GeneralInformation

Hostnames	static-122-57-25-46.ipcom.comunitel.net jenkins-poc.npaw.com
Domains	comunitel.net npaw.com
Country	Spain
City	Barcelona
Organization	NICE PEOPLE AT WORK
ISP	VODAFONE ESPANA S.A.U.
ASN	AS12430
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 8118 9999

-848670639 | 2024-10-05T04:14:10.102739

22 / tcp

SSH-2.0-OpenSSH_8.2p1
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDLMO0fpEQAFX378ANhRLzO1V63bHaerhs5muMPAjFDfwX/
RBDiSOueFQQsWUC/V4w68YpW4GaJak3KRebHSKGg3sLCRwvMLZPblUPXBa0znRDtMrGeTcDk0phl
Zkw6bMLIvnaRidWhL39f+xcCL6tr5qjzQrk0RBQg+za9YiBHEwQTEEOkeHM+pb/5f82CZZCBbhj1
aBB8lFycJ+qUqYV1iXHX1QzS7+nsx35no70IqnIHpWdD7TTxozSBOZbouIIMz+6x9wIixneBJM1/
RrSAHSF4OfqHWCDg39bg+FxaFwugNc10jNX8Q0Z55818eYnbrBlMdCxGP41zNM6pzIaiY6DoooJ9
0juOElmq1Ot8FKR+UIosvMWBW+F3TaR0yR9keRtPLVopV5MhQaB7LJTquVFPXZGpVQ3aqGVpfbx7
07yOawGkCBANGPXKEfIPyTLz2Jt322b88sIfxb0OvLzgclDZy9njLQf6Z1C2k4bYcs4ta+VoB5IU
Fu3opdAbdO8=
Fingerprint: dc:46:75:a6:ba:77:7b:0b:d5:4e:74:96:d9:e2:06:d0

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

1651973090 | 2024-10-09T15:06:32.053827

80 / tcp

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 09 Oct 2024 15:06:32 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 26 Jul 2022 09:21:15 GMT
Connection: keep-alive
ETag: "62dfb20b-264"
Accept-Ranges: bytes

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

257058832 | 2024-10-04T11:53:14.258875

443 / tcp

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 04 Oct 2024 11:53:14 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 585
Connection: keep-alive
X-Content-Type-Options: nosniff
Set-Cookie: JSESSIONID.357ca348=node01rur49ncrri911w99ssbtq4nwj14122.node0; Path=/; Secure; HttpOnly
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Hudson: 1.395
X-Jenkins: 2.361.2
X-Jenkins-Session: 697b9b60

