GeneralInformation

Hostnames	api.test.v5.shifteo.com static.121.186.75.5.clients.your-server.de
Domains	shifteo.com your-server.de
Country	Germany
City	Nürnberg
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940
Operating System	Linux

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 80 443

22 / tcp

1824931203 | 2025-03-27T11:11:04.241027

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.11
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBMGgiQj8E3zbJE3M4mFIWeym
S5HuRcAUC7kbQsZf4cEo/6a1rcoeZFV95Xvr1c4mQ1gs14o6IvKf0lN99AItOSA=
Fingerprint: fd:b6:ea:1c:bd:20:31:04:7d:78:61:e8:bb:4c:b8:24

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

677579724 | 2025-03-23T07:16:18.115218

Hashes

hash

1424649471

http.dom_hash

1239617585

http.html_hash

677579724

http.server_hash

967792298

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 23 Mar 2025 07:16:18 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

Vulnerabilities

443 / tcp

-1167340525 | 2025-03-06T07:26:05.853065

Hashes

hash

738100425

http.dom_hash

365585628

http.html_hash

-1167340525

http.robots_hash

1714206274

http.server_hash

967792298

http.title_hash

870307108

Laravel

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Thu, 06 Mar 2025 07:26:05 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IklPQ09BRjEvSVpVeGpUM3Vhb04veHc9PSIsInZhbHVlIjoiQndzTmxaUzVUcG51dW16MU5TaUZtNlhKWWJwSmxEcnFEOGh6dEJaTUUxeU1jNWRzdkNyei8wU2lYajFhb2VvNForb2VYM3l0R2ZPTG1HZTJKWmoydEU1d1YxYkNMV3hPYUVwdDVPcnpVNkt0TTZqYi9RTTNnZzJsK1RYczM0MEQiLCJtYWMiOiI0MzYxNTA0ZWQ5MzAwNmRmZjYzMTgzMmY1N2MzY2MzNjQ5MzU0ZGZlYTQyNTUyNTRkOGJkZmEzZjE3ZTA4ZTg4IiwidGFnIjoiIn0%3D; expires=Thu, 06 Mar 2025 09:26:05 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: laravel_session=eyJpdiI6IkFEeWVSZENJRGo2ZlFWWVdnb1pxZEE9PSIsInZhbHVlIjoiZlJaZ1BpLzhVK0lXTi96eEg2YnY1TEFyOHdRMFFRV1MwZm1zeHVSSGpDRWt2UW9xR1lISVY0SWZGL2RxMzFJUU9WRWF3L1FoTmpSMjJNYjQwOEcwRVpMRU85dHZLc210VThCSWtZLzJpUkVnc21keDBIbDFjbU5DYUFxMmJ6OFAiLCJtYWMiOiI2YzMwMGU0NmU1OWM5NmU5YzIyMmEwMTM0MjE0NWRmOWY0OWZjM2Q5Y2Y5MDQzZWIwYTQ4ZDAxZTU0MjAzNjFhIiwidGFnIjoiIn0%3D; expires=Thu, 06 Mar 2025 09:26:05 GMT; Max-Age=7200; path=/; httponly; samesite=lax
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f6:fd:42:32:70:47:cd:25:6a:4e:a8:83:35:cc:71:6c:81
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb 25 22:06:53 2025 GMT
            Not After : May 26 22:06:52 2025 GMT
        Subject: CN=api.test.v5.shifteo.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:51:f7:e9:1d:ca:3f:d6:46:aa:5b:a3:59:33:
                    d2:ee:c3:77:08:e6:cf:d0:5f:dd:9e:e5:ed:1c:be:
                    5e:d9:92:66:9a:80:57:24:c4:d2:f7:3e:a7:bd:a6:
                    af:d0:14:d9:3d:2c:a4:7c:15:e3:0b:46:ba:47:7e:
                    fd:a0:79:34:0c:42:ca:07:3e:9a:95:fc:43:ad:30:
                    fb:b0:21:dc:6b:32:35:51:b9:fd:11:14:8e:c2:86:
                    d4:72:b6:4b:43:8e:30:3d:cb:41:53:0f:1a:8e:92:
                    33:cd:25:c8:d8:7c:07:0a:3f:28:f7:87:38:2e:50:
                    ba:dc:88:10:a3:f9:e7:4f:2c:65:8b:d0:e1:98:d1:
                    48:2d:97:9b:7d:e4:61:29:1b:4f:4a:12:98:68:39:
                    78:31:6c:06:62:62:61:17:d4:80:03:75:b2:15:93:
                    4a:83:70:be:15:99:2d:68:6e:5b:37:b0:f7:7a:04:
                    57:04:65:6b:ed:25:cb:f2:2a:46:dc:21:a3:62:11:
                    27:c9:13:ac:d5:3a:79:1f:e7:5f:c7:03:c0:03:96:
                    87:97:4b:bb:fc:8a:81:fc:79:7e:82:3f:11:98:a2:
                    ef:6c:1e:62:b0:92:9c:fc:13:05:b5:03:67:ef:2c:
                    e2:dd:23:91:f2:65:54:71:63:65:a1:45:71:8b:f3:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                DA:0A:09:DB:E9:35:45:53:B0:C9:4D:D3:CD:0A:CB:BA:8E:74:D2:D2
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:api.test.v5.shifteo.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 25 23:05:23.802 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D7:42:B1:FB:C4:9C:C8:1D:1F:BF:41:
                                96:AC:8F:3B:08:24:0D:25:CF:7C:53:1D:21:9F:CB:1F:
                                AA:AE:F3:A9:74:02:20:08:7E:7C:97:F8:88:BA:4A:4B:
                                BD:A3:71:4B:EF:CC:43:25:2F:7B:BC:21:BB:C4:8C:81:
                                21:37:B4:C7:EF:4A:03
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 25 23:05:23.905 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:2D:2B:07:1A:75:41:E6:5F:03:10:6D:BF:
                                83:4A:E0:83:F7:52:3D:FE:5E:2F:CC:11:69:A8:63:C5:
                                D3:E0:DB:28:02:21:00:94:E8:BC:DA:04:A6:01:B3:16:
                                8B:9A:B4:C1:70:0B:49:79:34:38:F4:22:6B:77:68:EF:
                                0A:37:36:6E:89:B6:3A
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4e:fc:61:4b:5f:df:d0:ca:74:8c:d6:bb:54:1e:ca:09:13:ef:
        35:fb:ba:b1:81:03:b2:29:9e:69:47:68:7a:3d:5a:a3:18:29:
        91:24:1d:82:10:98:38:b9:55:ba:81:4c:fe:2e:83:ce:12:b3:
        4c:c6:3f:3e:a9:32:1d:b4:b2:20:a9:85:a0:4c:f7:10:d0:93:
        63:65:08:8e:28:02:28:58:68:c3:0c:40:3a:1b:39:7c:a5:41:
        0d:03:f5:b0:38:cc:3b:71:fb:99:c3:9a:c1:89:b2:63:bf:cb:
        65:69:90:a6:59:4b:4d:5a:14:de:45:8f:79:a3:3e:e6:22:9b:
        d5:c0:03:21:c3:d6:f0:f0:11:88:91:b2:ae:25:12:07:aa:0c:
        92:dd:8d:cd:92:7a:6e:a5:f5:86:5d:71:35:85:4c:4f:5d:53:
        1f:29:b6:5f:0e:b7:05:4e:40:c6:e4:a2:ea:74:8b:9e:47:ea:
        35:0f:f0:29:29:74:f8:2e:1b:a9:21:c5:b4:e1:25:a9:bb:55:
        36:f5:87:23:87:d1:fd:0d:dd:57:eb:24:36:fc:0f:d6:cc:14:
        ae:3b:f6:4e:22:81:f2:5c:fd:c5:a0:92:5d:84:ee:ed:33:79:
        5b:40:2d:6a:ea:63:3e:27:e8:d7:b8:bf:65:91:96:db:fe:82:
        b8:24:fd:53

Vulnerabilities

5.75.186.121

Last Seen: 2025-03-27

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

1824931203 | 2025-03-27T11:11:04.241027

OpenSSH8.9p1 Ubuntu 3ubuntu0.11

80 / tcp

677579724 | 2025-03-23T07:16:18.115218

Hashes

nginx1.18.0

443 / tcp

-1167340525 | 2025-03-06T07:26:05.853065

Hashes

nginx1.18.0

Products

Pricing

Contact Us

5.75.186.121

Last Seen: 2025-03-27

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

22 / tcp 1824931203 | 2025-03-27T11:11:04.241027

OpenSSH8.9p1 Ubuntu 3ubuntu0.11

80 / tcp 677579724 | 2025-03-23T07:16:18.115218

Hashes

nginx1.18.0

443 / tcp -1167340525 | 2025-03-06T07:26:05.853065

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

1824931203 | 2025-03-27T11:11:04.241027

80 / tcp

677579724 | 2025-03-23T07:16:18.115218

443 / tcp

-1167340525 | 2025-03-06T07:26:05.853065