GeneralInformation

Hostnames	sd-28909.dedibox.fr 195-154-240-188.rev.poneytelecom.eu
Domains	dedibox.fr poneytelecom.eu
Country	France
City	Saint-Prix
Organization	Scaleway
ISP	SCALEWAY S.A.S.
ASN	AS12876

WebTechnologies

CDN

Google Hosted Libraries

JavaScript libraries

jQuery3.4.1

UI frameworks

Bootstrap4.4.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

OpenPorts

21 22 80 443 556

21 / tcp

833568802 | 2025-03-12T20:36:46.009098

220 (vsFTPd 3.0.5)
530 Login incorrect.
530 Please login with USER and PASS.
211-Features:
 UTF8
 EPRT
 EPSV
 MDTM
 PASV
 PBSZ
 PROT
 REST STREAM
 SIZE
 TVFS
211 End

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3a:3c:38:e0:ca:fd:fc:a8:50:d0:65:70:5e:4c:1d:c7:ae:d3:80
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=sd-28909.dedibox.fr
        Validity
            Not Before: Apr 24 13:35:48 2023 GMT
            Not After : Apr 21 13:35:48 2033 GMT
        Subject: CN=sd-28909.dedibox.fr
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:bf:e5:96:64:25:59:bd:89:90:02:e3:d6:
                    40:20:52:60:51:ae:26:a2:02:e9:5c:3c:4f:43:cc:
                    9d:97:12:fd:45:1c:17:93:7d:19:16:75:6f:0a:95:
                    d8:89:f4:2b:d7:10:08:23:29:20:2e:ab:f8:21:5b:
                    05:0b:dd:c7:27:6c:42:af:3a:bc:d0:a2:a9:aa:3c:
                    c2:3d:ca:42:a1:9c:42:0a:90:41:67:7d:a9:5c:3d:
                    b7:b7:2b:71:5e:aa:82:a8:9b:47:6d:9a:d0:6f:7a:
                    71:13:4d:a6:c7:46:88:8c:66:35:2d:44:c7:2d:2b:
                    2f:60:5d:e1:64:85:6d:3f:65:60:d4:a9:1c:e2:e9:
                    55:94:c0:cf:26:5e:15:db:a9:8b:99:88:e6:49:59:
                    1a:05:53:26:c5:d7:20:d0:fe:45:c3:40:70:34:4b:
                    a9:7f:e0:ff:8c:0f:60:a2:2a:1d:64:8a:3f:3d:cc:
                    ab:ec:ff:86:54:c4:55:bb:4e:07:bb:3a:8e:42:49:
                    df:7a:b9:54:fb:ce:40:fc:52:93:a0:04:6c:65:db:
                    51:a1:5a:e9:99:88:cc:83:52:a9:40:a0:08:25:0b:
                    95:a2:c3:1a:74:4a:7d:69:6c:63:d8:82:a4:ee:96:
                    c2:af:f4:19:ba:8a:65:94:95:bb:80:1f:54:af:ec:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:sd-28909.dedibox.fr
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        63:7a:06:f9:6f:f2:69:9e:bb:46:d7:df:f3:ef:1b:9f:54:54:
        01:f4:a2:ff:ec:f8:e5:5e:00:92:b6:21:97:4e:aa:a3:d8:b9:
        0a:bb:77:af:5a:62:7c:50:53:3d:cf:6f:8f:f5:65:3c:6b:9e:
        2e:93:9b:03:43:8d:a3:da:46:fd:db:a5:32:23:29:6f:e3:f8:
        0c:49:c5:25:6c:2b:ec:4b:e3:f7:51:2f:c3:ba:31:fb:58:18:
        db:8d:1c:13:e6:fa:e8:20:25:8c:6c:11:60:39:31:4a:f1:e3:
        68:54:72:d4:75:b8:73:2e:c1:83:9e:c9:a9:d8:cf:11:f2:e2:
        eb:e2:c6:61:49:90:2b:18:3f:39:86:f4:08:a8:da:f0:2e:5e:
        34:22:2f:b9:01:ef:15:f8:fc:6d:33:5d:1e:90:1c:78:98:8f:
        aa:31:fc:3f:cd:0c:75:11:0f:ca:39:aa:43:3a:e9:12:1b:6f:
        40:75:e9:78:49:37:07:ed:d8:42:c3:1c:58:d6:e8:65:e8:fc:
        53:e1:19:bf:f1:3b:43:46:ca:86:ae:3c:a5:21:95:ab:7b:f6:
        db:a1:c3:12:b9:9b:da:5f:f3:e1:10:6f:c6:c5:fb:b6:d5:ff:
        cb:c6:7c:97:1d:04:7a:02:6f:2f:c4:34:e0:09:19:4f:a2:a7:
        a5:c6:e0:28

22 / tcp

-1521149357 | 2025-03-16T12:08:23.732895

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.12
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDu9SXyYWG7aorQAsueUjM44vXiuvyAl13FOIQ2UsdkckC/
y74ozVdKI3Ng8uB2nVN91Q5k90U5/0CvS4oPbK/JcTa5EcYHo53fXuhVGrYm0qMiGhf6NiqoN8mo
hLaLG7YljznQqn6lXisVutsiIpfxJp40+N2M4O1IJpHeMo+kpELzEYlcg+sZ7lOyrbci4R7PD2t4
O7MRTRMSPIIFsNfs6ji6a/pH5JQik1+Eqkk1hIIHxzE3Oa98h1O+Dw2It/FizoskQxhrgQhy0nEm
eJcVH7nFSpy/yhgEU3LahWGJ0eoPfqOlmUKZUZwRXk2LYbEtj2IogtkJZEm+xxBZksZP
Fingerprint: 24:47:6d:e5:71:b2:d1:f0:df:a9:8d:01:b6:a1:86:9f

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

589765266 | 2025-03-17T00:07:23.718571

Hashes

hash

1867865455

http.dom_hash

1239617585

http.html_hash

589765266

http.server_hash

967792298

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 17 Mar 2025 00:07:23 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://195.154.240.188/

Vulnerabilities

443 / tcp

1251084301 | 2025-03-19T06:49:38.241811

Hashes

hash

-682981487

http.dom_hash

935188292

http.favicon.hash

-871540459

http.html_hash

1251084301

http.server_hash

-1340961475

http.title_hash

-1609032768

swizzin login

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 19 Mar 2025 06:49:38 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 2260
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3a:3c:38:e0:ca:fd:fc:a8:50:d0:65:70:5e:4c:1d:c7:ae:d3:80
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=sd-28909.dedibox.fr
        Validity
            Not Before: Apr 24 13:35:48 2023 GMT
            Not After : Apr 21 13:35:48 2033 GMT
        Subject: CN=sd-28909.dedibox.fr
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:bf:e5:96:64:25:59:bd:89:90:02:e3:d6:
                    40:20:52:60:51:ae:26:a2:02:e9:5c:3c:4f:43:cc:
                    9d:97:12:fd:45:1c:17:93:7d:19:16:75:6f:0a:95:
                    d8:89:f4:2b:d7:10:08:23:29:20:2e:ab:f8:21:5b:
                    05:0b:dd:c7:27:6c:42:af:3a:bc:d0:a2:a9:aa:3c:
                    c2:3d:ca:42:a1:9c:42:0a:90:41:67:7d:a9:5c:3d:
                    b7:b7:2b:71:5e:aa:82:a8:9b:47:6d:9a:d0:6f:7a:
                    71:13:4d:a6:c7:46:88:8c:66:35:2d:44:c7:2d:2b:
                    2f:60:5d:e1:64:85:6d:3f:65:60:d4:a9:1c:e2:e9:
                    55:94:c0:cf:26:5e:15:db:a9:8b:99:88:e6:49:59:
                    1a:05:53:26:c5:d7:20:d0:fe:45:c3:40:70:34:4b:
                    a9:7f:e0:ff:8c:0f:60:a2:2a:1d:64:8a:3f:3d:cc:
                    ab:ec:ff:86:54:c4:55:bb:4e:07:bb:3a:8e:42:49:
                    df:7a:b9:54:fb:ce:40:fc:52:93:a0:04:6c:65:db:
                    51:a1:5a:e9:99:88:cc:83:52:a9:40:a0:08:25:0b:
                    95:a2:c3:1a:74:4a:7d:69:6c:63:d8:82:a4:ee:96:
                    c2:af:f4:19:ba:8a:65:94:95:bb:80:1f:54:af:ec:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:sd-28909.dedibox.fr
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        63:7a:06:f9:6f:f2:69:9e:bb:46:d7:df:f3:ef:1b:9f:54:54:
        01:f4:a2:ff:ec:f8:e5:5e:00:92:b6:21:97:4e:aa:a3:d8:b9:
        0a:bb:77:af:5a:62:7c:50:53:3d:cf:6f:8f:f5:65:3c:6b:9e:
        2e:93:9b:03:43:8d:a3:da:46:fd:db:a5:32:23:29:6f:e3:f8:
        0c:49:c5:25:6c:2b:ec:4b:e3:f7:51:2f:c3:ba:31:fb:58:18:
        db:8d:1c:13:e6:fa:e8:20:25:8c:6c:11:60:39:31:4a:f1:e3:
        68:54:72:d4:75:b8:73:2e:c1:83:9e:c9:a9:d8:cf:11:f2:e2:
        eb:e2:c6:61:49:90:2b:18:3f:39:86:f4:08:a8:da:f0:2e:5e:
        34:22:2f:b9:01:ef:15:f8:fc:6d:33:5d:1e:90:1c:78:98:8f:
        aa:31:fc:3f:cd:0c:75:11:0f:ca:39:aa:43:3a:e9:12:1b:6f:
        40:75:e9:78:49:37:07:ed:d8:42:c3:1c:58:d6:e8:65:e8:fc:
        53:e1:19:bf:f1:3b:43:46:ca:86:ae:3c:a5:21:95:ab:7b:f6:
        db:a1:c3:12:b9:9b:da:5f:f3:e1:10:6f:c6:c5:fb:b6:d5:ff:
        cb:c6:7c:97:1d:04:7a:02:6f:2f:c4:34:e0:09:19:4f:a2:a7:
        a5:c6:e0:28

Vulnerabilities

195.154.240.188

Last Seen: 2025-03-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

21 / tcp

833568802 | 2025-03-12T20:36:46.009098

22 / tcp

-1521149357 | 2025-03-16T12:08:23.732895

OpenSSH8.2p1 Ubuntu 4ubuntu0.12

80 / tcp

589765266 | 2025-03-17T00:07:23.718571

Hashes

nginx1.18.0

443 / tcp

1251084301 | 2025-03-19T06:49:38.241811

Hashes

nginx

Products

Pricing

Contact Us

195.154.240.188

Last Seen: 2025-03-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

21 / tcp 833568802 | 2025-03-12T20:36:46.009098

22 / tcp -1521149357 | 2025-03-16T12:08:23.732895

OpenSSH8.2p1 Ubuntu 4ubuntu0.12

80 / tcp 589765266 | 2025-03-17T00:07:23.718571

Hashes

nginx1.18.0

443 / tcp 1251084301 | 2025-03-19T06:49:38.241811

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

833568802 | 2025-03-12T20:36:46.009098

22 / tcp

-1521149357 | 2025-03-16T12:08:23.732895

80 / tcp

589765266 | 2025-03-17T00:07:23.718571

443 / tcp

1251084301 | 2025-03-19T06:49:38.241811