GeneralInformation

Hostnames	v3s.ru varyen.ru
Domains	v3s.ru varyen.ru
Country	Finland
City	Helsinki
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940
Operating System	Ubuntu

WebTechnologies

JavaScript frameworks

Nuxt.js

Vue.js

Programming languages

Node.js

Static site generator

Nuxt.js

Web frameworks

Nuxt.js

Web servers

Nuxt.js

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

21 22 53 80 123 443 1194 3000 3306 8087

-1618061588 | 2024-05-30T05:40:19.934639

21 / tcp

220 ProFTPD Server (Debian) [::ffff:95.216.5.184]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
 CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
 EPRT    EPSV    ALLO    RNFR    RNTO    DELE    MDTM    RMD     
 XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
 NOOP    FEAT    OPTS    HOST    CLNT    AUTH*   CCC*    CONF*   
 ENC*    MIC*    PBSZ*   PROT*   TYPE    STRU    MODE    RETR    
 STOR    STOU    APPE    REST    ABOR    RANG    USER    PASS    
 ACCT*   REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@static.184.5.216.95.clients.your-server.de
211-Features:
 CLNT
 EPRT
 EPSV
 HOST
 LANG fr-FR.UTF-8;fr-FR;ru-RU.UTF-8;ru-RU;en-US
 MDTM
 MFF modify;UNIX.group;UNIX.mode;
 MFMT
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
 RANG STREAM
 REST STREAM
 SITE COPY
 SITE MKDIR
 SITE RMDIR
 SITE SYMLINK
 SITE UTIME
 SIZE
 TVFS
 UTF8
211 End

-1583114412 | 2024-05-26T03:05:41.298259

22 / tcp

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.7
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBLx+FV1wx0UoYs8rDoF7B1o9
QTE35bjN/QmqwDsAQORHAGcNUAUfzKGpY7HzPMRg++qIVaDHyr4S8Kin4/my5DI=
Fingerprint: 86:fc:e8:9b:95:a8:2c:d5:28:66:57:19:08:af:ed:13

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-871945849 | 2024-05-22T08:31:27.167987

53 / tcp

PowerDNS Authoritative Server 4.5.3
Resolver ID: paimon.varyen.ru

-871945849 | 2024-05-27T09:38:50.033601

53 / udp

PowerDNS Authoritative Server 4.5.3
Resolver ID: paimon.varyen.ru

589765266 | 2024-05-27T00:53:29.108521

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 May 2024 00:53:29 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://95.216.5.184:443/

-194188711 | 2024-05-29T18:26:28.853359

123 / udp

NTP
protocolversion: 3
stratum: 3
leap: 0
precision: -24
rootdelay: 0.0278015136719
rootdisp: 0.0220794677734
refid: 1440172805
reftime: 3925995691.17
poll: 3

-55118855 | 2024-06-02T07:11:59.039495

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 02 Jun 2024 07:11:58 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: JR.CMS
Set-Cookie: jrs=6657cef278c209439996fd0cf0373a18; path=/; HttpOnly
Set-Cookie: jsr0h=1717312318939649; expires=Wed, 02-Jun-2027 07:11:58 GMT; Max-Age=94608000; path=/; HttpOnly
Set-Cookie: php-console-server=5; path=/
Cache-Control: no-cache, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e4:52:63:fc:cf:43:72:f5:6c:86:f5:d2:e8:c4:00:61:9a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: May 24 23:58:10 2024 GMT
            Not After : Aug 22 23:58:09 2024 GMT
        Subject: CN=v3s.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:55:57:f6:29:b0:70:66:09:f4:0d:eb:c6:
                    5f:af:b4:78:36:d3:a1:a4:e9:95:b1:90:9f:54:18:
                    9c:3b:be:b9:05:a2:eb:ab:76:d2:4e:a9:f5:38:75:
                    e3:08:4f:8a:92:06:38:ab:75:92:13:65:f0:42:22:
                    36:1a:48:fd:d1:28:d8:d5:72:24:a5:85:3a:d8:66:
                    d8:c6:55:d3:26:1a:60:ae:7a:03:2d:ac:80:ef:34:
                    a0:b7:37:78:63:a4:8c:be:b0:93:4d:5b:54:d2:32:
                    50:f6:72:af:86:70:50:4c:78:d4:d0:4b:3b:89:5c:
                    51:4b:61:7f:b4:95:f6:ac:e7:67:39:9e:8e:03:cb:
                    62:54:5d:b2:02:03:1c:f6:bb:7c:0b:40:e5:a4:11:
                    ce:02:85:e8:7c:42:50:d5:51:26:1c:6c:50:e9:76:
                    15:94:4c:5b:87:fb:74:2d:8c:68:36:2b:a0:fd:cf:
                    79:c4:0c:21:84:c5:4a:62:ba:5d:b9:af:94:99:d4:
                    a4:a7:db:8f:af:7b:48:c6:0d:23:00:b0:8d:ea:91:
                    4e:1a:ad:86:02:34:3c:2a:1c:9e:0a:3e:a9:c9:aa:
                    d3:59:e4:b8:53:a6:8e:6b:19:e9:1b:5e:e5:90:b7:
                    20:4b:ee:a6:c5:91:11:a1:1a:81:69:18:0f:2f:72:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                0D:A0:3E:A1:D0:A2:71:78:D7:95:5D:40:D4:38:69:F0:0F:7C:D5:E9
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:v3s.ru
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : May 25 00:58:10.752 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3F:91:9C:FA:1E:4D:3C:53:B9:86:45:B5:
                                E8:EC:28:20:40:43:16:8E:BB:EA:0B:F5:91:97:A4:06:
                                C4:9E:24:11:02:20:67:51:BA:C7:92:06:BB:74:82:B5:
                                5C:11:C5:71:3A:A0:9E:16:7B:B0:A0:07:64:2E:7D:78:
                                A0:2B:08:B8:6D:08
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:98:10:71:09:F0:D6:52:2E:30:80:D2:9E:3F:64:BB:
                                83:6E:28:CC:F9:0F:52:8E:EE:DF:CE:4A:3F:16:B4:CA
                    Timestamp : May 25 00:58:10.767 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C4:14:8E:E7:41:B8:FB:B2:63:2A:59:
                                C2:68:8F:EE:56:D8:82:83:3A:93:7F:B6:57:77:71:DE:
                                EE:DA:37:33:8B:02:21:00:85:65:78:E0:2A:14:B2:64:
                                F1:B7:9A:63:EF:63:AC:17:9F:50:AA:B9:86:C2:6A:E7:
                                9D:2D:87:6B:AC:DD:44:AC
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        69:a6:23:92:b0:77:15:c4:19:39:d1:ce:93:99:49:75:0b:90:
        58:52:54:b7:5a:d9:92:b9:bf:e3:08:81:80:cd:9d:1b:ae:43:
        c0:d8:57:17:e3:30:68:95:d3:3c:78:76:f4:63:36:7d:51:ee:
        ee:dd:93:56:eb:6d:55:a5:ad:a1:a8:40:a0:a7:fe:47:bb:ae:
        e1:c1:79:9b:d5:3c:34:6e:05:f5:52:d5:c5:14:16:30:47:2b:
        f9:51:29:13:ee:f7:04:4f:74:f2:e8:4a:3d:22:b9:81:3b:14:
        e6:0f:ac:6e:42:56:b4:7b:1b:51:09:8f:5b:6e:77:d3:53:3e:
        35:df:05:7e:ee:b3:f7:2b:12:f7:11:de:66:45:21:5b:a6:5b:
        e0:0d:42:60:43:85:3e:4f:43:71:dd:75:3f:ad:aa:04:90:83:
        12:e8:ef:29:a6:0c:1a:fb:28:93:89:5e:67:04:04:b6:9a:08:
        9a:3d:95:ee:68:79:e3:75:b7:3f:b1:b3:65:04:1f:9d:14:af:
        cf:30:09:81:d3:50:2a:74:8a:dc:1d:47:e7:20:05:9b:35:03:
        ae:a9:ac:01:92:81:ca:e3:30:b5:5e:cc:cf:0b:e2:b4:b0:6d:
        9e:1a:6b:a9:d1:4c:4b:da:f4:ae:eb:f1:85:f4:03:4b:1e:17:
        51:d0:85:c6

