GeneralInformation

Hostnames	osudroid.moe static.246.77.88.23.clients.your-server.de
Domains	osudroid.moe your-server.de
Country	Germany
City	Falkenstein
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940
Operating System	Linux

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 80 443 445 3001 3005 3006 3306 4000 10080 33060

22 / tcp

824376300 | 2025-03-08T16:42:22.199383

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDB8wqKQD9YIXDwdRh1aA3yV+qFfQjf39x6+zyPbvWvS2Kn
LP59rcKjeCG0nx/MjQbEb6WApqgTHsmHwQD6NAEIqRBu8kCORr2FX9hcEQ8kTAaHcZQhtp4k2osa
vu8h5iw4kqoSA+XY6WtJyPEp/uQi/FlXQ3t/RhXAxt/xFdRjofaABedn3wATgg2Lk3EL+0G/o6By
prNlIFhaN074Ts4QGUFfvLFVV8Q6xvz8C+j5TrIkJXM1L9hfLFVqbNhII2N86pppFONNLepWsWLH
KzzI9+XKn/XlxBkdjfnkZYdfBN1+PONCsepith/D68bhglAOf/pRsLmGwg3iCnZRy3B8wfMQc3RT
Hsyop/m0YCjDNuobrN5fvS2wgcjC4NPztUmn86Ra/QdddXuyZWNjMuAT+V2GW8DMEmeDSqt07Rhb
liDuyp75hnAMdsroI76z+WCVqySzSrp9bQGo5KSD+F1F+cO626J43r9pkCJF+gYmc7aJdKlrEkLf
hzNToZO4fj0=
Fingerprint: c1:fd:89:f9:e5:a7:5b:84:af:79:df:5e:6d:02:05:20

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

1651973090 | 2025-02-27T04:56:31.183325

Hashes

hash

1021753938

http.dom_hash

-2049760045

http.html_hash

1651973090

http.server_hash

967792298

http.title_hash

911614014

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 27 Feb 2025 04:56:30 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Fri, 25 Feb 2022 20:34:39 GMT
Connection: keep-alive
ETag: "62193d5f-264"
Accept-Ranges: bytes

