Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
SSH-2.0-OpenSSH_8.7 Key type: ecdsa-sha2-nistp256 Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBC3U+tv4I51X/ErKYkYb9uMR NoYnfANv28+2pahZ0jOvlEh2kWc3TSFIyA5yfZmFTwZXOSi4XaA1hpYWZsL429Y= Fingerprint: 92:91:29:af:4f:04:f3:92:72:cf:c1:69:4f:9a:de:1d Kex Algorithms: curve25519-sha256 curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group-exchange-sha256 diffie-hellman-group14-sha256 diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 kex-strict-s-v00@openssh.com Server Host Key Algorithms: rsa-sha2-512 rsa-sha2-256 ecdsa-sha2-nistp256 ssh-ed25519 Encryption Algorithms: aes256-gcm@openssh.com chacha20-poly1305@openssh.com aes256-ctr aes128-gcm@openssh.com aes128-ctr MAC Algorithms: hmac-sha2-256-etm@openssh.com hmac-sha1-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha2-256 hmac-sha1 umac-128@openssh.com hmac-sha2-512 Compression Algorithms: none zlib@openssh.com
HTTP/1.1 302 Found Date: Tue, 11 Feb 2025 23:25:24 GMT Server: Apache/2.4.62 (AlmaLinux) X-Powered-By: PHP/8.3.14 Cache-Control: no-cache, private Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Set-Cookie: XSRF-TOKEN=eyJpdiI6IllQZGNDY2YxQ0oyYTNkS3RwYjZpQ3c9PSIsInZhbHVlIjoiaE1jQjlwTHFMZEVmWWtCdlo4Um1DS2JLNisvQy9TWlR4MXNXS3FkZmxHNjgxK1JxOHlmYmhyRDNkUDhKcG9JNnFFYzdWc1ltNENKcWh0U0JXaXVDZEF2cG80dnhGVVMwTUxHc1B5alVCeEFkMUh4V212SlpqVjNUaFM2SFJBR1UiLCJtYWMiOiI4N2ZhODliYjEwNzY1NjRmYTU3Nzk1NTM3ODZhMzI1ZTllNmI5MjcwNzk3YWQ3MDU1MzIyMWU3MGZjZmRhYzRhIiwidGFnIjoiIn0%3D; expires=Thu, 18 Jan 2125 23:25:24 GMT; Max-Age=3153600000; path=/; samesite=lax Set-Cookie: v2raypanel_session=eyJpdiI6IlVsVVVFaks5MUdnRzBYTVdPUkJ3UVE9PSIsInZhbHVlIjoiOVE4YlJaMjdSYjN3K3RQSDZyeUIzTWN5K01oVjEwSGNIRzZWQmJBczhlY2t3TWtUUFlXSlJoanByUmw4UDlCTWppc08vUEo0aWw1OTVubkxXSk5mcGNjM0ozbm50TS95ZkVudllud2J5SEFhN1pYRTByR05vU2M3eVRCRHoyZk8iLCJtYWMiOiIwMjliMzczNmVlOTE5YTFjZGFkOGQwMTFlMGI5ODY5Y2UyMjBmZTU0NDc5MDU5MjM5Y2IxNDEzYzIyMjA2MmE4IiwidGFnIjoiIn0%3D; expires=Thu, 18 Jan 2125 23:25:24 GMT; Max-Age=3153600000; path=/; httponly; samesite=lax Location: https://116.203.152.185/auth/login Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
MySQL: Error Message: Host '224.30.19.52' is not allowed to connect to this MySQL server Error Code: 1130
HTTP/1.0 200 Document follows Date: Tue, 21 Jan 2025 18:39:12 GMT Server: MiniServ Connection: close Auth-type: auth-required=1 Set-Cookie: redirect=1; path=/; secure; httpOnly Set-Cookie: testing=1; path=/; secure; httpOnly X-Frame-Options: SAMEORIGIN Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self'; child-src 'self' X-Content-Type-Options: nosniff X-no-links: 1 Content-type: text/html; Charset=UTF-8
