GeneralInformation

Hostnames	hkih.production.geniem.io harrastus.hkih.production.geniem.io kukkuu.hkih.production.geniem.io kultus.hkih.production.geniem.io liikunta.hkih.production.geniem.io liikunta2.hkih.production.geniem.io tapahtumat.hkih.production.geniem.io hkih.stage.geniem.io harrastus.hkih.stage.geniem.io kukkuu.hkih.stage.geniem.io kultus.hkih.stage.geniem.io liikunta.hkih.stage.geniem.io liikunta2.hkih.stage.geniem.io tapahtumat.hkih.stage.geniem.io content.api.hel.fi harrastus.content.api.hel.fi kukkuu.content.api.hel.fi kultus.content.api.hel.fi liikunta.content.api.hel.fi liikunta2.content.api.hel.fi tapahtumat.content.api.hel.fi
Domains	geniem.io hel.fi
Cloud Provider	DigitalOcean
Cloud Region	nl-nh
Country	Netherlands
City	Amsterdam
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2019-20372	4.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts

22 80 443 2222

2043318905 | 2024-05-12T14:42:10.960003

22 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.5
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDJtaA16q22dD0x7NxdWwl2rO4aY9mdKdFqKey6kpnM6Muv
pFujRGigaGOMII4o2VqTvR3AAye4AdpRYr3fEijfRpDMm4/InEOZWbXffMwenJQ9MksAjuRiaCie
r9eEAAaDL0cM+0ciI4UOHgFQ2u3S583rYuqGl5lLLK7WCem0UztaQuT8mXQ08Fule6w/mKaIM3M+
KHSCJGMc91MdCY7ox+ymPfCVTrVK+XTXLJ4d1WgsM2vM9IGQe883IRt0H/gvJjr9MGejofrFTQ1C
guzps0s1zDB84+ANTbnxkQKkjf6JLo9j23TJQshik6C4xAupmWjcmA0MXptQPngskRCn
Fingerprint: 2c:87:34:aa:d8:b1:cd:95:4a:ec:d5:e8:b6:72:82:0a

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-1984879341 | 2024-05-12T03:00:08.961135

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.16.1
Date: Sun, 12 May 2024 03:00:08 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://188.166.133.0/

