GeneralInformation

Hostnames	stage.moyerschicks.com 45.32.214.185.vultrusercontent.com
Domains	moyerschicks.com vultrusercontent.com
Country	United States
City	Atlanta
Organization	Vultr Holdings, LLC
ISP	The Constant Company, LLC
ASN	AS20473
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 3306

399864422 | 2024-04-18T08:06:21.710728

22 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDbFUX9YnuDtrq9wKjb/8W8n9YTDZuGCV3GJj2VSgYj4Tl/
hQY0czwGphrGqFaN/dH99tMoOFrEyjcC0DyFt5iASaAt6GyFNzsrmkhTEvR/V3cStsxPE5hjKLOT
FaCRVYm+gkCFTXcnbrS5aUTeTo4M6i3+ZLRWKt8nrAfcB3Ehuu7RbezD2FPZJZHyQ4FWeIeGiVo4
d+8SW6ku7dD21FK6Inub94aoJR6kGPSb/JGd2bXKCjzBRkRMadVcezmC1fhQxoycClFunn3VJBci
AtXuCIE5FNBdqe9E3c+zwIlqBEvnIrvnpTEu2kANnN2NSupfB+BGUd1TH+/PpjcGTttb
Fingerprint: c6:ee:ac:fd:88:31:42:65:bb:a3:f6:6b:2c:e8:16:03

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

589765266 | 2024-04-27T09:53:33.959134

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 27 Apr 2024 09:53:33 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://stage.moyerschicks.com/

-1560701277 | 2024-04-26T04:29:29.401776

443 / tcp

HTTP/1.1 200 
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 04:29:29 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 2302
Connection: keep-alive
Set-Cookie: hmgrsessionid=5CECAE40181B8974E1E617BECC3531CC; Path=/; HttpOnly

