GeneralInformation

Hostnames	ns3003695.ip-151-80-37.eu nuage.scoffoni.net
Domains	ip-151-80-37.eu scoffoni.net
Country	France
City	Lille
Organization	OVH SAS
ISP	OVH SAS
ASN	AS16276

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 3000

118661288 | 2024-09-08T12:20:43.731946

22 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.7
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDkCdU/oivSsJE2qU/5lUa4EpYK62WQ8ItdM7spAfM3NbSB
EknXKwAy2naKh+nBB0IC7cIsQUlKu2x4rMGjPunZABs1N9Be0GXkcn9nP1dGsdVndKrUINm2dYEa
KJrAkvZ7gqkZh1l4hZ7WrakR9WyyT/aiSbSONz3h5d2c61NLb42BOkz9Q9qH+sondZkTRrWKYWIC
H/dRAiQgUaMVcABugCQlU3ZJxymI3jhKt08TthwmreGBXUmwEoQFwj7FjmNeyW9dWt3bmMNXV5vd
I/E2nqFJbhWqtVWb1LGvur+cb9YYqwK+bWRCnJ4Zb6ZN+Fm7cKjCx5lDrhk5AMdiYwEr
Fingerprint: 13:be:8a:c6:16:4c:0e:22:cf:af:6e:e7:60:51:78:2a

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

974278375 | 2024-09-10T17:35:43.130914

80 / tcp

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Date: Tue, 10 Sep 2024 17:35:42 GMT
Server: Apache/2.4.29 (Ubuntu)
Location: https://nuage.scoffoni.net/
Content-Length: 312
Content-Type: text/html; charset=iso-8859-1

CVE-2022-31813 CVE-2022-23943 CVE-2022-22720 CVE-2021-44790 CVE-2021-39275 68 moreCVE-2021-26691 CVE-2019-9517 CVE-2019-0211 CVE-2013-4365 CVE-2011-2688 CVE-2007-4723 CVE-2022-30556 CVE-2022-29404 CVE-2022-28615 CVE-2022-28614 CVE-2022-28330 CVE-2022-26377 CVE-2022-22721 CVE-2022-22719 CVE-2021-44224 CVE-2021-40438 CVE-2021-34798 CVE-2021-33193 CVE-2021-32792 CVE-2021-32791 CVE-2021-32786 CVE-2021-32785 CVE-2021-26690 CVE-2020-35452 CVE-2020-11993 CVE-2020-9490 CVE-2020-1934 CVE-2020-1927 CVE-2019-17567 CVE-2019-10098 CVE-2019-10092 CVE-2019-10082 CVE-2019-10081 CVE-2019-0220 CVE-2019-0217 CVE-2019-0196 CVE-2018-17199 CVE-2018-17189 CVE-2018-11763 CVE-2018-1333 CVE-2018-1312 CVE-2018-1303 CVE-2018-1302 CVE-2018-1301 CVE-2017-15715 CVE-2017-15710 CVE-2013-2765 CVE-2013-0942 CVE-2012-4360 CVE-2012-4001 CVE-2012-3526 CVE-2011-1176 CVE-2009-2299 CVE-2024-40898 CVE-2024-38477 CVE-2024-38476 CVE-2024-38474 CVE-2024-27316 CVE-2023-45802 CVE-2023-31122 CVE-2023-25690 CVE-2022-37436 CVE-2022-36760 CVE-2020-13938 CVE-2018-1283 CVE-2013-0941 CVE-2009-0796 CVE-2006-20001

