GeneralInformation

Hostnames	panel.astralicastudio.es 89.140.72.75.static.user.ono.com
Domains	astralicastudio.es ono.com
Country	Spain
City	Madrid
Organization	A CLASS Publicidad
ISP	VODAFONE ONO, S.A.
ASN	AS6739

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 8080 8443 9993

694930972 | 2025-01-20T22:59:25.546837

22 / tcp

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQD2GRU3uANq7p3nRId53fbQosoQC7EqsZvSBBlEKI+weB77
CnCkfgKrlyDA/3w+v2ypZb8GnbcwNb68Bhts+uueHE//akI/z9QWaTU0le+N8np6IBCDbv9L5vTR
+wmHAzbv1Vqo0mlscMYw1Qs3s8Dgt2C5HeTUMGUq1D1AP2e5/f2o17/2B7mbUpOc69/NOjxnnFt4
0OIUwVbv3B9sicWG5M6zh5tBM2d9uUMzd3/OZTY3CK8J4sM0kjEPkzeAMhHbVD8LjROkNwg7Aatw
ql4uYkR2wcTkmWMBg0gEYkiJ0LeDIVCnFq3WD8s2m1axM+AB5qimGUq3AxtddLYnHbLl
Fingerprint: b1:33:a5:b0:3d:ca:a3:2e:bc:73:04:d1:93:63:8a:3d

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	aes192-cbc
	aes256-cbc
	blowfish-cbc
	cast128-cbc
	3des-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

772258679 | 2025-01-18T20:33:39.967713

80 / tcp

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Sat, 18 Jan 2025 20:33:39 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://89.140.72.75/

CVE-2023-44487 CVE-2021-3618

-553148006 | 2025-01-18T20:33:48.217602

443 / tcp

PufferPanel

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 18 Jan 2025 20:33:48 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 2802
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 26 May 2022 14:01:15 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e1:07:ff:b4:a3:18:16:9a:57:f0:d4:cf:08:39:b6:b4:f6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Nov  4 18:51:41 2024 GMT
            Not After : Feb  2 18:51:40 2025 GMT
        Subject: CN=panel.astralicastudio.es
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:db:99:36:43:97:ad:9e:d5:5f:4a:be:e9:1e:f6:
                    06:15:41:ae:dd:c6:46:42:cd:31:63:f3:6e:6a:5e:
                    bb:88:5b:d7:38:05:51:fe:96:a2:a3:38:5c:59:83:
                    66:38:93:f8:60:20:44:22:69:8f:cc:26:15:e7:e4:
                    74:5f:1a:f0:3e:84:ce:bf:30:35:32:66:eb:b9:86:
                    e0:e0:8e:4d:6d:74:24:7b:6f:78:57:8e:fa:52:49:
                    2c:63:d9:94:79:70:30:69:7a:4d:46:e9:4c:89:0b:
                    84:02:58:2b:f8:d0:57:4b:08:92:a2:9a:83:4c:d7:
                    ce:f4:83:15:5c:84:8a:b4:f7:33:59:c8:a0:2b:2c:
                    38:0b:89:b8:cc:cc:46:fa:60:8a:12:33:ac:15:44:
                    3a:27:b6:78:ec:10:52:bc:27:d7:bf:ba:b0:09:2d:
                    aa:b1:d7:3c:45:1a:d0:32:f0:fc:61:53:82:da:b0:
                    b0:05:5f:82:4c:6e:54:b3:0e:46:13:ff:37:af:be:
                    a6:91:1c:49:13:10:12:76:8f:77:a6:ef:17:8e:08:
                    0f:46:37:c8:ec:96:7d:1d:ad:85:65:93:2a:6e:49:
                    0d:a0:b0:00:f8:35:7d:2a:be:d9:5e:cf:63:8a:80:
                    d8:ca:03:00:86:11:ab:2c:0a:0f:a4:9f:df:6d:13:
                    87:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                59:9B:DC:03:48:3C:6E:94:6E:4E:46:38:F2:51:9F:61:4D:24:2A:58
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:panel.astralicastudio.es
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Nov  4 19:50:11.961 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E2:E4:3A:E1:F5:3D:3E:22:5D:E8:24:
                                17:9F:4B:AC:91:E7:27:41:5A:46:6A:FC:E4:65:AB:87:
                                14:99:A2:5B:13:02:20:0A:90:AC:D9:31:E7:B2:DA:F7:
                                C0:3C:50:E5:68:50:FF:A2:14:3A:AA:45:3B:71:3D:D7:
                                49:52:2B:A1:D4:E6:40
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Nov  4 19:50:12.012 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A6:54:68:BE:82:E4:60:41:86:3A:AD:
                                15:EA:5D:DE:23:01:43:F5:83:7C:A9:1D:14:D4:B3:72:
                                C7:C1:7B:2A:EA:02:20:40:5C:0C:5B:00:DE:A9:8B:B9:
                                F5:56:EC:10:DE:92:5F:63:5B:39:AF:75:76:96:AC:FF:
                                F9:02:0C:76:64:70:C2
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        67:54:2e:9e:1d:df:55:bb:c2:eb:40:b9:ee:16:7e:9c:d9:a5:
        4d:38:d3:6d:bb:23:c1:da:63:e9:6f:9a:88:96:cc:0d:6b:80:
        a9:5c:c6:d6:d0:b4:dd:53:d5:e5:79:04:f2:63:dc:9c:b4:10:
        5f:44:1f:cd:fe:f7:de:a2:46:ea:ed:d2:3d:2e:c1:06:14:8a:
        14:0e:22:95:95:d9:ee:f1:a4:2e:76:bd:4a:be:3a:b5:21:d0:
        55:77:53:7f:fb:ae:90:b7:e9:02:f5:ee:27:8c:ed:52:77:a5:
        9d:92:29:17:2e:09:06:8c:48:c7:27:8a:1b:d1:a2:34:a1:68:
        f0:1a:c3:bf:70:83:be:ca:76:a8:87:bc:38:62:88:fa:0a:99:
        6e:31:db:a3:11:8e:c3:f5:b4:2a:3e:22:6e:73:cf:26:8f:27:
        8e:29:ce:29:65:8f:ec:a6:c7:28:f2:f9:b7:15:11:df:0d:eb:
        38:fb:df:73:d0:07:03:13:aa:aa:9e:07:b4:9a:e0:f6:9d:c3:
        4f:1a:ce:23:b1:81:f1:ac:11:19:cf:6b:94:e2:80:2a:f3:df:
        af:55:f8:38:7d:6a:fd:c7:7b:d7:02:4d:d5:aa:f4:8a:25:ae:
        3b:ba:9e:73:95:cb:2a:f9:6a:43:4b:3e:eb:5a:43:c9:f3:3d:
        ce:8e:fb:14