98551956 | 2024-05-12T06:24:23.215066

443 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.16.1
Date: Sun, 12 May 2024 06:24:23 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:46:fe:85:91:9c:57:42:63:b9:15:f5:c6:e3:45:0d:2b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  6 22:11:45 2024 GMT
            Not After : Jul  5 22:11:44 2024 GMT
        Subject: CN=content.api.hel.fi
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:d1:53:cd:9e:06:d4:ae:09:7b:35:51:3e:9f:40:
                    1c:14:d3:88:d0:81:0f:f6:00:f5:86:1d:77:5c:8d:
                    16:5d:4a:e8:f5:50:e8:f1:24:d6:dd:05:1d:7b:79:
                    ea:aa:9b:e6:87:1a:02:35:1f:4f:95:ee:7d:40:93:
                    c2:a4:03:e2:21:9f:6f:b9:13:04:bd:89:13:bf:ee:
                    c5:73:a6:7a:12:4c:88:7c:7e:87:f2:7c:df:32:e4:
                    f9:92:76:07:c2:2e:4c:84:9a:2f:7b:d8:e9:85:1a:
                    86:d2:62:7e:ac:97:d0:e8:b5:6d:a5:5d:9b:4b:f8:
                    f6:50:1f:f5:53:02:d1:32:9c:7d:ae:e3:f9:4b:61:
                    aa:98:d4:d7:92:3c:db:0c:01:5c:86:2c:ea:5f:7a:
                    8f:f1:25:4d:39:38:51:fd:5c:f3:3b:fe:93:10:42:
                    96:f4:5d:29:69:be:25:7f:9b:09:ce:52:29:d9:65:
                    a7:fb:52:10:63:84:e7:e9:5b:47:7a:ef:6b:39:5c:
                    f2:1f:ce:97:49:63:23:11:fa:5d:b0:7d:d0:e0:bc:
                    a2:f6:10:2f:28:d5:06:7c:b9:48:5b:ea:2b:9c:9b:
                    c8:11:f5:a1:5a:d8:2e:cd:25:d0:04:36:5f:19:88:
                    b9:da:10:04:75:d5:50:db:ba:3f:b8:8c:9f:e9:6d:
                    7f:d6:44:0c:44:0e:8f:20:1d:0a:2c:5d:ae:14:4b:
                    e7:8e:39:37:c7:97:4a:f0:c9:a7:54:e9:4b:62:e4:
                    d3:d6:d0:04:97:6b:d3:a9:b7:33:8a:a4:b5:31:11:
                    d5:2a:43:b5:68:07:0c:8c:be:06:43:19:61:8c:55:
                    0b:9c:26:37:15:84:5e:3a:46:80:11:7d:4e:ec:d5:
                    69:6c:9d:2e:89:14:9b:3a:c0:b7:2f:8b:0e:c1:fc:
                    5d:35:a3:ff:30:dd:02:ff:a7:d9:e6:91:ff:9b:da:
                    b4:fe:fc:12:cf:12:07:4a:fb:96:c9:d7:61:d8:95:
                    79:38:06:70:6c:ff:39:47:ac:9f:f6:79:70:3f:46:
                    f0:f4:14:66:90:80:eb:8d:54:19:ec:f7:a2:42:73:
                    59:e9:37:6f:40:de:84:72:13:9d:ce:a7:5e:cd:1f:
                    79:9c:5d:71:64:da:29:c5:eb:4c:f7:e5:a0:38:1d:
                    eb:cc:a1:ad:7f:27:90:9f:6c:5d:d9:fb:c2:5c:83:
                    d0:f6:98:46:44:bf:c9:11:2a:57:01:3f:56:52:74:
                    23:11:46:7b:af:0b:fb:da:df:f4:18:bb:d6:cb:bb:
                    78:ff:76:1c:e5:0a:49:32:6f:28:d2:5b:d5:ba:17:
                    ae:f0:20:0d:13:96:ef:1a:8f:0b:ae:d8:63:52:ac:
                    99:16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                20:06:5A:B0:6E:9D:A0:FF:22:CE:AB:EB:41:4C:5F:B8:63:AC:65:CA
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:content.api.hel.fi, DNS:harrastus.content.api.hel.fi, DNS:harrastus.hkih.production.geniem.io, DNS:harrastus.hkih.stage.geniem.io, DNS:hkih.production.geniem.io, DNS:hkih.stage.geniem.io, DNS:kukkuu.content.api.hel.fi, DNS:kukkuu.hkih.production.geniem.io, DNS:kukkuu.hkih.stage.geniem.io, DNS:kultus.content.api.hel.fi, DNS:kultus.hkih.production.geniem.io, DNS:kultus.hkih.stage.geniem.io, DNS:liikunta.content.api.hel.fi, DNS:liikunta.hkih.production.geniem.io, DNS:liikunta.hkih.stage.geniem.io, DNS:liikunta2.content.api.hel.fi, DNS:liikunta2.hkih.production.geniem.io, DNS:liikunta2.hkih.stage.geniem.io, DNS:tapahtumat.content.api.hel.fi, DNS:tapahtumat.hkih.production.geniem.io, DNS:tapahtumat.hkih.stage.geniem.io
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr  6 23:11:45.635 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F9:A3:39:38:83:AE:32:DF:62:2F:BE:
                                24:EF:F5:26:F9:77:27:E1:0E:97:32:F4:BC:FA:F4:18:
                                72:67:7A:A1:DA:02:21:00:FE:E8:B7:77:05:A7:11:4D:
                                BF:A3:19:D5:D3:9E:19:A0:CE:5A:63:B4:35:8D:31:4E:
                                38:DE:04:85:E3:73:3C:12
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : Apr  6 23:11:45.837 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3D:DD:F9:88:0C:B2:55:F1:C4:65:7D:A4:
                                A0:B8:42:20:93:4D:3D:92:2D:1B:4A:CC:74:C4:30:98:
                                0D:9C:2F:49:02:20:32:77:CC:F7:81:ED:BE:25:AF:E7:
                                91:0C:1C:90:60:E3:DE:34:8C:8D:C5:A5:6D:73:6A:CD:
                                EF:FB:F9:13:CB:AA
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0c:4e:77:65:eb:39:79:4f:a6:36:de:6f:6a:6b:60:a1:c2:65:
        1f:1c:d4:e5:f9:43:e5:02:76:89:24:5e:9c:67:48:27:fe:c3:
        9d:c9:7e:a2:38:81:da:77:89:e0:9b:16:8b:38:03:10:5e:0c:
        8f:9f:0d:09:22:61:7f:17:39:37:a8:b1:59:3b:22:23:5b:88:
        3c:6c:af:74:59:b3:d5:89:1a:4b:59:e8:82:a5:bb:db:09:f6:
        96:f6:dc:7e:03:a5:6b:4b:a2:15:1f:99:99:e6:67:7d:28:03:
        62:85:2f:d1:00:cf:d4:e9:cb:c6:ee:a0:66:43:4e:dc:86:67:
        47:29:ba:63:97:e7:c6:4a:13:be:b1:55:0f:b0:95:b8:0d:1b:
        bb:88:0e:64:dd:c3:17:d6:8d:ad:01:41:c9:17:d7:3f:bd:f9:
        4a:56:eb:ba:77:a0:8e:82:47:84:4f:74:4b:51:1c:44:3a:92:
        29:fe:0c:bb:14:7c:56:fe:6f:ee:d3:d0:fe:b5:95:75:30:ea:
        87:2a:a9:75:ad:05:36:6d:7b:38:2b:51:c6:9a:01:08:1f:f8:
        b4:7a:39:bb:91:23:bb:ae:bb:4f:d0:d0:9c:c7:bd:53:6d:7c:
        37:4f:e4:df:19:c4:e5:98:a9:24:82:ab:9e:53:f2:af:f5:be:
        80:fe:25:15

