GeneralInformation

Hostnames	panel.prisonmcpe.net
Domains	prisonmcpe.net
Country	United States
City	New York City
Organization	GALAXYGATE, LLC
ISP	GALAXYGATE, LLC
ASN	AS397031
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 443

-2040548917 | 2024-05-12T22:33:17.688879

22 / tcp

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQClRkyw4/RIMwMMZl2gB3ghkx0DcaC3t+VelMS/2BKG2Teu
UG/Aj/IUGkh01B7/oF/rdV1aAVzJdnDyH34CrZXGzPGE6FLfqzbTXoq8as30Nu06CkDAuiYjU5lM
t0UVQ3Gewlfqtgfe3RrUVDyM1y3nR2cafBU8nq2ZNXgrdaXq37AJnU/UbeGUyuyvLP+1lslF6Ua5
y8c9u+vBkVfRpCuihLFCeVd17q3MdvQU0qyAj/5j+oLDvDvXfl3iCtNeYn7TJIGiHph2uYQr2JgY
zVStGpn+8aeQA1/dBo7CCzd+2EkF2CXf6/USK6CJ1EhFTxPsUU/KDIh3dsYThp/xFsf/
Fingerprint: 2d:c2:17:97:95:1e:d9:2b:0a:2e:2c:d0:3e:3b:5b:84

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-1895243224 | 2024-05-06T00:38:49.417948

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Mon, 06 May 2024 00:38:49 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InJSNXVnZUdlMXhFRGZhenIzRDBOVnc9PSIsInZhbHVlIjoidnRaRVFYaUJlSlJoQ2N3TklZNm8yOWNYUFhIQ0xHYktVUytpSlAzSGlvZ3g2OEZRZSs2b1hneExTUkU5QjJJWEVRQmtOdXBzNTVYUmNFR0N4L1BHMU0vSk9BSHhMc1JUOEE3c2tBdjRRMVN3RXlySXlwT3dld1Qvb2VlK0UxUU4iLCJtYWMiOiJiYWQzNzUxOGU3OTkwNWViOGFjZjNkYzU4N2JiNDZjN2QyOWU5MWFjZGE5NmEwYjA5MjdjZWM5MjNlNjdmYjE2IiwidGFnIjoiIn0%3D; expires=Mon, 06-May-2024 12:38:49 GMT; Max-Age=43200; path=/; secure; samesite=lax
Set-Cookie: pterodactyl_session=eyJpdiI6IjdZNllUQUt0dU45dHlUdWMzYXpyNVE9PSIsInZhbHVlIjoiVHJhUjhzUDhKaDkwbVpldU1nTkxwVnBQTFN3MmNnNXVGd1RFbHQ3Sml4UHZBV1hLUFB6N251SE5SMzJYOWt4R0pISGJUN0Eyb0N6bUFpVjdKMGpSNzREOGh3MFpQYVFnOVdkU3dCUXFMQklUWE5tY0ZIaGhSOEU2dy9zVmpwQTYiLCJtYWMiOiI5NGFlMTQ0NDIwOGMzYTNkMzU5YTdjMmZlOTM0Y2JkMzI2NmRlZmEzOTY2YmZkMmRiOTQ1ODE3YTE1ZmFjZGJjIiwidGFnIjoiIn0%3D; expires=Mon, 06-May-2024 12:38:49 GMT; Max-Age=43200; path=/; secure; httponly; samesite=lax

