GeneralInformation

Hostnames	diypayroll.io www.diypayroll.io
Domains	diypayroll.io
Cloud Provider	DigitalOcean
Cloud Region	us-nj
Country	United States
City	North Bergen
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 123 443 4369 5672 6881 7777

-1796889670 | 2024-05-14T19:05:17.368480

22 / tcp

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEqgS8i6L8phsAhRJ9Ze+f7m
vzTNeGFwSOp1czcx/xCTrN7l4zyZ95MHJ3GfTAd20VCCCJLmIW7de9upGkunsqc=
Fingerprint: 81:40:1d:12:cc:66:2a:9b:7c:52:3e:a2:af:c3:ef:c6

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

677579724 | 2024-05-14T07:39:43.682294

80 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 14 May 2024 07:39:43 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

-1938035256 | 2024-05-10T04:41:46.250597

123 / udp

NTP
protocolversion: 3
stratum: 2
leap: 0
precision: -24
rootdelay: 0.036865234375
rootdisp: 0.02978515625
refid: 1163513699
reftime: 3924304082.96
poll: 3

-1766916965 | 2024-05-09T19:47:42.417795

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 09 May 2024 19:47:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 975
Connection: keep-alive
Content-Disposition: inline; filename=index.html
Last-Modified: Wed, 10 Apr 2024 08:32:42 GMT
Cache-Control: no-cache
ETag: "1712737962.0-975-2025787583"
Access-Control-Allow-Origin: *

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:01:ac:12:e0:21:46:df:72:c4:e8:e1:91:ec:ae:8f:e8:ee
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: May  3 20:35:51 2024 GMT
            Not After : Aug  1 20:35:50 2024 GMT
        Subject: CN=diypayroll.io
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:9c:e6:de:42:1d:e0:4a:2f:cc:7c:d5:c3:
                    a6:68:ae:fb:38:b4:d6:f5:aa:ea:65:6e:e0:2a:0e:
                    d8:3f:bc:4b:a1:a8:78:78:28:72:24:95:2c:78:e7:
                    73:70:81:e6:5f:97:44:6a:74:3b:a5:b0:9f:ae:ba:
                    21:c2:7d:c0:74:0c:63:fb:24:e7:6c:3e:ea:dc:98:
                    66:00:a3:4c:51:a2:40:bc:2e:1c:37:05:4c:d9:cc:
                    2e:89:54:fe:e4:1f:2a:7f:67:fa:cb:f9:52:64:b7:
                    fa:4a:21:39:88:f6:35:f2:08:f2:48:b1:36:7b:67:
                    39:3e:ff:82:7d:71:50:bf:fa:c7:fa:ac:54:bd:4f:
                    31:9a:ee:fa:4d:92:6a:b7:8b:bc:a6:12:c2:c8:d0:
                    82:f9:dd:a5:64:0f:b1:34:cd:1b:d7:94:d9:0c:da:
                    e3:70:a9:04:57:cb:0c:2a:d2:06:7a:e5:90:6d:2c:
                    5f:aa:0a:7f:09:4b:25:58:2c:26:19:ca:eb:3e:2f:
                    f1:cd:18:a9:00:21:7f:e5:c6:f2:f0:ab:33:1a:b1:
                    87:14:2b:25:7f:af:b4:e9:0c:76:9a:9c:7c:17:8d:
                    eb:02:c4:fa:5a:23:1c:48:e1:62:34:5a:99:8a:12:
                    3f:a9:20:23:e0:7c:e8:6e:d8:21:79:4b:6d:1c:cb:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                31:90:4E:B4:81:59:C7:32:BA:18:35:00:E4:E6:28:AE:11:5B:0F:1F
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:diypayroll.io, DNS:www.diypayroll.io
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : May  3 21:35:51.466 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:64:07:69:C5:AE:EA:93:5D:0B:DB:D9:76:
                                84:C8:68:ED:EB:31:06:4D:B8:12:CE:2C:57:09:A5:42:
                                81:69:D9:5A:02:20:6D:BD:2C:09:EA:00:BD:A5:97:36:
                                DD:99:F0:4B:F8:EF:D5:4C:EE:25:79:30:F1:4E:5E:74:
                                12:DE:3A:57:AE:67
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : May  3 21:35:51.264 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5A:18:D1:E3:0E:71:73:F0:EB:BC:16:C0:
                                28:93:C5:90:3B:FD:29:E8:CD:27:92:48:55:78:B2:41:
                                2F:E6:44:F2:02:21:00:E3:E8:97:CB:DC:DA:94:90:CD:
                                95:8D:A4:4D:1A:AA:91:EB:41:43:30:D0:2C:EC:3B:04:
                                CF:75:F0:FF:88:58:ED
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9a:f1:67:f3:e6:b6:22:8f:f5:49:f1:67:4a:52:c4:12:00:69:
        f8:da:77:52:6a:58:e3:83:65:c8:e9:d6:ac:2a:0c:a7:f0:80:
        46:38:db:65:4a:db:50:a8:48:cf:66:51:92:44:f4:32:aa:7a:
        0c:80:b8:60:80:e7:91:97:bb:e6:3f:ca:7b:f3:a5:2c:b7:3f:
        1e:aa:b8:b7:cc:31:1b:0c:27:ce:36:a2:12:54:5f:44:9b:cb:
        48:01:0c:e5:b1:6e:9a:2e:4d:d6:a5:86:67:db:12:85:4f:5a:
        11:0a:e2:63:3f:16:55:a5:d7:c3:88:f4:56:f8:e5:a9:32:40:
        d6:90:b2:b7:08:09:30:eb:df:00:04:a4:81:c8:a8:b9:14:99:
        0f:67:33:ee:48:31:c0:e2:24:3c:6e:5f:48:31:77:87:80:10:
        a4:cf:57:fa:ad:e8:90:64:2b:40:56:7a:f7:d9:e3:c6:5e:f2:
        84:b7:51:b3:ba:cd:9b:a1:bb:b6:5d:f2:d9:fe:ed:64:a6:b3:
        bc:6f:b7:cf:c9:9f:78:f5:ac:55:43:7c:0b:ab:32:8d:d2:d7:
        c2:2e:ea:3e:a8:ca:99:02:c0:79:ed:7a:d7:ac:6c:66:07:35:
        9e:22:7a:81:a8:51:0f:a0:91:cb:03:d4:78:fc:b9:d7:ea:e9:
        28:84:2b:1c

