GeneralInformation

Hostnames	51-159-17-136.rev.poneytelecom.eu webgenie.fr
Domains	poneytelecom.eu webgenie.fr
Country	France
City	Neuilly-Plaisance
Organization	Scaleway
ISP	SCALEWAY S.A.S.
ASN	AS12876

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 53 110 143 443

22 / tcp

1842914220 | 2025-03-28T10:04:41.333530

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.12
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCtntwoPaN6vlVufvFq8nYyAn8guyH7EKVimabPJbWeBiRJ
ltVaRew6wvUBve6bVbjTY6u3GFAm2Vmk7n5q6AfTlBMGnsZ4XdLnzaCdfYxUB6StXMpd5lrkWqCb
FqiBX1N0OE3L6HBQPNPaojpEpiDI2ZGS4GYEyZjfJQWGquZL6GLsFgTtxGnr2GUMtO6QfTiYpaXr
vPrTM9vYSMvvocuuW9t9WC0oVe5vc2o4/yuTSWtsiIsXmNSJd7J7Adh1NXN+4wW/ucoomXR6XMAW
fab2F6RIlCJeGmC0d/74B2Vfgs+Xn4hXV4mAkfx00X/La1tADQ50uNgO+SAom1NJ8h7QgMLwjiSn
Cg4dAtrlywObQ1sk+rg6iZPIDpA/gUoXCwK8R4S2pVEfADJlmwXAMkze2X7sRDmj6TAh7tJaQTa2
+kt0qbB6EXYK30Yz5fFwmhss5RbiXpNMxLvBSOUbJK1GTJUoRx7OHetcIIKL+RdM0apLLr6LOo0Z
ckIIUL98R/k=
Fingerprint: 9a:82:d5:bf:e5:a6:1a:9a:02:70:0a:9b:41:8a:02:da

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

53 / tcp

-131048168 | 2025-03-28T23:41:09.532610

9.18.30-0ubuntu0.20.04.2-Ubuntu
Resolver name: sd-147440

53 / udp

-131048168 | 2025-03-06T09:52:05.034008

9.18.30-0ubuntu0.20.04.2-Ubuntu
Resolver name: sd-147440

110 / tcp

1924648187 | 2025-04-03T21:20:41.668208

+OK Dovecot (Ubuntu) ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
STLS
USER
SASL PLAIN LOGIN
.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dc:50:aa:5b:7f:3f:ba:e9:74:af:35:47:ac:f7:c1:db:12:ee:11
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=sd-147440
        Validity
            Not Before: Jun 15 10:13:08 2022 GMT
            Not After : Jun 12 10:13:08 2032 GMT
        Subject: CN=sd-147440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:2b:0b:f9:a6:4a:ce:49:31:38:5e:f3:56:
                    24:66:e6:16:a0:4f:55:da:6a:51:a3:a9:e7:37:b9:
                    4e:fd:8e:5a:96:f7:e1:f3:6f:5d:06:d7:aa:89:34:
                    2a:cb:b2:72:9f:1b:8a:52:77:e4:8c:b0:7f:ff:ba:
                    7a:df:4e:a7:da:83:bf:d9:8c:8e:8c:cc:c2:f6:20:
                    77:b7:6f:84:c0:e8:20:85:6e:d5:13:cf:34:41:81:
                    39:b2:d1:2a:4a:b0:07:f8:13:b7:72:9f:78:16:64:
                    1a:14:ce:4d:24:22:be:08:55:22:db:e7:c8:48:52:
                    61:d4:1f:52:fb:76:24:87:b3:cb:eb:67:ef:3b:49:
                    0c:67:d5:5d:14:05:0f:9e:be:9f:83:dd:9f:cf:b1:
                    19:68:9e:24:c6:2a:38:21:20:d9:ab:54:3c:bd:92:
                    6a:23:ed:f2:38:5c:0d:04:fb:87:a3:f9:4b:b1:a6:
                    e4:6d:e6:b4:27:50:52:3d:3b:23:01:5d:e0:d6:34:
                    bb:b2:4d:04:cb:52:00:40:cb:95:57:c0:38:e6:2e:
                    df:19:7a:68:df:2d:97:df:57:5a:d5:ff:1c:58:50:
                    a7:73:2f:bf:bd:25:ab:a8:a2:11:69:eb:24:a0:fe:
                    d8:2e:a5:9f:d9:a3:4f:07:7e:4a:5a:1c:2e:d2:ff:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:sd-147440
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        8e:d6:e6:8b:16:32:1f:1f:a4:1d:9b:73:5e:42:38:a1:29:67:
        f5:a0:84:a8:4d:90:ca:ad:ec:7c:14:91:d2:7a:cd:46:50:2f:
        a1:fa:b9:a5:aa:9d:98:9c:ba:49:82:cd:07:14:ab:f3:97:48:
        e1:aa:60:10:b4:67:de:ba:a6:49:cd:1c:ec:b8:b1:d0:68:ac:
        0e:a1:e8:1e:59:26:8c:b5:a9:50:e4:c5:ba:63:4b:5b:64:74:
        6e:de:7e:d3:52:f3:c4:b9:86:fd:dd:f9:78:12:9c:28:f8:2e:
        fc:82:b5:61:96:33:44:4c:3d:2a:c8:0e:04:5d:42:d9:33:9c:
        5b:f3:c9:0d:05:03:07:52:f9:a4:da:66:7f:82:96:2f:01:1d:
        b2:99:c3:b3:35:27:2b:e5:41:c2:c0:5d:94:5c:57:51:a4:4c:
        1f:2b:a7:0e:c5:fd:90:d8:a0:2a:ed:5a:73:a2:56:1b:43:cf:
        73:03:ff:a8:dd:46:8d:3e:f4:44:7e:d9:b0:46:8c:d8:bb:98:
        74:dd:b7:ee:1d:21:e7:d3:5f:df:07:9b:e4:f1:5a:03:17:cf:
        42:ea:76:e0:a2:72:80:4f:0b:5f:8d:e5:d0:20:d0:58:d7:ef:
        09:2e:00:f8:3a:67:19:de:3e:01:92:c1:70:65:34:da:fd:9e:
        9e:b2:38:dc

