GeneralInformation

Hostnames	panel.dibanez.dev vigo01.dibanez.dev ns3230093.ip-5-135-142.eu
Domains	dibanez.dev ip-5-135-142.eu
Country	France
City	Lille
Organization	OVH SAS
ISP	OVH SAS
ASN	AS16276
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443 8089

1651973090 | 2024-04-21T00:11:08.478377

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 21 Apr 2024 00:11:08 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Mon, 25 Mar 2024 11:55:21 GMT
Connection: keep-alive
ETag: "66016629-264"
Accept-Ranges: bytes

-1964176317 | 2024-04-16T13:38:54.864603

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Tue, 16 Apr 2024 13:38:54 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkgwS3hhdm1UbVZaQXRQRnN1T2Ruemc9PSIsInZhbHVlIjoiWE4rNG1BQVpEMmtzKzQrbDAyZmFmTkJIekVLeEdrRmdGZE5RSEtibkVsVEFFMDBGRDgwQW1hRTNnNDZoMDJCczNyWHZQSmJIeUtkTHE4ampvU0VnYlVJQjFSbmVXdVRRTEdsUlNBZHo0dW9NS2pSV1lBU0hHdkdseTVHdkJqUVQiLCJtYWMiOiI5M2YwYzFmODMxZTY4NDhiODFhZWNhOGYzMjAzY2RhOWI3ZjMxMGUzM2MwZTY1OThiNTJiZDBkZTljZWQ4MmI1IiwidGFnIjoiIn0%3D; expires=Wed, 17 Apr 2024 01:38:54 GMT; Max-Age=43200; path=/; samesite=lax
Set-Cookie: pterodactyl_session=eyJpdiI6IjBrNC9TbUswWndERDNoRUVES0FjT2c9PSIsInZhbHVlIjoiVUVpY3YvMytJMW9Rd2JpMUlpZ1ZYK3VGRjM3TFc1eGRIc2tiNmxUdituNUlMYUx1eFVyS00xOStnUm1yT0ZPR0hlVk1kVjgzbnZDMFAvUDdOcFZKc0JTVzBnTmZEUHRVSmQ0TTVYd2FJOGQwM2RkNTZPSjQ4WG5Va1h6VUlwSlEiLCJtYWMiOiI2NzIzYzBlYTA2ZjU1ZDAwYWYxZTU2M2ExYjBmMDlkNDE1Nzk1ZWZhZjg1Yjk1YTRiYTUxNjMzMjJiYmEzMDgwIiwidGFnIjoiIn0%3D; expires=Wed, 17 Apr 2024 01:38:54 GMT; Max-Age=43200; path=/; httponly; samesite=lax

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d4:01:c8:a5:8e:a9:b7:0d:3c:22:ef:e2:e0:1d:db:b4:97
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 25 13:01:07 2024 GMT
            Not After : Jun 23 13:01:06 2024 GMT
        Subject: CN=panel.dibanez.dev
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:89:7a:a1:19:a5:a2:1f:e9:be:05:b4:12:87:8a:
                    5f:a3:cb:8a:8a:4e:8e:cd:fc:f0:e6:49:ad:0a:46:
                    d4:b8:01:db:d8:64:18:41:df:04:37:4e:88:c7:42:
                    1d:84:53:6f:55:8d:0b:31:8c:f5:8d:9b:21:30:09:
                    8d:d3:2b:ff:07
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                BF:95:C5:DD:8E:36:EF:29:18:23:7E:B7:91:FE:96:9B:4C:F5:64:03
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:panel.dibanez.dev
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Mar 25 14:01:07.995 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:2E:2C:04:E0:57:0C:31:8C:85:4F:B4:A4:
                                4E:30:D3:AB:E0:EA:B1:46:A0:FB:15:A6:FE:D9:3D:FC:
                                DB:AD:66:57:02:20:08:03:82:45:0B:B3:4C:01:C2:B9:
                                EE:03:1E:30:4F:D5:85:BD:C6:0E:74:9F:7E:4A:B4:2F:
                                93:D6:87:AD:53:E7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Mar 25 14:01:08.030 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C9:72:54:5F:37:A4:18:5F:56:47:6D:
                                71:52:E0:C8:EF:8B:75:5D:39:76:95:64:7C:C2:E8:E6:
                                49:CD:E5:2A:BB:02:20:65:A6:F1:B3:EE:A6:DA:A2:5C:
                                C0:5C:1F:1D:2D:8C:C5:EA:9F:CA:6A:A6:F5:36:D3:49:
                                EC:85:1C:FD:9D:02:45
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a6:54:af:5b:f6:24:62:f1:2c:5f:7e:49:9c:d4:13:9b:09:c5:
        c9:5c:6d:df:58:2f:0c:0c:55:bb:d5:8b:8a:7d:53:98:fc:78:
        02:68:4c:9f:f2:20:28:44:86:ab:1e:80:9f:a6:4e:65:28:eb:
        75:07:37:45:99:31:7f:d8:b7:d3:4d:69:80:e2:51:1a:97:47:
        3d:16:e9:61:86:f7:e8:da:5f:e7:a4:a3:13:c4:64:ac:a9:92:
        0e:76:30:68:71:3a:7f:71:b9:9b:87:f3:38:d3:f5:46:19:a1:
        c8:6b:ae:6c:f1:5b:36:bd:51:b1:1e:3d:b4:fe:b0:44:6a:ca:
        2a:70:01:c3:37:b9:40:88:f0:af:fb:60:b2:a5:73:55:d0:90:
        3d:23:95:41:95:10:f2:b8:4a:84:40:9c:ea:a9:21:a8:dd:a8:
        7f:6b:ef:2f:ae:42:d3:b9:a3:8b:28:24:2c:c0:58:21:d5:eb:
        78:9f:d2:aa:4d:6b:21:48:5a:7d:42:7c:46:d8:c3:53:c5:28:
        ee:13:d4:0c:38:fd:fd:76:59:20:b4:4b:ab:91:01:c7:28:a4:
        5f:b7:36:30:5c:d3:b0:6b:86:71:eb:8a:59:e9:8f:6c:80:71:
        40:e9:e2:ba:a2:8c:49:c3:cf:d5:59:26:33:45:27:3b:06:29:
        80:3a:85:42

-1916357745 | 2024-04-10T21:30:04.252198

8089 / tcp

HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept, Accept-Encoding, Authorization, Cache-Control, Content-Type, Content-Length, Origin, X-Real-IP, X-CSRF-Token
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Origin: https://panel.dibanez.dev
Access-Control-Max-Age: 7200
Content-Type: application/json; charset=utf-8
Www-Authenticate: Bearer
X-Request-Id: b2a47e23-f301-466d-806b-0689137c9470
Date: Wed, 10 Apr 2024 21:30:04 GMT
Content-Length: 77

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:12:42:44:a2:f2:51:3b:24:cc:01:bc:a6:73:9a:d1:78:f0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 25 14:10:44 2024 GMT
            Not After : Jun 23 14:10:43 2024 GMT
        Subject: CN=vigo01.dibanez.dev
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:20:c7:86:4d:4f:3e:00:20:aa:3b:4b:e7:dc:0e:
                    49:5a:89:ec:c6:f1:46:53:ad:c4:ef:df:51:8e:59:
                    e5:e3:4d:9a:5b:5c:f5:76:5b:1d:e0:bc:2d:f3:62:
                    e7:4d:f6:03:c4:86:b7:d9:7f:42:d8:0b:3e:dd:fe:
                    1f:ed:9b:e0:6e
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                CF:DF:41:6E:05:9B:8C:D4:D6:D5:B6:58:12:56:74:D6:A0:A0:35:3D
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:vigo01.dibanez.dev
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Mar 25 15:10:44.208 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F9:37:C9:5D:A7:F1:62:5F:15:B2:05:
                                84:4D:43:B2:AB:A1:D3:0D:D4:E3:90:6D:29:FD:47:A9:
                                04:B1:FF:DF:5B:02:20:09:BE:20:46:54:71:17:E4:1C:
                                89:BA:19:29:AC:E5:B3:F5:3F:85:25:B4:5D:DF:26:E9:
                                D5:F4:31:BF:04:9A:80
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
                                65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
                    Timestamp : Mar 25 15:10:44.220 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:FF:9E:AD:59:C7:F7:F6:50:F8:6D:9F:
                                07:04:FD:99:40:3E:58:7F:D0:E6:EE:87:1E:52:A6:AE:
                                3D:2B:32:F2:FF:02:20:6A:B8:04:05:FF:9C:86:46:DB:
                                5D:E2:07:C3:26:86:00:1C:E1:7A:CA:30:34:0B:36:51:
                                44:17:C9:72:46:49:DE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        37:29:db:16:49:f7:db:b0:0e:4d:69:87:e1:95:be:02:d6:48:
        f1:0c:49:90:d8:0a:cb:d2:01:ae:f3:65:b4:52:4e:52:1d:5c:
        aa:78:a8:52:fb:87:f4:42:12:b1:c6:ac:a4:ef:7f:9b:91:d0:
        89:11:90:8c:02:29:2c:d8:37:81:08:ed:c9:5e:78:82:ab:c7:
        e9:5e:61:f9:75:17:80:d5:2c:89:44:5f:9f:e4:ef:11:d9:31:
        25:09:9e:a1:7e:09:ac:62:ac:2a:ac:50:6b:a9:05:79:57:28:
        6a:f9:3b:68:92:68:4d:bd:a0:9a:82:d6:16:22:82:bc:27:70:
        d2:2f:ee:5a:93:01:f1:b6:3c:2a:3d:5f:4e:6a:43:fa:b7:b6:
        08:5e:99:75:de:8d:62:56:70:77:bf:f5:e4:0b:83:c7:f3:4f:
        ca:db:ac:66:f2:42:c8:1d:96:9c:48:13:13:71:cf:c3:01:bd:
        ea:47:f1:81:63:57:6a:71:33:3b:34:e5:18:0a:8a:92:4a:94:
        5e:33:55:63:f4:f0:29:72:41:76:84:cb:fc:e3:3b:80:dc:e3:
        26:6b:df:16:70:53:20:57:23:4f:d7:ee:3a:ba:ce:ac:ee:85:
        36:b9:51:d1:b0:77:f0:ce:e2:57:31:a5:59:1f:33:07:15:09:
        23:f3:4e:cf

5.135.142.37

Last Seen: 2024-04-21

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1651973090 | 2024-04-21T00:11:08.478377
80 / tcp

nginx1.18.0

-1964176317 | 2024-04-16T13:38:54.864603
443 / tcp

nginx1.18.0

-1916357745 | 2024-04-10T21:30:04.252198
8089 / tcp

Products

Pricing

Contact Us

5.135.142.37

Last Seen: 2024-04-21

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1651973090 | 2024-04-21T00:11:08.478377 80 / tcp

nginx1.18.0

-1964176317 | 2024-04-16T13:38:54.864603 443 / tcp

nginx1.18.0

-1916357745 | 2024-04-10T21:30:04.252198 8089 / tcp

Products

Pricing

Contact Us

1651973090 | 2024-04-21T00:11:08.478377
80 / tcp

-1964176317 | 2024-04-16T13:38:54.864603
443 / tcp

-1916357745 | 2024-04-10T21:30:04.252198
8089 / tcp