GeneralInformation

Hostnames	n8250h38.sprintdatacenter.net new.ustat.info www.new.ustat.info
Domains	sprintdatacenter.net ustat.info
Country	Poland
City	Warsaw
Organization	Sprint Data Center Customer
ISP	"SPRINT" S.A.
ASN	AS197226

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

295902172 | 2024-04-26T16:35:15.264457

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 26 Apr 2024 16:35:06 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
Expires: Thu, 27 Apr 2023 16:35:06 GMT

295902172 | 2024-04-26T00:01:27.786493

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 26 Apr 2024 00:01:27 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
Expires: Thu, 27 Apr 2023 00:01:27 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9d:aa:51:09:fd:cb:1b:d8:13:48:ec:7c:e0:91:dc
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA
        Validity
            Not Before: Mar 18 00:00:00 2023 GMT
            Not After : Jun 16 23:59:59 2023 GMT
        Subject: CN=new.ustat.info
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:10:d6:e0:cb:06:cd:4a:3b:f8:a6:aa:06:
                    43:2f:24:b6:a5:2e:d6:18:89:4a:b0:32:ea:58:1c:
                    8c:39:b4:10:e7:0e:4a:ac:9b:e8:58:79:4a:39:e9:
                    5d:f5:96:db:82:c8:4c:b6:05:e1:e0:ad:1b:9a:61:
                    e9:fc:7e:cf:fe:d2:56:7a:e8:9d:d2:a6:47:85:ce:
                    ad:d9:c7:8f:d7:f3:a7:89:c1:1b:0a:28:84:61:cd:
                    0d:e8:b5:a0:a1:80:e8:d3:f0:80:87:83:14:92:5e:
                    ce:a1:1f:9e:2b:34:59:cf:3e:f7:c2:35:30:9a:fe:
                    89:10:7a:bd:6e:0d:aa:49:2d:de:7d:00:1b:f7:db:
                    ca:54:94:f6:26:15:6e:7a:87:17:79:0f:51:fd:49:
                    bb:47:88:42:c2:ab:07:d9:e0:99:5e:0e:26:a1:2f:
                    e8:12:8e:52:8c:2b:6c:1c:d7:d7:67:dd:3a:59:93:
                    d8:ee:1f:4d:b5:fb:fa:09:97:28:00:37:a4:e6:37:
                    75:cb:87:26:e0:59:3b:70:78:97:bf:e0:8a:b8:62:
                    88:c6:b4:e7:53:4f:79:5f:3a:d0:92:32:aa:47:5a:
                    77:85:b0:56:20:8c:a3:51:ea:53:ac:78:ee:48:0f:
                    d7:88:ba:91:23:97:e7:d8:bb:a1:31:dc:f9:ac:5c:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C8:D9:78:68:A2:D9:19:68:D5:3D:72:DE:5F:0A:3E:DC:B5:86:86:A6
            X509v3 Subject Key Identifier: 
                76:43:35:C4:8F:81:DF:D1:8D:D9:C7:83:DD:87:41:F0:8B:11:70:44
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.78
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
                OCSP - URI:http://zerossl.ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : AD:F7:BE:FA:7C:FF:10:C8:8B:9D:3D:9C:1E:3E:18:6A:
                                B4:67:29:5D:CF:B1:0C:24:CA:85:86:34:EB:DC:82:8A
                    Timestamp : Mar 18 23:53:12.542 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9D:21:39:E1:7C:A8:5C:CB:2E:3E:E2:
                                B6:0E:74:6E:92:60:02:D3:9B:E0:7C:AB:F9:29:36:2A:
                                A6:3C:A6:82:E5:02:21:00:C2:C0:04:E4:1A:55:45:5A:
                                21:6B:A9:8A:2D:0A:08:C0:6F:71:D4:2D:9C:C4:FA:C1:
                                AA:39:A8:82:4E:78:48:73
