GeneralInformation

Hostnames	admin.account.skyclover.com auth.account.skyclover.com
Domains	skyclover.com
Cloud Provider	DigitalOcean
Cloud Region	us-nj
Country	United States
City	Clifton
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 3001

22 / tcp

660946445 | 2025-01-21T13:13:15.492780

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBIsK1sqeQ3/axPD9haIwsAJ0
Jxrp4Xqo4K5NvBvLvAKlPT6UlNduwg96jYkbNXyTELSewnXZfWx9ezEkAZH1DfM=
Fingerprint: 0f:a7:f1:c3:9c:45:03:b2:2a:30:f1:cf:b9:49:f8:63

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

1651973090 | 2025-01-27T16:19:30.005470

Hashes

hash

-714907298

http.dom_hash

-2049760045

http.html_hash

1651973090

http.server_hash

967792298

http.title_hash

911614014

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Jan 2025 16:19:29 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Wed, 16 Aug 2023 20:33:42 GMT
Connection: keep-alive
ETag: "64dd32a6-264"
Accept-Ranges: bytes

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

443 / tcp

1042155802 | 2025-01-27T11:48:53.545095

Hashes

hash

555243528

http.dom_hash

232805015

http.html_hash

1042155802

http.server_hash

967792298

http.title_hash

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Jan 2025 11:48:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 909
Connection: keep-alive
Vary: Accept-Encoding
Content-Security-Policy: img-src 'self' data: https:;script-src 'self' 'unsafe-inline';connect-src 'self' https://auth.account.skyclover.com https://*.applicationinsights.azure.com;frame-src 'self' https:;frame-ancestors 'self' http://localhost:3002 https://admin.account.skyclover.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Cross-Origin-Embedder-Policy: credentialless
Cross-Origin-Resource-Policy: cross-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Last-Modified: Tue, 23 Apr 2024 17:22:08 GMT
Cache-Control: no-cache, no-store, must-revalidate

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:69:09:8b:83:6f:14:d0:ee:85:1a:9f:4b:36:56:f9:6a:53
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Dec 29 05:46:25 2024 GMT
            Not After : Mar 29 05:46:24 2025 GMT
        Subject: CN=admin.account.skyclover.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ea:63:fe:b5:ee:99:37:63:69:29:33:5b:ea:69:
                    d4:93:a2:73:23:d5:ef:c1:7c:04:c4:48:93:aa:62:
                    87:05:d2:9e:ca:91:f2:6e:d6:18:e7:69:45:7e:d2:
                    ce:cb:3a:b9:61:af:5e:c8:73:69:61:d6:be:9a:aa:
                    d3:11:39:8c:dd:5e:4e:03:1e:d0:3d:e7:ff:34:66:
                    b9:d8:c3:1b:e5:8d:34:d0:bb:e5:8a:11:cb:c2:5d:
                    78:f1:5a:31:6d:5d:07:fe:a6:c7:e2:df:d0:45:65:
                    6b:a5:a1:46:3f:7a:3a:20:68:fa:09:89:10:c5:47:
                    e8:2a:86:cd:1f:60:d1:28:bc:49:14:fd:5e:f5:42:
                    42:4c:b9:86:7a:d8:b1:51:04:72:f9:a4:92:87:b3:
                    47:04:30:df:8f:ca:0b:fb:6b:43:ad:2f:72:69:88:
                    2c:30:13:8f:92:14:ce:af:85:12:e8:2a:e0:b3:4b:
                    37:c6:cd:77:d2:a0:e4:a1:43:eb:ba:cb:b7:7c:31:
                    43:76:1c:c4:9f:43:ce:f7:c7:4a:45:5e:55:0b:52:
                    9c:af:aa:ff:52:da:da:f6:64:40:d1:8b:c9:77:b8:
                    da:31:a6:91:1d:63:5d:ec:4e:b8:d7:46:3f:80:a7:
                    af:84:08:0d:1b:05:e9:ee:b8:10:09:7e:68:f8:c5:
                    35:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                B9:ED:B6:67:AE:67:DC:36:E5:12:9A:DE:78:C4:16:E9:59:68:00:B3
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:admin.account.skyclover.com, DNS:auth.account.skyclover.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Dec 29 06:44:55.615 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:02:8C:BD:01:3D:28:09:F6:0E:24:56:35:
                                61:86:8B:CD:B2:02:A0:54:52:F8:9F:C0:36:D7:16:86:
                                B8:22:2D:E4:02:21:00:F4:67:DD:F6:B4:10:E4:89:15:
                                55:B8:88:2B:BD:DD:DE:73:90:00:C2:F2:00:F6:19:45:
                                1C:2D:FA:1B:5B:74:D9
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Dec 29 06:44:55.849 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C7:71:9E:66:11:4B:6C:EE:D3:DF:2D:
                                A6:60:D6:41:2F:84:B4:E6:C7:FC:9C:23:4C:42:84:5C:
                                88:06:72:A9:7D:02:21:00:90:12:F2:45:9E:26:25:B9:
                                0F:03:1B:06:2C:E2:35:06:F3:33:8A:85:AC:65:01:35:
                                BC:A2:CD:08:C0:B2:BC:D3
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3f:94:ca:62:5e:06:5c:05:6f:92:87:1d:2a:32:17:02:41:ea:
        4e:b5:97:2d:6c:22:e6:2b:90:60:bb:81:c6:94:94:a1:cc:11:
        cf:5b:38:44:56:08:a8:db:7e:2c:f1:88:3f:3c:79:61:c1:5b:
        8b:32:ed:f6:1a:07:67:57:d6:4c:d0:d9:e3:89:78:e1:e9:45:
        35:75:34:5d:f1:3e:ec:4f:e4:2a:bc:62:ee:41:35:00:0b:9a:
        e3:f9:bb:c4:e4:45:dd:6d:1d:61:cd:83:d4:17:af:d6:80:a6:
        6c:cf:c8:d1:5a:7d:35:32:47:b2:5f:87:32:94:91:f3:21:4f:
        ef:8c:af:cf:c6:84:e8:c7:8f:11:8c:c9:8d:c6:d3:d9:57:fd:
        54:37:bb:80:48:1a:75:7b:06:ab:6b:7c:2b:a4:27:10:12:aa:
        e9:8d:63:c2:2b:cb:a2:5b:63:d0:97:81:0f:f8:d0:69:a3:b2:
        8e:db:fe:0b:a7:16:96:46:f2:22:eb:5a:64:79:bc:86:d0:d4:
        8d:43:41:62:f5:d5:85:f1:8f:94:49:23:af:4f:d0:21:8f:14:
        e5:32:e0:9b:94:8d:f9:bd:d6:9a:cd:4e:bf:9c:bf:b4:9a:64:
        2a:ba:a3:db:40:50:99:32:71:7d:5f:1c:e1:a3:26:0c:78:49:
        df:80:e3:f8

