GeneralInformation

Hostnames	e-dz.ru
Domains	e-dz.ru
Country	Russian Federation
City	Moscow
Organization	ITH Ltd.
ISP	3DATA LLC
ASN	AS62010

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

21 80 443

-484183109 | 2024-04-24T05:45:28.403292

21 / tcp

220 ProFTPD Server (Debian) [::ffff:192.168.101.51]
530 Некорректные данные аутентификации.
214-Следующие команды были распознаны (* => не реализовано):
214-CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
214-EPRT    EPSV    ALLO*   RNFR    RNTO    DELE    MDTM    RMD     
214-XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
214-NOOP    FEAT    OPTS    HOST    CLNT    AUTH    CCC*    CONF*   
214-ENC*    MIC*    PBSZ    PROT    TYPE    STRU    MODE    RETR    
214-STOR    STOU    APPE    REST    ABOR    USER    PASS    ACCT*   
214-REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Прямой комментарий для root@web1.rv
211-Features:
211-AUTH TLS
211-CCC
211-CLNT
211-EPRT
211-EPSV
211-HOST
211-LANG ru-RU.UTF-8*;ru-RU
211-MDTM
211-MFF modify;UNIX.group;UNIX.mode;
211-MFMT
211-MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
211-PBSZ
211-PROT
211-REST STREAM
211-SITE COPY
211-SITE MKDIR
211-SITE RMDIR
211-SITE SYMLINK
211-SITE UTIME
211-SIZE
211-SSCN
211-TVFS
211-UTF8
211 Конец

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9c:4f:38:b9:dc:73:87:a9:2d:e9:53:f6:6f:b2:bf:c3:15:b0:b1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=web1.rv/emailAddress=root@web1.rv
        Validity
            Not Before: Jan  5 21:52:40 2022 GMT
            Not After : Jan  3 21:52:40 2032 GMT
        Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=web1.rv/emailAddress=root@web1.rv
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:9d:8a:04:22:61:1f:06:10:f3:bd:b0:e2:
                    65:70:32:e1:e6:cd:ee:16:fb:94:60:91:a0:6d:fc:
                    e1:4e:35:b3:f6:97:ff:4e:fa:7e:70:9f:81:13:73:
                    32:41:ee:69:0f:1d:d1:e0:04:4f:98:b7:63:64:db:
                    d4:72:79:8c:23:30:20:17:14:ce:72:2d:d3:48:1a:
                    49:ba:d6:bc:50:1f:2d:4f:af:fd:8c:b1:02:33:65:
                    70:f5:a3:3a:2f:3f:82:41:18:69:ea:26:b9:d6:8b:
                    45:44:9a:a2:07:e9:46:0e:30:d2:72:8d:a2:da:8d:
                    b2:9c:04:66:e3:13:8c:5a:41:5b:16:9b:c6:42:30:
                    30:b9:5c:71:fb:d6:f3:7c:7c:74:47:35:5a:81:91:
                    59:e7:d6:5a:a4:40:67:ef:86:62:7e:3b:61:86:bb:
                    39:33:5e:e9:c3:2f:84:9c:25:4d:21:0a:89:19:18:
                    c7:3d:55:1f:75:ea:c5:cc:8f:e5:c1:a6:5f:0f:9f:
                    ef:0f:69:0b:cb:1d:0b:64:ae:5c:4b:26:1f:c2:af:
                    e8:1d:04:cb:0b:68:f7:3d:fd:ca:9d:fd:09:c1:e4:
                    cc:c5:74:a7:9d:e5:d9:de:97:55:a7:9f:ff:57:a7:
                    9d:58:87:dc:a4:aa:94:05:11:51:73:69:ef:1b:fd:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DA:80:10:D0:45:66:63:0F:2B:E8:0C:60:F2:AB:93:76:17:EA:FC:91
            X509v3 Authority Key Identifier: 
                DA:80:10:D0:45:66:63:0F:2B:E8:0C:60:F2:AB:93:76:17:EA:FC:91
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        20:1e:57:77:cc:b5:82:b6:1b:de:ef:f2:a5:7e:c1:1b:39:0d:
        43:0d:4f:1c:b0:66:5f:be:bb:6a:4b:17:a3:36:76:ca:38:34:
        b5:8d:6f:5b:34:a0:99:84:02:80:cd:8b:e9:34:b9:ad:c1:3a:
        ff:d4:a2:f7:e3:36:2f:3f:d0:ac:92:bb:0d:d8:8e:8f:05:6e:
        76:0e:2e:79:f1:e3:57:26:f4:7a:58:5d:bd:7c:07:b1:0f:1f:
        ff:73:16:42:d3:21:b6:0e:8f:26:bb:7e:14:44:b4:4e:2b:27:
        dc:a8:03:12:dc:0f:26:28:fa:78:1b:85:46:94:1b:5b:30:a3:
        3f:22:b6:61:b4:62:dc:2a:10:bc:51:07:d5:18:d1:4f:09:b8:
        2e:ca:19:3c:e2:8c:74:42:80:26:dd:ef:cc:a6:78:6d:8d:f5:
        61:30:8d:8b:da:bd:eb:2d:94:3f:8e:0d:cf:78:56:f3:45:80:
        be:96:11:3a:9c:a9:6a:42:fc:0f:2b:8e:e7:77:71:07:7a:3b:
        bd:77:2a:99:95:a4:33:5b:c6:a3:aa:c5:36:90:58:79:2c:94:
        04:d0:30:e4:86:d9:5a:ef:a8:be:cc:99:48:91:af:3a:dd:c4:
        ef:3e:95:ff:41:44:63:4a:cf:cc:89:28:3e:de:46:62:8c:29:
        06:c4:27:08

