GeneralInformation

Hostnames	puzzel.org 136-144-248-41.colo.transip.net
Domains	puzzel.org transip.net
Country	Netherlands
City	Venray
Organization	TRANSIP 136 144 192 0
ISP	Signet B.V.
ASN	AS20857

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 3000

1909574894 | 2024-05-26T20:58:56.262853

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCckMZmqV2brp6kp9uyyB5Ty5rFK+4jGA87peKcUe6QhRS/
K75Gse1XRLSoGDIMoAyU0rELaIyT9RHKVB4arX8aujw5JkmkqQ3gNhjKLJom66VqjFOJrq/+hul3
+R2r3Q4U3GIqTaPT+vG+8XFojE+vqqxIPsATtCL7NU7HItiHZsdD2HbrFFS0sjK0sLWkD6vnXAab
Wk5opyjkentPFPvXJTdftb7yeU6DO/HhoHJHi1Cl7BTPO/sb/ZffUYNRzScFuJj18MNde/FrUymi
hvk5w0H7mnYVZtrTAlaHF/Ub2k7rEzazSmDRdns431b982+VRHtFAqzBkonM8UJ410cvpVsn+bE5
SqpJmYfK7hc7fKtI21WwVGD1pK4yrsnkK/OvEpnBjw6KOmCeImE+wPf/UxyYfrQZUx5pFCQLfi6f
pwk8wGNzmbSDtbVevOmv9QhPnAw4OVPvKV5zRI8bNRr3gyoE1vapGU4nc4+jHw8KisP1Aw49Wnns
aiNiT7zQ0ac=
Fingerprint: 9b:7a:a7:98:ac:76:77:cf:43:ae:a6:fb:15:7e:8b:f2

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

589765266 | 2024-05-23T12:00:40.043072

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 23 May 2024 12:00:39 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://puzzel.org/

