GeneralInformation

Hostnames	covid19.hackrussia.ru
Domains	hackrussia.ru
Cloud Provider	DigitalOcean
Cloud Region	de-he
Country	Germany
City	Frankfurt am Main
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

80 / tcp

-668555286 | 2025-03-23T16:15:20.725950

Hashes

hash

1356081731

http.dom_hash

1239617585

http.html_hash

-668555286

http.server_hash

1229987539

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.17.8
Date: Sun, 23 Mar 2025 16:15:20 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

Vulnerabilities

443 / tcp

1534887681 | 2025-03-26T06:33:44.702713

Hashes

hash

442320131

http.dom_hash

-1774827439

http.html_hash

1534887681

http.server_hash

1229987539

http.title_hash

-324775585

Bad Request (400)

HTTP/1.1 400 Bad Request
Server: nginx/1.17.8
Date: Wed, 26 Mar 2025 06:33:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3d:98:5a:92:55:24:15:54:09:d5:c7:a5:98:4b:3f:86:a3
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Dec  7 01:30:50 2024 GMT
            Not After : Mar  7 01:30:49 2025 GMT
        Subject: CN=covid19.hackrussia.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:67:b0:be:13:eb:f8:2f:e3:72:94:46:26:
                    d5:32:d8:57:ad:73:6d:16:5c:17:97:41:6a:43:25:
                    7a:e6:bc:df:a8:7e:04:f0:54:72:2b:fd:51:eb:b0:
                    7b:ab:c6:ca:b2:a6:d5:8c:d3:00:b5:e7:c3:99:da:
                    a9:cc:85:5b:0c:7a:af:ee:71:ed:aa:dd:de:26:09:
                    28:0b:37:e7:9d:41:8f:00:a9:a0:ff:5a:54:32:74:
                    52:29:05:b7:ef:2d:ff:d6:d4:3c:e2:3e:12:43:b7:
                    1c:10:f6:22:27:2a:90:00:fd:d4:6f:a1:4a:a9:2c:
                    c9:b1:8d:f4:6b:38:85:88:b8:a9:f9:cf:3f:21:cb:
                    ca:fd:db:58:49:ad:83:33:ce:0b:44:44:c4:11:45:
                    3c:90:59:41:8d:2d:62:f4:3f:b2:7e:37:ce:c1:56:
                    37:35:8a:f6:a7:d6:80:46:bf:f6:cb:5d:cf:18:73:
                    9a:60:93:60:c9:b1:f4:a3:f2:d9:1c:67:0f:95:48:
                    79:9f:e9:61:6e:92:31:98:3f:f9:75:42:10:46:95:
                    08:79:0a:6e:c3:6e:54:29:3b:07:f2:9c:55:b1:40:
                    f7:37:aa:a6:d0:f9:08:59:2e:b5:db:92:00:97:ad:
                    d8:f1:ab:ef:cd:dd:72:fc:e6:45:85:8e:5f:88:10:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                02:7C:5F:90:72:AA:C7:6A:4A:CE:52:AF:3E:3E:F6:AA:5C:EB:7D:D2
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:covid19.hackrussia.ru
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Dec  7 02:29:20.802 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:18:1B:77:CB:67:E3:FE:15:97:BF:4F:F5:
                                79:10:73:C0:52:76:34:E2:41:01:E7:98:3C:0E:65:58:
                                72:C6:D8:E0:02:20:2E:9A:2C:FB:E2:FF:8C:37:44:13:
                                28:7F:B4:0F:83:CA:7F:88:AB:D6:66:80:64:E6:9D:E6:
                                6A:BA:49:F0:E2:7B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Dec  7 02:29:20.859 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:72:D8:B9:6D:E7:5D:8C:2C:BA:B9:FA:DA:
                                DC:9E:7B:38:18:4F:60:86:71:88:13:DC:59:76:DD:D5:
                                99:46:99:40:02:20:70:5B:CA:57:78:D8:DC:68:8A:9E:
                                60:F0:CD:F0:72:73:87:22:7F:23:1C:AC:5F:11:88:FA:
                                71:C9:EE:4D:24:36
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        58:16:78:bd:c7:d2:9f:bb:25:d8:9a:fc:5c:de:7d:4e:e0:db:
        d1:c6:9a:ec:09:81:1c:00:2b:8a:a3:48:b4:00:1a:04:a9:34:
        23:4c:98:77:3b:1c:3a:50:2d:59:2e:98:eb:85:88:47:f6:af:
        30:22:d9:48:40:1e:00:77:7f:30:35:5e:1f:02:ad:db:7e:40:
        40:56:32:c1:47:03:b1:e4:bf:08:af:4f:81:68:df:76:88:f8:
        e2:2f:73:78:dd:a6:40:5d:bd:e3:4b:0b:57:f4:2b:7e:d6:86:
        ba:aa:7d:57:90:3d:f9:5f:3c:6d:12:35:d1:51:50:9c:fa:2c:
        cd:04:dc:7f:4e:ba:a4:f3:d9:c6:76:e5:58:75:db:16:51:32:
        13:1e:51:69:3e:b9:54:58:9b:46:c3:a6:e7:a8:ee:64:0b:2d:
        bc:a7:2b:d3:c8:55:3a:33:5a:bc:0a:3b:86:f5:10:49:ab:61:
        dd:fb:4e:4c:61:fd:c8:39:62:eb:45:b5:03:9b:3b:04:7a:cf:
        75:34:ec:19:64:ec:e8:bd:a8:0a:15:d5:82:16:a3:16:84:e6:
        65:64:56:54:5d:5d:cb:32:5b:37:0d:11:1d:e7:25:f0:26:df:
        08:57:2f:42:7d:9e:ed:0f:3b:e0:42:b2:3f:1b:00:6c:7a:b4:
        3b:27:d9:ba

Vulnerabilities

207.154.238.48

Last Seen: 2025-03-26

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

-668555286 | 2025-03-23T16:15:20.725950

Hashes

nginx1.17.8

443 / tcp

1534887681 | 2025-03-26T06:33:44.702713

Hashes

nginx1.17.8

Products

Pricing

Contact Us

207.154.238.48

Last Seen: 2025-03-26

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp -668555286 | 2025-03-23T16:15:20.725950

Hashes

nginx1.17.8

443 / tcp 1534887681 | 2025-03-26T06:33:44.702713

Hashes

nginx1.17.8

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-668555286 | 2025-03-23T16:15:20.725950

443 / tcp

1534887681 | 2025-03-26T06:33:44.702713