589765266 | 2024-04-21T08:49:03.858314

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 21 Apr 2024 08:49:03 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://195.128.158.167:443/

480415441 | 2024-04-23T10:22:45.083825

443 / tcp

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 23 Apr 2024 10:22:44 GMT
Content-Type: text/html
Content-Length: 8263
Connection: keep-alive
ETag: "61d612ac-2047"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d2:77:11:4a:06:bd:66:83:aa:40:77:00:d8:94:62
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1
        Validity
            Not Before: Feb 12 00:00:00 2021 GMT
            Not After : Feb 27 23:59:59 2022 GMT
        Subject: CN=*.e-dz.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ec:58:eb:a8:1c:c3:28:92:45:4b:15:89:fe:01:
                    c9:4b:17:d3:8f:8e:da:69:98:04:55:a8:df:6c:12:
                    73:fc:ea:dc:81:a0:27:98:b5:0f:33:2a:4b:19:78:
                    d7:f0:e4:e6:ea:5b:12:a7:83:e7:4d:b3:89:69:d4:
                    ff:29:2d:47:61:49:76:52:69:7f:4c:0f:b7:ba:5d:
                    2c:36:ad:f3:01:05:fa:c7:86:58:37:d3:58:b4:90:
                    ab:a3:6e:ee:b7:93:de:6b:30:09:c8:d8:4a:23:22:
                    fd:d0:e9:32:ed:02:f9:00:8c:f0:70:49:f8:c0:2c:
                    ac:03:08:3b:ce:fb:83:2d:b5:0d:bd:ea:9b:00:14:
                    e6:7d:c1:a8:60:d8:0e:b2:97:d9:65:ba:dd:a3:4b:
                    0e:37:db:35:c9:2a:a2:5b:14:6f:7f:e2:9b:08:2a:
                    1e:61:94:27:7d:e9:f1:bc:1f:1f:a0:58:00:08:60:
                    88:64:fb:12:81:0f:8d:72:7c:2e:35:e3:27:13:b4:
                    91:ce:42:e8:24:2a:6f:49:c0:c3:8b:91:2b:a5:55:
                    e0:28:da:3e:43:ab:1f:a2:da:89:5e:9d:d3:cd:85:
                    66:3d:7e:20:53:0e:2f:c1:66:75:50:b4:3f:d7:2c:
                    c7:73:09:5a:c7:c7:7e:3a:b8:e5:da:d5:31:8d:7a:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                A4:8D:E5:BE:7C:79:E4:70:23:6D:2E:29:34:AD:23:58:DC:F5:31:7F
            X509v3 Subject Key Identifier: 
                7F:89:AD:C1:7E:C6:EB:9E:62:AE:16:7E:F0:18:DE:C9:36:92:27:AC
            X509v3 Subject Alternative Name: 
                DNS:*.e-dz.ru, DNS:e-dz.ru
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                  CPS: http://www.digicert.com/CPS
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crt
            X509v3 Basic Constraints: 
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 46:A5:55:EB:75:FA:91:20:30:B5:A2:89:69:F4:F3:7D:
                                11:2C:41:74:BE:FD:49:B8:85:AB:F2:FC:70:FE:6D:47