Vulnerabilities

443 / tcp

614624575 | 2025-02-24T07:46:31.830762

Hashes

hash

-1984193592

http.dom_hash

736351037

http.favicon.hash

-1479159607

http.html_hash

614624575

http.robots_hash

864332182

http.server_hash

967792298

http.title_hash

-746838849

Droid PP Board

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 24 Feb 2025 07:46:31 GMT
Content-Type: text/html
Content-Length: 703
Last-Modified: Mon, 10 Feb 2025 00:09:29 GMT
Connection: keep-alive
ETag: "67a943b9-2bf"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ed:0e:dd:0a:30:73:33:ea:0c:f9:ab:2a:6f:a6:70:db:ad:3b:78
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=CloudFlare, Inc., OU=CloudFlare Origin SSL Certificate Authority, L=San Francisco, ST=California
        Validity
            Not Before: Dec 28 16:05:00 2021 GMT
            Not After : Dec 24 16:05:00 2036 GMT
        Subject: O=CloudFlare, Inc., OU=CloudFlare Origin CA, CN=CloudFlare Origin Certificate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:03:20:2f:4f:74:6c:09:c4:7b:a6:df:ca:
                    95:b2:3d:46:4d:c4:41:26:31:de:8e:c4:29:bc:49:
                    4d:3a:0b:88:6a:3d:43:46:82:38:87:fd:3c:5f:67:
                    ce:d7:ec:7f:60:32:eb:e9:89:7c:b8:f8:c3:7f:b9:
                    69:8d:69:d6:72:5d:9c:e1:1a:8b:37:8b:31:2e:9b:
                    f7:de:0c:34:48:96:af:22:eb:6d:a6:ba:18:4b:84:
                    4e:aa:0b:c8:e9:72:9f:77:a5:b8:ce:a3:1a:ff:3c:
                    59:53:ae:df:e0:20:dc:84:cd:ce:90:3b:61:80:24:
                    6e:09:53:51:e9:a0:57:d7:ed:fb:41:f9:bc:3d:bb:
                    f1:b4:02:5e:fd:df:b0:75:93:57:dd:aa:7d:a7:5c:
                    e0:94:e8:ba:dc:3c:ec:5a:49:e1:49:81:ba:bc:2c:
                    7c:6f:2d:49:e7:a5:64:b3:7e:63:bb:a9:1a:5f:40:
                    c2:15:d2:0b:61:e8:43:74:25:21:4a:e9:98:9b:1e:
                    b8:ab:be:70:fb:76:f0:7f:88:bd:59:3f:3d:d2:48:
                    40:f8:c0:98:51:7b:31:15:c8:e8:41:76:23:e2:80:
                    32:5c:8a:bd:12:59:57:a9:58:b4:69:ad:c0:8e:5f:
                    02:2a:2f:30:e6:86:9f:97:71:96:14:8e:c5:e4:3e:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                C5:69:A1:B3:9D:2A:4C:FD:AF:5E:A3:90:06:DF:CF:A3:C9:C1:9F:6E
            X509v3 Authority Key Identifier: 
                24:E8:53:57:5D:7C:34:40:87:A9:EB:94:DB:BA:E1:16:78:FC:29:A4
            Authority Information Access: 
                OCSP - URI:http://ocsp.cloudflare.com/origin_ca
            X509v3 Subject Alternative Name: 
                DNS:*.osudroid.moe, DNS:osudroid.moe
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.cloudflare.com/origin_ca.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5b:3e:88:0e:3f:6c:d4:9c:43:7a:3a:df:70:f9:be:f4:f6:33:
        77:f2:be:14:90:3d:87:37:fc:ef:8f:1f:4c:20:f1:2a:27:33:
        be:da:00:14:e9:f3:e7:5e:ec:fa:41:93:8f:57:20:38:cc:a5:
        1e:a1:76:6d:4d:f0:80:0f:2e:af:86:37:0c:1a:14:7b:df:b7:
        9b:8a:f6:e9:9a:ed:24:22:39:74:f6:ee:6d:be:66:b7:57:79:
        74:77:4c:4f:a6:ef:84:aa:7e:25:c8:f6:ab:7c:12:85:2c:d7:
        8a:0a:5b:97:c8:7b:a2:5a:e0:23:23:7a:a7:39:5b:4e:80:63:
        c2:29:ec:aa:e9:91:58:7e:e6:3b:bf:67:b4:8c:9b:26:bd:fe:
        0d:aa:17:10:96:7a:07:11:5c:cd:d1:76:c3:c9:3f:9f:5a:b9:
        ee:fe:37:a5:a4:70:7a:00:24:7f:f0:0d:73:e3:ae:34:2f:3e:
        a6:e6:ed:bf:a7:48:cd:d9:a4:4a:ca:85:d9:5e:cf:f3:30:ef:
        0f:87:3d:14:fb:cd:5a:6d:1d:83:0f:4f:27:f8:f9:c4:9e:28:
        95:7f:0b:09:28:99:f8:8a:20:09:0a:85:70:95:d0:96:40:8c:
        d5:6a:0e:12:db:39:6e:1d:74:60:84:5b:e6:9c:69:8f:02:13:
        b2:73:bc:ce

Vulnerabilities

445 / tcp

-1166656618 | 2025-02-27T05:15:01.019179

SMB Status:
  Authentication: enabled
  SMB Version: 2
  Capabilities: raw-mode

3001 / tcp

685965147 | 2025-02-20T21:47:01.231395

HTTP/1.1 200 OK
X-Powered-By: Express
Vary: Origin
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Mon, 10 Feb 2025 00:09:29 GMT
ETag: W/"2bf-194ed308c2e"
Content-Type: text/html; charset=UTF-8
Content-Length: 703
Date: Thu, 20 Feb 2025 21:47:01 GMT
Connection: keep-alive
Keep-Alive: timeout=5

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Official website of droid performance points (dpp), bringing performance points to osu!droid."/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Droid PP Board</title><script defer="defer" src="/static/js/main.2f6a3d5f.js"></script><link href="/static/css/main.e0814661.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

3005 / tcp

-1060095501 | 2025-03-07T04:41:43.636049

Hashes

hash

-845155030

http.dom_hash

1231516973

http.html_hash

-1060095501

http.title_hash

-1449824703

Error

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Origin: *
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 139
Date: Fri, 07 Mar 2025 04:41:43 GMT
Connection: keep-alive
Keep-Alive: timeout=5