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e2:97:a5:81:74:0c:b0:48:bf:1c:7f:3f:76:34:4a:06:8d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Sep 16 20:47:06 2024 GMT
            Not After : Dec 15 20:47:05 2024 GMT
        Subject: CN=jenkins-poc.npaw.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:33:81:b0:7e:24:e5:a9:d5:11:c6:58:00:
                    b8:aa:cb:32:13:b2:47:e1:0d:28:08:bb:60:70:64:
                    00:2e:57:eb:d2:57:42:ad:4d:8a:e1:df:4c:53:c0:
                    fd:e3:81:87:b6:13:6b:8d:b5:03:96:1c:d0:f8:9b:
                    90:1b:3b:a2:8b:dd:29:1a:06:92:49:20:9f:04:24:
                    fb:cc:af:3d:33:fd:c8:93:c1:c5:62:a4:f5:7a:f7:
                    2e:e2:39:af:b7:32:59:b2:41:de:2b:b9:15:80:8c:
                    fb:95:fd:c2:80:a8:96:2b:70:bd:5b:40:6d:c6:50:
                    e1:90:08:2c:ce:75:86:45:21:e5:d5:03:e1:df:23:
                    87:81:77:c1:ec:9c:d8:d4:de:63:55:b0:e1:87:39:
                    e9:0c:e1:a4:76:6d:4b:b5:fb:7b:7a:4b:11:43:b0:
                    4f:ea:e2:ab:0e:e1:60:08:7a:40:d5:07:6a:45:5f:
                    22:01:b3:13:67:25:f4:69:f4:29:87:a6:7f:2c:b5:
                    a1:0b:54:88:cc:35:45:fd:2d:48:72:4b:bf:22:84:
                    ae:38:72:de:4e:1e:14:83:83:f9:1c:0b:d3:7a:ba:
                    e5:69:de:c5:68:37:e3:6b:5c:1c:11:69:f2:50:ae:
                    2f:d5:15:5b:99:e1:1c:70:b6:b2:04:8a:6b:49:e3:
                    17:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                7B:47:9A:23:2A:90:2F:F0:2E:06:05:3B:BC:53:E8:7D:81:EA:A0:58
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:jenkins-poc.npaw.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:98:10:71:09:F0:D6:52:2E:30:80:D2:9E:3F:64:BB:
                                83:6E:28:CC:F9:0F:52:8E:EE:DF:CE:4A:3F:16:B4:CA
                    Timestamp : Sep 16 21:45:36.680 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:7B:67:65:D3:FB:6F:FE:67:C7:8A:E0:A7:
                                27:E2:B6:02:A8:72:FF:83:B4:09:13:8A:C1:4C:17:A3:
                                14:D1:FC:D6:02:21:00:FF:9E:C7:BD:AF:39:1F:FC:67:
                                D9:DC:CD:D2:FC:D9:E6:35:7D:1E:20:04:D0:95:4D:D7:
                                33:09:C5:B4:8A:58:4D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Sep 16 21:45:36.693 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0D:3E:BD:E9:19:9C:67:21:BC:29:02:A8:
                                87:7C:29:CB:6C:EF:60:AF:DB:61:4C:59:57:95:2F:7E:
                                30:6A:E4:82:02:20:1F:CF:62:29:63:95:C0:27:AB:EF:
                                13:C1:15:EC:2E:E4:FF:E3:F1:88:69:80:C3:70:F9:AF:
                                5F:FB:8E:80:FF:71
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        73:0d:e8:09:d5:52:d5:ab:79:2a:17:03:4d:67:2d:4b:35:32:
        bc:b5:45:5f:ef:6b:7c:f7:65:c4:e0:6a:63:ce:cd:f7:a4:bf:
        b7:47:8c:33:54:ac:86:50:48:36:3e:5c:96:a5:e7:63:f2:ff:
        82:41:f9:19:96:19:2c:64:25:ac:71:3a:8d:a8:37:40:3e:f7:
        74:69:86:c3:25:f6:45:eb:81:88:a9:da:54:d4:c2:ca:90:be:
        45:86:8e:0a:0c:96:96:26:32:1d:b3:ea:47:0e:f0:50:f6:e7:
        45:c3:ce:9c:79:91:89:2b:00:fe:27:65:22:96:e5:b6:c8:42:
        ba:e5:5e:d8:1a:1d:43:fe:a4:2d:66:fd:5c:93:87:80:71:fc:
        7d:61:fc:e1:17:f2:ba:75:38:7d:aa:bc:d1:41:9f:12:ba:ad:
        78:d1:96:90:c9:5f:11:8d:c3:7f:a6:2e:c3:fa:27:2e:c4:e6:
        d9:17:be:1d:e1:ed:ac:43:90:22:a6:e5:4e:91:b0:ab:73:69:
        5c:52:29:bd:bf:d8:ad:fa:78:1d:02:50:00:8b:03:3b:b5:70:
        73:32:2a:78:cc:24:be:24:40:f7:98:e7:df:a5:2b:4a:5a:12:
        58:40:e2:03:aa:8c:5f:06:e2:87:09:4a:1a:d5:12:d0:d0:d1:
        d8:cb:67:cd

CVE-2024-23897 CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

-1197660185 | 2024-09-12T16:32:44.139870

8118 / tcp

HTTP/1.1 404 Not Found
Accept-Encoding: gzip
Access-Control-Allow-Headers: Origin, Authorization
Date: 1726158764063
Connection: close
Access-Control-Allow-Origin: http://bulma.youbora.com
Last-Modified: 1726158764063
Access-Control-Allow-Credentials: true
Content-Length: 0
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS

1394879304 | 2024-10-09T11:27:54.833331

9999 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 09 Oct 2024 11:27:54 GMT
Content-Type: text/html
Content-Length: 166
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

46.25.57.122

Last Seen: 2024-10-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-848670639 | 2024-10-05T04:14:10.102739
22 / tcp

OpenSSH8.2p1

1651973090 | 2024-10-09T15:06:32.053827
80 / tcp

nginx1.18.0

257058832 | 2024-10-04T11:53:14.258875
443 / tcp

Jenkins2.361.2

-1197660185 | 2024-09-12T16:32:44.139870
8118 / tcp

1394879304 | 2024-10-09T11:27:54.833331
9999 / tcp

nginx1.18.0

Products

Pricing

Contact Us

46.25.57.122

Last Seen: 2024-10-09

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Port 9999 Latest CVSS

OpenPorts

-848670639 | 2024-10-05T04:14:10.102739 22 / tcp

OpenSSH8.2p1

1651973090 | 2024-10-09T15:06:32.053827 80 / tcp

nginx1.18.0

257058832 | 2024-10-04T11:53:14.258875 443 / tcp

Jenkins2.361.2

-1197660185 | 2024-09-12T16:32:44.139870 8118 / tcp

1394879304 | 2024-10-09T11:27:54.833331 9999 / tcp

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

-848670639 | 2024-10-05T04:14:10.102739
22 / tcp

1651973090 | 2024-10-09T15:06:32.053827
80 / tcp

257058832 | 2024-10-04T11:53:14.258875
443 / tcp

-1197660185 | 2024-09-12T16:32:44.139870
8118 / tcp

1394879304 | 2024-10-09T11:27:54.833331
9999 / tcp