-245390480 | 2024-09-11T05:54:55.220573

443 / tcp

Nextcloud

HTTP/1.1 400 Bad Request
Date: Wed, 11 Sep 2024 05:54:54 GMT
Server: Apache/2.4.29 (Ubuntu)
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
Set-Cookie: ocbgsvhjn5hh=nevs8c0aiq40g2ns8o5qkd62r8; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: oc_sessionPassphrase=FYwjsA5SNigS1YLBG4T93Sg95ao%2F6VEGptLoJRMrFnKVejJndNuo3tdqwTKCcdhSKGVoGd6COHA1H6Q3uHbfltSqKvGXSt5g8s%2BekZgi4h6GRtrmgG9uJDX9nSobUeGq; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: ocbgsvhjn5hh=68m24g2f7vpfe83kle6bpm0g87; path=/; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-bENmL1VuRzByR2pXajEzUi91TUpTa1oxVWZaa1cwbU9JR1FDclVqV1dBQT06OVVDY0hFSGg1QzJpdkMyQ2xaVndQQ0VRQTZVME5nLzhTaUExM2cvaEUzZz0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ec:9e:99:22:08:00:1d:02:9e:2f:c4:e7:8f:3e:b7:d5:3f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Aug 17 02:11:02 2024 GMT
            Not After : Nov 15 02:11:01 2024 GMT
        Subject: CN=nuage.scoffoni.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:ec:f4:e0:b0:b2:04:a9:42:2a:f7:b6:68:
                    7b:c7:82:90:6f:dd:67:e5:b9:27:1a:d4:38:13:05:
                    8f:cf:e4:c4:9c:fa:88:8f:cd:09:ce:97:5e:c6:6a:
                    d5:a5:0c:57:96:3a:e1:5c:34:46:dc:f5:84:52:dd:
                    94:78:ec:00:45:16:f5:53:70:ed:1f:a1:96:fd:65:
                    04:74:a6:92:2e:64:e0:0e:ff:44:67:d7:0b:9b:67:
                    98:21:de:ae:74:9d:7c:a1:04:67:ab:74:ad:d9:e1:
                    df:b2:f5:16:bc:35:4e:a4:de:1e:0a:d4:21:42:9f:
                    97:fd:be:f1:5a:ab:8a:58:ed:a8:04:aa:8f:37:16:
                    39:55:e3:ca:17:f5:2d:a6:31:76:99:3b:3d:ac:8d:
                    79:6f:cc:29:cc:56:d2:8e:bf:27:02:01:75:8b:7d:
                    f3:d1:fa:a4:3f:93:e4:d2:fd:1b:f6:81:b2:99:59:
                    a3:a5:2d:ee:d9:8a:e3:93:d7:05:f2:24:86:23:83:
                    c8:9c:a8:78:f2:50:6e:a5:3a:3b:81:fe:70:94:e0:
                    00:2c:fa:5f:6c:70:fb:e7:a0:7e:f7:b3:b6:69:57:
                    ba:1e:12:78:f2:70:2f:f4:0c:75:16:74:8e:24:49:
                    a5:73:05:7d:f5:96:9c:ce:9e:68:08:61:75:e0:cc:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                2C:05:A8:98:9F:AE:0C:A7:E6:01:7E:34:4F:64:B6:C3:FD:6C:E4:CE
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:nuage.scoffoni.net
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Aug 17 03:09:32.569 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:1C:3D:74:7B:6B:92:E5:68:A0:96:F6:B9:
                                93:5B:AC:54:39:A9:4F:DE:46:64:62:C7:C5:80:10:C2:
                                47:2A:BE:E4:02:21:00:8A:69:BD:66:42:01:50:FA:2B:
                                10:58:58:A2:5E:90:F9:E8:B1:91:72:E9:F8:E8:E6:4E:
                                79:10:E1:F5:BD:A7:A7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Aug 17 03:09:32.625 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A7:CA:7A:CF:6A:7B:0F:BC:CE:D3:45:
                                64:85:9E:FE:1B:A2:FF:C1:40:A7:6F:19:28:A3:A3:EE:
                                8E:21:C3:E7:EA:02:20:48:CF:D4:34:64:31:78:B7:7E:
                                7A:78:9A:CA:71:1D:8B:E0:B7:2A:B5:78:6C:2B:DF:67:
                                86:12:92:54:64:8B:22
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        14:68:9a:60:79:cd:dc:5d:9d:2f:73:3c:50:54:d1:d6:69:cf:
        db:36:33:1e:0d:c3:a4:49:c8:e5:3a:c9:7c:8b:16:6e:c7:d2:
        c2:50:81:7f:b4:51:9f:e2:b6:52:38:81:de:5d:a6:11:cc:e7:
        12:6c:bf:fa:27:98:a1:a6:46:20:c5:05:e3:46:a9:c7:89:31:
        17:64:95:90:36:9e:ac:d5:a0:70:dd:2c:4e:9c:02:db:04:8e:
        62:18:6e:21:e9:ef:f1:7f:90:93:22:81:f8:90:02:ec:b6:06:
        19:2e:93:eb:96:a6:b7:9f:12:09:5f:6a:22:b4:7f:b8:4a:1d:
        d6:4a:f6:50:ea:b0:35:42:e0:51:b7:54:da:bb:64:2f:15:22:
        c1:11:04:e4:7d:7c:f2:13:ce:52:3b:f5:b5:96:37:bc:00:e9:
        e1:54:69:76:78:2a:4f:f7:13:22:73:f1:76:bc:9f:03:89:f4:
        46:bd:e9:aa:8d:06:ed:2d:7d:fd:e8:f7:ee:29:50:57:5c:46:
        df:3e:0a:8b:a4:dd:0d:41:eb:81:61:51:fb:aa:da:5e:86:a8:
        ad:4f:38:d1:41:51:a3:b7:90:51:fc:27:8f:c0:96:04:c5:fc:
        cb:87:58:a9:82:58:82:3c:ee:1b:3f:bf:0d:b8:e9:2e:a2:ea:
        85:f8:cc:e7

