GeneralInformation

Hostnames	app.xoip.com fax.xoip.com faxapi.xoip.com
Domains	xoip.com
Country	Netherlands
City	Amsterdam
Organization	Webstekker B.V. 1-5-2007
ISP	LeaseWeb Netherlands B.V.
ASN	AS60781
Operating System	Linux 5.15.0-107-generic x86_64

WebTechnologies

JavaScript frameworks

AngularJS1.3.8

JavaScript libraries

jQuery1.11.0

jQuery UI1.10.4

UI frameworks

Bootstrap3.3.2

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 111 443 3306 5432 6379 8027 9100

-641597250 | 2025-01-01T22:15:10.347330

22 / tcp

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAy60Mmwec6Ji5eYMHDW7eYr
//LMJSoftlpHHAm8jGbe0TW6JwOav/DwdnY3cr3atDPTsh+AbaLonvSMtODJupk=
Fingerprint: 39:30:cf:cb:60:5e:43:5e:18:e4:01:d0:43:1c:fc:30

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

1651973090 | 2025-01-04T18:10:52.715511

80 / tcp

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 Jan 2025 18:10:52 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 28 Jul 2020 10:48:17 GMT
Connection: keep-alive
ETag: "5f200271-264"
Accept-Ranges: bytes

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

-2140646937 | 2025-01-02T11:40:09.602964

111 / tcp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111
status	1	udp	58858
status	1	tcp	52505
nlockmgr	1	udp	54377
nlockmgr	3	udp	54377
nlockmgr	4	udp	54377
nlockmgr	1	tcp	36667
nlockmgr	3	tcp	36667
nlockmgr	4	tcp	36667

-2140646937 | 2025-01-06T12:49:28.179054

111 / udp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111
status	1	udp	58858
status	1	tcp	52505
nlockmgr	1	udp	54377
nlockmgr	3	udp	54377
nlockmgr	4	udp	54377
nlockmgr	1	tcp	36667
nlockmgr	3	tcp	36667
nlockmgr	4	tcp	36667

1539578965 | 2024-12-28T14:26:58.550247

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 28 Dec 2024 14:26:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 55
Connection: keep-alive
X-Frame-Options: DENY
Vary: Cookie, origin
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Set-Cookie: sessionid=0ofucnrrojwqnr9kdcp6aoahepmame17; expires=Sat, 11 Jan 2025 14:26:58 GMT; Max-Age=1209600; Path=/; SameSite=Lax
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
Access-Control-Allow-Headers: Authorization, Content-Type