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84:
                                16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52
                    Timestamp : Mar 18 23:53:12.623 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5E:ED:4D:C5:22:43:33:22:00:D2:6A:1E:
                                79:D6:A8:BF:6E:D1:04:2C:90:6E:9D:B1:92:5A:2C:E9:
                                D9:6E:A3:21:02:20:3B:16:B6:CA:BA:07:EF:39:CA:5E:
                                27:38:82:99:A8:2C:9A:39:F7:90:B6:48:A9:41:E6:3F:
                                4A:21:FA:C6:99:C0
            X509v3 Subject Alternative Name: 
                DNS:new.ustat.info, DNS:www.new.ustat.info
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        3d:20:67:da:27:b0:dc:8c:ef:12:d2:3f:8e:cb:23:c6:d3:64:
        82:4b:0d:28:ac:fc:d2:8b:30:72:26:52:0e:9d:c3:1a:96:98:
        ac:64:bc:e4:a3:5c:db:5e:87:d3:86:90:ef:d4:f9:56:81:c8:
        27:03:28:02:fa:c9:66:44:55:a6:1a:90:ac:5a:1a:72:a0:20:
        da:2f:ad:a5:b3:5c:13:34:7c:dd:2c:57:38:dd:a1:98:3f:c2:
        07:cd:e0:64:62:2d:c6:5c:e2:1e:e4:06:b0:1b:62:f4:68:2d:
        36:6f:c8:5b:6b:f0:86:07:8a:13:e6:0f:a6:36:c1:b8:9f:42:
        9b:bd:15:93:90:6a:e1:25:14:b4:38:df:4e:c2:15:50:6c:58:
        a8:9f:7c:93:47:09:4c:be:30:41:b3:b1:2d:27:ca:9a:bb:0d:
        11:4d:62:17:07:3f:eb:cb:c1:e4:06:1a:5f:36:1f:d7:34:72:
        45:a8:09:c8:3a:54:52:59:fd:2d:98:a1:4e:6b:e8:62:2c:66:
        c6:90:2e:60:fe:ff:bf:1a:a0:af:69:78:c7:2e:31:e6:72:73:
        40:c5:aa:f0:26:34:bc:84:c1:b3:df:ba:e0:9c:86:29:ec:92:
        a6:b2:77:65:64:ba:1f:1d:84:6c:b6:d3:26:44:14:4f:0b:b7:
        55:d0:26:1c:d7:d2:6c:bf:0a:0e:2c:2e:d0:7c:20:ce:7e:80:
        bb:16:d3:30:17:ce:c4:aa:35:59:05:a5:c2:2e:8c:ae:bd:0b:
        56:27:36:15:70:bc:87:87:63:58:6d:39:0c:ff:87:4e:e7:b0:
        83:52:a0:26:34:11:9e:cd:00:50:72:2e:37:fe:62:1c:38:5a:
        62:69:6b:69:0c:46:19:4b:07:89:3c:04:55:af:bd:58:31:7e:
        fa:a0:11:11:68:7e:74:87:12:89:ad:c3:1c:3a:aa:a3:ff:46:
        f3:f8:76:5c:f1:24:fc:e8:33:1b:d8:8f:ab:ae:80:9a:34:0e:
        5a:ba:00:9f:aa:da:1d:38:82:cc:4c:b8:f7:25:f1:aa:2d:05:
        30:57:50:31:23:d0:f5:cb:e6:52:58:f6:0e:41:c2:aa:13:7e:
        ba:c5:29:d3:09:c6:34:a4:b6:af:de:a5:ea:7e:a6:0d:55:7c:
        be:51:6e:f7:97:72:8c:a8:1b:67:9b:25:93:13:a5:89:10:98:
        f6:f6:f2:6d:1e:26:9e:d6:b1:f4:9e:8d:94:c1:86:7b:06:05:
        ed:27:78:bf:9f:d0:4a:7b:ae:e7:c7:bc:f0:57:ec:c9:89:84:
        15:8c:75:4a:ba:c4:02:73:91:91:de:e4:c4:3d:79:0c:30:1e:
        36:13:5b:06:0a:76:c2:72

188.68.250.38

Last Seen: 2024-04-26

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

295902172 | 2024-04-26T16:35:15.264457
80 / tcp

nginx1.18.0

295902172 | 2024-04-26T00:01:27.786493
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

188.68.250.38

Last Seen: 2024-04-26

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

295902172 | 2024-04-26T16:35:15.264457 80 / tcp

nginx1.18.0

295902172 | 2024-04-26T00:01:27.786493 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

295902172 | 2024-04-26T16:35:15.264457
80 / tcp

295902172 | 2024-04-26T00:01:27.786493
443 / tcp