GeneralInformation

Hostnames	vmi472049.contaboserver.net chat.pimenta.group
Domains	contaboserver.net pimenta.group
Country	Germany
City	Nürnberg
Organization	Contabo GmbH
ISP	Contabo GmbH
ASN	AS51167

WebTechnologies

Databases

MongoDB

JavaScript frameworks

Meteor

Programming languages

Node.js

Web frameworks

Meteor

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

17 22 80 443 9000

17 / tcp

852440848 | 2025-03-25T12:23:34.912219

Hashes

hash

935256546

http.dom_hash

-1008231315

http.favicon.hash

-1429736799

http.html_hash

852440848

pimentaCHAT

HTTP/1.1 200 OK
X-Instance-ID: E5gMc2wDSaquKixrX
X-Powered-By: Express
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
set-cookie: connect.sid=s%3AxOEvDhP9a44zIe9amxW4OYZ--dUpRfPR.eAKQ2FR1tH79v%2B%2BSNSu2vgrYCi9wJnyyTzFmoyoJY1E; Path=/; HttpOnly
Vary: Accept-Encoding
Date: Tue, 25 Mar 2025 12:23:31 GMT
Connection: keep-alive
Transfer-Encoding: chunked

22 / tcp

-1589602186 | 2025-03-20T09:16:51.002326

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDTSYXTDRxpY+r513DrwtuOOwDyfwV3o5iQ8cuOVeVO4el4
f6uPTzGRzamqmgjNbQHVtBXtPUXNH9Cff0l57rMKvF6HLHDHWwF8AD4Bicu6LVOR5HulbCKyuWo3
qgWjev/GLV6zeJTAdypuAgKdJCkq+DLJ4M8+4fmQx4tgn5eLcef9/JEu3eNzoqRQiOQcMwiszgTk
6zoliu0d9QR1UYwb3YXGGP8a0WXt+ziK4pnvi246WO3AcDXRkIftheue+Fh/ZgAqmSewyoxeJxem
+N7zPFXwcINtuA/qQFQNinHAjuRZXJiFHkGiI7jpq3d5KCrONBBcmHBhD2CMmWz+Z2axwGIXfEyB
ATm0rx6gLiRnZJYxPRPF5+iorX1fYvd5BAlyR0TcuT6sWWavJ3b7JxcC1k7m34wHinnmR9IoB+sL
Ck6skEUnx3puI7H18DLtpQkn2uzjAxxWxFDjHJ/OlAtIOffzrRxjtdxO0DhgzhilZ4btuYyl5egF
NU5osEyjps8=
Fingerprint: 5f:da:3c:e8:f9:ae:5f:7b:02:98:6a:c7:c4:53:48:27

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

1651973090 | 2025-03-05T00:39:43.737021

Hashes

hash

275749811

http.dom_hash

-2049760045

http.html_hash

1651973090

http.server_hash

967792298

http.title_hash

911614014

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 05 Mar 2025 00:39:43 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Sun, 08 Nov 2020 16:57:17 GMT
Connection: keep-alive
ETag: "5fa8236d-264"
Accept-Ranges: bytes

Vulnerabilities

443 / tcp

26354290 | 2025-03-20T19:54:02.002691

Hashes

hash

-1473325870

http.dom_hash

-1008231315

http.favicon.hash

-1429736799

http.html_hash

26354290

http.robots_hash

-871861326

http.server_hash

967792298

http.title_hash

-483406429

pimentaCHAT

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 20 Mar 2025 19:53:52 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Instance-ID: E5gMc2wDSaquKixrX
X-Powered-By: Express
Access-Control-Allow-Origin: *
set-cookie: connect.sid=s%3A2DFn0ZCUENRIOxAjn3Hfn0WcOGTxxotX.iDplijTH7LLVMbk6A5I2tarXkBHsCco4k00d84mAzJ4; Path=/; HttpOnly
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5d:a1:21:49:c1:7e:ea:e1:99:81:5c:cf:40:bb:ad:38:81
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb 11 06:10:57 2025 GMT
            Not After : May 12 06:10:56 2025 GMT
        Subject: CN=chat.pimenta.group
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:fd:ea:86:2d:f4:bb:77:71:71:01:18:d8:
                    a8:f6:09:41:d8:59:7d:68:26:09:6e:c0:48:83:c0:
                    49:fb:30:5b:1d:e9:6c:f0:37:a5:b9:8e:36:45:96:
                    d7:1c:b7:ec:a0:5f:43:e0:65:27:d7:88:56:b8:73:
                    5c:75:02:53:e4:d2:3d:8b:ee:07:2a:35:e8:d9:28:
                    a5:f0:d0:73:6d:18:4e:2a:ae:11:a3:b9:88:ee:03:
                    62:7e:d2:05:87:70:9d:a7:ae:ec:94:e4:9e:9b:fd:
                    47:65:5c:65:52:41:55:e3:1b:fb:5d:cd:ad:a1:cf:
                    90:d6:11:d0:f6:ef:27:cb:ee:10:96:5d:30:75:0a:
                    40:6b:77:ae:82:1e:e5:7a:5d:a9:75:00:02:09:90:
                    ba:45:15:e1:bd:80:d3:d7:ef:76:01:27:5b:e6:3d:
                    2e:46:bf:8a:5d:87:b4:ca:be:2f:b5:d4:cb:63:aa:
                    b8:8f:57:f4:06:13:30:c8:10:36:04:bd:9b:8c:b1:
                    b0:5e:3f:de:fb:d5:23:f0:03:b7:3a:18:9b:0a:0d:
                    f4:56:b2:2c:58:25:9c:8e:c5:8a:f2:2e:cb:db:70:
                    8d:eb:5a:e2:07:59:4f:8a:49:48:b5:c9:b9:eb:d4:
                    ce:a6:ce:dc:9a:83:ac:f8:fc:bf:0a:4c:bb:2d:eb:
                    de:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                B2:52:27:E0:F2:27:C5:53:EA:F0:67:AF:CF:A0:69:41:1E:9F:8E:BD
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:chat.pimenta.group
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 11 07:09:28.004 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B7:97:15:5D:AC:CE:36:3D:69:6B:B8:
                                18:F6:56:3F:CE:4C:7D:64:A7:69:D3:73:15:58:0F:6B:
                                1E:EE:A0:F9:BB:02:21:00:F4:18:D5:78:27:43:07:83:
                                97:AC:B5:09:01:6E:07:57:C4:59:96:85:FA:C3:34:92:
                                B8:20:12:8C:83:0D:46:FB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Feb 11 07:09:30.006 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:17:24:B1:57:E8:7F:12:56:10:9C:1E:CB:
                                BD:B2:42:59:EE:E9:DA:04:37:B4:77:38:3A:11:F7:2C:
                                DE:47:68:1D:02:21:00:F9:A3:81:24:2B:63:E9:47:31:
                                BD:B9:C6:AF:54:B8:36:37:8C:3A:A7:F7:1D:DC:ED:F9:
                                35:5B:35:E4:B9:E2:C0
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        70:bd:54:8b:3c:db:78:60:28:e0:62:37:6a:8c:33:92:3c:8e:
        6f:55:1f:3d:79:44:3d:13:cb:69:49:71:01:d4:55:14:e8:f5:
        27:34:0b:96:40:3e:4a:4e:7c:d8:fd:c1:89:27:8b:bb:4d:ae:
        c5:b4:2e:d9:3c:92:d3:fa:10:52:7b:b2:eb:a3:18:e9:98:c9:
        94:b8:99:68:e9:5c:89:24:39:26:98:cd:d1:8d:f9:33:01:e3:
        8c:00:97:52:ad:e2:69:24:6f:54:92:83:0b:19:c5:b4:cb:b2:
        0c:6b:8e:07:7f:b1:cb:7a:aa:40:5d:f2:c2:42:f0:be:8d:9b:
        38:a4:b9:fa:d2:5f:a9:7e:17:51:76:27:bc:b9:a6:49:69:5e:
        6e:5f:d5:0f:22:43:cf:93:7e:77:c6:a0:dc:d9:af:7e:fe:b3:
        f2:6b:91:d3:92:e5:92:4a:dd:1f:e5:32:74:de:7f:32:2f:8b:
        d9:eb:2b:08:14:41:33:01:7d:37:f5:ba:f4:0e:da:c2:b4:a2:
        0f:02:ee:b4:bc:0b:29:7b:b2:31:15:53:e9:39:2d:11:5c:57:
        b2:c9:3f:57:36:ef:6c:69:e9:8e:00:3c:1d:81:c4:a4:0d:b3:
        3a:4a:4b:05:9c:d8:93:8f:e6:0b:ed:3b:bd:62:6f:33:d1:85:
        cf:08:dc:ca

Vulnerabilities

9000 / tcp

-1588969299 | 2025-03-26T20:57:57.858965

HTTP/1.1 302 Found
Server: nginx
Date: Wed, 26 Mar 2025 20:57:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Location: /auth/login/
X-Robots-Tag: noindex, nofollow
Vary: Accept-Language, Cookie
Content-Language: en
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Set-Cookie: sentrysid=eyJfbmV4dCI6Ii8ifQ:1txXoz:J_UPj99IvHgFEXH5OiMzFBWlsBk; expires=Wed, 09 Apr 2025 20:57:57 GMT; HttpOnly; Max-Age=1209600; Path=/

164.68.108.245

Last Seen: 2025-03-26

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

17 / tcp

852440848 | 2025-03-25T12:23:34.912219

Hashes

22 / tcp

-1589602186 | 2025-03-20T09:16:51.002326

OpenSSH8.2p1 Ubuntu 4ubuntu0.11

80 / tcp

1651973090 | 2025-03-05T00:39:43.737021

Hashes

nginx1.18.0

443 / tcp

26354290 | 2025-03-20T19:54:02.002691

Hashes

nginx1.18.0

9000 / tcp

-1588969299 | 2025-03-26T20:57:57.858965

nginx

Products

Pricing

Contact Us

164.68.108.245

Last Seen: 2025-03-26

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

17 / tcp 852440848 | 2025-03-25T12:23:34.912219

Hashes

22 / tcp -1589602186 | 2025-03-20T09:16:51.002326

OpenSSH8.2p1 Ubuntu 4ubuntu0.11

80 / tcp 1651973090 | 2025-03-05T00:39:43.737021

Hashes

nginx1.18.0

443 / tcp 26354290 | 2025-03-20T19:54:02.002691

Hashes

nginx1.18.0

9000 / tcp -1588969299 | 2025-03-26T20:57:57.858965

nginx

Products

Pricing

Contact Us

Vulnerabilities

17 / tcp

852440848 | 2025-03-25T12:23:34.912219

22 / tcp

-1589602186 | 2025-03-20T09:16:51.002326

80 / tcp

1651973090 | 2025-03-05T00:39:43.737021

443 / tcp

26354290 | 2025-03-20T19:54:02.002691

9000 / tcp

-1588969299 | 2025-03-26T20:57:57.858965