GeneralInformation

Hostnames	fr-gra-c1-n1-static1.digitalks.fr
Domains	digitalks.fr
Country	France
City	Lille
Organization	BELHASSEN Mickael
ISP	OVH SAS
ASN	AS16276

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

21 22 80 111 443 10000

1956614001 | 2024-04-18T12:11:41.502384

21 / tcp

220 ProFTPD Server (Debian) [::ffff:137.74.79.245]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
214-CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
214-EPRT    EPSV    ALLO    RNFR    RNTO    DELE    MDTM    RMD     
214-XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
214-NOOP    FEAT    OPTS    HOST    CLNT    AUTH*   CCC*    CONF*   
214-ENC*    MIC*    PBSZ*   PROT*   TYPE    STRU    MODE    RETR    
214-STOR    STOU    APPE    REST    ABOR    RANG    USER    PASS    
214-ACCT*   REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@fr-gra-c1-n1-static1.digitalks.fr
211-Features:
211-CLNT
211-EPRT
211-EPSV
211-HOST
211-LANG ko-KR;es-ES;en-US;zh-CN;zh-TW;ru-RU;it-IT;ja-JP;fr-FR;bg-BG
211-MDTM
211-MFF modify;UNIX.group;UNIX.mode;
211-MFMT
211-MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
211-RANG STREAM
211-REST STREAM
211-SITE COPY
211-SITE MKDIR
211-SITE RMDIR
211-SITE SYMLINK
211-SITE UTIME
211-SIZE
211-TVFS
211-UTF8
211 End

1528584754 | 2024-04-20T19:54:23.449131

22 / tcp

SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u1
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDAe2Hy6ZjXeffrbed94fCgZURMICVmG0By/58OLLRjfGj6
qhbClD3h/35645+czSnX8fyu0LPXRzkCLLBC/Fmw4MCImIqmXzeJbvWWrRF9hkr5ffmyVI4xDkcq
m7nktwjP0+YMNYEDwuINmohVH0l9JPXiawIyA03yw4DeTBrn2RWBfqqdlVaEgy22smABQKxPSQEs
PKzrBbW/iSnOREJY/TgYbTsvoyG1FvzDq6b1N8mVbKjAJdu8laPv9SyqJ1mgZtZHwqYbvegcB58n
iWTSyKi4Rd5rwX0sLbI4V6dBw+u/Tkv3y0sp64lgz6HWUiM7QT7QYEyc4103UeknAI3P
Fingerprint: f7:51:a6:d2:32:4a:e5:17:7b:4b:7b:07:19:24:46:e3

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-2098053163 | 2024-04-23T07:23:48.570186

80 / tcp

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0
Date: Tue, 23 Apr 2024 07:23:48 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

-1345205424 | 2024-04-27T08:10:59.250775

111 / tcp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-1345205424 | 2024-04-16T00:35:21.941489

111 / udp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-2098053163 | 2024-04-26T20:58:15.010027

