GeneralInformation

Hostnames	www.faust.cs.fau.de faui1-4611.informatik.uni-erlangen.de
Domains	fau.de uni-erlangen.de
Country	Germany
City	Erlangen
Organization	Friedrich-Alexander-Universitaet Erlangen-Nuernberg
ISP	Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
ASN	AS680

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 4242 8001 8002 8006 8008 8009 8010 8888 8889 9902 9939 9943 9944 9977 9981 9998 9999

19546423 | 2025-01-18T11:53:46.098252

22 / tcp

SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDAPPLT2zCtkoWmir6IMhjQ8937rmplphGbPRiMJ7JY4qY5
SDS2vlVpZLfKG2AbFGZOQPm6BuhsiwcZW6ruvvdNGlCgkgtQjo9paI4U6A+azmIYSDyE0ZMGdnJJ
DhC9FI3negBNjrO5GWPk6CEjV4tb8zrfzKdmJbBsB7wEjzYjNyUSf0KV45l/0hhyau/3WLSnFXk0
3P41Vjeekyq5CTsztQo3vdbSojFonZeF1mJDE2/OODVUp08AZ4UjUcERQgr8oKrmLUxiwzoKDaZY
hJOJo6hWi3dPAg//OSQJlQU9vx67tVyugtKHzX4ls/F62fOr0jV49vzaPatTk2U0uNtn
Fingerprint: d6:5e:20:4e:fb:ca:c3:98:0e:cd:61:7e:29:bc:4f:72

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group14-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ssh-ed25519

Encryption Algorithms:
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes256-ctr
	aes192-ctr

MAC Algorithms:
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	umac-128-etm@openssh.com
	umac-64-etm@openssh.com
	umac-128@openssh.com
	umac-64@openssh.com

Compression Algorithms:
	none
	zlib@openssh.com

-2098053163 | 2025-01-09T22:52:26.649745

80 / tcp

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0
Date: Thu, 09 Jan 2025 22:52:26 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive
Vary: Accept-Encoding

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

-2098053163 | 2025-01-05T12:57:24.717452

443 / tcp

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0
Date: Sun, 05 Jan 2025 12:57:24 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d0:9f:52:03:38:6b:39:58
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=www.faust.cs.fau.de
        Validity
            Not Before: Sep  6 21:37:30 2017 GMT
            Not After : Sep  4 21:37:30 2027 GMT
        Subject: CN=www.faust.cs.fau.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:d3:1a:f0:32:b7:ea:82:86:d0:d7:cd:04:
                    bd:ec:3f:74:b8:23:55:06:77:6b:9f:1b:f6:aa:80:
                    87:59:b9:68:cd:73:31:74:e7:e8:58:5c:d8:75:fe:
                    3d:3c:b6:ed:ee:33:f1:53:ce:37:7e:be:e3:e4:90:
                    b2:2b:1c:47:2b:50:3a:c6:ed:93:27:33:b9:c5:02:
                    89:2c:bc:8c:a8:57:7a:15:11:1e:be:d5:94:7c:d6:
                    cb:ef:a2:7a:f6:c4:0e:51:32:99:55:65:02:d2:10:
                    40:f6:ea:8a:d9:44:6e:c1:ff:79:c6:2e:2b:8c:f5:
                    4c:33:4c:f4:07:e9:50:1f:c3:84:02:a6:74:ad:26:
                    1d:62:92:53:d7:d9:b3:a3:ed:a3:36:ac:7e:c4:ef:
                    ef:13:ef:7f:2e:18:53:63:73:70:7e:31:28:07:ed:
                    ca:ef:6c:6a:d4:f8:7e:07:e4:5e:b4:39:29:3b:69:
                    83:19:62:1d:f2:99:a1:36:88:62:dd:1f:62:88:f8:
                    15:ef:8d:93:ae:6d:22:b2:a2:a8:01:ee:cf:99:76:
                    96:65:fb:cf:3e:a1:b3:1e:b0:1b:f5:e7:44:a4:a8:
                    d0:9f:86:50:99:be:91:75:df:f7:12:6e:3c:86:64:
                    71:a0:c3:9c:34:28:3e:ea:54:32:ce:f8:76:b9:41:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:www.faust.cs.fau.de
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        8d:7e:1d:f9:96:29:46:b7:fa:b0:01:fb:9a:da:ed:c1:ba:7d:
        1f:3c:9a:7c:29:f1:89:24:11:f4:d5:ed:37:cc:3c:d8:21:bc:
        24:77:c7:e4:72:7e:62:67:aa:07:a0:0a:ba:c5:40:96:f8:53:
        a5:9a:d9:3e:ed:75:dc:86:45:eb:66:6d:66:2a:8e:8d:e3:85:
        f1:36:cf:2e:94:1c:dd:f0:bf:7c:21:96:a5:ef:3c:03:b0:2a:
        30:e4:75:c1:27:e0:13:ab:d5:ee:9c:b8:f7:f7:c7:c1:8b:20:
        cd:ad:23:5e:35:ff:f1:a2:0a:65:b9:21:3d:1a:ea:ad:c5:12:
        73:75:53:18:71:65:21:76:8e:50:31:f0:c3:2a:a5:0d:05:d4:
        fd:27:78:06:88:06:92:47:2a:0f:5d:d6:40:d1:5b:8f:fe:eb:
        05:27:2d:44:95:32:00:64:38:cf:b2:04:c8:ab:44:0e:40:2a:
        17:0a:9e:21:7f:40:79:dc:bd:77:c9:d0:45:e4:26:8c:57:59:
        48:7e:25:c2:70:eb:cf:88:fb:b7:e0:21:f2:4d:0a:ec:6c:6b:
        fe:db:dc:f1:ce:a9:8c:c1:98:30:be:3a:ed:51:58:89:86:10:
        da:bc:db:57:16:b5:66:ae:99:5c:47:e1:95:c0:a9:10:27:f3:
        4a:9c:92:e7

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

2128602611 | 2025-01-17T11:01:37.026585

8001 / tcp

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Date: Fri, 17 Jan 2025 11:01:36 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

2128602611 | 2025-01-13T15:39:13.598627

8002 / tcp

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Date: Mon, 13 Jan 2025 15:39:09 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

2128602611 | 2024-12-26T09:29:10.354838

8006 / tcp

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Date: Thu, 26 Dec 2024 09:29:10 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

2128602611 | 2025-01-01T04:40:20.719630

8008 / tcp

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Date: Wed, 01 Jan 2025 04:40:20 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

2128602611 | 2025-01-19T02:53:39.891881

8009 / tcp

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Date: Sun, 19 Jan 2025 02:53:39 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

2128602611 | 2025-01-13T04:19:02.279291

8010 / tcp

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Date: Mon, 13 Jan 2025 04:19:02 GMT
Content-Type: text/html
Content-Length: 657
Connection: close

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

-2115991619 | 2025-01-09T13:05:36.891658

8888 / tcp

oooo                                     .oooo.                                           
`888                                   .dP""Y88b                                          
 888 .oo.    .ooooo.  oooo oooo    ooo       ]8P' oo.ooooo.  oooo oooo    ooo ooo. .oo.   
 888P"Y88b  d88' `88b  `88. `88.  .8'      .d8P'   888' `88b  `88. `88.  .8'  `888P"Y88b  
 888   888  888   888   `88..]88..8'     .dP'      888   888   `88..]88..8'    888   888  
 888   888  888   888    `888'`888'    .oP     .o  888   888    `888'`888'     888   888  
o888o o888o `Y8bod8P'     `8'  `8'     8888888888  888bod8P'     `8'  `8'     o888o o888o 
                                                   888                                    
                                                  o888o

[-] Wrong Ticket

1047229008 | 2025-01-12T07:08:30.192117

8889 / tcp

oooo                                     .oooo.                                           
`888                                   .dP""Y88b                                          
 888 .oo.    .ooooo.  oooo oooo    ooo       ]8P' oo.ooooo.  oooo oooo    ooo ooo. .oo.   
 888P"Y88b  d88' `88b  `88. `88.  .8'      .d8P'   888' `88b  `88. `88.  .8'  `888P"Y88b  
 888   888  888   888   `88..]88..8'     .dP'      888   888   `88..]88..8'    888   888  
 888   888  888   888    `888'`888'    .oP     .o  888   888    `888'`888'     888   888  
o888o o888o `Y8bod8P'     `8'  `8'     8888888888  888bod8P'     `8'  `8'     o888o o888o 
                                                   888                                    
                                                  o888o

-638450253 | 2025-01-13T16:36:33.853456

9998 / tcp

initializing prof...

-835119970 | 2025-01-20T14:14:13.935619

9999 / tcp

Here\'s the stack:\n               0x1                0x1     0x7fcdf67f0697               0x11\n    0x7fcdf6913040 0x4141414141414141 0xc9ca6a2edea3fe00     0x7ffc7d8a4490\n    0x55dff42008ce                0x1     0x7fcdf6705d90     0x7fcdf68f6780\n    0x55dff42008c0        0x1f6909e08     0x7ffc7d8a45a8              (nil)\n0x625f2da746195e45     0x7ffc7d8a45a8     0x55dff42008c0              (nil)\nHi! Give me a number so that I can put it at 0x7ffc7d8a4470.\n

131.188.46.11

Last Seen: 2025-01-20

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

19546423 | 2025-01-18T11:53:46.098252
22 / tcp

OpenSSH8.4p1 Debian 5+deb11u3

-2098053163 | 2025-01-09T22:52:26.649745
80 / tcp

nginx1.18.0

-2098053163 | 2025-01-05T12:57:24.717452
443 / tcp

nginx1.18.0

2128602611 | 2025-01-17T11:01:37.026585
8001 / tcp

nginx1.18.0

2128602611 | 2025-01-13T15:39:13.598627
8002 / tcp

nginx1.18.0

2128602611 | 2024-12-26T09:29:10.354838
8006 / tcp

nginx1.18.0

2128602611 | 2025-01-01T04:40:20.719630
8008 / tcp

nginx1.18.0

2128602611 | 2025-01-19T02:53:39.891881
8009 / tcp

nginx1.18.0

2128602611 | 2025-01-13T04:19:02.279291
8010 / tcp

nginx1.18.0

-2115991619 | 2025-01-09T13:05:36.891658
8888 / tcp

1047229008 | 2025-01-12T07:08:30.192117
8889 / tcp

-638450253 | 2025-01-13T16:36:33.853456
9998 / tcp

-835119970 | 2025-01-20T14:14:13.935619
9999 / tcp

Products

Pricing

Contact Us

131.188.46.11

Last Seen: 2025-01-20

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Port 8001 Port 8002 Port 8006 Port 8008 Port 8009 Port 8010 Latest CVSS

OpenPorts

19546423 | 2025-01-18T11:53:46.098252 22 / tcp

-2098053163 | 2025-01-09T22:52:26.649745 80 / tcp

-2098053163 | 2025-01-05T12:57:24.717452 443 / tcp

2128602611 | 2025-01-17T11:01:37.026585 8001 / tcp

2128602611 | 2025-01-13T15:39:13.598627 8002 / tcp

2128602611 | 2024-12-26T09:29:10.354838 8006 / tcp

2128602611 | 2025-01-01T04:40:20.719630 8008 / tcp

2128602611 | 2025-01-19T02:53:39.891881 8009 / tcp

2128602611 | 2025-01-13T04:19:02.279291 8010 / tcp

-2115991619 | 2025-01-09T13:05:36.891658 8888 / tcp

1047229008 | 2025-01-12T07:08:30.192117 8889 / tcp

-638450253 | 2025-01-13T16:36:33.853456 9998 / tcp

-835119970 | 2025-01-20T14:14:13.935619 9999 / tcp

Products

Pricing

Contact Us

Vulnerabilities

19546423 | 2025-01-18T11:53:46.098252
22 / tcp

-2098053163 | 2025-01-09T22:52:26.649745
80 / tcp

-2098053163 | 2025-01-05T12:57:24.717452
443 / tcp

2128602611 | 2025-01-17T11:01:37.026585
8001 / tcp

2128602611 | 2025-01-13T15:39:13.598627
8002 / tcp

2128602611 | 2024-12-26T09:29:10.354838
8006 / tcp

2128602611 | 2025-01-01T04:40:20.719630
8008 / tcp

2128602611 | 2025-01-19T02:53:39.891881
8009 / tcp

2128602611 | 2025-01-13T04:19:02.279291
8010 / tcp

-2115991619 | 2025-01-09T13:05:36.891658
8888 / tcp

1047229008 | 2025-01-12T07:08:30.192117
8889 / tcp

-638450253 | 2025-01-13T16:36:33.853456
9998 / tcp

-835119970 | 2025-01-20T14:14:13.935619
9999 / tcp