GeneralInformation

Hostnames	api.lnxct.com
Domains	lnxct.com
Country	Germany
City	Falkenstein
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940

WebTechnologies

CDN

Google Hosted Libraries

JavaScript libraries

jQuery1.8.3

jQuery UI1.9.2

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-7656	6.1jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.
CVE-2020-11023	6.1In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	6.1In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVE-2012-6708	6.1jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.

OpenPorts

443 3000 5432 5601 8000 8001 9200 10000

185213790 | 2024-05-09T11:59:53.762662

443 / tcp

HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 09 May 2024 11:59:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 26880
Connection: keep-alive
Vary: Origin
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bb:59:82:c9:d6:cd:57:2d:ae:42:78:85:c6:35:97:e0:0c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 28 05:05:24 2024 GMT
            Not After : Jun 26 05:05:23 2024 GMT
        Subject: CN=*.lnxct.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:e2:bb:dd:21:f1:53:5a:57:8f:de:69:a4:
                    20:6a:ae:3e:8f:47:db:60:ec:97:ca:a2:60:4f:98:
                    2b:33:27:88:58:ac:bc:39:97:ab:25:48:68:b8:53:
                    90:ac:35:c3:4e:a2:27:3d:6b:fe:bd:e9:52:f3:7c:
                    f3:4a:d7:8a:32:5b:51:fc:4f:bd:1d:c3:1c:81:27:
                    34:94:d7:95:8d:c7:c0:82:c1:1d:81:b7:bb:ce:95:
                    d9:06:48:cc:f5:13:ba:03:30:fc:9b:b0:41:f0:0b:
                    9b:d1:f9:26:44:35:fa:14:0b:dc:e3:55:c6:09:e4:
                    3e:07:65:0e:36:4c:9a:0c:7c:aa:02:9f:27:30:4d:
                    31:12:88:e8:24:73:b5:9e:99:57:7e:41:51:bd:d5:
                    e4:31:5f:13:e6:74:f0:fc:b1:2c:8f:e2:e1:7f:9e:
                    48:33:b3:fe:ff:c6:ca:9a:6e:23:24:5b:be:c2:ea:
                    65:93:0c:96:a8:57:76:55:35:6b:de:fd:24:af:6a:
                    d6:8e:d8:41:29:68:9e:14:37:70:15:eb:e8:45:8b:
                    d4:c7:7b:05:67:b0:c8:56:3c:a8:09:97:90:58:87:
                    08:b3:ca:cd:21:28:f3:22:02:07:5e:e8:65:91:3c:
                    f7:06:ca:2e:10:6f:39:19:fe:b0:6a:13:c1:3b:d4:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                18:4F:FD:A2:BF:84:BF:DF:DB:3C:9F:2B:7A:5F:D4:08:B2:20:EC:CD
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.lnxct.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Mar 28 06:05:24.403 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E0:98:BF:FE:7C:E3:18:B7:83:16:6E:
                                F3:29:DD:32:93:36:53:4A:FE:8A:18:DB:60:19:BB:AD:
                                B3:74:F4:D7:8E:02:21:00:91:C4:5D:72:4B:12:03:CC:
                                FD:87:CF:89:06:8D:C8:88:58:FD:D4:6C:BB:E7:A6:3B:
                                96:4F:08:41:07:90:B0:58
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
                                65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
                    Timestamp : Mar 28 06:05:24.419 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:03:5E:96:25:94:31:53:E2:BB:9D:0B:5F:
                                26:0B:DE:BB:83:BC:C8:E6:E3:74:1A:27:3F:CD:01:2B:
                                E9:B1:2E:F1:02:20:24:3C:F7:82:28:53:3E:1C:48:7B:
                                B3:B0:0B:FA:55:4A:D0:30:02:D2:AB:6A:3D:21:49:BD:
                                D4:08:AB:51:EB:03
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        71:ba:f4:c8:74:91:f8:60:c5:8a:42:33:f8:c7:bf:23:55:b6:
        77:03:0e:e0:b3:94:01:6f:93:ce:2f:f7:ed:03:70:8e:a0:94:
        39:f6:c8:c5:c1:6c:2e:38:d7:a4:8a:7b:31:f9:b4:7a:b2:07:
        3b:c7:7c:f2:ba:1e:76:6f:36:d1:7d:12:d8:52:3b:04:6f:25:
        c5:84:63:1c:9b:db:33:bf:79:0c:e4:e2:34:63:88:01:e4:43:
        b9:17:92:26:ef:91:19:ef:b2:06:27:92:88:be:b0:0b:b5:db:
        49:8c:3a:64:7e:49:ee:cc:99:97:c3:33:31:e8:6d:fb:d9:0a:
        60:a8:5f:53:cc:0c:ce:9c:48:5e:e4:65:44:0e:65:a9:21:90:
        31:d3:41:36:39:fb:5d:48:47:09:93:6e:3b:ac:f1:4d:3f:95:
        01:92:c0:bc:a3:be:2d:2f:a2:a1:e2:11:88:65:5e:e9:8c:1a:
        56:79:45:10:d0:67:3c:a1:67:45:22:f4:33:03:ff:7d:b3:5c:
        ac:00:7f:9e:5b:25:1d:ab:c3:f6:f5:5e:43:ec:24:14:5b:48:
        9d:a0:bf:0e:36:34:19:33:5d:2e:96:1e:0c:27:93:80:bc:dc:
        20:14:d9:53:50:03:3f:3c:c2:f7:60:48:9b:05:83:1e:8c:29:
        1f:7f:fc:d4