143 / tcp

-1712467009 | 2025-03-17T05:31:18.483890

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dc:50:aa:5b:7f:3f:ba:e9:74:af:35:47:ac:f7:c1:db:12:ee:11
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=sd-147440
        Validity
            Not Before: Jun 15 10:13:08 2022 GMT
            Not After : Jun 12 10:13:08 2032 GMT
        Subject: CN=sd-147440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:2b:0b:f9:a6:4a:ce:49:31:38:5e:f3:56:
                    24:66:e6:16:a0:4f:55:da:6a:51:a3:a9:e7:37:b9:
                    4e:fd:8e:5a:96:f7:e1:f3:6f:5d:06:d7:aa:89:34:
                    2a:cb:b2:72:9f:1b:8a:52:77:e4:8c:b0:7f:ff:ba:
                    7a:df:4e:a7:da:83:bf:d9:8c:8e:8c:cc:c2:f6:20:
                    77:b7:6f:84:c0:e8:20:85:6e:d5:13:cf:34:41:81:
                    39:b2:d1:2a:4a:b0:07:f8:13:b7:72:9f:78:16:64:
                    1a:14:ce:4d:24:22:be:08:55:22:db:e7:c8:48:52:
                    61:d4:1f:52:fb:76:24:87:b3:cb:eb:67:ef:3b:49:
                    0c:67:d5:5d:14:05:0f:9e:be:9f:83:dd:9f:cf:b1:
                    19:68:9e:24:c6:2a:38:21:20:d9:ab:54:3c:bd:92:
                    6a:23:ed:f2:38:5c:0d:04:fb:87:a3:f9:4b:b1:a6:
                    e4:6d:e6:b4:27:50:52:3d:3b:23:01:5d:e0:d6:34:
                    bb:b2:4d:04:cb:52:00:40:cb:95:57:c0:38:e6:2e:
                    df:19:7a:68:df:2d:97:df:57:5a:d5:ff:1c:58:50:
                    a7:73:2f:bf:bd:25:ab:a8:a2:11:69:eb:24:a0:fe:
                    d8:2e:a5:9f:d9:a3:4f:07:7e:4a:5a:1c:2e:d2:ff:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:sd-147440
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        8e:d6:e6:8b:16:32:1f:1f:a4:1d:9b:73:5e:42:38:a1:29:67:
        f5:a0:84:a8:4d:90:ca:ad:ec:7c:14:91:d2:7a:cd:46:50:2f:
        a1:fa:b9:a5:aa:9d:98:9c:ba:49:82:cd:07:14:ab:f3:97:48:
        e1:aa:60:10:b4:67:de:ba:a6:49:cd:1c:ec:b8:b1:d0:68:ac:
        0e:a1:e8:1e:59:26:8c:b5:a9:50:e4:c5:ba:63:4b:5b:64:74:
        6e:de:7e:d3:52:f3:c4:b9:86:fd:dd:f9:78:12:9c:28:f8:2e:
        fc:82:b5:61:96:33:44:4c:3d:2a:c8:0e:04:5d:42:d9:33:9c:
        5b:f3:c9:0d:05:03:07:52:f9:a4:da:66:7f:82:96:2f:01:1d:
        b2:99:c3:b3:35:27:2b:e5:41:c2:c0:5d:94:5c:57:51:a4:4c:
        1f:2b:a7:0e:c5:fd:90:d8:a0:2a:ed:5a:73:a2:56:1b:43:cf:
        73:03:ff:a8:dd:46:8d:3e:f4:44:7e:d9:b0:46:8c:d8:bb:98:
        74:dd:b7:ee:1d:21:e7:d3:5f:df:07:9b:e4:f1:5a:03:17:cf:
        42:ea:76:e0:a2:72:80:4f:0b:5f:8d:e5:d0:20:d0:58:d7:ef:
        09:2e:00:f8:3a:67:19:de:3e:01:92:c1:70:65:34:da:fd:9e:
        9e:b2:38:dc

