GeneralInformation

Hostnames	vmi1642367.contaboserver.net faketube.cz www.faketube.cz
Domains	contaboserver.net faketube.cz
Country	Germany
City	Düsseldorf
Organization	Contabo GmbH
ISP	Contabo GmbH
ASN	AS51167

WebTechnologies

Analytics

CDN

Cookie compliance

JavaScript libraries

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 1433 3306 10000

-1744805225 | 2024-06-05T23:57:22.042823

22 / tcp

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.7
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAACAQDEWL3/pAGrD596PvpWIk9kPUQBGbWDZB8J0ZK1uCMetTKw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Fingerprint: b2:20:32:a5:9f:5e:25:4a:b6:28:ed:f7:64:17:ae:94

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

869281729 | 2024-05-27T14:04:53.156368

80 / tcp

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 May 2024 14:04:53 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

1651418515 | 2024-06-12T11:50:35.122365

443 / tcp

FakeTube

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Wed, 12 Jun 2024 11:50:34 GMT
Set-Cookie: faketube_session=eyJpdiI6IkIxY2ZWUHNCRTNqVnVMNC8wNERFZWc9PSIsInZhbHVlIjoidXlESmF5UFNOTnhCV0R4QmxGYTRUS1FyWDFkV1ljanBhd2VGUnhQblFxMGJud1hTb1I5UTdXZkpsNGkxb0FqZk1pWWtDTHZCMTVLOUZFK1F1RFUwSERpeVJSL1FIZjBNbkZjYUcrcVlXL2U5UVd1TlZtQnpGa1FWanQwdlEyUjgiLCJtYWMiOiI5NmY2ODNhNzFkYzI3MTEzNmMxZjlmMjUzOGZkYWNmMzg4YzY3ODUxN2UwNmQwNjdlODkxNDI1ZGFhYjQyZDZiIiwidGFnIjoiIn0%3D; expires=Thu, 12 Jun 2025 11:50:34 GMT; Max-Age=31536000; path=/; domain=faketube.cz; httponly; samesite=lax
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:06:c0:f5:2f:77:43:47:ca:92:45:b0:7a:8a:52:f6:81
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: May 13 18:31:53 2024 GMT
            Not After : Aug 11 18:31:52 2024 GMT
        Subject: CN=faketube.cz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:28:02:f8:f2:23:2f:84:cf:46:c0:c4:ae:
                    bd:ab:f2:35:0d:dc:0f:6d:60:12:c9:58:64:d9:24:
                    4a:20:b0:b0:85:c9:8c:fe:20:1f:67:fe:32:0b:f9:
                    53:2e:a3:da:8b:d6:89:be:4b:f0:cd:c5:91:a0:ee:
                    7b:a5:01:70:0a:f2:1e:0f:14:70:f8:db:43:27:e7:
                    67:ab:c7:3c:db:8b:37:b9:90:b1:da:d5:bd:e0:bb:
                    d1:7b:fc:64:d9:7c:82:49:26:af:46:03:e2:9d:f1:
                    78:49:e0:26:5f:1a:aa:ba:9a:8b:e4:02:16:35:42:
                    dc:79:03:f1:6f:85:8a:7b:ea:2b:e5:46:cd:52:0b:
                    be:e6:f8:7a:da:41:b8:4c:c9:28:bf:fe:37:79:3e:
                    0d:f1:60:75:f6:e1:e5:3e:14:a1:72:a6:66:1e:77:
                    ae:5b:45:45:06:e8:6c:ce:38:6c:03:19:a0:41:92:
                    7b:a2:11:c3:62:f9:8b:d8:4c:6a:ad:9b:f7:44:9f:
                    a7:6e:5c:fe:8a:3e:fa:2f:b1:c9:2d:a6:f4:b0:d1:
                    06:d3:63:24:c8:95:3f:73:47:39:37:61:66:a0:4f:
                    d8:87:74:61:4b:54:37:f7:c9:f4:f6:f2:83:cf:8d:
                    db:12:40:ee:76:dc:14:63:fd:4e:f3:37:de:16:a7:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                9D:DF:27:99:14:56:2F:FB:24:A4:76:D6:79:A9:65:28:57:5D:B7:05
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:faketube.cz, DNS:www.faketube.cz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : May 13 19:31:53.362 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B1:6A:72:34:6E:1F:9D:BB:EC:43:9F:
                                5C:F2:8C:75:92:B5:06:C4:E8:8C:1A:E2:59:C6:D3:BA:
                                79:80:48:23:B7:02:21:00:CD:D8:46:63:EC:F0:9E:E0:
                                19:3B:19:17:0F:BA:4A:7A:57:0D:C9:D9:3D:B5:62:03:
                                9D:4C:BD:C0:D4:E2:F2:58
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : May 13 19:31:53.441 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:6D:27:27:6C:09:46:0F:E1:C4:79:20:DD:
                                67:E9:4A:18:C3:E1:D4:1F:B3:73:21:71:9E:8E:F9:2A:
                                D6:83:49:4A:02:21:00:D3:F8:C5:51:11:11:D6:21:AF:
                                22:07:A7:46:85:25:BE:06:53:67:A8:5C:30:F6:CA:62:
                                0E:8E:40:17:F5:30:A6
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        66:11:25:db:0e:c6:ca:e0:b6:30:96:71:ce:e6:a8:34:69:6c:
        0d:08:71:9f:58:ce:67:9d:20:39:d3:5d:af:b0:76:7a:c3:91:
        02:83:21:15:5f:8f:ad:de:84:0f:45:d9:4b:eb:3f:5d:42:4a:
        82:41:e6:47:dd:e5:dc:3d:e3:78:0f:d6:0f:4b:dd:25:6e:cf:
        9f:1b:a6:52:89:28:9f:b1:6a:5f:7c:15:d5:5d:98:0e:8a:37:
        d5:2f:ff:e8:9f:d6:34:b9:5a:b7:e5:96:ee:8b:e7:45:2f:54:
        e7:b4:0a:b6:dd:5e:9e:1e:4f:e7:d8:46:55:77:46:08:7f:5c:
        3e:93:91:d3:ef:1c:ab:ab:cd:55:80:2e:1c:96:0f:30:4f:bd:
        03:72:81:d3:3f:8e:c3:94:b3:7e:83:bc:dc:c5:f8:b7:db:02:
        cd:c0:c0:35:6a:11:0e:44:86:c2:35:a5:9c:2a:4e:2f:7f:8b:
        68:7b:f9:a2:ae:c4:54:cb:52:d7:38:67:8a:51:c8:3a:02:74:
        02:bf:7a:22:40:e9:13:22:1c:72:85:83:d2:4b:34:9e:e6:5a:
        d6:cb:ee:a5:2a:d2:cf:e3:2d:ec:47:9b:c9:52:c3:ee:fa:fc:
        18:ec:95:cf:d8:c8:f2:8a:07:01:47:9a:ef:31:11:c3:c3:96:
        94:6e:33:3a

