GeneralInformation

Hostnames	vmd140730.contaboserver.net smartyflip.de
Domains	contaboserver.net smartyflip.de
Country	United Kingdom
City	Portsmouth
Organization	Contabo GmbH
ISP	Contabo GmbH
ASN	AS51167
Operating System	Linux

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 80 443

22 / tcp

-1223728628 | 2025-03-13T01:50:53.741224

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAACAQCwiVRlZwtg27CFmQy1vLR1YoD9f/htXoNxJSyKxACRKwT1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Fingerprint: 7e:42:59:90:0f:7b:40:1f:99:a8:eb:e7:ff:0a:0d:a9

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

1651973090 | 2025-03-05T18:04:21.956625

Hashes

hash

-1214744160

http.dom_hash

-2049760045

http.html_hash

1651973090

http.server_hash

967792298

http.title_hash

911614014

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 05 Mar 2025 18:04:21 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Sat, 25 May 2024 13:26:27 GMT
Connection: keep-alive
ETag: "6651e703-264"
Accept-Ranges: bytes

Vulnerabilities

443 / tcp

-1623852280 | 2025-02-25T01:30:22.346985

Hashes

hash

-1631463339

http.dom_hash

12747690

http.html_hash

-1623852280

http.server_hash

967792298

http.sitemap_hash

-533462161

http.title_hash

-89058086

SmartyFlip - train your brain!

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 25 Feb 2025 01:30:22 GMT
Content-Type: text/html
Content-Length: 713
Last-Modified: Thu, 30 May 2024 11:14:49 GMT
Connection: keep-alive
ETag: "66585fa9-2c9"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:49:61:1b:84:d2:c1:9e:74:d4:4b:38:f6:39:13:b2:30:ad
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Jan 21 21:11:10 2025 GMT
            Not After : Apr 21 21:11:09 2025 GMT
        Subject: CN=smartyflip.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:3f:ba:fb:59:90:4c:52:d2:71:27:3b:4b:
                    ab:ef:fd:f1:48:ac:6d:f3:8a:df:fa:27:f4:5e:ce:
                    45:73:d4:26:f9:e9:8d:89:07:b7:b8:de:82:3a:14:
                    5a:43:a1:1d:a0:cb:d8:0c:df:85:13:d6:08:0e:f7:
                    d7:ed:e6:9d:a1:c3:f4:82:1c:03:c1:d5:0c:99:6c:
                    21:11:a4:0d:0b:c2:05:17:de:16:a5:c6:af:1c:aa:
                    54:b5:3e:bf:54:e5:07:fb:80:43:07:01:4c:e9:13:
                    2d:bb:ce:7c:dd:1e:00:c0:50:2b:54:c7:7b:f0:8b:
                    89:b9:c6:83:d1:a0:bc:dc:36:e7:7c:00:4a:87:38:
                    fa:bc:a1:1e:7e:f3:8d:dd:78:4a:e4:70:18:82:6a:
                    b3:da:e6:e9:22:c4:c6:39:2b:8b:61:33:29:d7:a2:
                    53:bf:77:0a:f7:1b:a6:48:af:7e:80:40:1b:fb:6f:
                    1f:42:01:25:50:0f:60:36:0b:08:ac:8a:30:b8:9d:
                    22:c3:1b:7c:20:c3:d4:67:f7:99:0a:37:e7:93:ef:
                    c3:76:69:57:99:1c:ca:72:eb:aa:0b:4c:52:35:fd:
                    33:4e:3e:70:59:cb:58:4c:dc:58:cf:ed:96:88:4d:
                    a3:21:75:07:cc:e2:fc:ae:bc:8d:e6:34:57:6e:08:
                    9c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                F8:16:2B:51:27:1B:B8:D1:A8:92:48:8C:01:F2:FE:F4:64:1F:C4:E5
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:smartyflip.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Jan 21 22:09:41.090 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A1:5B:5E:E5:13:A7:68:CD:12:5A:D7:
                                EC:39:89:E9:BA:E1:46:EE:74:26:F8:7E:98:D0:E7:F5:
                                A1:BA:A9:4F:4F:02:20:57:C2:00:62:DA:98:FF:21:44:
                                C9:0C:0D:C4:38:B6:91:CB:BD:5B:A0:1C:E5:91:F7:25:
                                A2:FD:F7:A6:BC:29:7B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Jan 21 22:09:41.234 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:2A:80:C8:D1:5A:BA:15:44:D8:91:BE:A4:
                                51:0E:7F:F4:35:57:EC:DF:2C:85:1F:B2:45:24:B2:91:
                                DE:88:A0:8E:02:20:3E:D4:42:A7:97:02:A9:C8:41:65:
                                94:B4:02:0C:F8:34:A4:3D:F8:8D:F2:8E:6D:73:A7:90:
                                A0:0A:64:3E:C2:AD
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9c:18:1f:de:1a:61:11:11:13:b9:ed:8d:61:6f:cf:c9:e9:59:
        50:c8:8c:c7:9a:56:3f:e4:dd:0d:3e:bd:f3:fc:07:f8:e7:c3:
        bd:66:20:aa:ed:19:c1:6c:f6:4d:13:62:f0:f8:f7:68:28:10:
        53:b7:aa:a0:a4:e0:6e:8d:ba:db:0d:d1:af:71:52:78:a7:80:
        ed:20:2c:8a:8a:85:5f:71:ab:fc:b0:83:fb:bc:84:71:f6:4b:
        31:f3:a2:aa:31:b9:58:ba:11:85:14:79:8e:91:0e:c5:09:e6:
        b6:c9:6b:6d:8e:67:33:94:b6:47:a5:3c:0c:c9:da:ad:e0:c2:
        d4:93:85:84:f2:16:b9:1b:97:38:04:e9:49:0f:5d:66:82:0a:
        ff:91:32:a0:e2:a0:5b:7d:08:a1:8a:de:7e:03:1b:17:ef:2d:
        cf:7d:1b:e6:38:c1:41:94:98:af:72:ca:b9:b4:41:58:5c:8b:
        eb:bd:0a:5a:1e:74:78:19:80:d0:51:7f:e6:6d:ad:79:28:90:
        8b:f2:9c:9f:bc:89:39:08:83:c8:e3:3d:0a:4c:0e:da:ab:7d:
        be:c3:c5:8f:18:32:95:e9:f3:ad:51:66:14:90:8a:ce:9a:bb:
        98:2d:f5:56:fe:62:47:04:d9:dc:7e:26:c9:b5:e7:24:8a:ae:
        74:d9:ef:c6

Vulnerabilities

149.102.144.134

Last Seen: 2025-03-13

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

-1223728628 | 2025-03-13T01:50:53.741224

OpenSSH8.2p1 Ubuntu 4ubuntu0.11

80 / tcp

1651973090 | 2025-03-05T18:04:21.956625

Hashes

nginx1.18.0

443 / tcp

-1623852280 | 2025-02-25T01:30:22.346985

Hashes

nginx1.18.0

Products

Pricing

Contact Us

149.102.144.134

Last Seen: 2025-03-13

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

22 / tcp -1223728628 | 2025-03-13T01:50:53.741224

OpenSSH8.2p1 Ubuntu 4ubuntu0.11

80 / tcp 1651973090 | 2025-03-05T18:04:21.956625

Hashes

nginx1.18.0

443 / tcp -1623852280 | 2025-02-25T01:30:22.346985

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

-1223728628 | 2025-03-13T01:50:53.741224

80 / tcp

1651973090 | 2025-03-05T18:04:21.956625

443 / tcp

-1623852280 | 2025-02-25T01:30:22.346985