GeneralInformation

Hostnames	sentry.lifehacker.ru static.211.169.130.94.clients.your-server.de
Domains	lifehacker.ru your-server.de
Country	Germany
City	Nürnberg
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940
Operating System	Ubuntu

WebTechnologies

Programming languages

Python

Web frameworks

Django

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 9000

560106125 | 2024-05-14T17:53:49.576305

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.2
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQC27F5Pb6bDfPSHJ8XqGcqxxVYRALjcMIaV4Ia0aNqY5bDe
1c5x1Jlx5M7S7fs2WMv//IohyYNsm1yPCb2JlnuKONRMkiLUUw7mH0M9/XaRBxqJUt+NI17zwgDF
rScLAnjvoYVsv9X9FKf0ixhP3Da9z2T8p5MDzPop4yOd3VCdsNBqN8yK/5CVHxpseiN7Z/ckv6EK
FyvptW9x6yIVHPyIQYU+m6TLmlSGhIAMegi/fPx2Lqpy2uZRv0q0ru0tlFfM2QoBHCuJr+A5cKn6
eXXgXjtkURfI0tu8KOj+5GJ/RAE+IXDnHvZDsmcXa9mje3U3GZuXVCjHaNd6oZkUCbA32A//QQiR
xfms1YuxMQkquQeYRmk6P2snVhsFaSyKQ7Xk0XALyyMuVuzeVarPlh6kILMWxurENDG0HepH6xCM
nXhvGqxCQxja7BMWyZaXuu5u3fA0a1G/fIsUmg7CdStw6ficuotDOnAehBS0rxJ63m25VcXMNsS3
ggAA6jFhcGs=
Fingerprint: 8d:ac:8b:d9:8c:f6:13:f4:f5:2e:5b:c1:5b:38:eb:93

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

677579724 | 2024-05-15T02:19:31.558138

80 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 15 May 2024 02:19:31 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

-633293648 | 2024-05-18T23:02:21.303868

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 18 May 2024 23:02:20 GMT
Content-Type: text/html
Content-Length: 11809
Connection: keep-alive
Expires: Sat, 18 May 2024 23:02:20 GMT
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Vary: Accept-Language, Cookie
Content-Language: en
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Set-Cookie: sc=lbopKty5vPRMw2HQYu6hYjMkIkpKCskqj4p1WW6HpJrdtPxpwHh2jFEBSBkbdvpr; expires=Sat, 17-May-2025 23:02:20 GMT; Max-Age=31449600; Path=/
Set-Cookie: sentrysid=gAJ9cQBYCgAAAHRlc3Rjb29raWVxAVgGAAAAd29ya2VkcQJzLg:1s8T4G:z12K25YYcu8ZAbamw2Q7kpPJ1_I; expires=Sat, 01-Jun-2024 23:02:20 GMT; HttpOnly; Max-Age=1209600; Path=/
Strict-Transport-Security: max-age=31536000