                    Timestamp : Feb 12 15:59:42.026 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:ED:A4:D0:EA:2E:F3:C1:D0:DC:E6:43:
                                5D:4D:B2:56:C5:64:51:F1:41:2C:59:8F:ED:0D:89:2A:
                                79:BF:91:51:B6:02:20:10:F1:A2:A9:2B:5E:41:8B:99:
                                00:52:5F:D6:5D:05:A4:22:E4:88:59:6F:24:A9:8E:50:
                                36:06:36:00:A0:A9:07
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
                                4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
                    Timestamp : Feb 12 15:59:41.928 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:95:F4:2C:52:40:FB:45:B5:45:48:1A:
                                D4:12:D3:18:14:A0:B6:9E:5F:38:C7:DC:24:0F:B0:7A:
                                D9:7F:2B:78:E0:02:20:67:10:AA:AB:B6:86:12:D8:99:
                                96:68:65:06:07:42:B1:4D:A7:60:E3:41:25:7F:12:44:
                                3A:43:3B:F5:F7:42:CF
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4a:fa:f6:ef:22:e1:80:68:dc:aa:9c:0c:42:4c:b6:65:3b:5a:
        e9:03:4c:ef:31:cd:eb:23:75:75:a7:55:d9:62:d6:4b:d7:e2:
        ce:33:cb:62:80:e2:07:42:94:e4:80:cf:6d:7d:bc:32:91:cf:
        d5:28:d7:ef:ef:39:92:e8:d0:46:3b:26:44:cb:12:b9:5e:9b:
        90:e1:e9:22:a3:74:fd:dc:c6:a1:ce:3e:26:7c:20:e9:f1:67:
        49:dd:43:df:a9:2b:d3:61:1e:f2:7c:cf:5b:d7:38:90:9a:dd:
        88:6c:b6:a9:55:ec:b1:18:73:7e:ab:25:ae:58:a2:c2:8b:29:
        38:c3:51:6e:c0:1a:2c:ad:4c:95:51:f9:5b:5f:f6:1e:da:d7:
        8a:41:16:5e:16:79:d6:d1:f3:9a:78:96:4f:05:cc:57:ca:ba:
        6a:42:fb:ba:40:f0:a0:29:c6:28:9d:b0:9f:e8:9e:ae:9b:21:
        92:8e:bd:54:96:7f:7e:3b:8b:37:62:a2:d0:d0:7a:51:40:49:
        8e:3a:6f:92:3f:98:cd:5f:a1:26:87:a4:fd:db:ab:ff:89:d5:
        af:e9:5d:b3:12:43:c9:b6:de:5b:5b:d5:23:8f:6a:ae:2e:0d:
        0f:51:b1:2e:98:5a:56:b6:9b:ea:8a:f8:ad:2d:46:e4:aa:82:
        3f:d2:b8:bb

195.128.158.167

Last Seen: 2024-04-24

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-484183109 | 2024-04-24T05:45:28.403292
21 / tcp

589765266 | 2024-04-21T08:49:03.858314
80 / tcp

nginx1.18.0

480415441 | 2024-04-23T10:22:45.083825
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

195.128.158.167

Last Seen: 2024-04-24

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-484183109 | 2024-04-24T05:45:28.403292 21 / tcp

589765266 | 2024-04-21T08:49:03.858314 80 / tcp

nginx1.18.0

480415441 | 2024-04-23T10:22:45.083825 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

-484183109 | 2024-04-24T05:45:28.403292
21 / tcp

589765266 | 2024-04-21T08:49:03.858314
80 / tcp

480415441 | 2024-04-23T10:22:45.083825
443 / tcp