2068007018 | 2024-09-08T07:12:39.161450

3000 / tcp

Metabase

HTTP/1.1 200 OK
Date: Sun, 08 Sep 2024 07:12:38 GMT
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Last-Modified: Sun, 8 Sep 2024 09:12:38 +0200
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Cache-Control: max-age=0, no-cache, must-revalidate, proxy-revalidate
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-eval' https://maps.google.com https://apis.google.com https://www.google-analytics.com https://*.googleapis.com *.gstatic.com  'sha256-lMAh4yjVuDkQ9NqkK4H+YHUga+anpFs5JAuj/uZh0Rs=' 'sha256-sMNbXyc1lLzhHbH/CKs11HIQMnMkZAN2eA99WhJeEC0=' 'sha256-JJa56hyDfUbgNfq+0nq6Qs866JKgZ/+qCq2pkDJED8k='; child-src 'self' https://accounts.google.com; style-src 'self' 'unsafe-inline'; font-src 'self' ; img-src * 'self' data:; connect-src 'self' metabase.us10.list-manage.com ; manifest-src 'self'; 
Content-Type: text/html;charset=utf-8
Expires: Tue, 03 Jul 2001 06:00:00 GMT
Content-Length: 22992
Server: Jetty(9.4.27.v20200227)

CVE-2021-28165 CVE-2019-17638 CVE-2022-2048 CVE-2022-2047 CVE-2021-28169 11 moreCVE-2020-27223 CVE-2020-27218 CVE-2020-27216 CVE-2023-44487 CVE-2023-41900 CVE-2023-40167 CVE-2023-36479 CVE-2023-36478 CVE-2023-26049 CVE-2023-26048 CVE-2021-34428

151.80.37.9

Last Seen: 2024-09-11

GeneralInformation

Vulnerabilities

OpenPorts

118661288 | 2024-09-08T12:20:43.731946
22 / tcp

OpenSSH7.6p1 Ubuntu-4ubuntu0.7

974278375 | 2024-09-10T17:35:43.130914
80 / tcp

Apache httpd2.4.29

-245390480 | 2024-09-11T05:54:55.220573
443 / tcp

Nextcloud

2068007018 | 2024-09-08T07:12:39.161450
3000 / tcp

Metabase

Products

Pricing

Contact Us

151.80.37.9

Last Seen: 2024-09-11

GeneralInformation

Vulnerabilities All ports Port 80 Port 3000 Latest CVSS

OpenPorts

118661288 | 2024-09-08T12:20:43.731946 22 / tcp

OpenSSH7.6p1 Ubuntu-4ubuntu0.7

974278375 | 2024-09-10T17:35:43.130914 80 / tcp

Apache httpd2.4.29

-245390480 | 2024-09-11T05:54:55.220573 443 / tcp

Nextcloud

2068007018 | 2024-09-08T07:12:39.161450 3000 / tcp

Metabase

Products

Pricing

Contact Us

Vulnerabilities

118661288 | 2024-09-08T12:20:43.731946
22 / tcp

974278375 | 2024-09-10T17:35:43.130914
80 / tcp

-245390480 | 2024-09-11T05:54:55.220573
443 / tcp

2068007018 | 2024-09-08T07:12:39.161450
3000 / tcp