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

122264879 | 2024-05-30T10:17:21.299707

1433 / tcp

\x04\x01\x01\x00\x006\x01\x00\xaa\xec\x00\x14H\x00\x00\x01\x0ef\x00L\x00o\x00g\x00i\x00n\x00 \x00f\x00a\x00i\x00l\x00e\x00d\x00.\x00 \x00T\x00h\x00e\x00 \x00l\x00o\x00g\x00i\x00n\x00 \x00i\x00s\x00 \x00f\x00r\x00o\x00m\x00 \x00a\x00n\x00 \x00u\x00n\x00t\x00r\x00u\x00s\x00t\x00e\x00d\x00 \x00d\x00o\x00m\x00a\x00i\x00n\x00 \x00a\x00n\x00d\x00 \x00c\x00a\x00n\x00n\x00o\x00t\x00 \x00b\x00e\x00 \x00u\x00s\x00e\x00d\x00 \x00w\x00i\x00t\x00h\x00 \x00I\x00n\x00t\x00e\x00g\x00r\x00a\x00t\x00e\x00d\x00 \x00a\x00u\x00t\x00h\x00e\x00n\x00t\x00i\x00c\x00a\x00t\x00i\x00o\x00n\x00.\x00\nv\x00m\x00i\x001\x006\x004\x002\x003\x006\x007\x00\x00\x01\x00\xfd\x02\x00\x00\x00\x00\x00\x00\x00

1422255891 | 2024-06-11T13:08:33.253647

3306 / tcp

MariaDB:
  Protocol Version: 10
  Version: 10.6.16-MariaDB-0ubuntu0.22.04.1
  Capabilities: 63486
  Server Language: 45
  Server Status: 2
  Extended Server Capabilities: 33279
  Authentication Plugin: mysql_native_password

414986495 | 2024-06-16T06:08:39.730142

10000 / tcp

HTTP/1.0 200 Document follows
Date: Sun, 16 Jun 2024 06:08:39 GMT
Server: MiniServ
Connection: close
Auth-type: auth-required=1
Set-Cookie: redirect=1; path=/; httpOnly
Set-Cookie: testing=1; path=/; httpOnly
Strict-Transport-Security: max-age=0;
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self'; child-src 'self'
X-Content-Type-Options: nosniff
X-no-links: 1
Content-type: text/html; Charset=UTF-8