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:aa:0b:b7:50:e9:8c:a1:2b:64:0b:7e:a3:28:80:6e:e6:61
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Dec 23 12:21:46 2024 GMT
            Not After : Mar 23 12:21:45 2025 GMT
        Subject: CN=app.xoip.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:7b:80:c7:d2:67:46:87:5d:f6:26:24:ea:
                    df:38:68:b0:66:a8:72:63:ae:4e:41:39:36:59:a9:
                    72:6a:43:a6:1b:1d:06:e4:2b:98:11:17:5e:27:a2:
                    7c:72:ce:1d:72:b2:ca:51:8c:d6:f1:82:8d:c0:1c:
                    8a:46:c3:1c:3c:ea:5d:c8:12:cd:42:ba:9a:11:d3:
                    88:e7:71:ab:04:ed:32:5b:9a:9d:c3:6b:3d:d3:86:
                    9c:1e:43:04:bc:7c:c1:70:51:ed:27:eb:0d:d5:af:
                    04:0d:1c:2f:65:a5:a8:a7:42:c8:e9:d9:ae:6f:2a:
                    df:d5:e0:02:78:41:51:78:b0:d8:e7:9d:d8:e6:7e:
                    e7:b4:be:4b:8b:c0:12:0f:8f:9a:0d:b5:91:85:81:
                    39:cb:4e:d1:3e:d3:36:51:5e:ee:52:ce:0e:40:10:
                    65:b7:62:d5:c8:5d:8a:58:d4:1d:b7:2e:39:ca:aa:
                    23:67:df:e3:13:58:f1:5e:a2:46:73:69:e6:f4:83:
                    d9:41:5c:55:a4:e1:8d:53:91:c6:31:38:05:d3:55:
                    4c:8c:9b:1e:4e:56:5e:ef:b7:f3:a6:0d:d8:bf:64:
                    86:17:65:67:24:7d:eb:94:42:42:9e:87:b9:00:90:
                    86:c4:67:df:03:7f:fb:e0:36:89:77:da:f1:5a:fb:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                67:D3:56:5B:7B:4D:2E:37:1F:EA:98:CC:9C:6C:AC:9C:DE:A3:8B:B5
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:app.xoip.com, DNS:fax.xoip.com, DNS:faxapi.xoip.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Dec 23 13:20:16.799 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AA:DB:33:D2:5F:71:1A:75:F8:7E:1A:
                                D6:22:85:97:F9:5A:CD:64:FC:64:96:3A:63:54:AF:C7:
                                1F:AE:1E:57:C6:02:21:00:C0:86:69:72:6A:04:D9:5F:
                                9A:98:80:DD:D6:36:BD:CA:FE:BD:B0:BD:4A:40:F2:25:
                                DA:3E:9D:58:4A:BE:8D:15
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Dec 23 13:20:16.839 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:8A:B2:73:BA:A1:64:09:B2:C7:84:40:
                                A0:79:79:B3:78:5A:96:4F:26:5E:21:22:CE:E0:79:92:
                                36:12:C0:32:D5:02:21:00:B9:29:17:FF:7E:AA:5E:30:
                                C2:37:BB:8F:88:9F:7D:67:5A:27:5B:E0:8E:59:92:2E:
                                F8:0F:78:1F:F5:BF:D5:7C
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        28:43:0e:a6:cc:e1:f6:f6:22:4b:49:84:e2:e1:3d:bb:15:53:
        b3:df:8f:f8:1a:a3:3e:32:39:ea:55:91:8b:f5:ed:2b:21:27:
        c4:35:28:f5:66:6b:25:7f:3b:b4:db:3f:2c:e0:2e:9c:7e:78:
        1b:bb:f3:14:ed:50:0a:65:e2:05:f1:7b:62:20:5b:98:fe:dc:
        48:49:97:4e:12:a1:37:64:2e:b9:89:04:93:bd:43:13:38:7f:
        53:9f:17:7a:11:1f:dc:2d:37:3b:84:01:bb:84:b3:93:cc:a5:
        f3:bf:da:8e:f5:36:a4:25:be:fd:c2:8c:94:b8:cb:00:a8:95:
        0f:a0:a8:c6:20:61:8a:17:30:fc:a8:20:f4:78:d5:0a:7a:61:
        3e:56:ab:73:5d:fb:9e:d0:0c:37:87:7f:7d:a0:c6:ad:37:62:
        0f:ba:6e:e6:82:57:ad:be:8b:b5:45:a8:d5:c8:7e:14:8b:8a:
        42:78:bc:3a:50:de:50:64:e4:c4:52:66:a5:28:44:f7:5c:96:
        73:77:9a:09:14:a3:39:13:62:12:15:a4:42:42:76:ff:7d:70:
        df:5c:68:73:31:d1:fa:93:78:22:fa:43:b4:e1:af:e4:27:6b:
        7e:ba:a5:f3:10:e4:0a:e1:2f:8e:20:98:c2:14:dc:a8:fc:18:
        9b:16:e3:f6

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

-1560810148 | 2025-01-06T23:02:39.603226

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 5.7.34
  Capabilities: 65535
  Server Language: 8
  Server Status: 2
  Extended Server Capabilities: 49663
  Authentication Plugin: mysql_native_password

-726790289 | 2025-01-07T18:31:45.976089

5432 / tcp

PostgreSQL
fe_sendauth: no password supplied

-1897590031 | 2025-01-08T11:29:32.480586

6379 / tcp

# Server
redis_version:3.2.0
redis_git_sha1:00000000
redis_git_dirty:0
redis_build_id:f449541256e7d446
redis_mode:standalone
os:Linux 5.15.0-107-generic x86_64
arch_bits:64
multiplexing_api:epoll
gcc_version:4.9.2
process_id:1
run_id:f486894e20e35fa12f34a60f4194559e33883654
tcp_port:6379
uptime_in_seconds:4724628
uptime_in_days:54
hz:10
lru_clock:8282523
executable:/data/redis-server
config_file:

# Clients
connected_clients:4
client_longest_output_list:0
client_biggest_input_buf:20
blocked_clients:0

# Memory
used_memory:1312640
used_memory_human:1.25M
used_memory_rss:2736128
used_memory_rss_human:2.61M
used_memory_peak:1333496
used_memory_peak_human:1.27M
total_system_memory:16566898688
total_system_memory_human:15.43G
used_memory_lua:561152
used_memory_lua_human:548.00K
maxmemory:0
maxmemory_human:0B
maxmemory_policy:noeviction
mem_fragmentation_ratio:2.08
mem_allocator:jemalloc-4.0.3

# Persistence
loading:0
rdb_changes_since_last_save:149
rdb_bgsave_in_progress:0
rdb_last_save_time:1736061111
rdb_last_bgsave_status:ok
rdb_last_bgsave_time_sec:-1
rdb_current_bgsave_time_sec:-1
aof_enabled:0
aof_rewrite_in_progress:0
aof_rewrite_scheduled:0
aof_last_rewrite_time_sec:-1
aof_current_rewrite_time_sec:-1
aof_last_bgrewrite_status:ok
aof_last_write_status:ok

# Stats
total_connections_received:1432
total_commands_processed:9606
instantaneous_ops_per_sec:0
total_net_input_bytes:7325670
total_net_output_bytes:376608366
instantaneous_input_kbps:0.00
instantaneous_output_kbps:0.00
rejected_connections:0
sync_full:0
sync_partial_ok:0
sync_partial_err:0
expired_keys:1
evicted_keys:0
keyspace_hits:55
keyspace_misses:3
pubsub_channels:0
pubsub_patterns:0
latest_fork_usec:0
migrate_cached_sockets:0

# Replication
role:master
connected_slaves:0
master_repl_offset:0
repl_backlog_active:0
repl_backlog_size:1048576
repl_backlog_first_byte_offset:0
repl_backlog_histlen:0

# CPU
used_cpu_sys:2993.27
used_cpu_user:1280.63
used_cpu_sys_children:0.00
used_cpu_user_children:0.00

# Cluster
cluster_enabled:0

# Keyspace

# Keys


# Connected Clients
id=125 addr=49.7.216.83:40694 fd=6 name= age=4490533 idle=4490533 flags=N db=0 sub=0 psub=0 multi=-1 qbuf=0 qbuf-free=0 obl=0 oll=0 omem=0 events=r cmd=info
id=279 addr=205.210.31.56:55792 fd=7 name= age=4275607 idle=4275605 flags=N db=0 sub=0 psub=0 multi=-1 qbuf=0 qbuf-free=0 obl=0 oll=0 omem=0 events=r cmd=info
id=313 addr=35.178.136.155:21415 fd=8 name= age=4202133 idle=4202133 flags=N db=0 sub=0 psub=0 multi=-1 qbuf=20 qbuf-free=0 obl=0 oll=0 omem=0 events=r cmd=NULL
id=1433 addr=224.179.109.20:46556 fd=9 name= age=1 idle=0 flags=N db=0 sub=0 psub=0 multi=-1 qbuf=0 qbuf-free=32768 obl=0 oll=0 omem=0 events=r cmd=client

CVE-2018-11219 CVE-2018-11218 CVE-2021-32761 CVE-2020-14147 CVE-2019-10193 7 moreCVE-2019-10192 CVE-2018-12453 CVE-2018-12326 CVE-2016-10517 CVE-2021-3470 CVE-2016-8339 CVE-2013-7458

84483828 | 2024-12-12T20:41:03.444195

8027 / tcp

MailHog

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Thu, 12 Dec 2024 20:41:03 GMT
Transfer-Encoding: chunked

CVE-2024-21490 CVE-2019-14863 CVE-2019-10768 CVE-2024-8373 CVE-2024-8372 11 moreCVE-2020-11023 CVE-2020-11022 CVE-2020-7676 CVE-2019-11358 CVE-2019-8331 CVE-2018-20677 CVE-2018-20676 CVE-2018-14042 CVE-2018-14040 CVE-2016-10735 CVE-2015-9251

-534819421 | 2025-01-01T04:40:25.576370

9100 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Connection: close

400 Bad Request
Prometheus Node Exporter:
  node_exporter_build_info:
    branch: HEAD
    goversion: go1.14.4
    revision: 3715be6ae899f2a9b9dbfd9c39f3e09a7bd4559f
    version: 1.0.1
  node_uname_info:
    domainname: (none)
    machine: x86_64
    nodename: cf79fe147147
    release: 5.15.0-107-generic
    sysname: Linux
    version: #117-Ubuntu SMP Fri Apr 26 12:26:49 UTC 2024
  node_network_info:
    veth948baf6:
      address: 16:d4:e4:11:89:17
      broadcast: ff:ff:ff:ff:ff:ff
      device: veth948baf6
      duplex: full
      operstate: up
    veth80bae26:
      address: 9a:ef:9c:80:bf:22
      broadcast: ff:ff:ff:ff:ff:ff
      device: veth80bae26
      duplex: full
      operstate: up
    docker0:
      address: 02:42:0f:e5:b3:31
      broadcast: ff:ff:ff:ff:ff:ff
      device: docker0
      duplex: unknown
      operstate: down
    veth3ba2f5d:
      address: 22:1f:36:b5:6f:08
      broadcast: ff:ff:ff:ff:ff:ff
      device: veth3ba2f5d
      duplex: full
      operstate: up
    lo:
      address: 00:00:00:00:00:00
      broadcast: 00:00:00:00:00:00
      device: lo
      operstate: unknown
    veth4cd1f34:
      address: 56:19:a1:22:73:dd
      broadcast: ff:ff:ff:ff:ff:ff
      device: veth4cd1f34
      duplex: full
      operstate: up
    veth8e84798:
      address: 1e:6d:36:09:dc:cd
      broadcast: ff:ff:ff:ff:ff:ff
      device: veth8e84798
      duplex: full
      operstate: up
    veth9b1e1f2:
      address: 96:22:68:54:3c:39
      broadcast: ff:ff:ff:ff:ff:ff
      device: veth9b1e1f2
      duplex: full
      operstate: up
    vethf324b8b:
      address: 1e:c6:d4:af:c4:59
      broadcast: ff:ff:ff:ff:ff:ff
      device: vethf324b8b
      duplex: full
      operstate: up
    vethb8e1aaa:
      address: aa:56:ab:50:31:5e
      broadcast: ff:ff:ff:ff:ff:ff
      device: vethb8e1aaa
      duplex: full
      operstate: up
    vethadf316e:
      address: d6:85:2a:e0:52:b9
      broadcast: ff:ff:ff:ff:ff:ff
      device: vethadf316e
      duplex: full
      operstate: up
    veth354063f:
      address: 76:af:77:75:c7:b6
      broadcast: ff:ff:ff:ff:ff:ff
      device: veth354063f
      duplex: full
      operstate: up
    ens18:
      address: 92:f0:96:fa:b5:5e
      broadcast: ff:ff:ff:ff:ff:ff
      device: ens18
      duplex: unknown
      operstate: up
    ens19:
      address: aa:46:fa:d7:d2:12
      broadcast: ff:ff:ff:ff:ff:ff
      device: ens19
      duplex: unknown
      operstate: up
    veth0aa8bcc:
      address: 3a:a1:58:7b:73:ee
      broadcast: ff:ff:ff:ff:ff:ff
      device: veth0aa8bcc
      duplex: full
      operstate: up
    br-c6095d10e665:
      address: 02:42:a6:47:e4:ec
      broadcast: ff:ff:ff:ff:ff:ff
      device: br-c6095d10e665
      duplex: unknown
      operstate: up
    vethff52ad3:
      address: 6e:87:47:df:c1:4f
      broadcast: ff:ff:ff:ff:ff:ff
      device: vethff52ad3
      duplex: full
      operstate: up

85.17.206.30

Last Seen: 2025-01-08

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-641597250 | 2025-01-01T22:15:10.347330
22 / tcp

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

1651973090 | 2025-01-04T18:10:52.715511
80 / tcp

nginx1.18.0

-2140646937 | 2025-01-02T11:40:09.602964
111 / tcp

-2140646937 | 2025-01-06T12:49:28.179054
111 / udp

1539578965 | 2024-12-28T14:26:58.550247
443 / tcp

nginx1.18.0

-1560810148 | 2025-01-06T23:02:39.603226
3306 / tcp

MySQL5.7.34

-726790289 | 2025-01-07T18:31:45.976089
5432 / tcp

PostgreSQL9.6.0 or later

-1897590031 | 2025-01-08T11:29:32.480586
6379 / tcp

Redis key-value store3.2.0

84483828 | 2024-12-12T20:41:03.444195
8027 / tcp

-534819421 | 2025-01-01T04:40:25.576370
9100 / tcp

Prometheus Node Exporter1.0.1

Products

Pricing

Contact Us

85.17.206.30

Last Seen: 2025-01-08

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Port 3306 Port 6379 Port 8027 Latest CVSS

OpenPorts

-641597250 | 2025-01-01T22:15:10.347330 22 / tcp

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

1651973090 | 2025-01-04T18:10:52.715511 80 / tcp

nginx1.18.0

-2140646937 | 2025-01-02T11:40:09.602964 111 / tcp

-2140646937 | 2025-01-06T12:49:28.179054 111 / udp

1539578965 | 2024-12-28T14:26:58.550247 443 / tcp

nginx1.18.0

-1560810148 | 2025-01-06T23:02:39.603226 3306 / tcp

MySQL5.7.34

-726790289 | 2025-01-07T18:31:45.976089 5432 / tcp

PostgreSQL9.6.0 or later

-1897590031 | 2025-01-08T11:29:32.480586 6379 / tcp

Redis key-value store3.2.0

84483828 | 2024-12-12T20:41:03.444195 8027 / tcp

-534819421 | 2025-01-01T04:40:25.576370 9100 / tcp

Prometheus Node Exporter1.0.1

Products

Pricing

Contact Us

Vulnerabilities

-641597250 | 2025-01-01T22:15:10.347330
22 / tcp

1651973090 | 2025-01-04T18:10:52.715511
80 / tcp

-2140646937 | 2025-01-02T11:40:09.602964
111 / tcp

-2140646937 | 2025-01-06T12:49:28.179054
111 / udp

1539578965 | 2024-12-28T14:26:58.550247
443 / tcp

-1560810148 | 2025-01-06T23:02:39.603226
3306 / tcp

-726790289 | 2025-01-07T18:31:45.976089
5432 / tcp

-1897590031 | 2025-01-08T11:29:32.480586
6379 / tcp

84483828 | 2024-12-12T20:41:03.444195
8027 / tcp

-534819421 | 2025-01-01T04:40:25.576370
9100 / tcp