GeneralInformation

Hostnames	hiihto-pos.teho.app static.185.236.75.5.clients.your-server.de
Domains	teho.app your-server.de
Country	Germany
City	Falkenstein
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 80 443 8081 8082

22 / tcp

588163636 | 2025-03-18T16:01:27.175960

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBKzCFbDikG9BQVYrGbWaADi6
kNgCHsQFHoPvjjO1Br+zrlLLcomsos/HyeXVXR3z6B8kQO2xderljJ6ZPZEJGM8=
Fingerprint: 8a:8e:a1:bc:14:5f:51:7a:84:41:50:f9:10:a5:53:c9

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

1651973090 | 2025-02-28T01:44:59.636585

Hashes

hash

-1037293450

http.dom_hash

-2049760045

http.html_hash

1651973090

http.server_hash

967792298

http.title_hash

911614014

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 28 Feb 2025 01:44:59 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Fri, 26 May 2023 14:29:17 GMT
Connection: keep-alive
ETag: "6470c23d-264"
Accept-Ranges: bytes

Vulnerabilities

443 / tcp

1718069417 | 2025-03-20T08:00:39.301924

Hashes

hash

-1813967851

http.dom_hash

-2006505642

http.html_hash

1718069417

http.server_hash

967792298

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 20 Mar 2025 08:00:39 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Content-Security-Policy: frame-ancestors 'none';
ETag: W/"10-gpDwOVeIvAo1802L6fUUI0YN3jg"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:53:16:69:bf:b0:7c:01:0b:3d:ff:ff:95:ce:db:eb:8e:f9
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Mar 18 15:06:47 2025 GMT
            Not After : Jun 16 15:06:46 2025 GMT
        Subject: CN=hiihto-pos.teho.app
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:76:72:98:d4:b7:2d:d8:63:a6:29:8a:f6:e2:cd:
                    a2:62:04:9f:8c:4e:12:f4:ae:f8:2a:0f:b2:a7:8e:
                    e1:57:cb:81:59:f7:f8:19:58:7c:3a:23:19:19:0e:
                    f4:e6:4a:ff:e8:11:af:2c:ec:cd:bf:33:0b:c1:e6:
                    17:30:91:cd:1f
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                A2:36:87:89:A4:75:60:D1:F4:48:90:8C:4F:18:1A:9F:75:38:EF:DE
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:hiihto-pos.teho.app
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://e6.c.lencr.org/122.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar 18 16:05:17.561 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B9:18:AD:AE:60:33:D8:73:45:64:A8:
                                E3:3A:BF:7D:D8:7F:9B:02:CC:49:37:C7:A1:14:81:36:
                                5C:35:29:39:57:02:20:22:EC:4A:1A:22:69:E6:E9:DD:
                                90:BC:57:ED:AF:9E:86:F1:13:9E:33:D9:76:D5:E1:FF:
                                8C:44:D8:56:66:37:FA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Mar 18 16:05:17.797 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:45:37:FB:2C:D9:C6:CC:98:8F:EE:E4:58:
                                06:16:33:93:28:FE:08:65:8C:09:29:F9:77:EB:59:9D:
                                E4:8B:B1:25:02:20:35:8D:F1:23:3D:EA:04:CE:EA:17:
                                33:40:42:3D:13:EE:2B:ED:5D:6C:E7:16:84:0C:7C:30:
                                99:A9:5B:82:23:C8
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:0e:f0:16:f3:be:82:3a:4d:71:d6:ee:3f:84:51:
        a9:10:1d:ae:93:69:9b:78:1a:d0:e4:99:d2:a1:ff:37:ae:2d:
        5c:db:64:ee:ec:57:c2:ca:37:b0:e1:ea:8b:c4:88:4f:02:31:
        00:cf:5a:a6:3b:51:bd:a7:bb:cb:f7:bf:44:b0:e0:85:09:d1:
        cb:dd:c0:06:53:bd:71:17:72:d6:37:44:a0:d4:78:3d:ee:fd:
        61:ef:5d:58:5e:da:b7:d8:5f:c1:8d:21:07

Vulnerabilities

8081 / tcp

-457816215 | 2025-03-17T04:24:45.395524

HTTP/1.1 400 Bad Request
X-Powered-By: Express
Content-Security-Policy: frame-ancestors 'none';
Content-Type: text/html; charset=utf-8
Content-Length: 16
ETag: W/"10-gpDwOVeIvAo1802L6fUUI0YN3jg"
Date: Mon, 17 Mar 2025 04:24:45 GMT
Connection: keep-alive
Keep-Alive: timeout=5

No shop provided

8082 / tcp

1718069417 | 2025-03-13T22:11:22.596018

Hashes

hash

-583020595

http.dom_hash

-2006505642

http.html_hash

1718069417

HTTP/1.1 400 Bad Request
X-Powered-By: Express
Content-Security-Policy: frame-ancestors 'none';
Content-Type: text/html; charset=utf-8
Content-Length: 16
ETag: W/"10-gpDwOVeIvAo1802L6fUUI0YN3jg"
Date: Thu, 13 Mar 2025 22:10:34 GMT
Connection: keep-alive
Keep-Alive: timeout=5

5.75.236.185

Last Seen: 2025-03-20

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

588163636 | 2025-03-18T16:01:27.175960

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

80 / tcp

1651973090 | 2025-02-28T01:44:59.636585

Hashes

nginx1.18.0

443 / tcp

1718069417 | 2025-03-20T08:00:39.301924

Hashes

nginx1.18.0

8081 / tcp

-457816215 | 2025-03-17T04:24:45.395524

8082 / tcp

1718069417 | 2025-03-13T22:11:22.596018

Hashes

Products

Pricing

Contact Us

5.75.236.185

Last Seen: 2025-03-20

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

22 / tcp 588163636 | 2025-03-18T16:01:27.175960

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

80 / tcp 1651973090 | 2025-02-28T01:44:59.636585

Hashes

nginx1.18.0

443 / tcp 1718069417 | 2025-03-20T08:00:39.301924

Hashes

nginx1.18.0

8081 / tcp -457816215 | 2025-03-17T04:24:45.395524

8082 / tcp 1718069417 | 2025-03-13T22:11:22.596018

Hashes

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

588163636 | 2025-03-18T16:01:27.175960

80 / tcp

1651973090 | 2025-02-28T01:44:59.636585

443 / tcp

1718069417 | 2025-03-20T08:00:39.301924

8081 / tcp

-457816215 | 2025-03-17T04:24:45.395524

8082 / tcp

1718069417 | 2025-03-13T22:11:22.596018