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:68:cb:c7:3a:c8:a4:9b:d1:76:d4:04:80:69:73:c8:72:09
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr 30 19:10:22 2024 GMT
            Not After : Jul 29 19:10:21 2024 GMT
        Subject: CN=panel.prisonmcpe.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:48:60:ec:fb:82:15:ac:8b:d3:2c:fd:81:
                    d9:a7:39:47:68:77:e6:76:8c:79:c8:32:fa:41:3c:
                    a7:2c:b2:05:9a:f0:d7:cd:a4:6f:3a:e7:82:45:6a:
                    4f:f7:bd:b6:4f:f9:fe:3c:8e:c8:5b:44:69:88:24:
                    81:6a:9f:b3:e6:37:23:7a:6f:12:24:a7:c5:3d:e8:
                    44:20:d2:42:52:97:75:df:3d:48:06:da:de:9f:1c:
                    14:cc:77:99:8d:56:52:db:ff:b6:60:b7:e9:12:dc:
                    89:58:77:9a:10:25:4d:6c:82:9b:4d:c9:3b:3c:4b:
                    5c:39:6f:e9:77:14:74:8f:7c:9f:9e:18:e5:e9:d0:
                    f9:92:36:a2:14:92:55:78:35:5d:94:52:c6:28:23:
                    b0:23:70:ea:07:6a:75:c3:db:13:18:4a:86:cb:73:
                    ac:bb:4b:9d:21:95:84:2b:0e:e3:4f:3a:5a:0a:e4:
                    e9:5f:f5:ff:d9:60:d5:ad:af:f2:35:a1:5d:cf:d1:
                    8f:f7:f9:9a:a1:57:fc:98:02:0d:f3:9d:cf:e8:fc:
                    33:fc:4f:61:c1:b0:e6:64:9f:d7:ba:d9:15:b7:e9:
                    7f:2a:fa:9b:d1:36:30:f7:f9:9d:4e:4b:02:08:5c:
                    4a:12:91:48:c1:1b:0a:46:83:75:73:ab:df:bb:c9:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                0C:92:19:18:26:F5:2A:38:78:25:FE:CE:64:A9:38:B1:F1:80:C7:4D
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:panel.prisonmcpe.net
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Apr 30 20:10:22.236 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:9D:81:9C:B7:12:AE:E1:52:0B:FD:4D:
                                8A:70:84:65:00:10:BC:E9:FB:74:52:55:10:2D:E7:2A:
                                0D:17:15:DA:3C:02:20:05:EB:70:79:00:75:4D:D7:06:
                                0C:44:2E:CA:18:D6:57:8A:23:61:20:11:FB:AF:FC:BA:
                                6B:13:AB:10:02:09:3D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Apr 30 20:10:22.304 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:50:60:87:7C:3B:35:66:6F:8D:F3:51:B1:
                                0C:24:DC:17:51:31:9C:FD:1F:3B:A2:5B:83:55:67:35:
                                3B:A4:27:0D:02:20:33:C3:F2:84:D9:B3:98:65:4C:A9:
                                6C:79:3C:96:05:B5:56:00:16:97:D4:03:19:32:83:35:
                                19:C1:B4:A1:D2:A3
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        53:ec:3f:f0:bb:ad:64:14:6d:bf:87:fc:c9:d7:1f:60:af:53:
        c3:28:76:45:57:54:2c:0f:2e:f4:07:37:27:ef:4b:f1:2d:59:
        a8:03:51:f7:0e:90:a5:a7:91:3c:29:60:70:cb:57:db:b3:ad:
        91:c6:70:d6:80:33:f8:49:3a:16:a9:a0:77:96:b2:ed:92:9e:
        2d:66:55:45:56:f7:98:f7:b4:ed:17:5c:a0:64:b7:4b:12:a7:
        c1:6c:47:c4:60:f1:d8:0f:9b:f5:94:d6:84:a4:8f:3e:c0:8b:
        f0:32:17:16:b0:8b:49:40:bf:b2:df:66:bb:42:23:47:fd:98:
        66:d7:7f:4d:6c:44:e6:6f:68:c1:c5:2f:f1:64:d1:22:a2:ab:
        71:f0:4b:e7:5b:97:cc:35:90:5d:79:5d:41:65:f8:33:3e:be:
        38:20:9e:de:af:fc:7c:a7:61:3a:86:25:e0:96:6c:42:5b:1c:
        71:55:24:49:3e:52:79:59:cb:7f:5a:1b:73:b9:06:d2:86:2a:
        37:d5:cc:48:bc:e6:5c:5b:26:73:0c:b3:d7:a9:f5:88:71:d2:
        a8:58:58:8a:a0:7e:96:2b:a9:03:8a:19:7b:3d:cf:1f:3f:e7:
        c0:fc:96:31:95:b2:e6:5e:df:6c:1c:c1:26:ac:fe:28:be:37:
        5a:fb:2c:d0

144.172.67.149

Last Seen: 2024-05-12

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-2040548917 | 2024-05-12T22:33:17.688879
22 / tcp

OpenSSH8.9p1 Ubuntu-3

-1895243224 | 2024-05-06T00:38:49.417948
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

144.172.67.149

Last Seen: 2024-05-12

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-2040548917 | 2024-05-12T22:33:17.688879 22 / tcp

OpenSSH8.9p1 Ubuntu-3

-1895243224 | 2024-05-06T00:38:49.417948 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

-2040548917 | 2024-05-12T22:33:17.688879
22 / tcp

-1895243224 | 2024-05-06T00:38:49.417948
443 / tcp