GeneralInformation

Hostnames	danballard.com www.danballard.com static.39.193.216.95.clients.your-server.de
Domains	danballard.com your-server.de
Country	Finland
City	Helsinki
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940
Operating System	Ubuntu

WebTechnologies

Development

Gitea

Programming languages

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 3000 3001 9001 9030

1471291477 | 2024-05-15T00:22:30.345851

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDSK3zVrqILFajfvHhigByFanVYd9GcqyIFYeFI01craTju
djY6/Ek24sGXJMTdZvxO4YSjHPOc8dRo1S3MmNzc+vrCABt8mnk4N5pH+/evwnEjotJi41MB3Ik1
T97Dwb/VH2dnoU+4byI+faxo4hUVx5t+FNFMoCZbHt6BJ3MHIMaqHmE96wf+To+jdwtoaJmdHCUh
qnnmDDoKCGId0SD8uilRhqqenUrVQr6rRwIwHcawYJuK85CVs3aDygNpRJQd1OBBBtnjnjbu4ww8
n5iDFuGPKSpXjGxqZAMKIsH7gwJG24bSqR19tda5LIi/lpX9BEhvuLaZN8caenTycYlP
Fingerprint: b7:e0:50:41:81:b1:3f:53:1a:59:09:c8:2b:40:13:03

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

589765266 | 2024-05-02T06:52:29.534473

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 02 May 2024 06:52:29 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://www.danballard.com/

