Shodan

23.224.77.226

Regular View Raw Data
Last Seen: 2024-04-25

GeneralInformation

Country United States
City Portland
Organization CloudRadium L.L.C
ISP CNSERVERS LLC
ASN AS40065

WebTechnologies

JavaScript libraries
jQuery

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2020-1938 7.5When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible.

OpenPorts 

1714790636 | 2024-04-23T20:08:06.375752
135 / tcp 
-1547968343 | 2024-04-18T00:23:59.907427
137 / udp 
-757264002 | 2024-04-21T16:45:04.722481
139 / tcp 
554922136 | 2024-04-13T17:17:41.145199
445 / tcp 
-1660808408 | 2024-03-26T17:38:06.983060
880 / tcp 
-881101236 | 2024-04-20T17:22:04.967952
3306 / tcp 
630710679 | 2024-04-25T01:47:00.176274
8009 / tcp 
-783847321 | 2024-04-21T19:44:40.573263
8090 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved