GeneralInformation

Hostnames	v10415.1blu.de
Domains	1blu.de
Country	Germany
City	Frankfurt am Main
Organization	1blu business 195.90.208.0/22
ISP	EVANZO e-commerce GmbH
ASN	AS42730

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 53 80 6697 8081

1217745144 | 2024-12-12T20:39:21.208456

22 / tcp

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBGznn/8JASCGzIQDXCIhtfzS
yE+Es+MlWuGYh54Jiofl3/MvhokUhfCprZiMlyJKcqiYMXYiy7I7d95TdA3aqqs=
Fingerprint: 74:48:d0:0b:d8:46:8c:f4:15:9f:a2:91:f5:e0:67:1d

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-1417906835 | 2024-11-23T03:10:50.073897

53 / tcp

Served by PowerDNS - https://www.powerdns.com/
Resolver ID: v10415.1blu.de

-1417906835 | 2024-12-21T00:53:40.620043

53 / udp

Served by PowerDNS - https://www.powerdns.com/
Resolver ID: v10415.1blu.de

632895148 | 2024-12-20T05:15:32.631938

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 20 Dec 2024 05:15:32 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 3864
Connection: keep-alive
Set-Cookie: _csrf_token=b51d9e2e94d5184012b3875d32b32cea847c4c7a0c3c2c6836a2c7fb18261b0f; Expires=Wed, 25 Dec 2024 05:15:32 GMT; Max-Age=432000; HttpOnly; Path=/; SameSite=Lax
Vary: Cookie
Set-Cookie: session=c38047df-2b36-49e1-949a-c20cad03930f; Expires=Fri, 20 Dec 2024 05:25:32 GMT; HttpOnly; Path=/; SameSite=Lax

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

0 | 2024-12-11T06:22:53.778334

6697 / tcp

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:77:dc:b9:c9:d7:96:d7:f1:33:7d:81:ec:a4:7c:61:18:d8:72:55
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, ST=New York, L=City, O=Zemra, OU=IRCd, CN=Frankfurt.shqipet.ch
        Validity
            Not Before: Nov 11 12:05:03 2024 GMT
            Not After : Nov  9 12:05:03 2034 GMT
        Subject: C=US, ST=New York, L=City, O=Zemra, OU=IRCd, CN=Frankfurt.shqipet.ch
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub:
                    04:fc:dd:5b:80:55:75:17:a4:97:5d:6c:3c:d3:c4:
                    62:03:28:0e:33:99:62:a3:db:a3:4d:18:ea:a5:bf:
                    26:3e:a0:5b:e5:59:de:40:a5:8e:40:e4:cc:fe:0b:
                    6c:db:3e:9c:90:22:e9:85:a2:9c:c6:b3:6b:b2:e3:
                    2a:65:55:88:5c:e1:7e:d1:d3:74:2c:e8:6c:57:91:
                    08:e8:53:5f:28:dd:8a:a0:b1:84:bc:7d:44:d4:07:
                    6b:06:be:94:3f:cd:8b
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:50:58:54:F7:50:08:A4:0F:4E:79:27:BC:70:B1:0F:16:72:54:1A
            X509v3 Authority Key Identifier: 
                8A:50:58:54:F7:50:08:A4:0F:4E:79:27:BC:70:B1:0F:16:72:54:1A
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:65:02:31:00:f8:39:26:14:1f:2c:fe:77:bf:fb:c1:b9:0c:
        d6:60:13:32:b6:d5:b4:bf:1d:96:c2:53:04:d9:f7:25:4c:84:
        2b:47:14:de:35:b6:28:7f:3c:9b:49:96:ea:46:b7:37:f8:02:
        30:7c:6c:f7:2a:53:1f:60:3e:6c:df:1b:cb:e0:e3:7e:df:f9:
        a2:c8:cd:fd:8d:94:dc:bc:f6:8c:d7:6e:54:f2:7f:55:68:f2:
        94:7d:88:1b:79:ad:29:3d:93:49:72:62:9c