-1097777958 | 2024-04-17T21:46:33.846733

3000 / tcp

HTTP/1.1 200 OK
Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
x-nextjs-cache: HIT
X-Powered-By: Next.js
Cache-Control: s-maxage=31536000, stale-while-revalidate
ETag: "zktyswab1r8uu"
Content-Type: text/html; charset=utf-8
Content-Length: 11478
Date: Wed, 17 Apr 2024 21:46:33 GMT
Connection: keep-alive
Keep-Alive: timeout=5

1331219256 | 2024-04-23T15:04:32.146216

5432 / tcp

PostgreSQL
FATAL:  no pg_hba.conf entry for host "224.76.122.226", user "postgres", database "template0", no encryption

1049621374 | 2024-04-30T13:27:01.743047

5601 / tcp

HTTP/1.1 200 OK
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
permissions-policy: camera=(), display-capture=(), fullscreen=(self), geolocation=(), microphone=(), web-share=()
cross-origin-opener-policy: same-origin
content-security-policy: script-src 'report-sample' 'self'; worker-src 'report-sample' 'self' blob:; style-src 'report-sample' 'self' 'unsafe-inline'
kbn-name: Ubuntu-2204-jammy-amd64-base
kbn-license-sig: 15b7c1bffc892a0d84763f601c21aa8c54c3a965b56063122ee680ff392c58a7
content-type: text/html; charset=utf-8
cache-control: private, no-cache, no-store, must-revalidate
content-length: 101322
vary: accept-encoding
accept-ranges: bytes
Date: Tue, 30 Apr 2024 13:27:01 GMT
Connection: keep-alive
Keep-Alive: timeout=120

185213790 | 2024-05-13T06:38:56.223095

8000 / tcp

HTTP/1.1 404 Not Found
Date: Mon, 13 May 2024 06:38:55 GMT
Server: WSGIServer/0.2 CPython/3.10.12
Content-Type: text/html; charset=utf-8
Content-Length: 26880
Vary: Origin
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin

-1060095501 | 2024-05-04T01:28:59.552837

8001 / tcp

HTTP/1.1 404 Not Found
X-Powered-By: Express
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 139
Date: Sat, 04 May 2024 01:28:59 GMT
Connection: keep-alive
Keep-Alive: timeout=5

