GeneralInformation

Hostnames	analytics.coralmc.it 152.89.254.122.lowhosting.org
Domains	coralmc.it lowhosting.org
Country	Germany
City	Frankfurt am Main
Organization	LowHosting Services
ISP	Lowhosting services of Davide Gennari
ASN	AS212508
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

443 8123

443 / tcp

1150502994 | 2025-02-28T09:16:17.185770

Hashes

hash

-64550780

http.dom_hash

553024914

http.favicon.hash

-1386428907

http.html_hash

1150502994

http.robots_hash

674385864

http.server_hash

967792298

Plausible · Web analytics

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 28 Feb 2025 09:16:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4859
Connection: keep-alive
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: 
cache-control: max-age=0, private, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: GChUguCBAfWjY_cAE_Ii

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e1:f5:83:9f:09:a1:59:40:db:9c:b9:87:f2:5e:64:0c:49
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Jan 11 19:54:18 2025 GMT
            Not After : Apr 11 19:54:17 2025 GMT
        Subject: CN=analytics.coralmc.it
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:73:f8:0c:48:2c:15:41:c1:39:b6:f4:d5:
                    05:70:32:03:bc:d1:9f:9c:b4:57:2e:1e:b3:93:39:
                    9c:bf:c6:59:73:1b:37:94:c8:f4:f7:48:bd:4c:77:
                    25:87:ce:26:eb:7f:67:66:86:29:c2:df:e7:6f:ac:
                    6e:9d:f8:9c:bd:91:d3:f8:50:54:c8:e2:32:97:85:
                    e7:fa:6d:d9:76:7e:1b:72:9b:d4:06:b8:2b:b0:0d:
                    ed:30:e6:69:08:dd:28:09:93:9f:06:a3:60:65:d9:
                    3f:9b:ee:a2:42:10:0a:31:b4:77:d5:e2:6f:05:24:
                    b8:04:c7:53:77:2f:f6:6e:92:75:39:4f:fe:e2:30:
                    05:2a:c7:c9:6e:dd:bf:7a:29:ac:db:0f:f9:45:a4:
                    1c:60:48:99:d7:4e:62:96:27:97:dc:c7:e9:f3:6f:
                    aa:30:99:88:92:78:c1:27:08:70:87:65:25:6c:cb:
                    75:56:06:aa:cc:8d:25:08:f0:7a:29:20:85:bd:4d:
                    f6:1b:0d:46:10:f3:63:c5:46:72:59:47:24:c6:f6:
                    36:9f:5e:db:f8:94:1a:fd:5a:5a:6b:bf:28:07:ba:
                    2a:7f:45:31:ac:77:ee:0e:16:b6:57:93:d9:bd:97:
                    83:08:b8:37:0f:78:af:2b:d0:db:5c:6e:f4:90:19:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                94:9A:FD:54:85:10:19:1C:4C:0A:CF:17:29:95:F2:0C:27:C8:06:A2
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:analytics.coralmc.it
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Jan 11 20:52:48.073 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AC:10:E7:C2:B8:8A:AC:5E:DE:C4:AA:
                                65:0E:48:69:48:4A:C0:F7:37:34:25:5E:C4:55:E1:07:
                                83:D8:36:AC:84:02:21:00:F9:EC:6D:DA:1A:64:E7:0E:
                                C0:F2:0D:FD:E3:BF:8B:C0:1B:B8:4F:48:1E:2E:4E:20:
                                CE:7C:DF:87:8D:D1:B1:B7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Jan 11 20:52:48.116 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0B:07:01:25:2F:EE:4B:5A:75:D5:D6:6B:
                                E4:AF:F2:CA:1C:DF:DF:4A:8D:83:A0:04:0E:20:D4:D4:
                                1F:D6:93:A0:02:20:57:15:18:48:53:EB:B9:FC:38:20:
                                5C:CD:64:28:03:D1:AA:3C:18:1D:47:84:A2:35:F4:F4:
                                0A:AE:7D:8D:DE:20
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        53:c7:89:9f:04:af:ff:2f:aa:f8:66:32:72:3f:94:fa:c7:ce:
        b6:ae:75:70:b3:26:ab:6c:ad:06:fe:b8:33:b3:a9:c9:67:ba:
        24:3b:99:ff:7c:ed:77:e7:c8:7d:32:2e:3b:ac:75:18:b4:60:
        53:c5:57:af:59:22:f7:d8:7b:bd:28:0d:10:fd:de:40:a4:fe:
        e5:8a:7a:b9:a2:5f:01:25:4d:6e:f6:41:73:44:a2:aa:9c:4c:
        97:9a:f0:1b:7c:52:a5:cb:64:b0:14:e2:cf:f0:36:29:3a:73:
        f7:a8:b2:5b:fe:44:26:67:36:45:6b:81:7b:e6:90:09:a1:63:
        13:04:01:23:fe:62:82:d0:7d:99:2e:21:91:7a:2f:81:e3:2f:
        c3:21:b8:ec:cf:ce:d4:5a:81:e7:43:8d:e4:e5:df:9c:a7:44:
        44:df:2a:1d:80:6d:5a:ca:d2:fd:24:c3:4d:39:ea:3a:45:62:
        24:24:f2:df:d2:5b:1f:03:33:29:ca:ff:64:ca:89:8e:2a:5a:
        68:d7:da:d7:0f:3d:33:ef:c4:1f:d5:51:ca:e0:de:d9:1e:9f:
        b3:7f:8f:e3:64:ad:a0:34:b8:05:60:9c:1d:3b:27:ed:ee:9b:
        e6:83:ab:af:90:c3:8b:27:e0:28:f4:f8:64:e8:6d:8f:62:da:
        2d:1c:8e:24