-2083907773 | 2024-12-15T16:46:39.261867

8081 / tcp

HTTP/1.1 200 OK
Connection: close
Content-Length: 23741
Content-Type: text/html; charset=utf-8

<!DOCTYPE html>
<html><head>
<title>PowerDNS Authoritative Server Monitor</title>
<link rel="stylesheet" href="style.css"/>
</head><body>
<div class="row">
<div class="headl columns"><a href="/" id="appname">PowerDNS 4.9.2</a></div>
<div class="header columns"></div></div><div class="row"><div class="all columns"><p>Uptime: 15.1 days<br>
Queries/second, 1, 5, 10 minute averages:  0, 0, 0. Max queries/second: 88<br>
Cache hitrate, 1, 5, 10 minute averages: 17.8%, 36.7%, 42.3%<br>
Backend query cache hitrate, 1, 5, 10 minute averages: 65.0%, 65.7%, 67.0%<br>
Backend query load, 1, 5, 10 minute averages: 0, 0, 0. Max queries/second: 1<br>
Total queries: 343094. Question/answer latency: 0.428ms</p><br>
<div class="panel"><span class=resetring><i></i><a href="?resetring=logmessages">Reset</a></span>
<h2>Log Messages</h2>
<div class=ringmeta><a class=topXofY href="?ring=logmessages">Showing: Top 10 of 196</a>
<span class=resizering>Resize: <a href="?resizering=logmessages&amp;size=10">10</a> <a href="?resizering=logmessages&amp;size=100">100</a> <a href="?resizering=logmessages&amp;size=500">500</a> <a href="?resizering=logmessages&amp;size=1000">1000</a> (10000) <a href="?resizering=logmessages&amp;size=500000">500000</a> </span></div><table class="data"><tr><td>Cleared signature cache.</td><td>3</td><td align=right>1.5%</td>
<tr><td>[webserver] aabff137-8cb9-4fb4-8275-96be6b226ea7 Unable to parse request: HTTP version not supported</td><td>1</td><td align=right>0.5%</td>
<tr><td>[webserver] 9c96982d-cc44-4684-96a2-8770e8abc285 Unable to parse request: HTTP version not supported</td><td>1</td><td align=right>0.5%</td>
<tr><td>[webserver] 9f42c9a6-fbbd-4c19-873f-e131b1ab272f HTTP STL Exception: Writing data: Broken pipe</td><td>1</td><td align=right>0.5%</td>
<tr><td>[webserver] a10bbb7b-3fd7-450e-be0b-8683f42464c6 Unable to parse request: HTTP version not supported</td><td>1</td><td align=right>0.5%</td>
<tr><td>[webserver] a2ac2531-ccbd-4c98-9b85-39aa51173285 Unable to parse request: HTTP version not supported</td><td>1</td><td align=right>0.5%</td>
<tr><td>[webserver] a2f825bb-51da-4862-b7cd-c59f625252cc Unable to parse request: HTTP version not supported</td><td>1</td><td align=right>0.5%</td>
<tr><td>[webserver] a3b96609-76dd-46b6-af64-bd232b4ab25a Unable to parse request: Malformed header line</td><td>1</td><td align=right>0.5%</td>
<tr><td>[webserver] a5a70665-64f8-409f-adc4-544ea88f38a8 Unable to parse request: HTTP version not supported</td><td>1</td><td align=right>0.5%</td>
<tr><td>[webserver] a5d078a7-fbda-4c29-a4ad-62d4d2396646 Unable to parse request: Malformed header line</td><td>1</td><td align=right>0.5%</td>
<tr><td colspan=3></td></tr>
<tr><td><b>Rest:</b></td><td><b>186</b></td><td align=right><b>93.9%</b></td>
<tr><td><b>Total:</b></td><td><b>198</b></td><td align=right><b>100%</b></td></table></div>
<div class="panel"><span class=resetring><i></i><a href="?resetring=remotes">Reset</a></span>
<h2>Remote server IP addresses</h2>
<div class=ringmeta><a class=topXofY href="?ring=remotes">Showing: Top 10 of 2104</a>
<span class=resizering>Resize: <a href="?resizering=remotes&amp;size=10">10</a> <a href="?resizering=remotes&amp;size=100">100</a> <a href="?resizering=remotes&amp;size=500">500</a> <a href="?resizering=remotes&amp;size=1000">1000</a> (10000) <a href="?resizering=remotes&amp;size=500000">500000</a> </span></div><table class="data"><tr><td>122.187.205.78</td><td>876</td><td align=right>8.8%</td>
<tr><td>31.177.69.60</td><td>208</td><td align=right>2.1%</td>
<tr><td>31.177.64.76</td><td>166</td><td align=right>1.7%</td>
<tr><td>95.167.134.226</td><td>155</td><td align=right>1.6%</td>
<tr><td>46.38.225.230</td><td>139</td><td align=right>1.4%</td>
<tr><td>198.142.152.22</td><td>112</td><td align=right>1.1%</td>
<tr><td>80.254.108.211</td><td>111</td><td align=right>1.1%</td>
<tr><td>198.142.152.21</td><td>92</td><td align=right>0.9%</td>
<tr><td>46.38.225.158</td><td>84</td><td align=right>0.8%</td>
<tr><td>139.175.9.40</td><td>59</td><td align=right>0.6%</td>
<tr><td colspan=3></td></tr>
<tr><td><b>Rest:</b></td><td><b>7998</b></td><td align=right><b>80.0%</b></td>
<tr><td><b>Total:</b></td><td><b>10000</b></td><td align=right><b>100%</b></td></table></div>
<div class="panel"><span class=resetring><i></i><a href="?resetring=remotes-corrupt">Reset</a></span>
<h2>Remote hosts sending corrupt packets</h2>
<div class=ringmeta><a class=topXofY href="?ring=remotes-corrupt">Showing: Top 10 of 28</a>
<span class=resizering>Resize: <a href="?resizering=remotes-corrupt&amp;size=10">10</a> <a href="?resizering=remotes-corrupt&amp;size=100">100</a> <a href="?resizering=remotes-corrupt&amp;size=500">500</a> <a href="?resizering=remotes-corrupt&amp;size=1000">1000</a> (10000) <a href="?resizering=remotes-corrupt&amp;size=500000">500000</a> </span></div><table class="data"><tr><td>202.112.237.201</td><td>17</td><td align=right>34.0%</td>
<tr><td>180.96.19.6</td><td>3</td><td align=right>6.0%</td>
<tr><td>218.205.81.205<

