GeneralInformation

Hostnames	vmi1100229.contaboserver.net exodusdiablo.xyz
Domains	contaboserver.net exodusdiablo.xyz
Country	United States
City	New York City
Organization	Contabo GmbH
ISP	Nubes, LLC
ASN	AS40021
Operating System	Ubuntu

WebTechnologies

CDN

PaaS

Reverse proxies

Security

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 3000 4000 5000

-1604270511 | 2024-05-03T14:25:02.596245

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.10
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAACAQDagZpENmryQtn31e6qCAkHqJi6q65YomruEeVhltNAMhWh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Fingerprint: 58:5f:f1:f3:81:97:f3:78:94:67:0a:36:f2:5c:ed:44

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

589765266 | 2024-05-07T18:42:52.267345

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 May 2024 18:42:51 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://85.239.231.0/

1626841111 | 2024-05-07T22:25:20.552708

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 May 2024 22:25:20 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 213
Connection: keep-alive
x-trace: BeSMZlywzo
x-envoy-upstream-service-time: 47
x-cache: Miss from cloudfront
via: 1.1 db615220fdf1b471c82cd306c2f4717a.cloudfront.net (CloudFront)
x-amz-cf-pop: JFK50-P1
x-amz-cf-id: HTFX9u9l0y1Ge3yPgRXiICPkyG6mK5rV7r-vQzVoPqg5eH27eY9GaA==
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=3600; includeSubDomains; preload
vary: Origin
cache-control: public, max-age=30

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b2:72:29:47:0b:9b:26:16:c0:62:d3:a4:2e:0f:3c:68:6d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Jan 30 11:20:27 2024 GMT
            Not After : Apr 29 11:20:26 2024 GMT
        Subject: CN=exodusdiablo.xyz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:c2:a2:e0:81:a1:f2:16:c6:bf:d0:dd:50:
                    88:48:f7:65:16:14:81:d5:a2:46:59:d0:41:4b:09:
                    0a:09:68:eb:a3:f7:b7:90:0c:c3:48:42:80:f6:9e:
                    bc:9c:49:1c:10:37:35:8c:43:33:34:8d:40:da:64:
                    23:d5:f1:0b:a8:ae:eb:67:30:e2:dd:39:5b:4e:0e:
                    a3:26:32:d9:45:67:a0:9d:ce:db:91:8c:d3:86:76:
                    3a:4f:89:06:70:45:08:71:cf:f5:d2:98:dc:4a:85:
                    51:74:33:64:e6:aa:f0:3a:e3:26:9f:bd:a0:96:ce:
                    b0:e5:69:11:a2:11:2a:19:9e:4e:80:0b:33:4b:0a:
                    28:b8:ca:e0:1f:d7:77:78:5a:8d:86:45:2b:da:6c:
                    33:dc:59:45:3c:54:db:0a:87:d9:52:c7:0b:52:2e:
                    91:b2:ed:a5:df:fc:83:14:60:23:5a:8b:59:5b:30:
                    1c:1f:d5:93:2b:d0:82:b7:e7:af:27:6f:fd:27:2a:
                    2a:5c:cf:ce:44:3a:4e:28:a7:29:eb:88:fd:af:b1:
                    25:df:bf:a6:f2:63:22:54:c4:45:49:67:1f:3c:13:
                    0a:d0:dd:b9:47:b2:a5:8c:57:41:f0:58:83:35:7b:
                    8e:9e:cf:f4:d8:e9:23:e4:dd:a1:a9:75:5e:08:81:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                49:F4:3F:54:59:F4:D4:DF:C9:E4:D4:EF:91:CB:D7:04:1C:4E:B7:F4
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.exodusdiablo.xyz, DNS:exodusdiablo.xyz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jan 30 12:20:27.982 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F4:19:22:F0:63:17:E0:4D:56:9C:17:
                                AB:9D:05:60:4F:4F:A4:33:40:5B:36:3C:7F:B8:B2:80:
                                03:70:AB:79:95:02:21:00:8F:E4:D4:E5:06:CF:1C:DB:
                                FA:53:43:20:33:2E:F4:B1:9C:E5:59:F9:E9:B9:1D:F8:
                                37:F2:83:B6:CF:67:BB:5C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Jan 30 12:20:28.491 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BE:F2:47:E3:88:65:C8:AE:1F:D6:88:
                                1B:2B:18:AA:B1:1C:38:E4:60:7C:2E:69:0B:E6:2A:46:
                                A4:D1:3D:35:42:02:21:00:E0:88:C2:13:10:8B:D6:FF:
                                BB:7D:A9:A1:C5:6E:5C:7A:59:06:F8:0A:FE:69:68:8D:
                                C7:4A:88:DA:3D:0C:43:A4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0d:80:33:2a:6d:b3:41:94:74:88:bc:1c:30:49:1b:7c:b4:1c:
        20:ab:ca:7f:58:be:f9:2b:ef:c4:b8:a3:cb:64:ac:5a:ff:0a:
        bb:67:94:89:39:6a:09:18:ca:e5:1c:39:0a:37:f2:e0:61:2c:
        27:50:05:89:f5:01:eb:ee:c2:ac:7a:76:13:d1:f6:98:63:19:
        f4:cd:31:1b:cb:8a:d1:2f:44:34:19:d4:05:ee:cf:01:b9:8a:
        a3:e4:1b:ac:25:6a:ed:7c:d0:ed:49:f1:6a:49:9f:50:d4:61:
        eb:99:82:72:20:3b:ce:b1:07:77:15:71:24:f6:3c:24:c1:55:
        c7:34:59:99:e0:56:2f:fd:4e:fb:ba:71:08:dc:5c:b3:04:25:
        22:27:98:ae:72:72:8f:d7:52:86:50:99:e1:fe:92:1e:ce:0f:
        07:b4:d3:75:dc:6f:a2:bd:c9:d9:9d:7e:c8:0d:5f:52:e0:37:
        67:4d:af:37:cc:35:36:c8:9c:2b:3a:c1:c3:a1:0f:a7:66:74:
        7a:62:49:ce:41:af:5f:a3:77:1c:04:aa:65:2c:56:fc:9d:f6:
        ba:ff:d1:58:2f:90:d7:0c:e5:40:64:4d:52:e5:04:12:d6:92:
        72:49:a1:c3:74:48:fa:65:02:25:25:6b:4c:04:8d:66:23:ce:
        91:4a:b1:b4