CVE-2023-44487 CVE-2021-3618

-553148006 | 2025-01-11T22:17:38.585023

8080 / tcp

PufferPanel

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 2802
Content-Type: text/html; charset=utf-8
Last-Modified: Thu, 26 May 2022 14:01:15 GMT
Date: Sat, 11 Jan 2025 22:17:38 GMT

-1979175224 | 2025-01-07T20:10:20.726003

9993 / tcp

HTTP/1.1 401 Unauthorized
Content-Length: 2
Content-Type: application/json
Keep-Alive: timeout=5, max=5

89.140.72.75

Last Seen: 2025-01-20

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

694930972 | 2025-01-20T22:59:25.546837
22 / tcp

OpenSSH7.4

772258679 | 2025-01-18T20:33:39.967713
80 / tcp

nginx1.20.1

-553148006 | 2025-01-18T20:33:48.217602
443 / tcp

nginx1.20.1

-553148006 | 2025-01-11T22:17:38.585023
8080 / tcp

-1979175224 | 2025-01-07T20:10:20.726003
9993 / tcp

Products

Pricing

Contact Us

89.140.72.75

Last Seen: 2025-01-20

Tags:

GeneralInformation

Vulnerabilities All ports Port 22 Port 80 Port 443 Latest CVSS

OpenPorts

694930972 | 2025-01-20T22:59:25.546837 22 / tcp

OpenSSH7.4

772258679 | 2025-01-18T20:33:39.967713 80 / tcp

nginx1.20.1

-553148006 | 2025-01-18T20:33:48.217602 443 / tcp

nginx1.20.1

-553148006 | 2025-01-11T22:17:38.585023 8080 / tcp

-1979175224 | 2025-01-07T20:10:20.726003 9993 / tcp

Products

Pricing

Contact Us

Vulnerabilities

694930972 | 2025-01-20T22:59:25.546837
22 / tcp

772258679 | 2025-01-18T20:33:39.967713
80 / tcp

-553148006 | 2025-01-18T20:33:48.217602
443 / tcp

-553148006 | 2025-01-11T22:17:38.585023
8080 / tcp

-1979175224 | 2025-01-07T20:10:20.726003
9993 / tcp