Shodan

24.199.95.93

Regular View Raw Data
Last Seen: 2024-06-01

GeneralInformation

Cloud Provider DigitalOcean
Cloud Region us-nj
Country United States
City North Bergen
Organization DigitalOcean, LLC
ISP DigitalOcean, LLC
ASN AS14061
Operating System Ubuntu

WebTechnologies

JavaScript libraries
jQuery
Miscellaneous
Popper
UI frameworks
Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2020-1938 7.5When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible.
CVE-2019-20372 4.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts 

-914442752 | 2024-05-27T22:38:17.529282
21 / tcp 
-1495656023 | 2024-05-14T21:51:15.448143
22 / tcp 
-1006565600 | 2024-05-06T20:00:07.772376
25 / tcp 
1691111551 | 2024-06-01T12:17:11.746800
80 / tcp 
234228306 | 2024-05-06T15:11:27.002872
3306 / tcp 
2117647996 | 2024-05-29T21:26:45.675417
8009 / tcp 
-1117764704 | 2024-05-31T16:28:22.887534
8080 / tcp 
-795948505 | 2024-05-28T01:27:03.861572
33060 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved