GeneralInformation

Country	United States
City	Ashburn
Organization	MARKETO, Inc.
ISP	Adobe Inc.
ASN	AS15224

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2021-3618

5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

-617618899 | 2024-04-28T21:48:15.593447

80 / tcp

HTTP/1.1 403 Forbidden
Server: nginx/1.20.1
Date: Sun, 28 Apr 2024 21:48:15 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

-617618899 | 2024-04-29T18:47:00.611369

443 / tcp

HTTP/1.1 403 Forbidden
Server: nginx/1.20.1
Date: Mon, 29 Apr 2024 18:47:00 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:72:91:39:c9:36:36:58:24:a3:31:5a:69:22:8d:19
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Jul 18 00:00:00 2023 GMT
            Not After : Aug 17 23:59:59 2024 GMT
        Subject: C=US, ST=California, L=San Jose, O=Adobe Inc., CN=*.mktoutil.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:ab:3b:71:c7:2a:51:a1:c7:ac:8e:3a:e8:
                    5b:ba:46:65:94:31:ad:1a:b2:6b:dd:1b:58:fc:15:
                    0a:4f:a8:31:cc:01:9b:86:c1:dc:05:4e:80:b4:e6:
                    2a:b3:99:c2:f5:93:a5:46:dd:b6:13:80:2d:65:98:
                    f6:7b:67:f4:31:76:00:f4:19:dc:cd:bb:89:c5:c5:
                    f4:69:d3:6c:b4:e1:70:a7:9d:1f:e9:01:f7:c1:18:
                    9c:91:b2:5f:b7:0d:07:aa:39:23:dc:cf:3c:75:d6:
                    e6:31:a0:b4:d4:33:a4:4d:03:ba:fd:87:e4:9a:05:
                    9a:63:10:ac:e7:ef:62:9d:aa:3f:31:24:16:48:47:
                    1f:0b:14:3e:61:19:19:67:7f:d4:5b:1e:1d:c2:8f:
                    19:80:15:a4:44:39:57:ef:2b:e6:bc:de:cc:ae:8b:
                    ca:ab:58:d5:dc:cf:43:e6:89:cd:4e:ad:0f:9d:f6:
                    83:3d:b1:24:d3:6c:de:29:86:fb:8a:9b:b9:0c:66:
                    08:b3:31:1c:fb:c9:93:68:02:21:85:f7:ce:89:08:
                    1a:b5:78:76:64:3a:43:a4:20:9a:ca:30:a8:02:94:
                    fd:70:61:fe:3e:8e:8f:82:22:1e:d9:dc:08:85:86:
                    9c:6e:07:4f:b0:ed:72:6d:d0:1d:46:6c:56:08:57:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                C3:3E:DF:52:BC:05:38:79:0F:49:97:47:2B:C1:90:CD:60:20:57:D5
            X509v3 Subject Alternative Name: 
                DNS:*.mktoutil.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: 
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Jul 18 17:00:01.470 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:86:E1:38:57:83:52:FB:DE:E8:4B:1E:
                                BE:FF:88:A3:F8:89:77:2B:84:AB:D3:AF:A2:F9:32:3D:
                                27:DA:97:4A:CA:02:20:35:7A:14:7B:76:AE:BC:B7:36:
                                A2:D7:BA:EC:08:92:37:12:65:C3:15:52:74:AB:CE:BB:
                                24:F5:F5:DF:74:B0:6B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jul 18 17:00:01.413 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:58:1F:BD:F9:B4:2D:45:AC:1A:14:3A:AC:
                                46:D1:3D:57:43:AE:98:15:8D:B2:4D:50:77:56:66:1D:
                                ED:2B:28:B2:02:20:60:B2:7D:B6:6A:13:C8:BC:56:56:
                                DD:CD:FD:E7:06:8F:2B:CD:97:94:E3:E9:37:F5:F1:75:
                                26:94:4B:B1:59:A2
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Jul 18 17:00:01.369 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C9:E1:32:FA:D9:4F:EE:89:D4:58:04:
                                73:E6:7B:85:18:8D:C7:CD:99:18:F0:95:C7:F1:B1:DE:
                                85:61:FB:36:C3:02:20:02:01:7C:B7:AF:D1:88:C1:1D:
                                2C:B6:98:10:74:81:20:5B:55:0B:AF:33:D0:EC:35:8B:
                                2E:72:FB:FA:9B:A7:16
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        57:99:69:4c:71:17:bf:20:f2:21:8c:3a:65:d0:26:b4:15:bf:
        1a:84:30:90:35:af:e6:4c:2b:16:a6:9a:e1:ad:81:08:22:7e:
        9e:37:5c:50:21:de:44:ad:84:e9:04:39:52:b6:43:75:7f:7e:
        c6:0f:6c:35:29:f1:cd:96:9c:f6:e9:8c:9e:49:7f:c1:9a:91:
        76:58:bd:bf:74:98:1f:22:74:f7:cb:c1:11:c8:08:e9:60:c3:
        c9:eb:30:a5:a5:0d:a6:44:1d:70:f1:b3:12:9f:3d:77:aa:51:
        9d:ad:4a:44:10:18:67:fc:6f:bc:bf:d5:b4:66:26:1b:94:2b:
        dc:e4:1b:e5:9a:2a:4e:df:a6:e9:7e:aa:f9:8b:39:69:9c:07:
        6d:09:d5:dc:1c:11:15:60:03:a3:37:2a:8a:e1:5b:08:63:c4:
        d8:55:ec:4e:fd:af:ee:8e:28:6d:b9:6e:aa:a8:d2:91:a9:d5:
        73:49:4e:a0:c9:cd:b4:2f:b9:f2:77:58:47:f1:6d:c7:3b:f7:
        f9:41:70:7a:7e:ab:fc:b4:d9:1c:07:4e:78:cf:58:e1:57:b0:
        89:78:1e:40:37:be:d0:fc:70:23:58:66:91:37:89:5f:26:68:
        42:b9:8c:e8:a9:76:c8:3a:d2:9d:06:1c:3b:3e:09:b4:15:52:
        0b:1a:e0:7d

192.28.155.221

Last Seen: 2024-04-29

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-617618899 | 2024-04-28T21:48:15.593447
80 / tcp

nginx1.20.1

-617618899 | 2024-04-29T18:47:00.611369
443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

192.28.155.221

Last Seen: 2024-04-29

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-617618899 | 2024-04-28T21:48:15.593447 80 / tcp

nginx1.20.1

-617618899 | 2024-04-29T18:47:00.611369 443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

-617618899 | 2024-04-28T21:48:15.593447
80 / tcp

-617618899 | 2024-04-29T18:47:00.611369
443 / tcp