GeneralInformation

Hostnames	adservproptlh2.icu vs1.videoselfie.me
Domains	adservproptlh2.icu videoselfie.me
Country	Germany
City	Falkenstein
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

21 53 80 110 123 143 443 993 995 3306 8081 33060

-1110427277 | 2024-06-02T05:17:08.365311

21 / tcp

220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 07:17. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
530 Login authentication failed
214-The following SITE commands are recognized
 ALIAS
 CHMOD
 IDLE
 UTIME
214 Pure-FTPd - http://pureftpd.org/
211-Extensions supported:
 UTF8
 EPRT
 IDLE
 MDTM
 SIZE
 MFMT
 REST STREAM
 MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
 MLSD
 PRET
 AUTH TLS
 PBSZ
 PROT
 ESTA
 PASV
 EPSV
 SPSV
 ESTP
211 End.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d5:78:7a:5f:20:fc:82:bd
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=DE, ST=BW, L=FR, O=Internet Widgits Pty Ltd
        Validity
            Not Before: May 18 16:17:36 2013 GMT
            Not After : May 13 16:17:36 2033 GMT
        Subject: C=DE, ST=BW, L=FR, O=Internet Widgits Pty Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:d1:65:d1:3b:97:89:bc:a3:d5:06:3a:2c:
                    7d:dc:de:7c:7f:eb:ae:b5:71:1f:17:56:3f:34:02:
                    40:09:c5:94:cb:48:74:e2:37:55:01:9e:d6:5a:16:
                    08:31:af:bb:fc:a0:66:29:9c:43:b5:b5:8c:35:a2:
                    4b:3e:d2:48:6b:66:d7:76:3b:7b:47:98:ab:d6:ef:
                    65:5b:18:ef:84:30:c9:19:44:75:7f:21:0c:51:c6:
                    e1:82:39:cf:c6:5a:7a:b1:43:47:ed:25:1b:17:89:
                    89:c6:fa:1c:1b:7d:ac:0d:51:7f:cb:7f:b9:fd:b2:
                    db:12:f5:da:d0:88:9e:26:0c:9d:f9:ae:f2:91:f6:
                    f8:ed:0d:9d:12:9b:14:bb:97:d1:ea:1e:e2:44:98:
                    48:a4:d9:80:57:c6:48:da:d2:65:ff:13:18:9e:94:
                    e6:7f:34:ce:d9:27:74:c8:96:45:ef:0a:b6:28:16:
                    3f:3f:1b:ac:e1:6b:ba:2b:38:cc:45:b0:ce:9c:8f:
                    12:ff:47:06:69:8c:7d:4e:fb:cf:d0:f2:1c:37:89:
                    e2:50:88:56:1e:5b:7a:a0:32:bb:aa:9e:da:07:8b:
                    7d:9d:93:ac:8a:53:09:52:1c:4c:c0:7a:f4:a6:eb:
                    0e:5d:a0:b9:56:69:4a:4e:35:69:9a:11:32:12:ca:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                61:53:BB:0D:6B:9D:3F:AD:AC:68:A8:48:7D:16:73:79:97:E9:2B:D8
            X509v3 Authority Key Identifier: 
                61:53:BB:0D:6B:9D:3F:AD:AC:68:A8:48:7D:16:73:79:97:E9:2B:D8
            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        8c:38:d7:df:65:99:52:8e:6a:1d:07:8f:68:db:26:1f:a2:66:
        c1:61:f4:86:43:06:b4:0f:7a:0d:22:6c:18:b7:16:b5:cf:4c:
        17:77:1e:43:a4:7f:4a:28:2b:7e:6b:c4:21:5e:ff:72:43:92:
        2a:35:8f:b7:26:a8:dd:4e:39:60:2b:52:1f:5e:45:7f:e1:c2:
        1d:85:a3:72:15:0d:eb:98:6e:64:83:17:07:22:db:66:77:58:
        ac:fc:dd:27:b6:36:25:92:5a:10:97:5a:f6:40:80:62:ad:d9:
        f2:a6:18:91:b2:09:eb:29:81:9d:2b:c2:fe:13:23:ca:e9:7b:
        2d:60:14:ea:ec:13:aa:fa:c2:4c:4e:cd:2c:39:0d:90:e8:8e:
        ae:a3:75:11:b3:ef:27:10:13:c5:a6:ee:c0:47:6b:ab:b5:cc:
        cb:e7:59:a7:ca:e2:ee:07:33:a9:0e:97:f6:5d:5e:21:f3:95:
        65:89:22:2e:66:20:9f:5a:a7:60:29:0e:51:c7:25:ba:4b:68:
        27:c0:60:6f:cd:af:ee:3c:52:41:80:69:4f:c1:b3:72:ef:52:
        d5:e8:bb:fe:c1:21:44:ee:fc:c3:30:03:cd:05:b5:40:c7:a2:
        dd:da:11:ae:2c:8e:9a:17:22:47:25:ec:0c:e2:a9:59:5d:0a:
        1e:f1:45:4b

