GeneralInformation

Hostnames	vmi1217478.contaboserver.net e-valimised.ee www.e-valimised.ee
Domains	contaboserver.net e-valimised.ee
Country	Germany
City	Düsseldorf
Organization	Contabo GmbH
ISP	Contabo GmbH
ASN	AS51167
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443 8080 9000

80 / tcp

677579724 | 2025-03-19T09:52:45.679900

Hashes

hash

1566630136

http.dom_hash

1239617585

http.html_hash

677579724

http.server_hash

967792298

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 19 Mar 2025 09:52:45 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

Vulnerabilities

443 / tcp

1651973090 | 2025-03-16T15:12:15.924766

Hashes

hash

1671528214

http.dom_hash

-2049760045

http.html_hash

1651973090

http.server_hash

967792298

http.title_hash

911614014

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 16 Mar 2025 15:12:15 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Thu, 13 Feb 2025 17:58:43 GMT
Connection: keep-alive
ETag: "67ae32d3-264"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b7:87:75:b6:b6:9b:df:b0:8e:19:1c:7d:6c:41:66:29:e3
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Nov 19 02:02:52 2024 GMT
            Not After : Feb 17 02:02:51 2025 GMT
        Subject: CN=e-valimised.ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e4:b1:32:7c:e8:d3:d2:9a:6f:cf:9b:da:e2:02:
                    f8:fa:c5:b2:1b:ef:15:02:70:86:61:6c:6b:ca:36:
                    ba:c4:ee:2a:9b:1a:09:21:d5:09:5e:68:67:68:2a:
                    53:f3:89:3c:5b:48:d9:95:d3:0a:d1:b4:9c:a6:1d:
                    8e:49:57:b8:f2:6c:29:ef:6e:5b:d5:41:57:79:6e:
                    41:76:ab:9e:41:1b:11:ef:bb:bc:e8:98:37:36:e6:
                    5d:75:09:07:ec:ca:eb:6f:da:e9:91:3f:2b:01:e9:
                    6e:46:05:5e:26:3a:9c:63:44:74:f8:1f:88:d3:c2:
                    28:42:6c:70:98:62:14:e3:6e:f7:39:6c:c1:8a:8a:
                    8a:7f:13:d9:c3:11:a0:8e:6a:3a:85:88:f3:53:50:
                    ae:04:fc:79:b8:dc:83:00:eb:ee:53:16:0a:21:34:
                    df:4a:96:8c:21:86:10:72:f6:ce:ee:cc:87:ef:bc:
                    e2:69:5a:ef:05:f0:26:85:8c:3c:35:cf:de:4a:10:
                    f4:1e:18:ae:af:7c:ba:ca:8e:43:ca:ea:fe:55:f8:
                    33:48:ef:ed:0f:3a:46:20:1e:24:f7:28:03:f5:f6:
                    9a:ba:b7:ef:bd:2b:0f:6c:81:fe:c8:6c:07:b8:d1:
                    01:3c:89:41:2b:24:c1:9f:cc:84:a3:38:f0:4c:fc:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                00:D1:5F:F7:FE:92:4C:7C:45:01:18:A4:2B:37:06:F9:8C:A1:3D:7A
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:e-valimised.ee, DNS:www.e-valimised.ee
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Nov 19 03:01:22.714 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:01:33:9C:16:30:EF:8C:CB:96:E2:96:31:
                                ED:E1:25:3E:57:49:3D:B2:1E:E8:31:26:44:A3:68:EE:
                                37:B1:AA:C9:02:21:00:AB:CD:6A:2F:3F:27:84:B1:E6:
                                DB:CA:34:08:D1:EB:D4:58:86:49:A4:46:24:2E:C3:87:
                                73:8A:86:56:E7:D3:0D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Nov 19 03:01:22.889 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F8:9E:A3:6B:C4:EB:60:05:00:61:1B:
                                AC:3D:A9:84:D3:47:A1:0A:80:C8:6B:08:63:BA:4C:76:
                                28:D7:4B:7E:AA:02:20:1A:F9:C7:82:67:79:16:E0:65:
                                70:CF:0A:67:52:45:49:43:43:9F:08:75:6E:99:F8:3C:
                                1F:25:3D:CE:99:37:46
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        12:42:6d:3f:09:f3:74:ba:73:69:b7:b8:fe:2c:bc:76:f7:34:
        1b:ef:b6:00:90:9f:a7:aa:a0:2d:d8:f7:1c:3f:e5:97:58:07:
        91:fd:14:75:13:b1:f1:1a:19:34:0f:ce:d3:42:5b:8e:9a:43:
        c7:ea:f6:7c:26:93:3c:82:d5:9b:54:fc:76:45:84:f1:f5:49:
        95:0a:c2:ea:7b:ef:6c:16:bf:6f:3e:05:a6:1a:d1:2e:53:1d:
        98:a7:5b:d6:0f:43:81:c8:48:3b:44:8c:24:21:46:0e:fc:56:
        31:15:f1:d9:25:f0:f7:ce:60:64:fe:40:42:20:58:3a:98:9a:
        11:4f:48:78:f5:cf:23:06:2e:71:2d:6d:8f:e3:a2:9a:0b:26:
        ad:df:94:1c:10:cf:80:f5:c8:e9:93:a6:43:d1:ce:8d:23:c6:
        58:76:34:09:49:a3:fb:f5:2a:df:c3:e3:72:9a:91:72:3a:13:
        d5:05:b2:8b:07:63:52:5c:41:0b:a4:e0:ac:ef:b5:ab:9a:22:
        c7:aa:84:1e:74:14:b6:fa:9c:86:f7:e5:32:68:2d:e6:90:40:
        9c:88:7e:e2:0d:c9:41:da:c2:be:06:33:0e:a9:c8:3b:c0:7b:
        37:e4:3b:61:bb:a4:ac:75:78:22:82:71:ef:53:26:bd:9c:ca:
        33:4c:18:ef