-484956692 | 2024-05-16T15:08:12.843743

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 16 May 2024 15:08:12 GMT
Content-Type: text/html
Content-Length: 9291
Last-Modified: Sat, 04 May 2024 05:36:40 GMT
Connection: keep-alive
ETag: "6635c968-244b"
Strict-Transport-Security: max-age=31536000
Onion-Location: http://danbal6a2lkho4arcx2dpa6ykg6fyvukeoqowjlgs3uzmt6wrz4s54id.onion/
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c4:06:ed:89:f9:ac:e1:6f:8c:6d:b5:5e:21:2f:fb:d5:5f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 23 16:17:23 2024 GMT
            Not After : Jun 21 16:17:22 2024 GMT
        Subject: CN=danballard.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f4:e0:e1:0b:45:5e:14:98:6e:00:58:ec:b8:cc:
                    46:93:ae:96:b3:5a:5d:f2:61:d6:fe:c3:76:11:eb:
                    db:27:27:48:2a:07:d9:e0:a3:25:bd:4c:62:8b:13:
                    e1:36:5a:82:c3:4b:d3:94:00:42:ab:bf:39:0e:8a:
                    bd:bf:31:af:29:16:a6:86:76:86:ba:4d:cb:2f:f3:
                    cd:d8:38:13:fc:20:b7:c8:8d:bc:9a:28:bd:86:b8:
                    54:02:ea:42:8c:2e:b9:25:1b:93:44:f2:19:86:1b:
                    38:de:62:44:ad:c6:c7:cf:8d:1b:08:84:78:b7:4e:
                    6d:ec:6a:6a:c5:e9:ab:b3:bb:d0:5d:54:cf:8a:f6:
                    80:7c:9e:5b:1a:fb:84:4e:4a:fa:0a:2f:ad:24:ff:
                    de:1c:ec:f5:24:c3:3f:43:2d:98:e2:43:85:40:2a:
                    3d:ee:6a:8f:4d:52:e3:98:f8:ca:35:05:2b:65:65:
                    a6:bb:10:2d:41:b8:9a:b4:88:45:c4:0a:fa:75:03:
                    d2:41:eb:72:b2:d8:e1:06:6a:c3:fa:d1:ee:69:0c:
                    2a:f4:87:bf:09:e7:c3:c9:03:fd:3a:e6:51:0e:ff:
                    14:fb:28:8f:1a:37:de:3c:c7:db:1d:43:dc:f8:52:
                    9f:2a:42:e4:f2:e9:0b:71:e8:85:d6:59:9d:61:e0:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                4D:77:89:BF:B7:E5:DF:DD:01:E1:A2:72:3B:39:3A:B5:F1:43:97:7C
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:danballard.com, DNS:www.danballard.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Mar 23 17:17:23.702 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:63:87:6D:45:E1:B3:24:BF:88:7E:09:AA:
                                5D:2F:4A:26:00:3D:1C:2A:E4:C1:3F:0B:6C:02:40:00:
                                6D:E6:46:40:02:21:00:D7:A7:82:EC:0B:23:C8:24:28:
                                8E:D6:01:6C:C7:3A:1A:A2:31:DD:77:37:CD:B9:5D:F8:
                                D7:CD:CC:01:B5:54:90
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Mar 23 17:17:23.761 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B7:06:06:BC:D3:6C:92:33:27:6C:A1:
                                DB:EB:BC:B1:13:3E:EC:5E:4C:F0:94:68:58:3E:AC:EC:
                                7A:68:55:57:FD:02:20:45:41:91:18:1B:2B:7E:28:AE:
                                1A:EC:E5:D6:94:A3:87:11:E6:23:4C:27:EE:95:A8:0B:
                                E2:66:9B:46:D1:3C:3E
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4e:c3:46:16:d4:bb:50:45:d4:1c:6d:44:e3:cf:e1:5f:1b:c0:
        be:60:54:7a:1b:fb:87:3c:c8:de:56:51:aa:31:e2:f6:1e:f2:
        af:eb:0c:aa:f0:d3:88:0d:46:b4:ca:34:65:bd:b4:5a:85:00:
        53:e7:70:9b:88:6b:34:fe:c7:ee:f2:54:c9:f7:0b:88:49:76:
        1c:16:31:8a:10:db:16:25:b2:cf:2a:a6:c6:87:94:10:33:4a:
        08:f6:6c:5b:ec:02:e2:e2:84:a2:a7:78:c4:d1:19:72:a3:fe:
        ae:9c:e4:1d:d8:ca:1e:ae:bc:dc:11:ab:55:db:b5:24:f7:3f:
        45:79:80:3c:5d:b6:de:22:1e:06:44:83:4a:c8:56:43:ab:43:
        36:54:24:c9:78:53:ab:a0:7a:f5:bb:62:2d:3b:0d:c1:8c:bc:
        a0:a3:ca:76:ca:a8:b1:d7:07:c9:35:c6:9f:f3:31:ed:51:07:
        87:d1:81:5b:71:54:d3:f4:06:42:66:59:b0:5c:4e:ec:3a:f3:
        0c:ea:ef:72:4b:dc:68:21:5a:19:34:bb:b2:00:5d:e5:5d:0f:
        62:22:37:ed:41:93:d2:10:bf:f7:9a:30:0a:b4:8b:9c:64:f6:
        8f:bc:25:ac:c0:ae:74:6f:14:8d:bd:c7:e3:91:f9:b2:e1:14:
        ca:4f:c6:a5

-1906188709 | 2024-05-04T15:38:54.124906

3000 / tcp

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate, no-transform
Content-Type: text/html; charset=utf-8
Set-Cookie: i_like_gitea=98c049b31f64c8b1; Path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: _csrf=-FxkJ2c-yA_d-Z4BVtTvtMv_cmU6MTcxNDgzNzEzMzQ1ODM1Mjk1MQ; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
X-Frame-Options: SAMEORIGIN
Date: Sat, 04 May 2024 15:38:53 GMT
Transfer-Encoding: chunked

