GeneralInformation

Hostnames	chatwoot.calendesk.com
Domains	calendesk.com
Cloud Provider	Azure
Cloud Region	westeurope
Cloud Service	AzureCloud
Country	Netherlands
City	Amsterdam
Organization	Microsoft Corporation
ISP	Microsoft Corporation
ASN	AS8075
Operating System	Ubuntu

WebTechnologies

Programming languages

Ruby

Web frameworks

Ruby on Rails

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443

-1285281896 | 2024-05-14T17:28:15.699948

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQC3zPd8EZW2k2539+HUPYGUTtUOwpC20sgZTZ8XLczerL8A
QSkRfv8AvarGVBNZUXJqjsibHULUCyCm2a2xrAtI4XmmmFN7zZDV+5YTVXEop1AwAKq/NEQmIyHF
0sH333nWcd8F6o4Nz9SAggxS23fngi9XEx1WXjqhSZxM26Fb5mrqxy1A3f7OuTM6wQYJ1jk4pSnS
vhe17CsN5TwoCLDuGV9V3EgRm4y/pi3klpP+DBQjNcWoWL8CGf6YP60NfZcLWzOV6mfopAZYYsoc
b/FtgF93uud7tdyod+D9DFjqFDWClv/nDC7oFC0KOrNIpOZvg1th5TKh2eWsClepmF18osq+jbVv
mmiMmG1yG6OOXy/ggBTMXxE2w5NPoUJrm5mxa+Pc/PVcSnOmGkfgfbS8ehS2zJ8GIvNQJLBMNvSo
6jtoNKQhDUfA/R5cCzOOy52bX6LIXdyjw0wuMdv9HSIJA9IaPYn2orRcu+nTC1TJ88YAJextJ7nh
Gi8QzcxR1B8=
Fingerprint: 66:74:df:33:38:a2:21:c9:a2:53:fc:ce:41:13:83:ee

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

1651973090 | 2024-05-15T17:06:00.274035

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 15 May 2024 17:05:59 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 16 May 2023 18:19:44 GMT
Connection: keep-alive
ETag: "6463c940-264"
Accept-Ranges: bytes

698969878 | 2024-05-16T01:03:33.451167

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 16 May 2024 01:03:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6494
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Link: </packs/js/application-bae9834b46539491e24f.js>; rel=preload; as=script; nopush,</packs/css/application-5dec3acf.css>; rel=preload; as=style; nopush
ETag: W/"a5bb4c5380b1b6b3f0f51cd9d4af8cc0"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _chatwoot_session=SZmsseiTDju1TkRXqk3%2BazB2i3xrTeKP4vFzAiLHd5x%2FycD4DoSURvdDieejp8jTxNPqG6Kvhg2EqOtBGE5C%2BV7U%2BLA9k1pZVuZ%2F4jrCI%2Bu3zt69xGyJEbxvReFv662%2Bawq7Ty4bu4%2BE%2B689j%2FI2Aa26HqsI1OXt2w0hdCAvIcHNsWBSvVLdWFBDAzLvvh00MvsgO3%2BVfAe8MLrClZ%2B5YD1egal%2FfH%2FtzM4D%2F1Se46vHUMwnjNghXDx5zL2ddcfGwiPyGdWhkPyrmZE43vXCsuYpgKc5KPraPw%3D%3D--BBhacf4OaISWQKPc--SOJQDVzNi0OoEqrMwaT6zA%3D%3D; path=/; HttpOnly; SameSite=Lax
X-Request-Id: 35dbd29a-62f8-4b2a-98ea-2bda99151e50
X-Runtime: 0.011433
Strict-Transport-Security: max-age=31536000; includeSubDomains