Vulnerabilities

8080 / tcp

-1425610924 | 2025-02-28T15:39:45.112895

Hashes

hash

2115018359

http.dom_hash

-1116189883

http.favicon.hash

-1818779764

http.html_hash

-1425610924

http.title_hash

1909844065

OpenCTI - Cyber Threat Intelligence Platform

HTTP/1.1 200 OK
X-RateLimit-Limit: 10000
X-RateLimit-Remaining: 9999
Date: Fri, 28 Feb 2025 15:39:45 GMT
X-RateLimit-Reset: 1740757187
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' http://cdn.jsdelivr.net/npm/@apollographql/ https://www.googletagmanager.com/;style-src 'self' 'unsafe-inline' http://cdn.jsdelivr.net/npm/@apollographql/ https://fonts.googleapis.com/;script-src-attr 'self' 'unsafe-inline' http://cdn.jsdelivr.net/npm/@apollographql/ https://fonts.googleapis.com/;font-src 'self' data: https://fonts.gstatic.com/;img-src 'self' data: https://* http://*;manifest-src 'self' data: https://* http://*;connect-src 'self' wss://* ws://* data: http://* https://*;object-src 'self' data: http://* https://*;frame-src 'self' data: http://* https://*
Origin-Agent-Cluster: ?1
Referrer-Policy: unsafe-url
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Cache-Control: private, no-cache, no-store, must-revalidate
Expires: -1
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Length: 1077
ETag: W/"435-XG81KpHA4hl8GSUrqY/VIuedJYg"
Vary: Accept-Encoding
Connection: keep-alive
Keep-Alive: timeout=5

9000 / tcp

1542787861 | 2025-03-07T11:46:06.923815

Hashes

hash

813310717

http.dom_hash

-1399918778

http.html_hash

1542787861

HTTP/1.1 307 Temporary Redirect
Content-Type: text/html; charset=utf-8
Location: http://31.220.80.184:45011
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 182A82BFEE5FD91D
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Date: Fri, 07 Mar 2025 11:46:06 GMT
Content-Length: 62

31.220.80.184

Last Seen: 2025-03-19

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

677579724 | 2025-03-19T09:52:45.679900

Hashes

nginx1.18.0

443 / tcp

1651973090 | 2025-03-16T15:12:15.924766

Hashes

nginx1.18.0

8080 / tcp

-1425610924 | 2025-02-28T15:39:45.112895

Hashes

9000 / tcp

1542787861 | 2025-03-07T11:46:06.923815

Hashes

Products

Pricing

Contact Us

31.220.80.184

Last Seen: 2025-03-19

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp 677579724 | 2025-03-19T09:52:45.679900

Hashes

nginx1.18.0

443 / tcp 1651973090 | 2025-03-16T15:12:15.924766

Hashes

nginx1.18.0

8080 / tcp -1425610924 | 2025-02-28T15:39:45.112895

Hashes

9000 / tcp 1542787861 | 2025-03-07T11:46:06.923815

Hashes

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

677579724 | 2025-03-19T09:52:45.679900

443 / tcp

1651973090 | 2025-03-16T15:12:15.924766

8080 / tcp

-1425610924 | 2025-02-28T15:39:45.112895

9000 / tcp

1542787861 | 2025-03-07T11:46:06.923815