GeneralInformation

Hostnames	ns106448.ip-147-135-97.us slapio.com www.slapio.com
Domains	ip-147-135-97.us slapio.com
Country	United States
City	Portland
Organization	OVH US LLC
ISP	OVH SAS
ASN	AS16276
Operating System	Ubuntu

WebTechnologies

JavaScript libraries

jQuery3.5.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 3306 6001 6002 6379 33060

163726181 | 2024-05-01T14:25:13.595083

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQC8rauyMuCIfb+iSnRrlAv3nVfNUFgi8yx2DYBqbHykUSNj
kh4OvfNASsASHCB7BmB0r75GN8Z7ZMANAkc0c/6kP0IjFDK9JZMq9gON7YZOKM0bs1bHcy9NMAro
upKhqRYg12GGtg2y/pbfgwOezC1Gq9TVa0345BAJJ348pTOIjnYt7HpBrQMWa04I/Hg4kPkggMkw
/xTk480/spUCu50KK0623jlQJqlbs5MC/iJO2sXeqN8ZC72Ld9Eoja64Djj1ghlhnC0y8fIShjtQ
l0oNtD4vtNbgnLXQD1OKIe5c9FVjy6el1FvEzSi/406emhq6XCI+1aJXxGb33pOV3WXQTK9njFej
vw7uygf0ju52rElUWSWCtt1qZV5U7tIdbVM3UzpMaGVwIj4Mm8gsfM8uNbHG8zOSJtY5y71dPdsQ
neKdSEVVoSiLpeZU7xNrk+q2JVjHVwgI03D1T3keORxUIri4OUtd52AYXX7AG8e9USYM2Bq4AbcR
3bIk1tlSpnM=
Fingerprint: cd:b8:30:86:05:b1:2c:10:6a:b9:60:76:cc:7c:f2:51

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

1651973090 | 2024-05-03T07:45:42.807185

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 03 May 2024 07:45:42 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 20 Jul 2021 10:31:41 GMT
Connection: keep-alive
ETag: "60f6a60d-264"
Accept-Ranges: bytes

1309143049 | 2024-05-01T07:02:46.008685

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 01 May 2024 07:02:45 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 11968
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 12 Jun 2022 18:08:38 GMT
ETag: W/"2ec0-181591a8070"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            de:a0:e4:9e:43:0c:d3:4e:c6:0f:2a:cb:2f:c2:b5:22
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Oct  1 00:00:00 2022 GMT
            Not After : Oct  1 23:59:59 2023 GMT
        Subject: CN=slapio.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:12:bd:08:57:8c:a1:7d:ff:ac:2b:b3:99:
                    7d:10:74:c8:24:28:0e:e5:3a:65:87:ee:49:cc:b1:
                    c9:10:91:29:27:7b:05:6d:6b:4d:f5:e5:e5:87:7e:
                    1e:08:81:5d:2d:e6:96:e5:c6:cb:2b:1c:ca:9b:92:
                    b9:31:5c:f3:35:bd:55:40:e4:ff:13:ef:c5:63:bb:
                    7c:13:a9:63:0f:e2:b9:17:3c:8f:0a:58:01:33:1f:
                    84:90:21:57:0a:be:d8:1f:e7:25:19:f4:d4:38:96:
                    00:3d:da:c2:bf:df:06:75:33:21:f3:5e:f0:b7:3d:
                    81:31:04:6f:b7:ef:f1:e6:93:80:6d:10:4e:1f:4a:
                    24:c9:26:57:6b:a7:40:9f:0c:aa:35:60:bb:59:d6:
                    cf:1b:11:53:18:2d:d8:f0:13:55:8b:03:7b:ff:f3:
                    a0:f1:c1:94:d0:a2:5a:a4:be:56:84:10:63:85:86:
                    91:bd:77:99:47:a6:f0:c3:17:48:37:54:8d:56:b8:
                    c3:c5:0b:7a:f1:88:e6:01:e2:4b:14:e1:71:b3:7e:
                    25:04:dc:2d:73:d9:cb:a8:43:16:2f:75:04:40:97:
                    4e:7f:5b:c8:3e:1c:fc:2c:3c:96:c4:56:32:5e:e9:
                    76:97:f9:5f:28:74:ae:4e:8f:e9:80:3a:47:b3:39:
                    9e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                F1:86:43:EF:2C:FB:B6:BC:25:26:E1:AF:C2:CD:F6:D9:68:75:4D:D8
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:slapio.com, DNS:www.slapio.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : AD:F7:BE:FA:7C:FF:10:C8:8B:9D:3D:9C:1E:3E:18:6A:
                                B4:67:29:5D:CF:B1:0C:24:CA:85:86:34:EB:DC:82:8A
                    Timestamp : Oct  1 12:07:06.530 2022 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:23:38:27:48:63:07:19:74:92:4C:27:0E:
                                5B:77:74:AF:73:FF:02:76:93:CE:D6:B1:E0:75:55:1C:
                                AB:51:42:20:02:20:57:92:33:AA:9A:8A:9C:7F:6E:58:
                                BF:D8:F3:DE:F2:6B:A1:98:95:03:01:C0:CF:89:13:8D:
                                D2:38:A1:D7:37:DE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84:
                                16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52
                    Timestamp : Oct  1 12:07:06.550 2022 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F2:CB:7C:E8:F1:18:09:87:3C:2E:CE:
                                64:3D:6D:F2:29:BE:32:11:5B:27:C8:54:5E:19:43:0E:
                                DC:5D:02:B9:9E:02:21:00:C4:D7:B9:24:47:8F:14:CD:
                                D5:FD:81:34:80:24:BA:51:65:B1:FE:68:DC:2A:87:14:
                                31:66:57:16:07:D4:F8:7F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
                                03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
                    Timestamp : Oct  1 12:07:06.499 2022 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:32:1C:78:CE:22:51:B0:DA:19:36:E5:D2:
                                29:28:84:C1:69:02:6A:AE:E8:D0:21:1D:43:79:98:24:
                                4D:49:9A:67:02:21:00:F6:4B:64:94:7F:4A:16:F3:15:
                                28:7E:C9:48:5E:AE:DD:3A:67:5D:FA:57:E0:DF:C2:F0:
                                6F:09:B3:65:D5:AA:45
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        8b:8f:7e:f0:02:87:52:26:aa:85:4b:4b:db:f0:5f:a5:e7:a4:
        fd:05:1f:2f:74:4d:ea:4b:4b:f5:73:1a:d5:68:df:32:1a:b0:
        8c:51:41:bb:4c:bd:33:52:9c:7e:bc:a4:eb:1a:66:48:fd:03:
        e4:79:de:58:9c:d5:97:86:18:a8:85:8c:28:6a:ed:0e:bb:56:
        80:3d:cd:4e:d2:e3:23:2c:02:b0:84:6e:09:e3:11:11:22:1a:
        10:ae:c4:47:c6:6c:a4:4d:77:d9:57:a4:3e:8f:f4:75:4d:d2:
        c4:3e:f4:64:4b:54:fe:16:bd:ad:3f:d8:33:4b:cb:c2:ba:50:
        46:16:25:7b:8f:2c:fd:72:6f:7c:1f:a0:f7:51:18:d4:4b:3d:
        d1:a9:af:29:be:68:f2:d0:33:83:3c:6c:fe:98:e4:6c:47:d1:
        d9:31:65:46:7d:ae:46:6d:03:19:83:ce:48:5c:71:87:f6:6d:
        8b:02:7e:54:c7:8f:97:4f:7e:39:4b:d6:54:bc:82:4b:34:f7:
        67:d6:cd:f5:63:98:2e:de:bf:79:5d:9d:ad:18:b5:46:9d:94:
        0c:da:29:96:a4:33:48:e4:c7:a1:25:e2:b4:fa:99:ec:a1:07:
        31:21:9b:78:89:99:15:c8:1b:0b:8d:ef:bf:1a:f2:0f:b8:ff:
        e7:3b:65:c0

748751232 | 2024-05-02T19:36:47.677989

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 8.0.36-0ubuntu0.20.04.1
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: caching_sha2_password

-1246004407 | 2024-04-30T22:05:21.504343

6001 / tcp

HTTP/1.1 400 Bad Request
Connection: close

-1060095501 | 2024-04-25T21:49:09.549507

6002 / tcp

HTTP/1.1 404 Not Found
X-Powered-By: Express
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 139
Date: Thu, 25 Apr 2024 21:49:09 GMT
Connection: keep-alive
Keep-Alive: timeout=5

-1927723706 | 2024-04-29T23:59:37.271468

6379 / tcp

-NOAUTH Authentication required.

-795948505 | 2024-04-30T18:46:40.724756

33060 / tcp

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

147.135.97.35

Last Seen: 2024-05-03

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

163726181 | 2024-05-01T14:25:13.595083
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-05-03T07:45:42.807185
80 / tcp

nginx1.18.0

1309143049 | 2024-05-01T07:02:46.008685
443 / tcp

nginx1.18.0

748751232 | 2024-05-02T19:36:47.677989
3306 / tcp

MySQL8.0.36-0ubuntu0.20.04.1

-1246004407 | 2024-04-30T22:05:21.504343
6001 / tcp

-1060095501 | 2024-04-25T21:49:09.549507
6002 / tcp

-1927723706 | 2024-04-29T23:59:37.271468
6379 / tcp

Redis key-value store

-795948505 | 2024-04-30T18:46:40.724756
33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

147.135.97.35

Last Seen: 2024-05-03

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

163726181 | 2024-05-01T14:25:13.595083 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-05-03T07:45:42.807185 80 / tcp

nginx1.18.0

1309143049 | 2024-05-01T07:02:46.008685 443 / tcp

nginx1.18.0

748751232 | 2024-05-02T19:36:47.677989 3306 / tcp

MySQL8.0.36-0ubuntu0.20.04.1

-1246004407 | 2024-04-30T22:05:21.504343 6001 / tcp

-1060095501 | 2024-04-25T21:49:09.549507 6002 / tcp

-1927723706 | 2024-04-29T23:59:37.271468 6379 / tcp

Redis key-value store

-795948505 | 2024-04-30T18:46:40.724756 33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

163726181 | 2024-05-01T14:25:13.595083
22 / tcp

1651973090 | 2024-05-03T07:45:42.807185
80 / tcp

1309143049 | 2024-05-01T07:02:46.008685
443 / tcp

748751232 | 2024-05-02T19:36:47.677989
3306 / tcp

-1246004407 | 2024-04-30T22:05:21.504343
6001 / tcp

-1060095501 | 2024-04-25T21:49:09.549507
6002 / tcp

-1927723706 | 2024-04-29T23:59:37.271468
6379 / tcp

-795948505 | 2024-04-30T18:46:40.724756
33060 / tcp