GeneralInformation

Hostnames	zerocdn.com minsk.by.mng.zerocdn.com minsk2.by.mng.zerocdn.com msk.ru.mng.zerocdn.com tvr.ru.mng.zerocdn.com rst.us.mng.zerocdn.com
Domains	zerocdn.com
Country	Russian Federation
City	Moscow
Organization	DigitalOne CDN Global
ISP	DigitalOne AG
ASN	AS48158

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 179 443 3306 8083

1145542449 | 2024-04-30T22:49:50.764101

22 / tcp

SSH-2.0-OpenSSH_7.4p1 Debian-10+deb9u7
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDEbzuN8cDpceuQ+yBTS/P9wjs5P/o4FyeFfulSULFJSWa3
ykjPKZ8wiJEh0Ln7O/lKt9X7UzIRZQk12dwSRnMTMZUZFXoJ9ktVSTyNRwmB+X7bNlm+8bTGthdB
5aiq5Gec8C0Uj0hHqvAlJYIMPXbdEBC9ngrXkVNBHFomxLOS+JYKk1dElTQiQ6zrNr3cfJzrjngR
sxzMrilW74csGgZXI88EU6apx0LfK6uVS7xvCevZP/znI+N3qLGbCV5gkvV9LThZGWvrOFEvZWvk
ihFrlFuCVFFJP3rwR3KlIWw4XIZW1IP0WrQTdUSy260ErwUWU5seAl3PySWxJ9QLcnNn
Fingerprint: 04:a9:38:c3:5b:1f:d4:af:19:33:78:49:fe:cf:2b:f7

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-1323779601 | 2024-04-28T12:16:12.766080

80 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0
Date: Sun, 28 Apr 2024 12:16:12 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Language
Content-Language: en

-1323779601 | 2024-04-29T00:40:24.658596

443 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0
Date: Mon, 29 Apr 2024 00:40:24 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Language
Content-Language: ru