312916413 | 2024-06-05T00:51:49.544184

53 / tcp

9.16.1-Ubuntu
Resolver name: vs1.videoselfie.me

312916413 | 2024-05-17T04:16:11.235120

53 / udp

9.16.1-Ubuntu
Resolver name: vs1.videoselfie.me

589765266 | 2024-05-24T20:47:05.409575

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 24 May 2024 20:47:05 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://188.34.191.121/

1924648187 | 2024-05-19T23:57:37.434378

110 / tcp

+OK Dovecot (Ubuntu) ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
STLS
USER
SASL PLAIN LOGIN
.

-2037328890 | 2024-05-19T21:33:12.581343

123 / udp

NTP
protocolversion: 3
stratum: 0
leap: 3
precision: 0
rootdelay: 0.0
rootdisp: 0.0
refid: 1380013125
reftime: 0.0
poll: 3

-1712467009 | 2024-05-27T04:24:00.306305

143 / tcp

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

-801628107 | 2024-05-31T18:00:35.991397

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 31 May 2024 18:00:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:00:f9:2c:19:27:c9:f0:6f:10:76:b1:d8:3c:9f:11:b4:94
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr 26 06:03:45 2024 GMT
            Not After : Jul 25 06:03:44 2024 GMT
        Subject: CN=adservproptlh2.icu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:f2:e8:ed:69:53:7a:4e:c2:df:1c:50:88:ec:57:
                    d2:d1:fb:65:18:20:42:a5:ee:9e:35:dd:1d:74:72:
                    40:4f:1a:63:c7:ed:9b:c8:3f:95:55:b7:48:33:6b:
                    35:b4:6e:8c:28:5d:17:fd:0c:b5:ee:8c:42:d3:3d:
                    b7:31:0d:21:35:d6:77:13:09:15:ed:6d:e2:52:f9:
                    98:a3:03:29:c8:cc:14:39:fc:51:64:4a:ea:2f:b3:
                    4b:f3:7f:09:dd:5a:c5:1c:06:34:f0:19:c2:58:f2:
                    7b:be:88:2d:2a:4e:b6:8f:df:9f:c3:6e:aa:b0:9f:
                    e3:f6:ce:a9:42:18:d7:01:ad:52:7f:9f:f3:1a:6c:
                    59:c8:d9:f8:e6:60:01:f0:26:7c:2a:e2:51:56:6c:
                    ea:ca:0b:f7:54:8a:82:8c:ac:f4:08:36:3f:c8:c7:
                    fc:65:b1:26:f5:0a:cf:ad:41:14:71:03:db:05:36:
                    8a:24:90:5c:a4:2f:56:e6:27:ee:ee:7e:6e:a1:12:
                    32:22:95:fa:b4:02:e6:41:ab:fa:e9:52:58:2b:51:
                    e6:d5:fc:62:22:c4:53:f5:b4:5e:23:d3:a8:20:a1:
                    2b:c4:5d:0f:f3:ef:a6:ab:5f:9f:57:c1:66:33:22:
                    85:a6:b9:4d:20:79:ad:1c:80:89:52:c9:ce:18:67:
                    93:bb:f2:aa:1c:19:c1:36:ca:35:7d:90:9d:64:51:
                    10:05:d7:af:e8:13:90:bd:b5:75:d8:eb:2c:8e:3a:
                    49:9a:3c:71:b2:71:37:b9:3d:d6:9b:c7:7e:eb:69:
                    d2:8b:ca:0c:b2:aa:19:6b:38:e6:1c:fd:6c:d4:8b:
                    df:16:90:99:70:c7:42:cb:45:a6:8d:71:03:38:29:
                    5e:19:d6:26:95:83:f3:08:aa:80:42:87:d3:62:ae:
                    f9:6e:8d:af:b2:14:5e:87:d6:d3:0f:f8:e6:a0:a9:
                    be:63:63:43:a4:54:97:ed:ce:14:cc:ce:51:6d:f4:
                    95:c4:20:ae:75:a2:3f:4b:c6:9f:24:ec:0e:f5:89:
                    77:ad:f9:d2:ae:5b:14:96:ff:88:3a:bb:60:64:1a:
                    3b:fe:8e:06:9d:d5:01:3d:4b:94:0f:55:bd:31:01:
                    05:ee:89:0a:e4:c9:18:58:d6:aa:73:54:a6:0a:9f:
                    e4:60:f3:73:f5:c8:e2:c0:34:46:72:f4:ff:42:6f:
                    b5:73:5c:90:95:e1:df:16:9f:ed:91:3a:f0:97:47:
                    a8:5a:30:f9:43:f2:b3:b4:c5:e1:50:d2:d6:06:db:
                    d9:77:f7:29:48:9b:9c:11:d4:92:e7:27:1b:9d:83:
                    fa:61:57:f5:f9:f1:b1:30:c1:d9:8d:94:17:ba:06:
                    7b:cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                56:97:2C:3C:CE:B8:CA:2F:48:75:B0:DA:92:5D:4C:F1:50:DA:81:44
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:adservproptlh2.icu
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Apr 26 07:03:45.581 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:34:C8:63:07:95:A3:0A:46:F1:B8:27:CF:
                                50:C6:E7:06:B5:A5:2D:6E:B3:42:0E:8D:7C:43:2C:5F:
                                1F:A3:18:FF:02:20:06:D5:A5:A0:6A:07:29:76:1A:27:
                                BC:79:DD:29:8C:C7:D7:65:C2:D1:26:40:43:17:55:3B:
                                13:63:B0:20:2B:72
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Apr 26 07:03:45.575 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:DB:03:D6:B2:DF:BE:98:2B:F7:24:BE:
                                E1:FD:92:6B:0C:54:7A:E6:4B:5B:D4:27:19:9E:D8:5C:
                                21:2E:DD:EA:61:02:20:47:5B:A7:04:00:D0:B0:47:5D:
                                53:E1:F2:BC:02:06:6B:B3:BB:AF:E0:FB:3E:9B:40:8C:
                                73:4C:5D:78:1F:3F:F0
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        84:af:28:ee:36:aa:99:00:2a:1b:d1:85:dd:74:90:53:7d:fd:
        d8:45:e1:3f:b9:4b:33:07:44:56:69:20:a4:f6:25:0f:51:54:
        7a:16:1b:37:7e:fe:ed:44:a3:06:08:67:a9:45:df:5f:b1:b8:
        22:a8:3d:0d:50:bf:38:f9:01:c1:b6:28:52:de:e9:79:3c:0e:
        ff:08:c4:dd:ce:e6:4b:94:dd:d0:64:15:c1:6a:6e:ae:a0:0a:
        75:1e:cf:29:66:61:0f:0e:0e:a7:8e:ab:20:e3:1a:83:8c:6c:
        56:08:c3:f8:d3:11:6f:1c:ab:db:9b:d6:81:0f:ec:7b:5e:1f:
        90:1d:cb:36:18:c1:55:53:7f:c9:74:0e:39:9b:80:8a:e7:14:
        9f:35:0c:e1:8a:21:eb:88:d5:2b:aa:70:10:4b:38:a9:c5:d1:
        0b:e4:1b:32:a7:d7:6a:e0:06:13:7d:4e:13:45:9c:e5:6b:d9:
        af:e5:0c:e0:e8:20:02:7e:cc:47:0a:ba:97:ba:83:d8:d5:bc:
        38:9c:bc:6b:5b:e2:27:d0:02:ca:33:1a:e2:0d:b2:a2:98:aa:
        9c:63:5e:1a:93:27:ca:62:11:f1:ac:bf:30:ea:83:1c:93:67:
        a0:0e:76:3c:d9:01:34:2b:d4:ea:44:0f:48:09:7b:f4:42:4c:
        76:6a:d4:d0

-1818294028 | 2024-06-05T09:10:48.302744

3306 / tcp

MySQL:
  Error Message: Host '224.117.232.130' is not allowed to connect to this MySQL server
  Error Code: 1130

1139542153 | 2024-06-05T12:15:47.279620

8081 / tcp

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 05 Jun 2024 12:15:47 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Vary: Accept-Encoding

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>

-795948505 | 2024-05-25T11:32:48.436907

33060 / tcp

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

188.34.191.121

Last Seen: 2024-06-05

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1110427277 | 2024-06-02T05:17:08.365311
21 / tcp

Pure-FTPd

312916413 | 2024-06-05T00:51:49.544184
53 / tcp

312916413 | 2024-05-17T04:16:11.235120
53 / udp

589765266 | 2024-05-24T20:47:05.409575
80 / tcp

nginx1.18.0

1924648187 | 2024-05-19T23:57:37.434378
110 / tcp

-2037328890 | 2024-05-19T21:33:12.581343
123 / udp

-1712467009 | 2024-05-27T04:24:00.306305
143 / tcp

-801628107 | 2024-05-31T18:00:35.991397
443 / tcp

nginx1.18.0

-1818294028 | 2024-06-05T09:10:48.302744
3306 / tcp

MySQL

1139542153 | 2024-06-05T12:15:47.279620
8081 / tcp

nginx1.18.0

-795948505 | 2024-05-25T11:32:48.436907
33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

188.34.191.121

Last Seen: 2024-06-05

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1110427277 | 2024-06-02T05:17:08.365311 21 / tcp

Pure-FTPd

312916413 | 2024-06-05T00:51:49.544184 53 / tcp

312916413 | 2024-05-17T04:16:11.235120 53 / udp

589765266 | 2024-05-24T20:47:05.409575 80 / tcp

nginx1.18.0

1924648187 | 2024-05-19T23:57:37.434378 110 / tcp

-2037328890 | 2024-05-19T21:33:12.581343 123 / udp

-1712467009 | 2024-05-27T04:24:00.306305 143 / tcp

-801628107 | 2024-05-31T18:00:35.991397 443 / tcp

nginx1.18.0

-1818294028 | 2024-06-05T09:10:48.302744 3306 / tcp

MySQL

1139542153 | 2024-06-05T12:15:47.279620 8081 / tcp

nginx1.18.0

-795948505 | 2024-05-25T11:32:48.436907 33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

-1110427277 | 2024-06-02T05:17:08.365311
21 / tcp

312916413 | 2024-06-05T00:51:49.544184
53 / tcp

312916413 | 2024-05-17T04:16:11.235120
53 / udp

589765266 | 2024-05-24T20:47:05.409575
80 / tcp

1924648187 | 2024-05-19T23:57:37.434378
110 / tcp

-2037328890 | 2024-05-19T21:33:12.581343
123 / udp

-1712467009 | 2024-05-27T04:24:00.306305
143 / tcp

-801628107 | 2024-05-31T18:00:35.991397
443 / tcp

-1818294028 | 2024-06-05T09:10:48.302744
3306 / tcp

1139542153 | 2024-06-05T12:15:47.279620
8081 / tcp

-795948505 | 2024-05-25T11:32:48.436907
33060 / tcp