3006 / tcp

-1060095501 | 2025-02-12T17:33:50.775512

Hashes

hash

-905429831

http.dom_hash

1231516973

http.html_hash

-1060095501

http.title_hash

-1449824703

Error

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Origin: *
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 139
Date: Wed, 12 Feb 2025 17:33:50 GMT
Connection: keep-alive
Keep-Alive: timeout=5

3306 / tcp

-627435423 | 2025-02-06T22:09:59.946343

MySQL:
  Protocol Version: 10
  Version: 8.0.40
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: mysql_native_password

4000 / tcp

-1246004407 | 2025-02-18T18:21:24.999370

HTTP/1.1 400 Bad Request
Connection: close

10080 / tcp

1253924363 | 2025-02-27T11:56:57.398107

Hashes

hash

-1342409840

http.dom_hash

-2006505642

http.html_hash

1253924363

http.server_hash

1997822951

HTTP/1.1 400 Bad Request
Connection: close
Date: Thu, 27 Feb 2025 11:56:57 GMT
Server: TeamSpeak Server 3.13.7
Content-Type: application/json
Cache-Control: no-store

33060 / tcp

-795948505 | 2025-03-07T04:18:36.334092

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

23.88.77.246

Last Seen: 2025-03-08

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

824376300 | 2025-03-08T16:42:22.199383

OpenSSH8.2p1 Ubuntu 4ubuntu0.11

80 / tcp

1651973090 | 2025-02-27T04:56:31.183325

Hashes

nginx1.18.0

443 / tcp

614624575 | 2025-02-24T07:46:31.830762

Hashes

nginx1.18.0

445 / tcp

-1166656618 | 2025-02-27T05:15:01.019179

3001 / tcp

685965147 | 2025-02-20T21:47:01.231395

3005 / tcp

-1060095501 | 2025-03-07T04:41:43.636049

Hashes

3006 / tcp

-1060095501 | 2025-02-12T17:33:50.775512

Hashes

3306 / tcp

-627435423 | 2025-02-06T22:09:59.946343

MySQL8.0.40

4000 / tcp

-1246004407 | 2025-02-18T18:21:24.999370

10080 / tcp

1253924363 | 2025-02-27T11:56:57.398107

Hashes

33060 / tcp

-795948505 | 2025-03-07T04:18:36.334092

MySQL X Protocol

Products

Pricing

Contact Us

23.88.77.246

Last Seen: 2025-03-08

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

22 / tcp 824376300 | 2025-03-08T16:42:22.199383

OpenSSH8.2p1 Ubuntu 4ubuntu0.11

80 / tcp 1651973090 | 2025-02-27T04:56:31.183325

Hashes

nginx1.18.0

443 / tcp 614624575 | 2025-02-24T07:46:31.830762

Hashes

nginx1.18.0

445 / tcp -1166656618 | 2025-02-27T05:15:01.019179

3001 / tcp 685965147 | 2025-02-20T21:47:01.231395

3005 / tcp -1060095501 | 2025-03-07T04:41:43.636049

Hashes

3006 / tcp -1060095501 | 2025-02-12T17:33:50.775512

Hashes

3306 / tcp -627435423 | 2025-02-06T22:09:59.946343

MySQL8.0.40

4000 / tcp -1246004407 | 2025-02-18T18:21:24.999370

10080 / tcp 1253924363 | 2025-02-27T11:56:57.398107

Hashes

33060 / tcp -795948505 | 2025-03-07T04:18:36.334092

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

824376300 | 2025-03-08T16:42:22.199383

80 / tcp

1651973090 | 2025-02-27T04:56:31.183325

443 / tcp

614624575 | 2025-02-24T07:46:31.830762

445 / tcp

-1166656618 | 2025-02-27T05:15:01.019179

3001 / tcp

685965147 | 2025-02-20T21:47:01.231395

3005 / tcp

-1060095501 | 2025-03-07T04:41:43.636049

3006 / tcp

-1060095501 | 2025-02-12T17:33:50.775512

3306 / tcp

-627435423 | 2025-02-06T22:09:59.946343

4000 / tcp

-1246004407 | 2025-02-18T18:21:24.999370

10080 / tcp

1253924363 | 2025-02-27T11:56:57.398107

33060 / tcp

-795948505 | 2025-03-07T04:18:36.334092