443 / tcp

0 | 2025-03-25T16:01:30.740465

Hashes

hash

-1210846204

http.dom_hash

http.favicon.hash

-1037532645

http.html_hash

http.robots_hash

-1976666599

http.server_hash

967792298

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 25 Mar 2025 16:01:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=jnq750uk7ocpbk0a7f0ev9ld23; path=/; secure

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d6:0e:76:41:ea:c9:fa:7f:5c:20:f5:83:dd:35:b8:8e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Jan 27 00:00:00 2025 GMT
            Not After : Jan 27 23:59:59 2026 GMT
        Subject: CN=*.webgenie.fr
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:32:7e:62:40:8b:b9:47:25:4d:fe:6e:9f:
                    2b:9e:e6:49:a7:6c:45:16:6b:93:7a:67:96:6a:de:
                    97:4c:b9:01:98:97:3d:a0:dd:25:bf:3f:7d:1c:99:
                    44:48:c3:6c:42:00:65:98:a6:04:b4:93:aa:d8:4a:
                    40:eb:84:a3:99:65:fb:e2:2f:e8:46:b3:50:16:f7:
                    45:21:c5:c1:fb:c0:59:a3:bc:3e:1e:86:dd:16:f5:
                    20:c7:80:c1:c4:3b:89:e1:60:28:98:fe:c9:23:a9:
                    7a:71:64:20:55:ed:b3:e3:36:35:43:b2:ab:cf:f5:
                    b2:ff:be:5b:bc:d9:b8:76:39:97:88:64:dd:20:0b:
                    bd:7e:38:4a:1d:96:a8:86:59:a3:b2:3c:22:b3:1e:
                    5e:c4:9d:44:34:16:0f:f9:26:18:db:50:ba:7b:ce:
                    07:18:f5:49:9f:97:8b:e7:b0:f0:f7:b6:ce:79:22:
                    6d:ae:0f:16:0a:a1:48:0e:5a:08:cf:25:a1:88:67:
                    b0:9b:d1:b4:ce:c0:5d:77:b8:b8:d3:8a:43:0b:56:
                    72:03:1a:d6:30:ed:44:da:fd:62:3c:3d:d1:1a:31:
                    d6:93:33:f4:d4:fd:7e:81:fd:3e:97:d1:c6:81:b5:
                    13:ea:28:a4:4c:53:52:51:be:b9:31:e6:57:ee:3c:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                0E:6A:6E:16:D4:06:15:1E:E1:91:BC:94:17:3C:BD:6F:53:22:CB:7A
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.webgenie.fr, DNS:webgenie.fr
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
                                E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
                    Timestamp : Jan 27 08:37:29.707 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9D:8C:FA:4D:14:29:76:B8:6E:AD:FB:
                                96:FA:04:74:91:54:52:8F:D9:25:31:AC:17:FD:25:37:
                                DE:AD:C3:75:19:02:21:00:D2:C1:44:63:0A:FC:6B:FE:
                                54:86:CD:9D:54:6F:DF:E1:F6:DE:73:FE:38:6C:DE:D3:
                                D3:B0:AF:9A:EF:F6:4B:FD
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:86:D4:C7:28:AA:6F:FE:BA:03:6F:78:2A:4D:01:91:
                                AA:CE:2D:72:31:0F:AE:CE:5D:70:41:2D:25:4C:C7:D4
                    Timestamp : Jan 27 08:37:29.670 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:76:13:EC:5E:A9:63:9A:EA:31:EC:26:BF:
                                F0:EA:C1:C0:E3:39:98:EE:24:C4:80:F4:82:05:A0:02:
                                6D:E9:96:24:02:21:00:B8:F6:7D:C6:C6:33:FA:23:C7:
                                3D:21:15:32:93:20:BE:CA:A8:CD:A0:41:F5:35:BA:7C:
                                2A:A6:8A:7A:8B:4D:6C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
                                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
                    Timestamp : Jan 27 08:37:29.711 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C8:1A:4A:3D:E1:18:ED:48:6C:E2:1E:
                                E7:6C:48:0E:31:91:61:6C:25:48:EC:01:37:A3:0E:2A:
                                85:5D:10:78:B3:02:21:00:D6:D7:D4:59:8A:BE:82:48:
                                41:D6:43:0E:F0:96:9E:2B:B9:E0:6F:89:5D:22:59:9D:
                                F5:80:9C:B1:4D:47:2C:87
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a4:81:33:eb:7b:f2:86:8d:3e:42:fc:65:03:f0:27:f8:cd:1e:
        3d:70:8e:eb:d8:f5:3a:3d:35:02:01:96:a5:4b:27:0d:c5:75:
        d0:8d:19:74:e6:66:38:00:93:9b:4d:67:83:f0:50:91:63:29:
        60:7c:48:24:45:84:92:6c:f8:89:1d:63:93:1a:d0:4c:15:36:
        44:4b:6c:9b:e8:7d:81:7a:9b:55:6a:2e:50:25:f1:79:5f:f4:
        28:20:4a:be:f5:2d:96:aa:eb:86:7f:cf:29:97:e0:8d:e4:57:
        21:07:85:e9:96:88:97:3a:1c:b1:b5:ff:82:8c:be:5e:4f:ca:
        93:26:ad:e2:a3:29:bc:ca:ad:33:94:c7:94:c6:dd:ed:c3:d5:
        36:84:2a:26:b8:63:d3:55:14:03:11:cd:33:e6:ba:0f:83:cd:
        f6:74:d3:78:f0:06:c4:d4:ad:ff:ed:73:0f:29:4f:1d:92:30:
        77:87:58:bc:2d:9d:3d:e3:ed:7c:1f:98:e0:a3:4f:d4:e6:a7:
        d6:5d:c7:8a:76:ba:94:44:8d:9e:af:89:2a:bc:d2:b1:f3:a4:
        e3:93:14:bb:8c:0b:d6:52:b5:d9:9b:63:27:52:16:78:bc:1d:
        0f:90:1a:fb:70:ca:4e:59:17:04:5b:59:50:14:17:04:ca:09:
        75:5b:53:32