-2124822327 | 2024-05-11T17:16:57.767594

2222 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.7
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC1zCzLOCr6aLpXzfItdGUPH3ab3+jlkPRolJnbchP/xPg/
HLHEosIKzpv7NpTUfuMdzq0wypBekI9sqjHDYiexKSOC9C4s0LThtCzJSd1dPndnETzF1r6GlKkM
3G+yao3n2hW/65zr1ZI+Pt9zVHCovHpELHQ97gFPsaWejA3bUGsmbZ/df6wXFKUSss37ocppT46k
oUnSINmn3BchLmwGCYmm4PSB5dGvaFKGXFf1+/mW4wAs1OGsrXxYhYkQWgncdNK6c0WaizvB6dYb
8zbvAbcbLPTWjrf6N8q/KPHHBDuOpwNGTXdBL3SQcwU+jJgwRHutrjWB965N7/war43p
Fingerprint: 21:cf:b1:5f:86:6e:42:a9:0f:a5:f0:d1:7e:bf:c7:d5

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

188.166.133.0

Last Seen: 2024-05-12

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

2043318905 | 2024-05-12T14:42:10.960003
22 / tcp

OpenSSH7.6p1 Ubuntu-4ubuntu0.5

-1984879341 | 2024-05-12T03:00:08.961135
80 / tcp

nginx1.16.1

98551956 | 2024-05-12T06:24:23.215066
443 / tcp

nginx1.16.1

-2124822327 | 2024-05-11T17:16:57.767594
2222 / tcp

OpenSSH7.6p1 Ubuntu-4ubuntu0.7

Products

Pricing

Contact Us

188.166.133.0

Last Seen: 2024-05-12

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

2043318905 | 2024-05-12T14:42:10.960003 22 / tcp

OpenSSH7.6p1 Ubuntu-4ubuntu0.5

-1984879341 | 2024-05-12T03:00:08.961135 80 / tcp

nginx1.16.1

98551956 | 2024-05-12T06:24:23.215066 443 / tcp

nginx1.16.1

-2124822327 | 2024-05-11T17:16:57.767594 2222 / tcp

OpenSSH7.6p1 Ubuntu-4ubuntu0.7

Products

Pricing

Contact Us

2043318905 | 2024-05-12T14:42:10.960003
22 / tcp

-1984879341 | 2024-05-12T03:00:08.961135
80 / tcp

98551956 | 2024-05-12T06:24:23.215066
443 / tcp

-2124822327 | 2024-05-11T17:16:57.767594
2222 / tcp