GeneralInformation

Hostnames	app.hm.raeasy.com.br
Domains	raeasy.com.br
Cloud Provider	DigitalOcean
Cloud Region	us-ca
Country	United States
City	Santa Clara
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 3306

-1220743688 | 2024-04-09T23:25:09.357471

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDnrL1TGeXoCB7mD4UqIwk+o6ytf4cfGscduS6w0k/rW4/D
dzEw3z6upOdLscD6WsqQt6OlnwcsFFS17U+4Zs3zKyLfApVJSXJD+Na6tPyv09sV9gObKwjjuM3b
NjErdu6ddRvEf7TmAq9ZAWtlP1ENoaFE5ti4eUFySDReHMF+IB5tPfmhXz31jTFu0kzpuMLy9vTu
m9vkpwnhP9HwidBa9hLykrb9c6YEqIG90vONDRiHirPfRxMo9cVm7ExUHbUc3aMRnE28u1Ur1ECm
bRaLf5EjTCL6vJVWekJDHka8fkzUh3NMHg6QjYtkT988VDX4qCoFMjnJ7OF8J4BT5++d9EQuv7l2
t1hBbvYWHkjKWpbFpLqa6TVv8BLs4ZZZ9Iy5DwxPVP/ulTLYY+5y9aeEzRV1d0IQpMXWfUofyhlc
IYB+PaiF8Z7KJDPTQrCpjOr5KRjZodHU6aCcC3ilwmpXzzD24u5/9UbwzegRaWn1EdfdvMeLnnnU
/li5q89QUjk=
Fingerprint: 02:3e:6b:68:f1:52:03:39:74:85:a0:e2:18:38:bc:2a

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

677579724 | 2024-04-09T17:32:21.975037

80 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 09 Apr 2024 17:32:21 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

