GeneralInformation

Hostnames	acleanbayplumbing.com www.acleanbayplumbing.com vmi2324097.contaboserver.net
Domains	acleanbayplumbing.com contaboserver.net
Country	Singapore
City	Singapore
Organization	Yorkshire Tech Limited
ISP	Contabo Asia Private Limited
ASN	AS141995
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 80 443

22 / tcp

-1775559869 | 2025-03-17T15:13:55.438902

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAACAQC1SZIuoqXWDOvuiAxOk166Tcyzbo+/zhBtD2LLuoUquE9H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Fingerprint: 30:22:5e:3c:fa:07:b2:5a:9e:ad:03:54:35:26:4c:2f

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

1845118841 | 2025-03-31T21:04:56.122499

Hashes

hash

-2081302511

http.dom_hash

-133615308

http.html_hash

1845118841

http.server_hash

967792298

http.title_hash

-22151114

Apache2 Ubuntu Default Page: It works

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 31 Mar 2025 21:04:45 GMT
Content-Type: text/html
Content-Length: 10918
Last-Modified: Fri, 28 Feb 2025 11:52:21 GMT
Connection: keep-alive
ETag: "67c1a375-2aa6"
Accept-Ranges: bytes

Vulnerabilities

443 / tcp

869281729 | 2025-04-03T20:40:30.504189

Hashes

hash

1176122235

http.dom_hash

1239617585

http.html_hash

869281729

http.server_hash

967792298

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 03 Apr 2025 20:40:29 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cb:e2:77:32:d9:92:2c:68:f6:79:93:f7:66:16:bf:71:56
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Feb 13 15:37:16 2025 GMT
            Not After : May 14 15:37:15 2025 GMT
        Subject: CN=acleanbayplumbing.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:66:72:d8:28:d0:5a:0d:da:43:60:4d:97:9e:77:
                    91:97:f0:d6:b4:68:c7:4b:fa:70:99:15:3d:72:dd:
                    66:ba:98:9b:39:7b:f5:b3:9d:f0:41:04:ee:b7:17:
                    94:37:9f:d6:71:b7:39:85:cb:c4:70:d6:ec:63:1c:
                    9f:06:87:3d:5a
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                6C:0E:A7:1D:57:0F:58:47:8D:86:06:53:55:CE:2A:56:BD:05:50:CE
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:acleanbayplumbing.com, DNS:www.acleanbayplumbing.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 13 16:35:46.468 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BB:4F:6F:2E:47:F0:E0:16:AE:97:6B:
                                BE:75:A3:34:28:AB:9E:E0:EC:C6:76:D7:46:0C:C9:F8:
                                CA:7C:A0:06:0B:02:21:00:92:A3:5C:4F:38:07:DF:9D:
                                4A:E3:6D:B7:68:F7:74:42:15:15:B5:3D:29:12:C3:18:
                                02:D7:52:05:1F:3E:0C:63
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Feb 13 16:35:46.774 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:2D:58:2A:0F:8D:C3:C8:79:D3:34:28:B5:
                                B1:E4:0A:C1:55:15:A0:C4:A6:7F:64:F5:30:68:7A:C7:
                                73:5B:0F:0D:02:21:00:C8:EA:2E:35:1A:32:CD:F2:8B:
                                6D:C0:F5:78:1B:B4:A5:45:75:E2:27:6B:2D:21:1C:5B:
                                9C:9F:61:56:D0:71:97
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:4b:58:86:7a:50:d9:11:5d:e5:b1:c0:50:d6:29:
        b9:f7:bc:76:8a:e0:88:9e:09:db:82:e2:5d:85:4d:ee:38:18:
        ec:07:8c:3b:89:10:f7:14:57:57:4b:83:bd:b5:3e:cd:02:31:
        00:ea:54:28:b8:32:19:19:d9:1f:c3:bf:9d:6e:62:84:e4:54:
        fe:29:f9:e4:3b:c4:a8:b3:8d:65:6f:9b:92:98:3a:c8:f1:d8:
        09:62:7f:de:9f:8c:88:09:c4:97:78:f8:12

Vulnerabilities

46.250.238.100

Last Seen: 2025-04-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

-1775559869 | 2025-03-17T15:13:55.438902

OpenSSH8.2p1 Ubuntu 4ubuntu0.11

80 / tcp

1845118841 | 2025-03-31T21:04:56.122499

Hashes

nginx1.18.0

443 / tcp

869281729 | 2025-04-03T20:40:30.504189

Hashes

nginx1.18.0

Products

Pricing

Contact Us

46.250.238.100

Last Seen: 2025-04-03

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

22 / tcp -1775559869 | 2025-03-17T15:13:55.438902

OpenSSH8.2p1 Ubuntu 4ubuntu0.11

80 / tcp 1845118841 | 2025-03-31T21:04:56.122499

Hashes

nginx1.18.0

443 / tcp 869281729 | 2025-04-03T20:40:30.504189

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

-1775559869 | 2025-03-17T15:13:55.438902

80 / tcp

1845118841 | 2025-03-31T21:04:56.122499

443 / tcp

869281729 | 2025-04-03T20:40:30.504189