GeneralInformation

Hostnames	allom.se www.allom.se
Domains	allom.se
Country	Sweden
City	Halmstad
Organization	Topborn AB
ISP	GleSYS AB
ASN	AS42708
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 80 443 4321

22 / tcp

996394793 | 2025-02-23T07:13:00.440627

Exceeded MaxStartups\r\n

443 / tcp

589765266 | 2025-03-08T17:04:22.773512

Hashes

hash

1709707931

http.dom_hash

1239617585

http.html_hash

589765266

http.server_hash

967792298

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 08 Mar 2025 17:04:22 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://www.allom.se/

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ed:34:d2:87:c6:ff:30:b3:90:14:d1:6c:e1:ce:51:38:6b
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Jan 29 05:51:13 2025 GMT
            Not After : Apr 29 05:51:12 2025 GMT
        Subject: CN=allom.se
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:07:08:1d:66:0a:ee:3d:43:7c:be:af:81:b4:76:
                    72:7a:06:62:44:d9:43:33:64:bf:28:91:65:59:13:
                    ee:67:c3:65:1c:8a:cb:9b:c2:bf:90:35:0f:a4:18:
                    b9:57:13:5e:11:a1:99:98:3e:29:2c:ad:b4:0b:f9:
                    a5:d3:ba:c4:bc
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                BB:D8:06:49:51:51:5F:44:5F:CB:9B:B5:D1:90:6B:D7:4F:9A:89:85
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:allom.se, DNS:www.allom.se
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Jan 29 06:49:43.963 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:41:D1:60:01:E6:79:21:45:0E:63:C6:90:
                                DC:B2:5D:FB:0F:9E:ED:B6:EB:EF:B6:F5:0E:61:43:3E:
                                93:11:CF:93:02:21:00:EE:17:8B:82:F7:2A:A2:77:90:
                                3C:7D:7D:AD:14:43:A2:F4:F3:D0:C2:DF:8E:66:F0:D8:
                                E5:3D:8F:64:16:74:DB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Jan 29 06:49:44.156 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:1A:4E:33:61:44:95:65:62:34:C8:9C:5E:
                                73:DC:80:34:AF:E5:64:10:43:82:9A:C9:4C:AF:FA:E1:
                                5A:3C:80:16:02:20:49:8A:CC:A7:9E:CB:C8:4A:6E:C8:
                                C9:46:66:05:74:89:0F:5C:A7:03:4A:B7:A9:BE:F6:7C:
                                C3:04:99:D0:42:FB
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:23:ea:02:04:b4:11:bb:dc:ba:2b:31:f6:44:ba:
        44:42:dc:2d:9e:2c:85:4e:c7:f6:ed:9d:99:26:83:93:ff:be:
        2f:4c:7a:94:3e:81:a7:27:58:a5:f2:f3:cb:4a:cc:b1:02:31:
        00:fa:d6:dd:88:41:f5:fb:1f:5b:c2:b9:50:d3:12:aa:d1:8f:
        a6:11:79:33:d8:2a:e0:db:5c:eb:01:c1:d2:87:c9:0c:63:91:
        75:0b:a3:3c:30:d4:37:7b:87:81:a7:52:a1

Vulnerabilities

4321 / tcp

-18776760 | 2025-02-28T19:27:46.152013

Hashes

hash

185102302

http.dom_hash

-2006505642

http.html_hash

-18776760

HTTP/1.1 404 Not Found
Content-Type: application/json; charset=UTF-8
Vary: Origin
Date: Fri, 28 Feb 2025 19:27:46 GMT
Content-Length: 24

193.234.21.166

Last Seen: 2025-03-08

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

996394793 | 2025-02-23T07:13:00.440627

443 / tcp

589765266 | 2025-03-08T17:04:22.773512

Hashes

nginx1.18.0

4321 / tcp

-18776760 | 2025-02-28T19:27:46.152013

Hashes

Products

Pricing

Contact Us

193.234.21.166

Last Seen: 2025-03-08

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

22 / tcp 996394793 | 2025-02-23T07:13:00.440627

443 / tcp 589765266 | 2025-03-08T17:04:22.773512

Hashes

nginx1.18.0

4321 / tcp -18776760 | 2025-02-28T19:27:46.152013

Hashes

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

996394793 | 2025-02-23T07:13:00.440627

443 / tcp

589765266 | 2025-03-08T17:04:22.773512

4321 / tcp

-18776760 | 2025-02-28T19:27:46.152013