Certificate: Data: Version: 3 (0x2) Serial Number: 36:bf:71:87:b0:b8:b6:10:c3:9a:47:be:17:0f:48:a1:e1:f4:16:5d Signature Algorithm: sha256WithRSAEncryption Issuer: O=Webmin Webserver on alma-16gb-nbg1-1, CN=*/emailAddress=root@alma-16gb-nbg1-1 Validity Not Before: Dec 11 10:53:14 2024 GMT Not After : Dec 10 10:53:14 2029 GMT Subject: O=Webmin Webserver on alma-16gb-nbg1-1, CN=*/emailAddress=root@alma-16gb-nbg1-1 Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:91:82:29:4b:d9:b7:dc:12:34:d9:6f:60:4c:bd: 24:9e:00:09:7f:e0:c3:2f:82:33:ca:46:45:35:e7: 49:ed:e3:aa:eb:82:86:5b:cb:1c:57:9d:7c:2f:33: bf:44:30:80:fc:68:4f:36:59:c3:d4:ab:05:a3:6b: 61:47:84:df:14:11:67:83:1d:58:53:ec:f7:a9:5d: 22:df:3c:f9:27:be:18:77:d0:f3:14:96:e5:64:4f: 08:df:98:75:bc:ad:f0:db:64:3e:89:fa:03:8c:dd: df:22:99:01:a1:14:05:d9:d8:31:9a:d5:00:e4:7b: 2c:4f:bc:07:b8:22:9a:94:07:15:7e:f2:43:b7:22: 85:a9:61:a3:51:08:3a:1e:00:a9:b2:36:42:df:a3: 6e:d3:e1:67:44:5c:88:f7:6d:f8:3d:0a:06:d0:65: a6:f9:e4:05:2a:ba:ba:bb:99:40:8b:41:55:c7:90: bd:86:f3:a4:38:60:f7:28:cd:18:b8:68:96:dd:53: a5:94:b6:48:88:6e:da:37:da:66:e6:99:2b:47:74: c5:e9:fb:b3:85:a4:83:cf:77:0a:5f:ac:78:a6:90: a0:7b:56:22:3c:66:9c:8f:ad:fa:41:e4:6b:e7:14: a0:e1:73:e9:f9:4b:ce:a3:13:ae:24:c6:cb:24:96: c6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:55:0A:09:0F:F3:0D:93:AF:3C:66:26:E3:96:F4:AA:7A:FB:54:E3 X509v3 Authority Key Identifier: 7F:55:0A:09:0F:F3:0D:93:AF:3C:66:26:E3:96:F4:AA:7A:FB:54:E3 X509v3 Basic Constraints: critical CA:TRUE Signature Algorithm: sha256WithRSAEncryption Signature Value: 47:f9:3a:87:22:df:b0:bb:7d:59:7c:00:b8:23:e4:47:71:be: ba:c4:c9:24:cd:89:ce:35:a2:ff:13:40:3a:f0:6a:90:58:56: 58:6a:53:20:25:3b:91:64:9d:ae:07:4d:f1:fd:5b:7d:6f:76: 95:3d:93:31:da:1b:60:5b:79:f7:f0:20:11:ba:9c:65:49:1a: 3a:8a:b2:43:c9:b2:bc:c1:53:af:88:0c:96:57:2f:fd:1c:5a: d1:c2:ad:31:d1:eb:50:7a:35:9a:48:25:59:60:20:3e:ff:5d: 76:af:e9:9b:2a:8c:6f:97:f1:1f:a0:a8:90:a4:db:93:97:fb: 30:ff:a5:f3:29:6f:e3:0b:fb:47:00:46:a7:1e:32:23:89:09: c4:75:6b:e4:d7:aa:4a:81:30:2c:26:e5:45:11:c4:6f:e1:77: 03:0d:15:2a:ae:ea:67:e3:d8:fa:bc:ba:7a:a1:be:6b:96:56: f5:e4:0a:ec:1e:a9:4e:35:e8:ee:88:4f:a8:50:62:49:cf:ac: a6:d9:d7:8c:7c:47:32:67:fa:08:04:6f:fd:c1:97:46:20:7c: fc:ff:dd:ea:3f:04:49:b4:da:04:3d:31:33:e4:4c:6e:47:69: 0c:3e:7b:f5:74:6a:f9:de:ab:91:dc:3a:1c:d1:8b:28:a3:a3: be:96:ee:bf
MySQL X Protocol: tls: False authentication.mechanisms: MYSQL41 SHA256_MEMORY doc.formats: text client.interactive: False compression: algorithm: deflate_stream lz4_message zstd_stream node_type: mysql client.pwd_expire_ok: False
Shodan ® - All rights reserved