1950990198 | 2024-06-01T16:47:43.761625

1194 / udp

@\xaa\xcd\x97\xfaGh\xb5\x8a\x01\x00\x00\x00\x00\xd9\xce:\xbe\xf6\x98\xa5m\x00\x00\x00\x00

-1586985684 | 2024-05-25T01:18:08.157217

3000 / tcp

HTTP/1.1 200 OK
content-type: text/html;charset=utf-8
x-powered-by: Nuxt
Date: Sat, 25 May 2024 01:18:07 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Content-Length: 1821

-1137603286 | 2024-05-31T03:28:27.011294

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 8.0.36-0ubuntu0.22.04.1
  Capabilities: 65535
  Server Language: 33
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: mysql_native_password

509442312 | 2024-05-27T15:40:20.345095

8087 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.25.1
Date: Mon, 27 May 2024 15:40:20 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.25.1</center>
</body>
</html>

95.216.5.184

Last Seen: 2024-06-02

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1618061588 | 2024-05-30T05:40:19.934639
21 / tcp

-1583114412 | 2024-05-26T03:05:41.298259
22 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.7

-871945849 | 2024-05-22T08:31:27.167987
53 / tcp

-871945849 | 2024-05-27T09:38:50.033601
53 / udp

589765266 | 2024-05-27T00:53:29.108521
80 / tcp

nginx1.18.0

-194188711 | 2024-05-29T18:26:28.853359
123 / udp

-55118855 | 2024-06-02T07:11:59.039495
443 / tcp

nginx1.18.0

1950990198 | 2024-06-01T16:47:43.761625
1194 / udp

-1586985684 | 2024-05-25T01:18:08.157217
3000 / tcp

-1137603286 | 2024-05-31T03:28:27.011294
3306 / tcp

MySQL8.0.36-0ubuntu0.22.04.1

509442312 | 2024-05-27T15:40:20.345095
8087 / tcp

nginx1.25.1

Products

Pricing

Contact Us

95.216.5.184

Last Seen: 2024-06-02

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1618061588 | 2024-05-30T05:40:19.934639 21 / tcp

-1583114412 | 2024-05-26T03:05:41.298259 22 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.7

-871945849 | 2024-05-22T08:31:27.167987 53 / tcp

-871945849 | 2024-05-27T09:38:50.033601 53 / udp

589765266 | 2024-05-27T00:53:29.108521 80 / tcp

nginx1.18.0

-194188711 | 2024-05-29T18:26:28.853359 123 / udp

-55118855 | 2024-06-02T07:11:59.039495 443 / tcp

nginx1.18.0

1950990198 | 2024-06-01T16:47:43.761625 1194 / udp

-1586985684 | 2024-05-25T01:18:08.157217 3000 / tcp

-1137603286 | 2024-05-31T03:28:27.011294 3306 / tcp

MySQL8.0.36-0ubuntu0.22.04.1

509442312 | 2024-05-27T15:40:20.345095 8087 / tcp

nginx1.25.1

Products

Pricing

Contact Us

-1618061588 | 2024-05-30T05:40:19.934639
21 / tcp

-1583114412 | 2024-05-26T03:05:41.298259
22 / tcp

-871945849 | 2024-05-22T08:31:27.167987
53 / tcp

-871945849 | 2024-05-27T09:38:50.033601
53 / udp

589765266 | 2024-05-27T00:53:29.108521
80 / tcp

-194188711 | 2024-05-29T18:26:28.853359
123 / udp

-55118855 | 2024-06-02T07:11:59.039495
443 / tcp

1950990198 | 2024-06-01T16:47:43.761625
1194 / udp

-1586985684 | 2024-05-25T01:18:08.157217
3000 / tcp

-1137603286 | 2024-05-31T03:28:27.011294
3306 / tcp

509442312 | 2024-05-27T15:40:20.345095
8087 / tcp