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:be:62:f4:59:3d:df:ec:ce:1f:7b:0e:5c:bb:ce:87:2a:c1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  5 13:46:08 2024 GMT
            Not After : Jul  4 13:46:07 2024 GMT
        Subject: CN=zerocdn.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:bd:11:7c:2d:86:2f:69:a2:21:e3:69:0d:d6:4a:
                    a3:2f:5b:bf:06:fb:d4:4b:fd:6a:f4:9a:ad:14:6e:
                    e9:79:4a:0f:81:41:0a:a9:b4:6e:69:fe:f0:da:e1:
                    7a:8e:24:f1:08:84:9b:7b:c8:88:40:b1:fb:f9:69:
                    1e:c7:e7:c9:f2:ff:da:a0:d3:fe:2a:d4:9e:a0:d5:
                    c1:2f:f2:b0:db:49:ba:f4:9c:29:c9:f0:0b:cc:39:
                    8e:40:67:59:cd:60:25:d2:88:3b:4e:cc:cb:5a:73:
                    9e:4b:c1:48:d4:c4:65:ea:29:63:c5:f8:40:55:34:
                    9d:ef:fc:39:37:1e:59:b8:87:08:18:0e:64:2e:44:
                    58:27:60:53:a7:1e:5b:d1:c3:4e:2a:0a:c6:fa:aa:
                    ce:ae:b8:e2:ab:c7:4e:b6:5f:70:42:4e:19:ed:3e:
                    09:c2:78:31:9d:9f:55:bf:d5:32:ed:09:aa:66:c1:
                    fa:c7:bc:8c:1f:b3:96:4c:8a:41:61:aa:06:dd:8b:
                    11:d6:d9:a0:1a:53:68:87:72:a6:d7:9f:7b:14:94:
                    f4:e5:d4:9e:62:f2:3b:f7:6b:b3:b5:ab:e9:81:9b:
                    ff:ad:ba:34:48:d9:ca:37:97:e3:be:01:66:45:4e:
                    ef:23:c6:66:52:cf:60:d1:99:cb:66:c0:96:07:a1:
                    10:44:ab:02:71:5e:fb:8c:fd:ad:5c:b0:1b:6b:74:
                    ca:57:21:7b:ad:c9:2e:1e:a3:a0:db:5b:4b:28:fe:
                    6e:28:fc:46:5f:65:1e:24:57:f9:79:41:7e:25:d1:
                    dd:ff:b3:cd:3e:88:11:21:5c:87:7f:a0:9f:cd:84:
                    5f:55:74:75:eb:c2:94:0a:b5:a7:e7:31:57:6e:44:
                    72:82:ee:81:82:e0:53:bf:d4:6f:e9:31:5d:ef:72:
                    e4:36:ad:0c:55:07:d8:43:2f:0d:5f:08:d1:2a:94:
                    04:09:83:53:1d:81:8a:15:56:77:90:7e:ea:2c:0c:
                    24:8c:9c:00:6b:44:2c:7e:00:16:ef:88:da:e8:77:
                    8c:26:1a:51:29:6d:ec:ff:8a:70:e4:e3:a6:d8:9a:
                    af:91:d8:ed:c2:8c:41:f0:61:de:90:1f:48:e0:bd:
                    bd:99:2d:c0:0e:1f:e1:19:ea:a4:b6:57:c3:50:e9:
                    cb:c3:1d:c8:65:65:a1:17:ad:d7:31:58:45:4f:9c:
                    5a:a8:23:1f:dc:1a:ed:c9:9e:fb:ac:1a:cd:68:b9:
                    c6:cc:fb:03:e8:b5:8e:cd:d5:ac:76:52:8f:6a:63:
                    8d:c4:15:5b:1a:70:87:87:f9:67:da:f3:74:a6:cc:
                    66:25:55:33:a6:cf:82:26:17:a9:a0:84:d5:eb:09:
                    b6:e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                AD:D3:7F:90:AA:B5:FB:A9:2A:53:6E:EF:5E:D2:34:17:8C:FB:5E:0A
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.cdn.zerocdn.com, DNS:*.falcon.zerocdn.com, DNS:*.minsk.by.mng.zerocdn.com, DNS:*.minsk2.by.mng.zerocdn.com, DNS:*.mng.zerocdn.com, DNS:*.msk.ru.mng.zerocdn.com, DNS:*.pulse.zerocdn.com, DNS:*.rst.us.mng.zerocdn.com, DNS:*.sl013.zerocdn.com, DNS:*.sl047.zerocdn.com, DNS:*.sl049.zerocdn.com, DNS:*.sl054.zerocdn.com, DNS:*.tvr.ru.mng.zerocdn.com, DNS:*.zerocdn.com, DNS:minsk.by.mng.zerocdn.com, DNS:minsk2.by.mng.zerocdn.com, DNS:msk.ru.mng.zerocdn.com, DNS:rst.us.mng.zerocdn.com, DNS:tvr.ru.mng.zerocdn.com, DNS:zerocdn.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Apr  5 14:46:08.550 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:28:E3:72:3A:76:D6:F2:97:02:F3:A8:00:
                                98:D0:FD:7D:54:D9:ED:95:85:4D:60:FD:06:DB:C3:6E:
                                A4:52:8D:C7:02:21:00:84:BB:DA:9D:71:6F:2D:A9:DD:
                                7C:63:6D:CD:5D:E4:C9:F1:6D:6E:C1:9A:4E:9F:EB:C1:
                                9C:B4:48:22:97:FC:32
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : Apr  5 14:46:08.764 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:CB:27:FE:63:F0:B0:42:2F:77:CD:68:
                                D5:C4:4C:CA:71:28:CE:C0:FD:31:7D:A6:83:12:2F:BB:
                                35:5E:5A:C1:A8:02:20:2F:6F:ED:C0:8D:CC:42:B4:0C:
                                DC:90:F8:28:2C:DD:23:4C:77:F3:9D:A8:FB:FA:C9:9A:
                                3D:6B:07:11:46:2D:6F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        64:e4:e3:b2:3a:e2:bf:dc:98:27:73:10:46:ad:b5:6c:63:ee:
        a3:fe:b6:16:25:4c:3d:03:fd:42:47:b4:73:56:37:7e:c5:86:
        90:93:38:48:22:17:07:05:ce:af:89:b6:aa:f1:d2:30:8a:d3:
        7c:20:de:92:a4:1b:98:67:15:7e:c0:39:12:2b:df:aa:48:44:
        f6:16:dd:ab:39:c3:87:6a:5b:ae:ff:ab:94:b7:17:14:5c:16:
        6d:3f:02:98:c1:e5:4e:36:ab:36:3e:2d:2c:ec:bf:55:9c:9c:
        90:3f:11:9a:e5:dd:f6:bc:b6:99:ce:17:b3:49:5b:d9:52:ce:
        e9:90:87:30:1b:ac:17:78:52:f6:e2:9e:1a:de:b6:99:a1:b4:
        3f:60:d9:28:fa:38:16:3b:7f:08:10:92:37:91:2a:7e:a4:09:
        4d:ce:34:cb:c9:75:21:1c:02:92:ec:42:81:2b:3a:69:ad:30:
        19:f1:eb:b1:00:ad:87:68:73:5c:ef:17:91:c5:4b:bd:07:6b:
        1f:a9:62:6d:11:fc:94:4b:64:3f:66:f8:dd:0c:47:2c:45:1f:
        e8:b2:a3:bf:6c:5a:17:51:65:d2:9c:e6:6c:2c:61:9f:24:70:
        81:03:6d:02:66:6a:9a:08:20:46:94:f3:54:74:a4:90:47:e7:
        8e:19:3f:51