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

3001 / tcp

-1031755703 | 2025-01-13T07:34:15.010232

HTTP/1.1 302 Found
Vary: Accept-Encoding
Content-Security-Policy: img-src 'self' data: https:;script-src 'self' 'unsafe-inline';connect-src 'self' https://auth.account.skyclover.com https://*.applicationinsights.azure.com;frame-src 'self' https:;frame-ancestors 'self' http://localhost:3002 https://admin.account.skyclover.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Cross-Origin-Embedder-Policy: credentialless
Cross-Origin-Resource-Policy: cross-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Location: https://auth.account.skyclover.com/unknown-session
Content-Type: text/html; charset=utf-8
Content-Length: 131
Date: Mon, 13 Jan 2025 07:34:14 GMT
Connection: keep-alive
Keep-Alive: timeout=5

Redirecting to <a href="https://auth.account.skyclover.com/unknown-session">https://auth.account.skyclover.com/unknown-session</a>.

167.172.241.126

Last Seen: 2025-01-27

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

660946445 | 2025-01-21T13:13:15.492780

OpenSSH8.9p1 Ubuntu 3ubuntu0.6

80 / tcp

1651973090 | 2025-01-27T16:19:30.005470

Hashes

nginx1.18.0

443 / tcp

1042155802 | 2025-01-27T11:48:53.545095

Hashes

nginx1.18.0

3001 / tcp

-1031755703 | 2025-01-13T07:34:15.010232

Products

Pricing

Contact Us

167.172.241.126

Last Seen: 2025-01-27

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

22 / tcp 660946445 | 2025-01-21T13:13:15.492780

OpenSSH8.9p1 Ubuntu 3ubuntu0.6

80 / tcp 1651973090 | 2025-01-27T16:19:30.005470

Hashes

nginx1.18.0

443 / tcp 1042155802 | 2025-01-27T11:48:53.545095

Hashes

nginx1.18.0

3001 / tcp -1031755703 | 2025-01-13T07:34:15.010232

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

660946445 | 2025-01-21T13:13:15.492780

80 / tcp

1651973090 | 2025-01-27T16:19:30.005470

443 / tcp

1042155802 | 2025-01-27T11:48:53.545095

3001 / tcp

-1031755703 | 2025-01-13T07:34:15.010232