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        27:be:d1:c9:f0:98:df:0e:62:30:75:d3:8c:17:0f:93:4d:86:
        cb:85:28:4c:cb:b8:d6:22:ba:73:93:ee:ba:72:9d:c3:86:3c:
        6c:42:ec:a9:a4:e7:f9:1d:b6:1c:6f:90:8a:34:b6:18:2b:95:
        40:ee:e8:33:f7:c9:8c:dd:a2:74:fb:26:07:c0:56:a3:b5:e3:
        a4:d2:17:3e:36:95:48:f8:08:8f:8f:5e:35:d9:4a:00:5a:88:
        b5:84:ed:df:67:22:b3:27:fe:c8:c2:6e:20:74:de:de:20:e0:
        5c:e3:1a:1b:b5:cf:0e:b5:34:31:30:36:ce:26:9b:a9:af:62:
        dd:2c:48:bf:e0:b8:fa:44:cf:d1:1a:76:17:c5:ab:93:91:a7:
        76:63:f6:21:44:0d:58:07:4b:fa:aa:7a:e8:af:75:0a:33:05:
        0d:a9:e3:3f:ce:46:09:60:62:e6:80:b0:85:9a:c5:16:ea:7c:
        68:dd:04:17:4c:68:a6:b6:8f:27:0b:7f:2e:5d:25:92:f7:c0:
        38:91:a6:e2:91:11:81:79:d9:cf:60:ed:15:cd:44:05:e3:6c:
        2f:47:18:05:18:38:2a:06:e1:92:1e:83:33:11:e7:96:37:d8:
        1b:8c:35:ea:31:3c:d5:d6:3b:d9:fd:d9:e1:15:86:11:7d:7c:
        1d:46:b6:8b

440697621 | 2024-05-18T20:39:49.812858

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 8.0.21-0ubuntu0.20.04.4
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 51199
  Authentication Plugin: caching_sha2_password

-77649157 | 2024-05-31T06:30:50.171895

6379 / tcp

-DENIED Redis is running in protected mode because protected mode is enabled, no bind address was specified, no authentication password is requested to clients. In this mode connections are only accepted from the loopback interface. If you want to connect from external computers to Redis you may adopt one of the following solutions: 1) Just disable protected mode sending the command 'CONFIG SET protected-mode no' from the loopback interface by connecting to Redis from the same host the server is running, however MAKE SURE Redis is not publicly accessible from internet if you do so. Use CONFIG REWRITE to make this change permanent. 2) Alternatively you can just disable the protected mode by editing the Redis configuration file, and setting the protected mode option to 'no', and then restarting the server. 3) If you started the server manually just for testing, restart it with the '--protected-mode no' option. 4) Setup a bind address or an authentication password. NOTE: You only need to do one of the above things in order for the server to start accepting connections from the outside.

-795948505 | 2024-06-05T13:20:38.392517

33060 / tcp

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

116.203.159.173

Last Seen: 2024-06-05

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1118733948 | 2024-05-23T18:36:56.634926
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.1

619675094 | 2024-05-24T06:19:43.375177
80 / tcp

nginx1.18.0

-554746519 | 2024-05-28T03:59:20.291803
443 / tcp

nginx1.18.0

440697621 | 2024-05-18T20:39:49.812858
3306 / tcp

MySQL8.0.21-0ubuntu0.20.04.4

-77649157 | 2024-05-31T06:30:50.171895
6379 / tcp

-795948505 | 2024-06-05T13:20:38.392517
33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

116.203.159.173

Last Seen: 2024-06-05

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1118733948 | 2024-05-23T18:36:56.634926 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.1

619675094 | 2024-05-24T06:19:43.375177 80 / tcp

nginx1.18.0

-554746519 | 2024-05-28T03:59:20.291803 443 / tcp

nginx1.18.0

440697621 | 2024-05-18T20:39:49.812858 3306 / tcp

MySQL8.0.21-0ubuntu0.20.04.4

-77649157 | 2024-05-31T06:30:50.171895 6379 / tcp

-795948505 | 2024-06-05T13:20:38.392517 33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

-1118733948 | 2024-05-23T18:36:56.634926
22 / tcp

619675094 | 2024-05-24T06:19:43.375177
80 / tcp

-554746519 | 2024-05-28T03:59:20.291803
443 / tcp

440697621 | 2024-05-18T20:39:49.812858
3306 / tcp

-77649157 | 2024-05-31T06:30:50.171895
6379 / tcp

-795948505 | 2024-06-05T13:20:38.392517
33060 / tcp