195.90.211.151

Last Seen: 2024-12-21

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1217745144 | 2024-12-12T20:39:21.208456
22 / tcp

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

-1417906835 | 2024-11-23T03:10:50.073897
53 / tcp

-1417906835 | 2024-12-21T00:53:40.620043
53 / udp

632895148 | 2024-12-20T05:15:32.631938
80 / tcp

nginx1.18.0

0 | 2024-12-11T06:22:53.778334
6697 / tcp

-2083907773 | 2024-12-15T16:46:39.261867
8081 / tcp

Products

Pricing

Contact Us

195.90.211.151

Last Seen: 2024-12-21

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

1217745144 | 2024-12-12T20:39:21.208456 22 / tcp

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

-1417906835 | 2024-11-23T03:10:50.073897 53 / tcp

-1417906835 | 2024-12-21T00:53:40.620043 53 / udp

632895148 | 2024-12-20T05:15:32.631938 80 / tcp

nginx1.18.0

0 | 2024-12-11T06:22:53.778334 6697 / tcp

-2083907773 | 2024-12-15T16:46:39.261867 8081 / tcp

Products

Pricing

Contact Us

Vulnerabilities

1217745144 | 2024-12-12T20:39:21.208456
22 / tcp

-1417906835 | 2024-11-23T03:10:50.073897
53 / tcp

-1417906835 | 2024-12-21T00:53:40.620043
53 / udp

632895148 | 2024-12-20T05:15:32.631938
80 / tcp

0 | 2024-12-11T06:22:53.778334
6697 / tcp

-2083907773 | 2024-12-15T16:46:39.261867
8081 / tcp