GeneralInformation

Hostnames	mail-91-164.em01.net cl.fundison.com
Domains	em01.net fundison.com
Country	United States
City	Newark
Organization	Emercury LLC
ISP	Telx
ASN	AS36086

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2019-20372	4.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts

80 443 8008 8015

-222157433 | 2024-04-18T22:44:08.101551

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Thu, 18 Apr 2024 22:44:08 GMT
Content-Type: text/html
Content-Length: 14
Last-Modified: Sat, 27 Apr 2019 18:00:19 GMT
Connection: keep-alive
ETag: "5cc498b3-e"
Accept-Ranges: bytes

-222157433 | 2024-04-27T12:11:33.097874

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sat, 27 Apr 2024 12:11:33 GMT
Content-Type: text/html
Content-Length: 14
Last-Modified: Sat, 27 Apr 2019 18:00:19 GMT
Connection: keep-alive
ETag: "5cc498b3-e"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d8:21:38:49:94:48:44:89:81:71:6b:fb:6b:ef:5c:8b:8a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  2 15:58:03 2024 GMT
            Not After : Jul  1 15:58:02 2024 GMT
        Subject: CN=cl.fundison.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:c6:58:22:37:96:75:1a:0f:45:f7:c4:0a:bb:fd:
                    87:80:c2:3c:94:f2:c3:a8:5b:69:be:1f:64:34:7f:
                    18:b4:a9:e1:ad:d9:09:30:4d:ef:a8:24:a8:89:8f:
                    cf:f9:47:d9:e5:06:8c:62:b5:7f:93:d0:ed:70:c6:
                    67:ab:5f:36:e1:d8:df:4a:0e:b8:89:57:48:47:61:
                    04:1b:5b:f8:99:2f:67:4c:5c:9f:3c:2b:01:3f:c5:
                    82:8b:8b:05:f0:ba:2e:0e:04:69:5c:c0:33:c8:57:
                    99:9a:75:45:6f:a7:ac:3d:84:e8:e0:89:df:65:dc:
                    4c:51:7a:f3:e5:23:f2:98:7f:5e:27:77:4b:54:b8:
                    ba:80:55:8b:61:bb:18:8c:02:f3:6c:26:b7:8a:ac:
                    5e:c5:ac:90:0c:54:92:ff:04:3c:35:d5:ec:7d:39:
                    34:59:83:44:1d:7d:7d:36:ec:59:fa:bb:8c:a8:32:
                    b1:62:15:10:91:d1:14:f5:1a:7d:08:05:bb:12:09:
                    61:0a:16:e6:50:b2:72:1a:3b:f7:c7:99:7e:df:a6:
                    13:84:ee:75:bb:f7:a6:87:ce:68:54:7e:f2:a6:91:
                    df:26:d6:8f:c9:f6:3e:30:20:ac:fe:57:da:dc:5f:
                    72:b0:91:66:1a:5b:df:17:76:b6:ee:82:d6:e2:fc:
                    f0:66:53:7d:bb:6f:42:11:a2:72:78:18:66:42:b8:
                    73:f9:d7:bd:73:1f:f1:53:83:d6:e7:1d:aa:ef:c4:
                    6b:54:41:a7:f7:0c:65:f3:f2:74:cb:c0:1a:ea:36:
                    94:dc:39:35:88:3f:8b:90:44:70:8a:6b:aa:9c:25:
                    01:40:5c:27:71:87:e7:bd:f2:4f:ac:23:d7:cf:f0:
                    26:04:10:cd:d7:ca:92:68:57:1d:ea:38:48:d7:c8:
                    89:7b:24:ad:82:9a:63:cd:44:52:51:84:72:58:88:
                    18:d8:1f:db:3f:5a:a2:ca:51:e5:34:d9:e1:cf:6a:
                    46:99:d9:8d:52:71:ef:cf:06:06:71:17:62:a4:74:
                    30:0b:2c:45:3e:49:7a:fe:39:ef:03:3e:27:f5:d1:
                    3f:b7:05:cb:1e:95:b5:24:1b:bb:5b:1f:32:46:75:
                    6b:58:95:a5:b4:d6:65:cd:4f:7d:2c:bb:76:87:80:
                    cf:f7:56:27:6b:72:a6:87:d4:bb:50:16:d4:c9:07:
                    0b:90:96:f1:cc:4a:5b:4d:33:ba:80:5f:b9:35:a0:
                    14:8d:c4:4b:34:44:af:14:6d:0c:d8:ed:c1:f3:fb:
                    e9:f7:73:9c:5a:bd:79:9f:1f:08:4e:8e:18:b2:d3:
                    1e:4f:02:28:50:e7:15:a5:94:1b:b3:4d:38:46:07:
                    e3:2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                FF:AA:90:A8:16:37:5A:73:CE:12:E9:A6:14:7D:F2:AB:C6:57:E2:FF
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:cl.fundison.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Apr  2 16:58:04.330 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:1A:5A:08:9F:74:49:10:13:94:FC:00:ED:
                                39:CC:D6:D3:3B:41:11:7F:2A:3F:AD:C6:D3:74:F3:DB:
                                D9:D7:74:68:02:20:7F:22:30:1E:BE:E4:60:01:7B:2B:
                                73:7C:3B:DF:4E:94:36:69:C3:0A:48:D1:48:E6:43:B2:
                                73:57:7E:B2:BD:24
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : Apr  2 16:58:04.456 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:57:6A:9E:75:56:38:9F:18:45:B7:61:3B:
                                E8:92:A8:36:C8:AA:D8:D4:99:7F:11:82:7C:6F:CC:9A:
                                DC:58:4E:9B:02:21:00:95:A3:CD:BE:54:0C:7E:39:26:
                                F3:63:25:D4:91:57:7A:51:B6:EE:2E:C0:1F:CC:EE:A4:
                                61:E0:5A:92:E5:C7:CE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        98:fb:63:5c:5b:30:50:8f:c9:91:0f:2d:32:02:13:cd:a5:84:
        6f:1e:09:cf:d7:9e:fb:69:f1:27:43:e0:21:70:fc:60:9e:83:
        06:1e:a9:bb:c8:bb:21:97:37:4b:e5:d6:fd:df:09:9d:ca:7d:
        eb:6d:75:71:51:3b:4f:f1:3a:e8:dc:04:a0:93:6f:a8:43:d3:
        46:9e:2c:52:bf:30:6b:4e:0b:3c:fa:68:63:f2:94:fd:bc:d1:
        dd:0a:f9:b1:06:08:f3:66:d2:03:43:80:c2:a3:05:af:cf:72:
        e0:58:f8:bc:ad:28:dd:72:75:d2:6e:22:70:be:a2:cc:cc:47:
        f9:00:e8:55:73:4d:f8:40:2e:5e:b6:2b:de:f6:3e:85:8c:38:
        39:94:be:a0:51:ca:d4:f5:8b:82:5d:e8:60:85:d2:9b:4b:41:
        05:78:67:ba:54:79:05:93:0a:f8:7f:0f:c1:58:f3:b5:d0:e1:
        0b:b7:ce:12:91:51:af:b6:30:b0:cc:dc:93:29:ad:a2:29:b1:
        bb:d8:8e:4f:be:d3:aa:3e:db:96:55:10:d3:d5:ed:cb:79:94:
        da:d5:9c:db:13:90:cd:7c:2d:ce:1f:54:85:21:b9:d1:0c:66:
        23:b9:90:a4:74:47:0e:58:71:1e:cc:7f:c5:b9:08:be:74:12:
        bc:fb:fd:b1

1863682189 | 2024-04-11T03:34:18.491304

8015 / tcp

HTTP/1.1 200 OK
Content-Length: 4507
Connection: close
Cache-Control: no-cache
Content-Type: text/html; charset=utf-8
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: frame-ancestors 'self'

206.132.191.164

Last Seen: 2024-04-28

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-222157433 | 2024-04-18T22:44:08.101551
80 / tcp

nginx1.16.1

-222157433 | 2024-04-27T12:11:33.097874
443 / tcp

nginx1.16.1

1863682189 | 2024-04-11T03:34:18.491304
8015 / tcp

Products

Pricing

Contact Us

206.132.191.164

Last Seen: 2024-04-28

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-222157433 | 2024-04-18T22:44:08.101551 80 / tcp

nginx1.16.1

-222157433 | 2024-04-27T12:11:33.097874 443 / tcp

nginx1.16.1

1863682189 | 2024-04-11T03:34:18.491304 8015 / tcp

Products

Pricing

Contact Us

-222157433 | 2024-04-18T22:44:08.101551
80 / tcp

-222157433 | 2024-04-27T12:11:33.097874
443 / tcp

1863682189 | 2024-04-11T03:34:18.491304
8015 / tcp