Vulnerabilities

51.159.17.136

Last Seen: 2025-04-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

1842914220 | 2025-03-28T10:04:41.333530

OpenSSH8.2p1 Ubuntu 4ubuntu0.12

53 / tcp

-131048168 | 2025-03-28T23:41:09.532610

53 / udp

-131048168 | 2025-03-06T09:52:05.034008

110 / tcp

1924648187 | 2025-04-03T21:20:41.668208

143 / tcp

-1712467009 | 2025-03-17T05:31:18.483890

443 / tcp

0 | 2025-03-25T16:01:30.740465

Hashes

nginx1.18.0

Products

Pricing

Contact Us

51.159.17.136

Last Seen: 2025-04-03

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

22 / tcp 1842914220 | 2025-03-28T10:04:41.333530

OpenSSH8.2p1 Ubuntu 4ubuntu0.12

53 / tcp -131048168 | 2025-03-28T23:41:09.532610

53 / udp -131048168 | 2025-03-06T09:52:05.034008

110 / tcp 1924648187 | 2025-04-03T21:20:41.668208

143 / tcp -1712467009 | 2025-03-17T05:31:18.483890

443 / tcp 0 | 2025-03-25T16:01:30.740465

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

1842914220 | 2025-03-28T10:04:41.333530

53 / tcp

-131048168 | 2025-03-28T23:41:09.532610

53 / udp

-131048168 | 2025-03-06T09:52:05.034008

110 / tcp

1924648187 | 2025-04-03T21:20:41.668208

143 / tcp

-1712467009 | 2025-03-17T05:31:18.483890

443 / tcp

0 | 2025-03-25T16:01:30.740465