303907747 | 2024-04-12T15:08:20.436274

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 12 Apr 2024 15:08:19 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjdlTU1pdWNRamh1RjdnempkcTF0OVE9PSIsInZhbHVlIjoiTWEzdlZ3UHc5c2lCTEttVHRXKzNpWjlZOFByRUJtcVVwaW04cTM3MVk2NXBJZERWL21Ja1krV3NTcmI0K1I2djZKRkVZOHJpNjNrV1BCaDFsV203LzBnMGdubGFTTHpRd1dMWlNXNHhtMUxYRHlibldKOEp0YnJPc0YwTzNoQ3YiLCJtYWMiOiI1NTFmZDcyNGM3YTIxYzA3YWFmMzgyMDIwOWNiNDAxMTkxMjc0YmIzY2JkYzUzMzIxY2VmNzFmMWYxMzFjNTJmIiwidGFnIjoiIn0%3D; expires=Fri, 12 Apr 2024 17:08:19 GMT; Max-Age=7200; path=/; secure; samesite=lax
Set-Cookie: laravel_session=eyJpdiI6ImdtZ3UvYXJNa0dmSlVMUEdtbnh3MHc9PSIsInZhbHVlIjoiZFFiOWdlZzI0M3VURWExWVNRMXNQUEpNNytPZXM4QktHa2tBbzN4UmdnL0dpaWY5eG9UaUVmK0tXdk4xSFEwTmtLQThkdXR1VXF6b3AxMzVRbFQ4eFJxZGcrTHRMbnhIQnhyNmhUMWFRNTFpUEFQZlRaNlVwUXJEWTJsTVBCU04iLCJtYWMiOiI5NjdmNzk5MjRkZDdjMGZhZmI3NTFmOGIwYTYwOGJhOWFmYjg1YzdiZjQ5OTRjNDQ4YzczMzFlNGQ5MDFlZWRjIiwidGFnIjoiIn0%3D; expires=Fri, 12 Apr 2024 17:08:19 GMT; Max-Age=7200; path=/; httponly; samesite=lax
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e0:23:9b:5b:e3:dc:7c:fb:f9:13:68:5c:22:e7:ca:80:a0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Feb 24 00:18:17 2024 GMT
            Not After : May 24 00:18:16 2024 GMT
        Subject: CN=app.hm.raeasy.com.br
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:b4:52:e5:0e:65:ad:26:66:a1:07:c8:89:
                    3d:8f:12:4b:4f:ba:a0:f4:00:7a:96:6e:bc:c2:84:
                    9f:d8:a2:1d:0e:3a:58:5d:dd:94:d7:a1:43:2d:ea:
                    6b:69:d0:c4:35:70:03:e2:ae:5e:b6:c4:16:3d:a8:
                    5c:53:ad:aa:52:29:8e:87:91:12:73:38:2f:e5:50:
                    7a:41:61:a9:de:e8:2b:27:4b:24:33:82:b6:88:a7:
                    cb:8c:25:a1:95:8e:ba:32:27:8e:af:95:36:3e:cd:
                    ad:8e:51:31:39:92:6d:97:d0:9f:66:68:18:0e:9d:
                    69:cc:83:6c:27:c3:00:a8:44:86:48:19:9c:30:89:
                    be:cb:76:8b:53:01:cb:66:b2:5d:63:87:6f:0e:6d:
                    9c:d2:53:ca:ee:df:53:92:3c:24:8c:23:07:31:1d:
                    1d:c2:d2:df:19:18:0b:18:8c:84:46:b7:00:66:3d:
                    0f:93:57:2e:63:04:c7:9e:c4:e2:90:c6:45:33:a3:
                    86:c6:92:b0:8e:fb:97:d6:38:81:19:8e:c5:26:1d:
                    b2:a0:7b:28:a9:af:67:27:e6:78:f4:02:c4:0e:82:
                    08:94:38:2d:87:b8:1b:b5:d4:26:dc:46:c6:3d:47:
                    56:85:15:f6:73:1c:88:2f:64:6d:e7:ae:84:81:b5:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                91:CF:DB:12:31:BF:00:3C:35:19:69:0B:48:E9:ED:5B:EF:EB:EB:A8
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:app.hm.raeasy.com.br
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Feb 24 01:18:18.009 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:2E:F5:03:D0:B7:B4:01:09:68:5D:25:5E:
                                B2:33:88:F4:8F:F2:3E:C9:60:B3:DD:E5:3E:97:F0:FC:
                                AC:DB:52:2E:02:20:31:93:05:6D:AD:A1:1A:D8:AF:8B:
                                43:3B:9C:A9:08:B3:AF:B5:17:8B:0C:C7:46:44:BE:98:
                                5F:07:0B:96:FC:D9
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Feb 24 01:18:18.024 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:1F:2C:D9:36:26:6F:34:29:FE:92:27:92:9E:
                                67:13:42:EB:4E:D4:AB:23:47:CB:B7:8D:C8:9D:6D:94:
                                6E:6C:80:02:21:00:98:1E:08:65:5A:6D:5D:4B:79:EE:
                                28:C9:C0:1A:73:0A:5A:10:FC:8A:9A:23:B6:DF:4F:41:
                                78:43:5C:3D:34:56
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7b:55:37:d3:31:1f:a6:6c:f4:fb:4c:bd:b6:40:bf:f1:c4:f6:
        a5:4a:bf:21:2c:60:20:90:8d:49:75:9e:15:80:9d:71:fd:f5:
        80:4b:d0:ad:12:8c:78:75:2d:3a:fe:d2:d3:91:6e:ba:32:94:
        5e:45:a6:89:bd:fb:9a:5b:ee:61:aa:8c:ce:13:21:7f:79:29:
        94:dd:4d:bd:05:39:b0:07:45:6b:0e:16:ac:1e:00:74:36:71:
        67:48:17:f1:ef:1d:ee:92:8a:17:c0:1f:c3:49:4f:56:08:47:
        ee:07:9c:84:63:c3:47:0c:57:69:24:50:d0:4c:8a:ef:ae:89:
        72:68:85:e3:e3:d7:31:f5:bd:9f:44:6a:5f:c4:86:4f:cb:90:
        4d:58:aa:6b:fc:bb:73:ed:7b:a3:0f:e3:cc:9e:97:a1:65:fa:
        4e:c7:96:43:45:62:6b:09:53:86:49:e5:9b:49:4d:ca:3c:aa:
        14:aa:e7:0b:d8:e1:17:18:6e:96:86:09:81:ab:2b:19:f9:3d:
        a1:e7:d2:c1:61:53:40:d1:31:92:a6:95:7d:14:fe:aa:87:9d:
        00:df:36:f1:b5:27:fc:fb:2e:38:45:16:f7:59:39:dc:a6:b0:
        44:e6:c0:f4:bd:46:2f:b2:38:44:c2:8d:c1:d6:a1:15:c5:bc:
        9a:12:39:3c

748751232 | 2024-04-14T02:21:45.690668

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 8.0.36-0ubuntu0.20.04.1
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: caching_sha2_password

143.244.190.196

Last Seen: 2024-04-14

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1220743688 | 2024-04-09T23:25:09.357471
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

677579724 | 2024-04-09T17:32:21.975037
80 / tcp

nginx1.18.0

303907747 | 2024-04-12T15:08:20.436274
443 / tcp

nginx1.18.0

748751232 | 2024-04-14T02:21:45.690668
3306 / tcp

MySQL8.0.36-0ubuntu0.20.04.1

Products

Pricing

Contact Us

143.244.190.196

Last Seen: 2024-04-14

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1220743688 | 2024-04-09T23:25:09.357471 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

677579724 | 2024-04-09T17:32:21.975037 80 / tcp

nginx1.18.0

303907747 | 2024-04-12T15:08:20.436274 443 / tcp

nginx1.18.0

748751232 | 2024-04-14T02:21:45.690668 3306 / tcp

MySQL8.0.36-0ubuntu0.20.04.1

Products

Pricing

Contact Us

-1220743688 | 2024-04-09T23:25:09.357471
22 / tcp

677579724 | 2024-04-09T17:32:21.975037
80 / tcp

303907747 | 2024-04-12T15:08:20.436274
443 / tcp

748751232 | 2024-04-14T02:21:45.690668
3306 / tcp