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bc:16:bf:68:48:9d:39:d1:47:e7:43:90:ab:7f:bf:bc:f5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: May 12 15:32:36 2024 GMT
            Not After : Aug 10 15:32:35 2024 GMT
        Subject: CN=chatwoot.calendesk.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:0e:98:15:25:c0:86:4e:ff:00:a6:84:c5:
                    c6:8b:7d:88:5b:a4:7d:8f:be:4d:ec:21:fe:c7:99:
                    06:d8:96:eb:24:32:a1:5d:2b:0a:34:18:e1:ec:03:
                    39:8b:6a:41:09:dc:a8:56:64:49:4e:c7:32:67:3e:
                    a4:d8:a6:6d:f3:f6:eb:b1:33:8f:3a:43:b1:42:77:
                    1c:15:55:48:db:4b:0a:fc:d2:41:99:cf:39:72:14:
                    c2:dd:d4:4c:35:90:80:d8:5a:89:7c:b1:c3:b3:c3:
                    cc:98:ae:f3:61:65:ae:1b:b1:67:eb:71:ea:79:98:
                    98:6b:20:04:20:b2:50:d9:31:44:44:ba:69:3b:39:
                    84:21:5f:d6:77:4d:9f:ed:0f:1f:fc:86:51:0d:88:
                    02:40:7f:1d:65:dd:0f:6f:82:e9:08:f7:3c:e9:b1:
                    9a:11:54:aa:22:43:ed:92:80:52:21:05:1c:2d:d9:
                    44:15:2e:5a:e0:fd:ce:b6:33:03:0a:41:a1:87:a2:
                    18:a4:4a:3d:04:4e:05:7e:1b:d8:c8:57:0d:a5:50:
                    01:a5:54:c1:94:88:3c:c0:d2:d6:a7:e4:aa:e8:1f:
                    da:f3:8e:15:9e:60:3b:3c:f8:3d:bf:2b:37:56:24:
                    ba:e8:63:23:48:9f:39:42:31:26:05:b8:61:c7:87:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                3E:92:8C:60:3C:D3:A8:88:54:32:A4:18:7E:6A:90:1F:D2:1E:19:65
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:chatwoot.calendesk.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : May 12 16:32:36.372 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F9:08:32:86:7A:7B:30:48:10:27:D4:
                                0B:91:96:68:CB:1A:33:DA:FD:FC:90:9E:3C:91:1A:ED:
                                B2:A6:26:BC:90:02:20:1C:46:38:D4:3A:DA:2D:DB:CC:
                                C8:8C:57:0C:C4:1D:D5:13:AF:84:43:8C:5F:A2:6B:66:
                                E0:45:FF:10:01:3A:55
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : May 12 16:32:36.436 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:EE:22:96:A8:34:1D:4A:29:9F:79:8C:
                                69:4D:4C:16:C5:FD:D4:F2:1F:8F:06:1C:FD:81:B5:A9:
                                60:FE:75:66:5E:02:20:2B:CA:BE:B2:3B:22:84:90:5F:
                                E3:C6:F3:89:4C:8A:72:C2:EA:D6:DF:07:29:44:96:69:
                                FC:7B:4A:DC:7B:71:86
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        ae:67:4e:6c:85:40:6e:3d:1a:53:d8:5d:06:35:a8:52:84:16:
        73:36:55:7a:0c:61:25:ca:2c:1f:21:35:47:be:c1:46:ab:de:
        1d:46:92:fb:94:e0:58:cd:27:74:d5:cb:41:d1:b8:96:c8:6e:
        41:d9:0d:46:f2:8d:d8:3d:f1:19:72:5d:ac:3e:a0:20:1f:68:
        51:b8:7a:36:9a:c8:a7:25:86:56:f3:21:90:03:5c:a8:b2:11:
        c9:18:c9:25:15:ac:d2:0a:a5:96:fe:6e:a0:15:7f:9c:c4:5b:
        fc:25:1e:36:29:d1:25:15:ce:fe:df:8e:78:07:17:cc:fc:49:
        84:c6:06:eb:84:6e:48:74:09:87:03:65:24:54:fc:65:15:29:
        d7:e4:9f:c9:1f:3e:48:bb:d3:16:74:16:65:df:7d:e3:16:1a:
        1b:e0:d5:bc:62:42:98:a3:88:e4:de:38:f3:17:65:31:d4:4d:
        00:f7:1e:53:51:56:d3:f1:b7:78:f0:12:64:01:5c:e8:13:af:
        fc:be:dd:40:1a:64:c9:36:fe:fa:23:1d:b6:3e:c9:bd:cd:cd:
        fd:19:d1:50:1a:8b:f9:be:62:05:ed:22:33:3c:dd:91:ec:cf:
        a5:f4:96:3e:c4:8c:4f:13:eb:30:e6:6a:fe:0c:ab:3b:a3:69:
        75:4f:5e:83

23.100.11.231

Last Seen: 2024-05-16

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1285281896 | 2024-05-14T17:28:15.699948
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-05-15T17:06:00.274035
80 / tcp

nginx1.18.0

698969878 | 2024-05-16T01:03:33.451167
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

23.100.11.231

Last Seen: 2024-05-16

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1285281896 | 2024-05-14T17:28:15.699948 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-05-15T17:06:00.274035 80 / tcp

nginx1.18.0

698969878 | 2024-05-16T01:03:33.451167 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

-1285281896 | 2024-05-14T17:28:15.699948
22 / tcp

1651973090 | 2024-05-15T17:06:00.274035
80 / tcp

698969878 | 2024-05-16T01:03:33.451167
443 / tcp