443 / tcp

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0
Date: Fri, 26 Apr 2024 20:58:14 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:39:0d:48:56:6a:24:4c:3c:f7:3e:27:03:b1:6b:dc:67:43
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 18 11:13:38 2024 GMT
            Not After : Jun 16 11:13:37 2024 GMT
        Subject: CN=fr-gra-c1-n1-static1.digitalks.fr
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:f2:61:4e:42:e4:fc:bf:e1:a4:0d:36:43:
                    13:ec:27:40:41:62:c9:7c:fd:bc:bc:97:0f:43:46:
                    b5:4e:cd:dc:6b:07:3b:b5:35:22:18:9f:c9:ba:7c:
                    e4:6e:e3:35:5c:96:ab:fd:9d:07:6f:5a:7e:09:ef:
                    4b:7b:f1:9e:b5:df:1d:1d:cb:5f:3d:49:ad:a6:82:
                    3b:f2:cc:ed:74:f2:bf:53:c6:48:c4:89:0c:a0:2f:
                    58:7b:9c:34:a7:f1:6f:73:82:97:66:58:f2:d8:42:
                    5d:b1:49:7a:03:f3:89:fd:f2:fb:24:bc:1d:f7:22:
                    de:76:22:53:da:92:02:4a:92:5c:8b:fd:6a:d0:15:
                    aa:a9:84:f5:06:b8:ce:70:96:af:33:45:f1:6a:bb:
                    ee:8e:cd:63:01:c2:6d:f6:b7:18:d9:97:62:11:c5:
                    20:e8:36:5e:1e:dd:e3:bd:ad:72:b2:ae:0b:2d:44:
                    e4:6b:1b:d6:f1:3d:39:b0:19:43:f1:76:e5:ed:ea:
                    c0:e5:4c:c5:79:65:73:9a:08:cb:27:d0:4d:29:b4:
                    ba:a3:9d:c4:10:22:8b:eb:24:ea:ed:5c:98:cc:8b:
                    f3:1c:9b:1f:e1:d5:b6:03:4f:9b:7c:27:c5:3b:9b:
                    34:34:aa:04:5e:dc:08:fc:7b:40:4d:6c:34:d7:31:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                6D:65:0E:E0:44:EF:F5:FE:A8:27:0D:CD:63:A0:6B:24:0D:03:57:57
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:fr-gra-c1-n1-static1.digitalks.fr
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Mar 18 12:13:39.339 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5D:B6:74:11:68:FD:A1:31:5F:8F:9E:5D:
                                32:BC:D5:71:A5:44:14:E2:58:33:34:AD:D4:F8:B4:2D:
                                50:D9:FE:39:02:21:00:EB:25:E9:5B:3B:DD:EA:02:9E:
                                2C:1C:E1:F9:27:3C:E3:84:02:2B:B3:C5:65:12:F0:B5:
                                86:60:37:82:2E:83:E0
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Mar 18 12:13:39.315 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3A:30:94:B4:7C:33:19:0E:5A:A1:E1:9D:
                                7C:40:3F:5E:44:0B:92:F3:1B:7D:70:DF:1A:07:D2:63:
                                ED:EA:0B:60:02:20:22:B5:F8:5C:0A:00:D6:8E:C8:66:
                                5C:B0:16:E1:94:7F:BC:07:FC:95:8C:0E:7B:6A:10:A5:
                                4A:5F:B6:51:FE:52
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        54:86:c2:16:e1:79:e4:ca:30:28:37:e7:d6:e1:71:f5:31:38:
        cd:4a:4f:d8:aa:3b:94:64:af:fc:a0:ea:08:e8:d3:7a:b9:f8:
        e5:de:bd:0a:e9:36:90:4b:c0:68:0c:8c:cc:7f:70:15:4f:1a:
        68:bb:bd:c1:23:49:5d:78:9d:e3:2e:3e:3f:2e:87:95:0a:51:
        63:9e:4b:62:61:e2:af:9e:79:d4:01:a7:c2:c9:d4:bc:8a:82:
        b4:2c:79:0e:54:db:95:a3:64:85:a2:8f:ec:12:bc:ca:ff:c4:
        13:62:b0:3a:c8:9d:61:a3:f2:ca:57:58:0a:77:d0:5b:bd:ae:
        17:5b:56:4c:17:7a:26:6c:64:b8:4b:53:90:26:5c:0a:d0:57:
        19:c8:bf:11:ba:1c:de:80:77:03:9a:64:73:95:d6:93:34:6d:
        62:f5:57:29:b6:49:08:4d:fc:17:c7:71:a4:91:c2:57:97:f4:
        09:3e:81:27:78:b9:12:16:53:e9:5a:34:12:ac:ad:52:35:6d:
        d9:0e:c1:81:62:3e:20:d9:b5:9e:2c:04:cf:5d:e2:05:30:a8:
        71:95:0a:18:5c:ff:3d:ab:57:62:70:a9:e9:ac:d1:42:c6:bb:
        c6:be:32:09:22:da:05:7c:fe:f7:2e:29:f6:f4:61:80:fc:2c:
        60:4a:43:65