1174138375 | 2024-05-23T12:00:50.678998

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 23 May 2024 12:00:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 99090
Connection: keep-alive
Strict-Transport-Security: max-age=63072000
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
X-Frame-Options: deny
x-nextjs-cache: HIT
X-Powered-By: Next.js
Cache-Control: s-maxage=31536000, stale-while-revalidate
ETag: "rcva6l2fe624fl"
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:11:9d:50:32:66:79:bf:62:9e:a3:62:a7:f8:b2:65:c0:73
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: May 19 16:17:42 2024 GMT
            Not After : Aug 17 16:17:41 2024 GMT
        Subject: CN=puzzel.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:73:0d:8e:fa:f2:04:ce:e9:a0:05:b2:b3:
                    d7:f8:02:b3:70:de:de:a9:41:f2:09:b0:42:f0:09:
                    d4:a7:42:d2:4d:97:09:5b:29:68:0e:3f:38:0c:d2:
                    04:9a:5c:e3:16:6a:34:a0:1f:62:1b:de:4d:2c:66:
                    b8:9c:8f:e8:a3:de:c6:7c:b0:8a:f7:c2:26:a3:da:
                    5d:93:38:a9:20:ca:2b:13:5f:d3:c9:82:1a:95:26:
                    fb:08:08:2d:1e:2f:51:e7:94:d2:60:8f:89:a8:da:
                    af:6c:74:4b:56:4e:00:d8:06:2c:c7:72:5e:41:b8:
                    6d:94:59:fb:e1:e9:ef:83:33:c3:a0:62:99:d7:76:
                    bf:4a:cd:70:e0:44:4b:fa:56:42:1a:6c:15:5e:bd:
                    c0:6a:61:2d:36:36:b9:a3:d6:2b:61:fb:ff:74:c8:
                    e2:4f:01:ce:86:c0:53:ff:e9:1a:81:fa:b9:0a:28:
                    ce:55:38:8b:a2:5b:fe:9a:fe:e7:b7:92:72:cb:a4:
                    25:0d:4e:fe:0e:93:39:e3:3a:3b:c0:8a:84:9e:6e:
                    02:f9:08:6e:dc:2e:e1:d5:a1:75:8b:a1:dc:a0:97:
                    18:11:6c:5d:0d:d9:67:75:fd:b9:9c:88:fe:2c:d2:
                    dd:3f:8b:94:0e:6f:dc:04:06:62:aa:32:e7:2c:56:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                1E:26:59:20:7E:00:28:E2:1C:F4:38:6E:F5:4A:FA:BF:98:DF:6B:3A
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:puzzel.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : May 19 17:17:42.393 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0E:8A:2B:EE:24:ED:72:5D:D5:DE:6A:30:
                                CF:A4:2A:51:7B:DC:75:1C:86:0D:08:73:E3:83:13:0A:
                                27:72:D0:DD:02:21:00:86:4F:B8:2A:67:3B:BD:D0:FC:
                                EC:31:FC:90:54:6F:D4:C9:90:71:99:94:75:3D:7A:BC:
                                1F:7A:94:D4:CA:18:FC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : May 19 17:17:44.507 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:8D:F7:C4:46:0F:E6:2A:4D:C9:FD:E6:
                                07:A7:E1:E2:DF:35:4E:46:57:01:C6:3E:6D:86:5B:F8:
                                C1:11:99:6B:F1:02:21:00:F9:28:5A:85:FD:82:E2:58:
                                40:63:6F:0A:B9:9F:23:44:F9:EE:C5:C3:74:2B:8C:92:
                                C6:8F:DA:07:AD:2E:7F:E8
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        93:1a:53:86:fb:27:14:de:96:c2:60:6d:4c:ea:48:a8:7d:55:
        99:df:68:cc:45:98:17:ce:a4:4e:f7:56:48:96:28:14:ff:8d:
        85:b1:18:fe:7c:1e:a3:ee:9b:95:22:44:10:f8:b7:6d:86:78:
        f3:30:30:35:d2:f1:7c:31:38:7e:72:c8:a5:28:69:2c:21:cc:
        a9:5f:e5:de:d8:90:0f:18:d4:82:bb:ed:26:52:af:07:ad:39:
        b3:bc:c0:18:63:35:17:df:ee:a5:ad:32:64:ad:57:a2:b0:0f:
        8c:b0:3e:c1:30:df:de:aa:17:c2:1d:44:28:97:12:8d:0f:c2:
        b5:c2:5e:67:a7:b6:81:c1:2f:a9:3b:ab:fa:1c:3f:39:a4:e1:
        92:87:5b:bc:3d:63:af:85:57:58:44:ae:04:6a:f1:17:59:19:
        17:9b:e8:86:57:41:64:a7:31:f2:ef:fb:d6:dd:ae:e1:e6:b9:
        de:e6:58:87:78:1b:b7:c9:2a:72:d3:d2:e8:3a:98:03:3f:30:
        f0:70:e1:84:b8:6d:4e:0c:80:20:e6:e7:e4:9b:9e:44:b4:77:
        ab:23:aa:aa:38:43:9e:aa:2e:4c:f7:a9:ff:e0:b0:9c:57:47:
        39:8b:2f:cd:74:83:92:72:85:b6:d0:15:dc:78:0b:92:46:31:
        7f:f7:86:51

1174138375 | 2024-05-25T08:51:30.780530

3000 / tcp

HTTP/1.1 200 OK
Strict-Transport-Security: max-age=63072000
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
X-Frame-Options: deny
x-nextjs-cache: HIT
X-Powered-By: Next.js
Cache-Control: s-maxage=31536000, stale-while-revalidate
ETag: "rcva6l2fe624fl"
Content-Type: text/html; charset=utf-8
Content-Length: 99090
Vary: Accept-Encoding
Date: Sat, 25 May 2024 08:51:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5

136.144.248.41

Last Seen: 2024-05-26

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1909574894 | 2024-05-26T20:58:56.262853
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

589765266 | 2024-05-23T12:00:40.043072
80 / tcp

nginx1.18.0

1174138375 | 2024-05-23T12:00:50.678998
443 / tcp

nginx1.18.0

1174138375 | 2024-05-25T08:51:30.780530
3000 / tcp

Products

Pricing

Contact Us

136.144.248.41

Last Seen: 2024-05-26

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1909574894 | 2024-05-26T20:58:56.262853 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

589765266 | 2024-05-23T12:00:40.043072 80 / tcp

nginx1.18.0

1174138375 | 2024-05-23T12:00:50.678998 443 / tcp

nginx1.18.0

1174138375 | 2024-05-25T08:51:30.780530 3000 / tcp

Products

Pricing

Contact Us

1909574894 | 2024-05-26T20:58:56.262853
22 / tcp

589765266 | 2024-05-23T12:00:40.043072
80 / tcp

1174138375 | 2024-05-23T12:00:50.678998
443 / tcp

1174138375 | 2024-05-25T08:51:30.780530
3000 / tcp