GeneralInformation

Hostnames	dev-api.dudka.agency
Domains	dudka.agency
Cloud Provider	DigitalOcean
Cloud Region	us-nj
Country	United States
City	North Bergen
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061
Operating System	Ubuntu

WebTechnologies

Font scripts

Glyphicons

JavaScript frameworks

JavaScript graphics

JavaScript libraries

Miscellaneous

Tag managers

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

21 22 80 443 3000 3306 4000 9090 9100

-1396335236 | 2024-05-14T21:05:57.278623

21 / tcp

220 (vsFTPd 3.0.5)
530 Login incorrect.
530 Please login with USER and PASS.
211-Features:
 EPRT
 EPSV
 MDTM
 PASV
 REST STREAM
 SIZE
 TVFS
211 End

-1600866409 | 2024-05-14T21:37:04.226460

22 / tcp

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBUy0Xn5c0yNH26iui+jvgMN
r3JIg7jJiAGXXz5YG+5wX07M67fxZgaJV+bHavq7fRFZQYVsFjZMWY2pekvqgQI=
Fingerprint: 75:b4:47:1f:63:13:ee:de:24:c7:55:75:ac:c0:f0:6e

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

677579724 | 2024-05-15T15:07:59.214920

80 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 15 May 2024 15:07:59 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

677579724 | 2024-05-07T19:05:30.512613

443 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 May 2024 19:05:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 564
Connection: keep-alive
X-Robots-Tag: noindex, nofollow

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d4:26:d4:f7:69:b6:5d:c9:fb:b7:09:8e:69:0d:43:5b:81
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  6 06:23:01 2024 GMT
            Not After : Jul  5 06:23:00 2024 GMT
        Subject: CN=dev-api.dudka.agency
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:31:ed:2c:47:7e:db:a3:82:6e:2e:2f:54:
                    1d:28:f4:60:f1:3e:f4:1c:f6:90:9c:6b:22:88:91:
                    80:ae:1d:6e:94:be:1c:d4:0a:77:e4:c5:5c:43:80:
                    aa:3a:b2:c5:3b:99:36:08:d8:d0:28:38:99:ad:5a:
                    a5:b3:a2:28:fc:d8:ea:8f:12:50:25:62:47:84:73:
                    47:43:2d:0b:72:28:96:8a:d0:b4:e6:95:d9:b2:c9:
                    41:a4:59:b3:b4:98:b6:91:2d:5d:d4:7e:7b:9d:34:
                    a5:72:54:50:7d:74:a9:3f:57:3b:d8:9e:0f:7b:54:
                    fb:d8:90:c8:77:5f:0a:7f:10:39:58:84:ec:39:35:
                    20:fe:4a:3a:1e:4f:02:d7:fb:f2:33:60:b5:59:54:
                    f6:fb:b3:6b:39:53:7d:b8:f2:87:5f:f7:17:22:80:
                    ae:b8:96:df:bf:8c:62:4a:a0:b2:bf:79:06:81:36:
                    6f:62:1f:35:60:d1:bd:f5:f1:a5:2d:44:27:66:14:
                    eb:22:c1:fe:77:4a:3f:94:ba:1e:60:e1:cd:67:d5:
                    cf:77:92:e6:96:69:f0:a7:e6:6b:d9:08:1d:e9:3a:
                    e3:2b:e5:3e:e6:cc:45:a4:08:5a:98:59:da:bc:29:
                    5e:ca:47:67:e2:7f:0d:90:07:e0:50:b3:aa:92:bf:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                1D:67:D1:4E:7A:01:5F:71:0B:AD:FC:92:EF:D2:CB:09:5E:24:94:48
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:dev-api.dudka.agency
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr  6 07:23:01.097 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3F:59:63:F6:7E:30:34:BD:6D:DF:EE:88:
                                93:D4:B0:5E:F6:D8:84:EF:D4:E3:43:D5:79:01:08:12:
                                B4:75:18:0E:02:20:4C:01:1C:9D:DD:F0:4E:1F:5F:1F:
                                61:14:AC:32:7D:A9:18:7E:5F:F4:96:A3:2D:49:3F:B0:
                                14:60:4C:1A:84:C8
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Apr  6 07:23:01.105 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:85:B6:0F:87:A9:37:86:C4:2F:64:41:
                                67:EC:43:12:56:DF:7E:1B:50:17:52:C8:A3:DE:F7:FC:
                                FB:77:2A:D8:FA:02:21:00:81:7E:D1:59:0F:B6:5F:27:
                                3F:49:30:44:AF:42:CE:FF:D4:EA:52:14:81:34:0A:2C:
                                95:E5:FF:9D:A3:46:1B:1F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        77:df:e5:26:71:95:ea:75:a6:6c:8e:59:3e:25:c9:eb:db:01:
        0c:2e:7f:f5:53:7b:c4:d2:01:4a:d5:0c:70:51:ce:1a:39:b7:
        34:a9:97:95:61:d4:99:26:e1:87:9a:12:d1:41:e4:96:89:10:
        43:4e:bb:d1:d0:9e:59:66:8c:5b:22:ee:82:9c:e6:58:d1:ff:
        e9:b4:8f:69:9d:60:d8:ca:4c:42:25:01:85:f4:fb:7d:28:7c:
        ff:f3:5a:74:ee:e3:b3:62:72:42:09:7d:49:b2:e1:c8:08:05:
        0b:0d:b9:ad:20:62:62:8f:49:50:7c:e5:3d:38:ea:d9:31:4e:
        1a:b0:5d:66:8a:b9:2e:ae:e8:41:f8:17:9f:7a:0d:82:41:3a:
        ff:70:f2:11:d3:d5:bb:13:50:e0:9e:99:51:de:36:df:9c:c0:
        16:68:06:8c:15:94:d8:37:31:93:df:e7:78:be:17:92:7c:f0:
        9f:7e:09:0e:bb:73:95:89:72:19:29:c4:7e:c6:9d:3c:65:00:
        46:ab:60:47:05:d1:ed:f4:8e:85:c9:7e:8c:9a:ca:7e:89:cf:
        63:98:f0:8a:49:1b:56:4e:4a:9b:6e:58:fe:8e:c1:73:76:6b:
        8f:0a:24:ae:81:bc:c8:2b:d8:cd:a3:76:6a:f8:bc:66:45:95:
        40:a6:db:73

-1611769448 | 2024-04-24T10:25:35.616570

3000 / tcp

HTTP/1.1 200 OK
x-nextjs-cache: HIT
X-Powered-By: Next.js
ETag: "m62xmiibu51ryq"
Content-Type: text/html; charset=utf-8
Content-Length: 83192
Cache-Control: s-maxage=31536000, stale-while-revalidate
Vary: Accept-Encoding
Date: Wed, 24 Apr 2024 10:25:35 GMT
Connection: keep-alive
Keep-Alive: timeout=5

225015788 | 2024-04-24T15:26:32.111080

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 8.0.36-0ubuntu0.22.04.1
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: caching_sha2_password

-1246004407 | 2024-05-04T12:00:14.736548

4000 / tcp

HTTP/1.1 400 Bad Request
Connection: close

370613381 | 2024-05-04T18:20:43.873922

9090 / tcp

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 18:20:43 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked

1215968014 | 2024-05-07T17:45:48.949522

9100 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Connection: close

400 Bad Request
Prometheus Node Exporter:
  node_exporter_build_info:
    branch: debian/sid
    goversion: go1.18.1
    revision: 1.3.1-1ubuntu0.22.04.2
    version: 1.3.1
  node_os_info:
    id: ubuntu
    id_like: debian
    name: Ubuntu
    pretty_name: Ubuntu 22.04 LTS
    version: 22.04 LTS (Jammy Jellyfish)
    version_codename: jammy
    version_id: 22.04
  node_uname_info:
    domainname: (none)
    machine: x86_64
    nodename: dudka-corporate-server
    release: 5.15.0-105-generic
    sysname: Linux
    version: #115-Ubuntu SMP Mon Apr 15 09:52:04 UTC 2024
  node_dmi_info:
    bios_date: 12/12/2017
    bios_release: 0.0
    bios_vendor: DigitalOcean
    bios_version: 20171212
    board_asset_tag: 312020135
    board_name: Droplet
    board_vendor: DigitalOcean
    board_version: 20171212
    chassis_vendor: QEMU
    chassis_version: pc-i440fx-6.1
    product_family: DigitalOcean_Droplet
    product_name: Droplet
    product_version: 20171212
    system_vendor: DigitalOcean
  node_network_info:
    lo:
      address: 00:00:00:00:00:00
      broadcast: 00:00:00:00:00:00
      device: lo
      operstate: unknown
    br-c7b63a6397e5:
      address: 02:42:a7:3f:b5:b2
      broadcast: ff:ff:ff:ff:ff:ff
      device: br-c7b63a6397e5
      duplex: unknown
      operstate: down
    eth1:
      address: 16:8d:51:f5:b6:9f
      broadcast: ff:ff:ff:ff:ff:ff
      device: eth1
      duplex: unknown
      operstate: up
    docker0:
      address: 02:42:fb:6d:c0:6b
      broadcast: ff:ff:ff:ff:ff:ff
      device: docker0
      duplex: unknown
      operstate: down
    eth0:
      address: 36:15:ab:c6:4a:90
      broadcast: ff:ff:ff:ff:ff:ff
      device: eth0
      duplex: unknown
      operstate: up

MAC Addresses

16:8D:51:F5:B6:9F
    Unknown
36:15:AB:C6:4A:90
    Unknown

161.35.100.107

Last Seen: 2024-05-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1396335236 | 2024-05-14T21:05:57.278623
21 / tcp

-1600866409 | 2024-05-14T21:37:04.226460
22 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.6

677579724 | 2024-05-15T15:07:59.214920
80 / tcp

nginx1.18.0

677579724 | 2024-05-07T19:05:30.512613
443 / tcp

nginx1.18.0

-1611769448 | 2024-04-24T10:25:35.616570
3000 / tcp

225015788 | 2024-04-24T15:26:32.111080
3306 / tcp

MySQL8.0.36-0ubuntu0.22.04.1

-1246004407 | 2024-05-04T12:00:14.736548
4000 / tcp

370613381 | 2024-05-04T18:20:43.873922
9090 / tcp

1215968014 | 2024-05-07T17:45:48.949522
9100 / tcp

Prometheus Node Exporter1.3.1

Products

Pricing

Contact Us

161.35.100.107

Last Seen: 2024-05-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1396335236 | 2024-05-14T21:05:57.278623 21 / tcp

-1600866409 | 2024-05-14T21:37:04.226460 22 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.6

677579724 | 2024-05-15T15:07:59.214920 80 / tcp

nginx1.18.0

677579724 | 2024-05-07T19:05:30.512613 443 / tcp

nginx1.18.0

-1611769448 | 2024-04-24T10:25:35.616570 3000 / tcp

225015788 | 2024-04-24T15:26:32.111080 3306 / tcp

MySQL8.0.36-0ubuntu0.22.04.1

-1246004407 | 2024-05-04T12:00:14.736548 4000 / tcp

370613381 | 2024-05-04T18:20:43.873922 9090 / tcp

1215968014 | 2024-05-07T17:45:48.949522 9100 / tcp

Prometheus Node Exporter1.3.1

Products

Pricing

Contact Us

-1396335236 | 2024-05-14T21:05:57.278623
21 / tcp

-1600866409 | 2024-05-14T21:37:04.226460
22 / tcp

677579724 | 2024-05-15T15:07:59.214920
80 / tcp

677579724 | 2024-05-07T19:05:30.512613
443 / tcp

-1611769448 | 2024-04-24T10:25:35.616570
3000 / tcp

225015788 | 2024-04-24T15:26:32.111080
3306 / tcp

-1246004407 | 2024-05-04T12:00:14.736548
4000 / tcp

370613381 | 2024-05-04T18:20:43.873922
9090 / tcp

1215968014 | 2024-05-07T17:45:48.949522
9100 / tcp