1425548175 | 2024-04-26T19:29:51.207686

10000 / tcp

HTTP/1.0 200 Document follows
Date: Fri, 26 Apr 2024 19:29:50 GMT
Server: MiniServ/2.021
Connection: close
Auth-type: auth-required=1
Set-Cookie: redirect=1; path=/; secure; httpOnly
Set-Cookie: testing=1; path=/; secure; httpOnly
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self'; child-src 'self'
X-Content-Type-Options: nosniff
X-no-links: 1
Content-type: text/html; Charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d9:ae:33:a1:b3:62:79:8d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: O=Webmin Webserver on fr-gra-c1-n1-static1, CN=*/emailAddress=root@fr-gra-c1-n1-static1
        Validity
            Not Before: Mar 10 10:50:05 2017 GMT
            Not After : Mar  9 10:50:05 2022 GMT
        Subject: O=Webmin Webserver on fr-gra-c1-n1-static1, CN=*/emailAddress=root@fr-gra-c1-n1-static1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:4b:1f:4d:c0:e0:a5:2c:f7:eb:d4:f1:aa:
                    28:71:ca:ac:d1:f9:4f:f9:42:29:38:2f:47:e7:74:
                    e9:87:44:60:11:14:ad:7f:7c:de:fb:29:1a:f8:4b:
                    4f:ae:e0:02:fb:12:70:50:9b:25:77:b8:8a:2c:54:
                    82:0e:64:37:04:87:70:8c:86:f3:a1:3b:2c:23:a7:
                    53:fd:fc:ea:4d:12:1d:16:31:13:4a:52:f1:7d:c7:
                    49:b0:ff:aa:31:5a:f4:ed:7a:54:63:a5:0b:3f:8d:
                    5d:cc:e9:17:cc:a5:ea:3c:8f:0c:e9:64:c5:cf:37:
                    b4:48:cf:b4:9e:f3:d3:1a:f5:d4:7a:d7:cd:ea:e9:
                    68:bd:60:9a:3d:9a:35:0e:5f:e4:19:53:bc:77:07:
                    11:6f:98:d5:77:57:95:02:29:a5:d4:22:94:01:88:
                    b9:bc:3e:c5:de:c1:d4:87:f8:38:34:9e:ae:88:df:
                    ae:e0:13:c0:51:43:79:21:5d:58:44:6a:1c:88:31:
                    e6:62:7e:8f:0c:0e:bc:4b:b3:95:0a:84:0b:bb:67:
                    cb:7c:ae:93:fb:58:1d:29:d6:c7:64:d5:22:ff:ea:
                    21:c9:f0:69:bc:df:2a:18:46:d7:6a:4f:ba:30:6b:
                    a1:67:ed:54:90:82:64:81:b3:26:fb:06:03:be:0d:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E6:03:0F:02:EB:4F:7B:C2:54:DC:50:0F:01:5A:3A:CB:7D:4F:0B:9D
            X509v3 Authority Key Identifier: 
                E6:03:0F:02:EB:4F:7B:C2:54:DC:50:0F:01:5A:3A:CB:7D:4F:0B:9D
            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        bb:a6:be:e6:2b:b3:67:f0:29:94:7e:28:04:fd:90:cb:31:5c:
        b0:33:50:84:1e:e9:34:87:e0:38:c4:5b:5f:a8:f7:20:0c:e0:
        0d:b6:c7:3e:4b:22:94:59:fa:c9:b0:a1:a9:64:c6:a0:b1:53:
        61:8c:13:cd:b8:66:c5:86:41:b5:f0:64:57:b1:68:c2:69:2c:
        d3:d6:08:55:2a:18:8f:c1:4c:ef:6f:c7:bd:63:39:66:d5:20:
        c7:d8:de:29:10:39:88:55:e9:7b:8a:3f:fd:20:c1:e9:f5:e2:
        ba:68:32:f4:8b:17:50:f1:14:94:9b:16:30:f1:b6:6c:a0:89:
        8f:3e:c8:93:31:9b:78:3f:b6:72:93:b1:20:a7:4d:dd:4a:37:
        d8:81:c4:06:0f:74:c9:65:a0:1c:43:8e:2a:72:df:f6:c2:19:
        63:e2:dc:56:32:ba:8e:b4:6e:cd:3a:5c:12:b4:37:ae:11:9f:
        d6:88:79:cc:4a:23:11:0c:14:3b:23:b6:30:6d:35:13:72:0e:
        f0:6d:8c:9e:61:25:94:18:64:ff:c7:d4:fd:f7:48:48:89:96:
        fe:b6:d6:70:9a:7d:9b:76:7b:f2:10:c6:cb:84:e2:e6:b6:73:
        39:8e:6d:43:ac:a9:29:c1:58:02:07:81:4f:60:f1:1e:1c:73:
        2e:b2:b1:bd

137.74.79.245

Last Seen: 2024-04-27

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1956614001 | 2024-04-18T12:11:41.502384
21 / tcp

1528584754 | 2024-04-20T19:54:23.449131
22 / tcp

OpenSSH8.4p1 Debian 5+deb11u1

-2098053163 | 2024-04-23T07:23:48.570186
80 / tcp

nginx1.18.0

-1345205424 | 2024-04-27T08:10:59.250775
111 / tcp

-1345205424 | 2024-04-16T00:35:21.941489
111 / udp

-2098053163 | 2024-04-26T20:58:15.010027
443 / tcp

nginx1.18.0

1425548175 | 2024-04-26T19:29:51.207686
10000 / tcp

Webmin

Products

Pricing

Contact Us

137.74.79.245

Last Seen: 2024-04-27

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1956614001 | 2024-04-18T12:11:41.502384 21 / tcp

1528584754 | 2024-04-20T19:54:23.449131 22 / tcp

OpenSSH8.4p1 Debian 5+deb11u1

-2098053163 | 2024-04-23T07:23:48.570186 80 / tcp

nginx1.18.0

-1345205424 | 2024-04-27T08:10:59.250775 111 / tcp

-1345205424 | 2024-04-16T00:35:21.941489 111 / udp

-2098053163 | 2024-04-26T20:58:15.010027 443 / tcp

nginx1.18.0

1425548175 | 2024-04-26T19:29:51.207686 10000 / tcp

Webmin

Products

Pricing

Contact Us

1956614001 | 2024-04-18T12:11:41.502384
21 / tcp

1528584754 | 2024-04-20T19:54:23.449131
22 / tcp

-2098053163 | 2024-04-23T07:23:48.570186
80 / tcp

-1345205424 | 2024-04-27T08:10:59.250775
111 / tcp

-1345205424 | 2024-04-16T00:35:21.941489
111 / udp

-2098053163 | 2024-04-26T20:58:15.010027
443 / tcp

1425548175 | 2024-04-26T19:29:51.207686
10000 / tcp