-494107963 | 2024-05-10T17:24:25.645623

10000 / tcp

HTTP/1.0 200 Document follows
Date: Fri, 10 May 2024 17:24:25 GMT
Server: MiniServ
Connection: close
Auth-type: auth-required=1
Set-Cookie: redirect=1; path=/; secure; httpOnly
Set-Cookie: testing=1; path=/; secure; httpOnly
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self'; child-src 'self'
X-Content-Type-Options: nosniff
X-no-links: 1
Content-type: text/html; Charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6d:60:c5:ba:f6:ca:e0:3b:62:14:81:c6:18:40:1f:9c:ae:68:0d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Ubuntu-2204-jammy-amd64-base, C=US, L=Santa Clara
        Validity
            Not Before: Dec 21 07:24:30 2023 GMT
            Not After : Dec 19 07:24:30 2028 GMT
        Subject: CN=Ubuntu-2204-jammy-amd64-base, C=US, L=Santa Clara
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:44:55:af:70:38:aa:07:ca:ba:a5:4d:a0:c6:
                    de:77:38:44:73:47:6f:1b:44:f4:42:04:ec:13:71:
                    fb:ff:e2:0b:04:7f:66:3c:94:33:fc:86:ed:0a:5e:
                    dd:a5:ff:48:9e:68:cd:e4:89:87:0a:06:25:49:fa:
                    41:f1:93:75:f0:02:ab:c0:ea:d2:e3:1d:73:6a:ac:
                    14:1d:fe:b3:ee:eb:d7:85:33:4f:ca:fe:77:b3:ae:
                    c0:9f:9d:e8:a9:2a:b1:18:eb:ab:c2:5c:96:77:27:
                    9b:0f:de:1e:ad:c4:3a:70:88:2d:c4:75:47:52:90:
                    70:23:21:52:61:a6:0a:eb:55:36:54:04:9b:ee:7f:
                    7b:df:85:21:e2:b0:1b:bd:31:c7:1e:52:d0:4d:9b:
                    f1:e3:f8:ec:58:c5:c7:49:a5:db:85:2e:62:ef:72:
                    d0:af:1b:10:89:4b:4b:77:b1:f9:bc:00:19:3e:ab:
                    08:98:1f:22:6f:38:c8:4a:5a:f2:0d:53:34:26:40:
                    a2:19:bb:fb:06:8c:60:da:c9:52:a0:34:ff:b3:dd:
                    ea:89:0f:a5:eb:6d:3c:10:c1:0f:79:3e:05:cd:04:
                    38:ca:75:fd:6b:64:74:bf:46:3d:ae:c5:42:be:f3:
                    48:c9:87:cf:e6:a7:0b:4f:18:9d:2d:15:66:30:c6:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                94:35:52:AA:2C:EC:81:1C:EB:65:C7:6A:56:0E:9E:11:20:7A:2C:EE
            X509v3 Authority Key Identifier: 
                94:35:52:AA:2C:EC:81:1C:EB:65:C7:6A:56:0E:9E:11:20:7A:2C:EE
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Alternative Name: 
                DNS:Ubuntu-2204-jammy-amd64-base, DNS:localhost
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        41:49:e4:88:3a:9c:c4:dc:29:1a:1d:a4:e0:dc:69:c3:55:6a:
        9b:7c:ba:65:f2:57:cf:80:ae:c1:5b:f0:07:18:f3:64:67:eb:
        0e:0c:81:20:26:3f:3e:49:8e:b9:33:22:00:2b:29:e9:1e:f8:
        25:7f:04:ee:c6:7a:f2:36:b0:53:93:78:34:bf:99:4a:a8:2a:
        f5:b9:3a:58:f3:0b:2d:a2:d7:1b:45:41:69:53:a9:e9:8a:03:
        80:10:51:ca:c4:58:ef:10:81:ff:4e:ab:84:27:98:a3:2c:29:
        6a:ef:55:64:ec:2a:11:c8:86:d7:85:16:b8:2f:89:66:c1:53:
        04:1c:13:2b:0d:f6:19:35:47:a1:e6:8a:d6:99:e4:ef:b7:eb:
        91:74:b4:42:1f:ff:43:98:ae:6c:8f:7f:b5:03:ae:b6:b1:58:
        89:00:97:75:33:a5:62:31:7d:c0:ec:71:74:24:24:a7:c2:a8:
        95:d3:7c:3b:39:2b:67:1c:6b:bb:96:db:5b:c7:5d:a2:8d:5a:
        a6:61:13:77:13:a8:1f:32:a5:e3:d7:9e:72:6d:19:4e:79:90:
        ad:cc:49:03:f8:44:f3:9b:a9:7b:fd:27:61:ad:91:b1:bf:7f:
        90:c0:8c:ab:f5:a6:ad:77:c0:ff:b9:d6:15:23:b7:db:09:aa:
        a3:51:97:6f

159.69.57.101

Last Seen: 2024-05-13

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

185213790 | 2024-05-09T11:59:53.762662
443 / tcp

nginx

-1097777958 | 2024-04-17T21:46:33.846733
3000 / tcp

1331219256 | 2024-04-23T15:04:32.146216
5432 / tcp

PostgreSQL14.10 - 14.11

1049621374 | 2024-04-30T13:27:01.743047
5601 / tcp

185213790 | 2024-05-13T06:38:56.223095
8000 / tcp

-1060095501 | 2024-05-04T01:28:59.552837
8001 / tcp

-494107963 | 2024-05-10T17:24:25.645623
10000 / tcp

Webmin

Products

Pricing

Contact Us

159.69.57.101

Last Seen: 2024-05-13

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

185213790 | 2024-05-09T11:59:53.762662 443 / tcp

nginx

-1097777958 | 2024-04-17T21:46:33.846733 3000 / tcp

1331219256 | 2024-04-23T15:04:32.146216 5432 / tcp

PostgreSQL14.10 - 14.11

1049621374 | 2024-04-30T13:27:01.743047 5601 / tcp

185213790 | 2024-05-13T06:38:56.223095 8000 / tcp

-1060095501 | 2024-05-04T01:28:59.552837 8001 / tcp

-494107963 | 2024-05-10T17:24:25.645623 10000 / tcp

Webmin

Products

Pricing

Contact Us

185213790 | 2024-05-09T11:59:53.762662
443 / tcp

-1097777958 | 2024-04-17T21:46:33.846733
3000 / tcp

1331219256 | 2024-04-23T15:04:32.146216
5432 / tcp

1049621374 | 2024-04-30T13:27:01.743047
5601 / tcp

185213790 | 2024-05-13T06:38:56.223095
8000 / tcp

-1060095501 | 2024-05-04T01:28:59.552837
8001 / tcp

-494107963 | 2024-05-10T17:24:25.645623
10000 / tcp