0 | 2024-04-24T13:37:38.556647

9001 / tcp

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3882290998278706990 (0x35e0ab17fb19572e)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=www.ywak4cdbwzxda.com
        Validity
            Not Before: Dec  4 00:00:00 2023 GMT
            Not After : May  2 00:00:00 2024 GMT
        Subject: CN=www.shtu2kzb.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ee:a4:8a:2b:a0:0f:b8:9c:c1:cb:50:3c:50:74:
                    d6:ae:e9:db:c2:4b:03:19:bc:3c:4c:4c:db:54:b3:
                    e1:7c:80:38:d5:06:13:7c:0d:09:03:8b:ec:bd:c0:
                    57:b6:26:b4:9c:a0:77:f9:53:99:e6:e0:cb:d7:84:
                    23:2e:83:ce:c5:6a:56:5a:d8:14:64:c8:5b:9c:43:
                    99:96:13:cc:4c:8a:88:10:72:63:ee:d1:88:6a:ef:
                    07:5e:98:64:6d:32:b5:d6:aa:ab:ea:8a:f9:9c:7c:
                    37:6d:89:05:0e:10:c6:24:7a:33:f7:19:e5:d3:f0:
                    79:cb:4d:65:06:17:1f:1b:77:d8:14:f4:df:be:88:
                    06:50:86:fc:f5:ad:66:66:d0:0e:dd:58:90:48:27:
                    e0:20:cb:0e:ed:6b:45:a0:34:4b:f2:12:04:5f:d7:
                    0b:b3:7f:7f:f8:ce:cd:4a:5d:e6:0f:f1:aa:fe:4a:
                    0e:43:3f:9d:50:7e:f8:97:8e:2f:6c:df:4a:d3:50:
                    ff:6b:dc:ec:5b:61:54:bf:52:85:4f:8a:21:82:97:
                    44:e5:4e:25:52:60:fa:02:d5:78:2e:93:5c:ed:85:
                    0b:d8:f1:a1:6c:4c:c1:b9:70:9c:4c:01:e6:c5:57:
                    f2:84:ba:db:0e:97:c8:4b:22:be:c1:70:fa:e6:8b:
                    c6:85
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        82:7c:e3:e6:5e:ba:f3:81:e7:48:70:07:43:28:2b:be:56:9b:
        a2:e4:33:0d:c6:48:bb:ed:db:7e:8f:fb:fb:0d:3b:3d:26:48:
        ed:09:8e:1b:9a:19:ca:06:ad:ac:af:37:c1:d9:75:d0:72:12:
        99:07:15:e6:f7:1d:45:d0:ef:cd:3d:b1:df:23:66:30:f2:47:
        b8:dc:84:f2:7c:80:0c:0b:9f:19:b3:75:25:78:60:2f:dd:ad:
        44:1b:68:e5:15:0b:42:a8:6e:02:fd:e0:c6:01:6b:e6:70:e1:
        f5:fa:27:a9:0b:14:68:f7:bf:ca:09:f1:ae:91:cf:5e:b5:cb:
        02:c9

1609901707 | 2024-04-26T14:45:04.409541

9030 / tcp

HTTP/1.0 404 Not found
Date: Fri, 26 Apr 2024 14:45:04 GMT

95.216.193.39

Last Seen: 2024-05-16

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1471291477 | 2024-05-15T00:22:30.345851
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

589765266 | 2024-05-02T06:52:29.534473
80 / tcp

nginx1.18.0

-484956692 | 2024-05-16T15:08:12.843743
443 / tcp

nginx1.18.0

-1906188709 | 2024-05-04T15:38:54.124906
3000 / tcp

0 | 2024-04-24T13:37:38.556647
9001 / tcp

1609901707 | 2024-04-26T14:45:04.409541
9030 / tcp

Products

Pricing

Contact Us

95.216.193.39

Last Seen: 2024-05-16

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1471291477 | 2024-05-15T00:22:30.345851 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

589765266 | 2024-05-02T06:52:29.534473 80 / tcp

nginx1.18.0

-484956692 | 2024-05-16T15:08:12.843743 443 / tcp

nginx1.18.0

-1906188709 | 2024-05-04T15:38:54.124906 3000 / tcp

0 | 2024-04-24T13:37:38.556647 9001 / tcp

1609901707 | 2024-04-26T14:45:04.409541 9030 / tcp

Products

Pricing

Contact Us

1471291477 | 2024-05-15T00:22:30.345851
22 / tcp

589765266 | 2024-05-02T06:52:29.534473
80 / tcp

-484956692 | 2024-05-16T15:08:12.843743
443 / tcp

-1906188709 | 2024-05-04T15:38:54.124906
3000 / tcp

0 | 2024-04-24T13:37:38.556647
9001 / tcp

1609901707 | 2024-04-26T14:45:04.409541
9030 / tcp