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

8123 / tcp

-1924652754 | 2025-02-21T06:09:39.177855

Hashes

hash

483305910

http.dom_hash

1882092635

http.favicon.hash

182435965

http.html_hash

-1924652754

http.server_hash

-1952240085

http.title_hash

-401407370

Redirecting to https://152.89.254.122/login

HTTP/1.1 302 Found
Cache-Control: no-cache, private
Content-Type: text/html; charset=utf-8
Date: Fri, 21 Feb 2025 06:09:39 GMT
Location: https://152.89.254.122/login
Server: Caddy
Set-Cookie: XSRF-TOKEN=eyJpdiI6Im5Obmo5Nmp0M3owZW13UGRHQmxiOUE9PSIsInZhbHVlIjoiaE54Rm00WmdBMEpkUnRaZUtuTGt3cXB2Y2ZrRHR5aGtxaVlKRUhnYzlxQUZmRkNEYnhWSHJ3WThzd1VFUDhkWDJ3czhBNlVsVlF2YjZXd25leStTMEZnb2JaeEc1cFpDclowZUE4UWhwZGxFZ3Z5cThJdUxLNi81YldSSCttalkiLCJtYWMiOiJmZmQwYjRmOWQ5Y2M5ZDZhNzNjNGZjMDgxOTM4MDAyMTE3MDhkZmRkMmNjZWYyMjcyMGI1OTc1Nzc1MGY1OWM2IiwidGFnIjoiIn0%3D; expires=Fri, 21 Feb 2025 08:09:39 GMT; Max-Age=7200; path=/; secure; samesite=lax
Set-Cookie: solidtime_session=eyJpdiI6InhYMDFBM2FwalUrNTNjRys3Q3c5RlE9PSIsInZhbHVlIjoiNmNhV0R6d2JpTFVZMGhWazJkOUV5UVVzMThrdyt2bk0yaVZ5RTdxMU9DcWprd1pYSVV6dnVicGxTSlE1anp6aFRPZmp3STdNL2pMZnBoaEJBYUgvLys5VllIc0tvVHE0LzVjUXQ1dzgwRW80MUpEcU91QlYwZWdIS1VuR2tYQ0giLCJtYWMiOiIxMmQzYjZlMjE2MDhiOTllNWY3MWM2ZDk2NDlkYTYyZWJjNDQ3ZjUxYzQwZGMyNzMyYjkzNmNjZTgxOWViM2E0IiwidGFnIjoiIn0%3D; expires=Fri, 21 Feb 2025 08:09:39 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax
Vary: X-Inertia
Content-Length: 358

152.89.254.122

Last Seen: 2025-02-28

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

443 / tcp

1150502994 | 2025-02-28T09:16:17.185770

Hashes

nginx1.18.0

8123 / tcp

-1924652754 | 2025-02-21T06:09:39.177855

Hashes

Products

Pricing

Contact Us

152.89.254.122

Last Seen: 2025-02-28

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

443 / tcp 1150502994 | 2025-02-28T09:16:17.185770

Hashes

nginx1.18.0

8123 / tcp -1924652754 | 2025-02-21T06:09:39.177855

Hashes

Products

Pricing

Contact Us

Vulnerabilities

443 / tcp

1150502994 | 2025-02-28T09:16:17.185770

8123 / tcp

-1924652754 | 2025-02-21T06:09:39.177855