<!DOCTYPE HTML>
<html data-bgs="nightRider" class="session_login">
<head>
 <meta name="color-scheme" content="only light">
 <noscript> <style> html[data-bgs="gainsboro"] { background-color: #d6d6d6; } html[data-bgs="nightRider"] { background-color: #1a1c20; } html[data-bgs="nightRider"] div[data-noscript] { color: #979ba080; } html[data-slider-fixed='1'] { margin-right: 0 !important; } body > div[data-noscript] ~ * { display: none !important; } div[data-noscript] { visibility: hidden; animation: 2s noscript-fadein; animation-delay: 1s; text-align: center; animation-fill-mode: forwards; } @keyframes noscript-fadein { 0% { opacity: 0; } 100% { visibility: visible; opacity: 1; } } </style> <div data-noscript> <div class="fa fa-3x fa-exclamation-triangle margined-top-20 text-danger"></div> <h2>JavaScript je zakázán</h2> <p>Povolte javascript a aktualizujte stránku</p> </div> </noscript>
<meta charset="utf-8">
 <link data-link-ref rel="apple-touch-icon" sizes="180x180" href="/images/favicons/webmin/apple-touch-icon.png">
 <link data-link-ref rel="icon" type="image/png" sizes="32x32" href="/images/favicons/webmin/favicon-32x32.png">
 <link data-link-ref rel="icon" type="image/png" sizes="192x192" href="/images/favicons/webmin/android-chrome-192x192.png">
 <link data-link-ref rel="icon" type="image/png" sizes="16x16" href="/images/favicons/webmin/favicon-16x16.png">
 <link data-link-ref rel="mask-icon" href="/images/favicons/webmin/safari-pinned-tab.svg" color="#003374">
 <meta data-link-ref name="msapplication-TileImage" content="/images/favicons/webmin/mstile-150x150.png">
 <meta name="msapplication-TileColor" content="#003374">
 <meta name="theme-color" content="#003374">
 <script src="/service-worker.js" defer></script>
 <link data-link-ref crossorigin="use-credentials" rel="manifest" href="/manifest-webmin.json">
<title>Přihlášení do Webminu</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link href="/unauthenticated/css/bundle.min.css?2110001019999999999" rel="stylesheet">
<script>document.addEventListener("DOMContentLoaded", function(event) {var a=document.querySelectorAll('input[type="password"]');i=0;
for(length=a.length;i<length;i++){var b=document.createElement("span"),d=30<a[i].offsetHeight?1:0;b.classList.add("input_warning_caps");b.setAttribute("title","Caps Lock");d&&b.classList.add("large");a[i].classList.add("use_input_warning_caps");a[i].parentNode.ins

37.60.252.204

Last Seen: 2024-06-16

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1744805225 | 2024-06-05T23:57:22.042823
22 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.7

869281729 | 2024-05-27T14:04:53.156368
80 / tcp

nginx1.18.0

1651418515 | 2024-06-12T11:50:35.122365
443 / tcp

nginx1.18.0

122264879 | 2024-05-30T10:17:21.299707
1433 / tcp

MS-SQL Server 2022 CU12+GDR+16.0.4125.0

1422255891 | 2024-06-11T13:08:33.253647
3306 / tcp

MariaDB10.6.16-MariaDB-0ubuntu0.22.04.1

414986495 | 2024-06-16T06:08:39.730142
10000 / tcp

Products

Pricing

Contact Us

37.60.252.204

Last Seen: 2024-06-16

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

-1744805225 | 2024-06-05T23:57:22.042823 22 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.7

869281729 | 2024-05-27T14:04:53.156368 80 / tcp

nginx1.18.0

1651418515 | 2024-06-12T11:50:35.122365 443 / tcp

nginx1.18.0

122264879 | 2024-05-30T10:17:21.299707 1433 / tcp

MS-SQL Server 2022 CU12+GDR+16.0.4125.0

1422255891 | 2024-06-11T13:08:33.253647 3306 / tcp

MariaDB10.6.16-MariaDB-0ubuntu0.22.04.1

414986495 | 2024-06-16T06:08:39.730142 10000 / tcp

Products

Pricing

Contact Us

Vulnerabilities

-1744805225 | 2024-06-05T23:57:22.042823
22 / tcp

869281729 | 2024-05-27T14:04:53.156368
80 / tcp

1651418515 | 2024-06-12T11:50:35.122365
443 / tcp

122264879 | 2024-05-30T10:17:21.299707
1433 / tcp

1422255891 | 2024-06-11T13:08:33.253647
3306 / tcp

414986495 | 2024-06-16T06:08:39.730142
10000 / tcp