1272570256 | 2024-05-07T08:26:55.054341

3000 / tcp

HTTP/1.1 200 OK
content-type: application/json; charset=utf-8
content-length: 213
date: Tue, 07 May 2024 08:26:10 GMT
x-trace: 3b35qIy-lT
server: envoy
x-envoy-upstream-service-time: 27
x-cache: Hit from cloudfront
via: 1.1 aa7ca65bca4d95ba9a04dd166671496c.cloudfront.net (CloudFront)
x-amz-cf-pop: JFK50-P1
x-amz-cf-id: cxHEACGBLRYx4b5AeAVSMjU4m6m_SiNuwqTfJmqtB14ttYPA9JmS3g==
age: 44
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=3600; includeSubDomains; preload
vary: Origin
cache-control: public, max-age=30

-1246004407 | 2024-05-05T16:03:45.815890

4000 / tcp

HTTP/1.1 400 Bad Request
Connection: close

841027836 | 2024-04-25T05:01:46.140727

5000 / tcp

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Origin: *
Content-Type: application/json; charset=utf-8
Content-Length: 1087729
ETag: W/"1098f1-TXDAELi/eLWyC6AaLG6OeWvQuy0"
Date: Thu, 25 Apr 2024 05:01:45 GMT
Connection: keep-alive
Keep-Alive: timeout=5

85.239.231.0

Last Seen: 2024-05-07

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1604270511 | 2024-05-03T14:25:02.596245
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.10

589765266 | 2024-05-07T18:42:52.267345
80 / tcp

nginx1.18.0

1626841111 | 2024-05-07T22:25:20.552708
443 / tcp

nginx1.18.0

1272570256 | 2024-05-07T08:26:55.054341
3000 / tcp

-1246004407 | 2024-05-05T16:03:45.815890
4000 / tcp

841027836 | 2024-04-25T05:01:46.140727
5000 / tcp

Products

Pricing

Contact Us

85.239.231.0

Last Seen: 2024-05-07

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1604270511 | 2024-05-03T14:25:02.596245 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.10

589765266 | 2024-05-07T18:42:52.267345 80 / tcp

nginx1.18.0

1626841111 | 2024-05-07T22:25:20.552708 443 / tcp

nginx1.18.0

1272570256 | 2024-05-07T08:26:55.054341 3000 / tcp

-1246004407 | 2024-05-05T16:03:45.815890 4000 / tcp

841027836 | 2024-04-25T05:01:46.140727 5000 / tcp

Products

Pricing

Contact Us

-1604270511 | 2024-05-03T14:25:02.596245
22 / tcp

589765266 | 2024-05-07T18:42:52.267345
80 / tcp

1626841111 | 2024-05-07T22:25:20.552708
443 / tcp

1272570256 | 2024-05-07T08:26:55.054341
3000 / tcp

-1246004407 | 2024-05-05T16:03:45.815890
4000 / tcp

841027836 | 2024-04-25T05:01:46.140727
5000 / tcp