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6f:3f:69:c5:57:4d:17:88:9f:8a:37:4c:a4:fa:55:ca:17
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  5 05:11:15 2024 GMT
            Not After : Jul  4 05:11:14 2024 GMT
        Subject: CN=stage.moyerschicks.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:18:77:99:1e:89:ea:f7:e5:50:b5:28:d4:
                    e8:5e:bf:4f:01:c5:a7:30:d4:e5:69:2f:73:f4:f4:
                    9e:9f:cd:1b:ef:09:a7:e9:ed:98:81:7e:d3:6c:49:
                    0d:9c:df:7e:89:17:f4:5a:ee:d1:27:38:8c:9b:26:
                    97:a1:83:4c:1a:ec:a8:08:c1:4d:5c:41:25:da:61:
                    d8:09:6b:30:fe:7e:31:46:af:e9:c8:58:ba:56:b9:
                    63:15:7b:e9:6f:44:67:3e:49:f5:1b:16:95:1d:24:
                    5b:da:8b:b9:b7:e0:10:dc:4f:d3:d9:05:5d:73:6b:
                    59:5c:ad:9f:08:18:45:30:71:8a:3e:3a:81:2e:db:
                    9e:66:7b:b5:33:a0:8c:83:80:13:06:77:6b:fa:5c:
                    50:d8:81:f9:fe:3b:a0:ea:67:31:82:31:54:55:05:
                    a4:1b:63:e8:c1:24:1b:fd:2f:9e:a4:47:95:72:41:
                    55:f7:0d:cd:cf:df:c8:59:8c:24:0d:51:dc:7e:1a:
                    d7:df:52:1c:33:c3:9a:8b:7d:f7:3e:6e:ea:31:53:
                    3c:61:59:1b:1a:4b:63:ce:33:c6:78:b5:10:a3:bd:
                    9b:af:ed:91:3d:2f:5d:42:3b:a7:00:eb:74:1d:78:
                    2e:6d:61:3e:92:01:a1:f8:a1:b7:ce:6c:5e:cf:42:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                06:57:1B:EC:49:AD:8A:F2:CE:60:FF:7A:D1:80:07:99:D8:28:22:DD
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:stage.moyerschicks.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Apr  5 06:11:15.757 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:A0:9D:DA:75:34:2B:93:A6:0D:7E:41:
                                20:F2:E7:FA:D4:EE:CA:19:D5:9A:93:C9:E6:F6:89:82:
                                EA:F3:75:DE:AF:02:21:00:F6:71:DC:CD:62:5D:28:BA:
                                94:3B:D8:D9:8C:4E:F7:F4:AD:82:6E:9C:E8:BB:60:7F:
                                32:48:A8:BD:D2:5E:3C:D9
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Apr  5 06:11:15.847 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:8D:5F:48:9F:25:F6:C4:30:3F:D1:A6:
                                4E:4E:54:E3:3F:2F:AD:4A:75:50:D4:DA:2E:5F:F8:4A:
                                7E:49:E7:54:F9:02:21:00:80:AB:FE:AF:27:E0:D9:0D:
                                5D:72:53:D2:FB:19:22:8F:21:C1:5C:47:5C:31:52:EA:
                                DC:B5:18:7C:C9:27:E0:0B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2a:6a:4f:cc:20:f9:28:e7:2d:a6:3e:76:8e:d5:ab:79:3d:22:
        77:23:c6:c1:70:90:12:1a:f5:b3:0b:1a:38:94:96:96:9e:46:
        b4:3f:a5:30:0e:73:40:31:d1:83:48:85:b8:80:99:1f:ec:45:
        e5:20:33:1d:db:a7:8d:54:8f:25:e3:20:35:32:d1:00:f6:20:
        c8:e6:99:71:53:a5:48:61:5e:c5:a8:45:1e:b8:67:06:53:ba:
        d8:72:bd:49:b8:fe:19:a4:fa:bd:05:28:53:b3:67:fb:d2:d2:
        ea:8c:1b:fc:e9:1b:27:4e:e6:1b:78:c5:d3:84:bd:05:6f:30:
        ca:1e:30:1f:97:af:5d:b6:3d:5a:82:10:e5:d5:7b:30:19:66:
        37:23:31:54:a4:92:6b:24:1e:91:d2:57:45:b5:3f:67:c2:92:
        99:1f:cc:87:4e:3b:d1:f5:fc:32:e5:a0:c5:e9:ee:eb:d7:82:
        a0:61:ef:b8:c0:17:6c:bf:26:d8:9e:a6:84:2a:bc:c6:a0:be:
        a0:b3:6b:d7:5c:84:4e:29:19:70:fd:0d:ca:70:7e:a7:1e:04:
        ec:cf:ca:a9:a5:5e:33:02:68:f6:72:39:33:d6:6c:f4:fb:d0:
        32:85:1e:63:36:8f:47:d3:28:67:0e:fd:69:fe:2f:03:4e:25:
        be:5a:11:74

733625893 | 2024-04-24T02:33:56.802450

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 5.7.34-0ubuntu0.18.04.1
  Capabilities: 65535
  Server Language: 8
  Server Status: 2
  Extended Server Capabilities: 49663
  Authentication Plugin: mysql_native_password

45.32.214.185

Last Seen: 2024-04-27

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

399864422 | 2024-04-18T08:06:21.710728
22 / tcp

OpenSSH7.6p1 Ubuntu-4ubuntu0.3

589765266 | 2024-04-27T09:53:33.959134
80 / tcp

nginx1.18.0

-1560701277 | 2024-04-26T04:29:29.401776
443 / tcp

nginx1.18.0

733625893 | 2024-04-24T02:33:56.802450
3306 / tcp

MySQL5.7.34-0ubuntu0.18.04.1

Products

Pricing

Contact Us

45.32.214.185

Last Seen: 2024-04-27

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

399864422 | 2024-04-18T08:06:21.710728 22 / tcp

OpenSSH7.6p1 Ubuntu-4ubuntu0.3

589765266 | 2024-04-27T09:53:33.959134 80 / tcp

nginx1.18.0

-1560701277 | 2024-04-26T04:29:29.401776 443 / tcp

nginx1.18.0

733625893 | 2024-04-24T02:33:56.802450 3306 / tcp

MySQL5.7.34-0ubuntu0.18.04.1

Products

Pricing

Contact Us

399864422 | 2024-04-18T08:06:21.710728
22 / tcp

589765266 | 2024-04-27T09:53:33.959134
80 / tcp

-1560701277 | 2024-04-26T04:29:29.401776
443 / tcp

733625893 | 2024-04-24T02:33:56.802450
3306 / tcp