923442282 | 2024-04-30T08:43:04.402469

3306 / tcp

MySQL:
  Error Message: Host '224.171.82.149' is not allowed to connect to this MySQL server
  Error Code: 1130

-2037300721 | 2024-05-01T05:04:00.232969

8083 / tcp

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0
Date: Wed, 01 May 2024 05:04:00 GMT
Content-Type: text/html
Content-Length: 153
Connection: keep-alive

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx/1.18.0</center>
</body>
</html>

176.58.48.48

Last Seen: 2024-05-01

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1145542449 | 2024-04-30T22:49:50.764101
22 / tcp

OpenSSH7.4p1 Debian 10+deb9u7

-1323779601 | 2024-04-28T12:16:12.766080
80 / tcp

nginx1.18.0

-1323779601 | 2024-04-29T00:40:24.658596
443 / tcp

nginx1.18.0

923442282 | 2024-04-30T08:43:04.402469
3306 / tcp

MySQL

-2037300721 | 2024-05-01T05:04:00.232969
8083 / tcp

nginx1.18.0

Products

Pricing

Contact Us

176.58.48.48

Last Seen: 2024-05-01

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1145542449 | 2024-04-30T22:49:50.764101 22 / tcp

OpenSSH7.4p1 Debian 10+deb9u7

-1323779601 | 2024-04-28T12:16:12.766080 80 / tcp

nginx1.18.0

-1323779601 | 2024-04-29T00:40:24.658596 443 / tcp

nginx1.18.0

923442282 | 2024-04-30T08:43:04.402469 3306 / tcp

MySQL

-2037300721 | 2024-05-01T05:04:00.232969 8083 / tcp

nginx1.18.0

Products

Pricing

Contact Us

1145542449 | 2024-04-30T22:49:50.764101
22 / tcp

-1323779601 | 2024-04-28T12:16:12.766080
80 / tcp

-1323779601 | 2024-04-29T00:40:24.658596
443 / tcp

923442282 | 2024-04-30T08:43:04.402469
3306 / tcp

-2037300721 | 2024-05-01T05:04:00.232969
8083 / tcp