50704379 | 2024-04-17T10:38:21.880061

4369 / tcp

Erlang Port Mapper Daemon:
  nodes:
    rabbit: 25672

-824427496 | 2024-05-11T10:40:55.877713

5672 / tcp

AMQP:
  Protocol Version: 0-9
  Product: RabbitMQ
  Product Version: 3.13.0
  Platform: Erlang/OTP 26.2.3
  Capabilities:
    Exchange Exchange Bindings: True
    Connection.blocked: True
    Authentication Failure Close: True
    Direct Reply To: True
    Basic.nack: True
    Per Consumer Qos: True
    Consumer Priorities: True
    Consumer Cancel Notify: True
    Publisher Confirms: True

1004493879 | 2024-05-02T08:12:56.630219

6881 / udp

DHT Nodes
56.56.56.56	14392
56.56.87.3	20084
22.249.243.250	5190
195.238.171.37	16968
101.117.56.56	14392
56.56.56.56	22275
78.116.22.249	62458
20.70.195.238	43813
66.72.101.117	14392
56.56.56.56	14392
87.3.78.116	5881
243.250.20.70	50158
171.37.66.72	25973
56.56.56.56	14392
56.56.87.3	20084
22.249.243.250	5190
195.238.171.37	16968
101.117.56.56	14392
56.56.56.56	22275
78.116.22.249	62458
20.70.195.238	43813
66.72.101.117	14392
56.56.56.56	14392
87.3.78.116	5881
243.250.20.70	50158
171.37.66.72	25973
56.56.56.56	14392
56.56.87.3	20084
22.249.243.250	5190
195.238.171.37	16968
101.117.56.56	14392
56.56.56.56	22275
78.116.22.249	62458
20.70.195.238	43813

-1931165411 | 2024-05-14T04:18:10.265681

7777 / tcp

HTTP/1.1 200 OK
Server: Werkzeug/3.0.3 Python/3.10.12
Date: Tue, 14 May 2024 04:18:10 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 340
Connection: close

143.198.169.179

Last Seen: 2024-05-14

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1796889670 | 2024-05-14T19:05:17.368480
22 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.6

677579724 | 2024-05-14T07:39:43.682294
80 / tcp

nginx1.18.0

-1938035256 | 2024-05-10T04:41:46.250597
123 / udp

-1766916965 | 2024-05-09T19:47:42.417795
443 / tcp

nginx1.18.0

50704379 | 2024-04-17T10:38:21.880061
4369 / tcp

Erlang Port Mapper Daemon

-824427496 | 2024-05-11T10:40:55.877713
5672 / tcp

RabbitMQ3.13.0

1004493879 | 2024-05-02T08:12:56.630219
6881 / udp

-1931165411 | 2024-05-14T04:18:10.265681
7777 / tcp

Products

Pricing

Contact Us

143.198.169.179

Last Seen: 2024-05-14

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1796889670 | 2024-05-14T19:05:17.368480 22 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.6

677579724 | 2024-05-14T07:39:43.682294 80 / tcp

nginx1.18.0

-1938035256 | 2024-05-10T04:41:46.250597 123 / udp

-1766916965 | 2024-05-09T19:47:42.417795 443 / tcp

nginx1.18.0

50704379 | 2024-04-17T10:38:21.880061 4369 / tcp

Erlang Port Mapper Daemon

-824427496 | 2024-05-11T10:40:55.877713 5672 / tcp

RabbitMQ3.13.0

1004493879 | 2024-05-02T08:12:56.630219 6881 / udp

-1931165411 | 2024-05-14T04:18:10.265681 7777 / tcp

Products

Pricing

Contact Us

-1796889670 | 2024-05-14T19:05:17.368480
22 / tcp

677579724 | 2024-05-14T07:39:43.682294
80 / tcp

-1938035256 | 2024-05-10T04:41:46.250597
123 / udp

-1766916965 | 2024-05-09T19:47:42.417795
443 / tcp

50704379 | 2024-04-17T10:38:21.880061
4369 / tcp

-824427496 | 2024-05-11T10:40:55.877713
5672 / tcp

1004493879 | 2024-05-02T08:12:56.630219
6881 / udp

-1931165411 | 2024-05-14T04:18:10.265681
7777 / tcp