185.4.67.5

Regular View Raw Data
Last Seen: 2024-05-05

GeneralInformation

Country Russian Federation
City Moscow
Organization IROKO Networks Corporation
ISP RECONN LLC
ASN AS12722

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2019-20372 4.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts

-1812490505 | 2024-04-28T23:53:14.122957
  
80 / tcp
-1353407873 | 2024-05-01T20:38:22.714048
  
444 / tcp
1329350748 | 2024-05-05T10:55:30.740883
  
500 / udp
-1467936878 | 2024-04-29T13:40:38.308404
  
1701 / udp
-2018641221 | 2024-05-03T10:42:39.511245
  
1723 / tcp



Contact Us

Shodan ® - All rights reserved