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:24:89:8f:5d:c6:56:8f:be:74:95:0e:e8:e3:57:dd:ba:44
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Aug 25 17:16:59 2023 GMT
            Not After : Nov 23 17:16:58 2023 GMT
        Subject: CN=sentry.lifehacker.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:fd:40:ac:24:de:50:42:30:d5:d6:40:cd:
                    0a:98:ad:db:70:96:0a:2c:0b:4a:7c:5c:69:e0:ab:
                    e2:72:d2:e8:eb:e7:b7:65:1a:8b:67:b5:bf:10:fa:
                    69:7c:e8:aa:a8:fe:2d:35:72:f2:42:af:bc:3c:21:
                    fb:95:f4:6a:57:52:d6:e1:29:7b:cc:d3:6d:8a:ae:
                    16:f8:50:b2:7d:de:d3:12:88:bc:0e:7a:b6:4f:e6:
                    ac:18:93:ac:fb:fe:ee:35:60:3c:5a:32:41:d5:da:
                    ee:3b:7f:0d:b8:18:6e:b1:b4:ad:d6:59:0c:2f:e5:
                    ce:15:fc:88:fd:43:63:5b:36:b3:ce:cb:87:6a:26:
                    ac:c4:f1:cf:bd:92:c6:cf:33:b0:ac:d8:00:6c:6b:
                    ab:13:69:b3:d9:86:6a:ce:2e:35:13:e1:c0:b5:ae:
                    70:af:16:6b:e1:16:0f:7e:70:d8:4d:03:f3:34:01:
                    f4:6d:b7:98:15:c8:ab:b1:20:46:a5:02:18:77:52:
                    95:17:c8:02:70:1f:eb:3e:19:99:26:3f:04:74:34:
                    ab:65:18:58:43:7c:8e:bd:21:1b:6f:d4:6b:e0:d6:
                    b3:c0:c0:c9:b7:a1:d7:ac:f3:e6:b1:b0:a7:e6:08:
                    fc:41:a1:6a:f0:36:9e:34:8a:d9:6a:45:ec:87:a2:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                B5:57:A0:FB:CC:51:30:3D:C8:48:25:02:DF:BB:A2:E9:4D:FA:76:21
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:sentry.lifehacker.ru
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : B7:3E:FB:24:DF:9C:4D:BA:75:F2:39:C5:BA:58:F4:6C:
                                5D:FC:42:CF:7A:9F:35:C4:9E:1D:09:81:25:ED:B4:99
                    Timestamp : Aug 25 18:16:59.500 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:4E:F3:07:D9:22:C0:8B:29:80:78:AC:7C:
                                04:C2:82:BF:43:75:B1:DA:22:E2:7B:32:5F:15:25:8D:
                                97:5C:2B:A4:02:21:00:D6:3F:FA:E9:9E:6E:32:F7:EA:
                                31:1C:5A:51:CA:3E:09:6F:EB:6F:36:E9:B6:FC:31:0B:
                                2E:1F:EE:5F:B8:07:9C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : AD:F7:BE:FA:7C:FF:10:C8:8B:9D:3D:9C:1E:3E:18:6A:
                                B4:67:29:5D:CF:B1:0C:24:CA:85:86:34:EB:DC:82:8A
                    Timestamp : Aug 25 18:16:59.557 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:2E:B8:0E:20:E9:94:83:10:5A:53:3E:DC:
                                A2:0C:98:EA:37:E9:53:71:3E:3B:22:57:20:61:D6:4C:
                                C6:09:FF:CF:02:20:09:63:0A:05:8B:08:E0:96:94:E4:
                                6D:6C:61:D6:73:A3:D5:89:C5:99:9E:4C:07:E2:64:C5:
                                5B:64:02:19:0D:4F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        84:3f:9e:be:11:b7:ea:76:72:fa:d6:16:dc:c1:ce:62:ce:77:
        8d:fe:76:b6:d0:33:ce:ba:d2:11:1e:c9:4e:76:11:10:a1:6c:
        59:2d:e4:9b:09:bb:22:29:d7:5c:fc:c8:d2:2d:78:c5:06:bb:
        55:26:d6:9a:01:a9:91:b7:35:49:12:99:de:9d:13:e8:d3:e7:
        ea:4a:65:3c:33:d9:1f:db:be:96:43:da:89:a2:6d:56:d9:fb:
        99:e8:97:3a:a4:ea:ef:a3:ec:fe:85:d2:47:08:b1:39:84:31:
        5c:06:6f:a5:3c:8e:03:db:3f:c8:ba:1d:c9:90:8e:1d:44:44:
        04:cc:bc:44:e0:6b:82:55:36:af:c9:52:ac:09:56:87:33:2f:
        fc:13:71:56:f0:e8:b1:ce:38:2c:58:37:1f:d1:11:c6:2c:ca:
        48:aa:1d:7e:ca:d0:40:6c:ae:84:8c:af:26:a1:2e:88:2d:f4:
        00:ad:16:72:02:bc:10:6c:13:c5:92:51:96:96:e8:89:07:89:
        7d:ea:0b:88:c2:a9:46:f7:a6:f4:a2:3c:d3:7c:f6:c7:4d:09:
        f2:85:3e:a5:d9:67:63:41:0f:fa:67:e8:5f:2c:4e:01:cd:d2:
        2c:75:6e:e5:a3:a8:19:57:17:55:fc:63:39:c5:1e:de:e1:de:
        48:7a:f7:35

-345930685 | 2024-05-18T21:44:25.500106

9000 / tcp

HTTP/1.1 302 Found
Server: nginx
Date: Sat, 18 May 2024 21:43:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Location: /auth/login/
X-Robots-Tag: noindex, nofollow
Vary: Accept-Language, Cookie
Content-Language: en
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Set-Cookie: sentrysid=gAJ9cQBYBQAAAF9uZXh0cQFYAQAAAC9xAnMu:1s8RqR:NHZ2THya3Y1VpUroRDKbc5TFWS8; expires=Sat, 01-Jun-2024 21:43:59 GMT; HttpOnly; Max-Age=1209600; Path=/

94.130.169.211

Last Seen: 2024-05-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

560106125 | 2024-05-14T17:53:49.576305
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.2

677579724 | 2024-05-15T02:19:31.558138
80 / tcp

nginx1.18.0

-633293648 | 2024-05-18T23:02:21.303868
443 / tcp

nginx1.18.0

-345930685 | 2024-05-18T21:44:25.500106
9000 / tcp

nginx

Products

Pricing

Contact Us

94.130.169.211

Last Seen: 2024-05-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

560106125 | 2024-05-14T17:53:49.576305 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.2

677579724 | 2024-05-15T02:19:31.558138 80 / tcp

nginx1.18.0

-633293648 | 2024-05-18T23:02:21.303868 443 / tcp

nginx1.18.0

-345930685 | 2024-05-18T21:44:25.500106 9000 / tcp

nginx

Products

Pricing

Contact Us

560106125 | 2024-05-14T17:53:49.576305
22 / tcp

677579724 | 2024-05-15T02:19:31.558138
80 / tcp

-633293648 | 2024-05-18T23:02:21.303868
443 / tcp

-345930685 | 2024-05-18T21:44:25.500106
9000 / tcp