GeneralInformation

Hostnames	pingan.com.cn
Domains	pingan.com.cn
Country	China
City	Shenzhen
Organization	China Unicom Guangdong province network
ISP	China Unicom Guangdong IP network
ASN	AS136959

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

443

-617618899 | 2024-04-09T06:45:16.185355

443 / tcp

HTTP/1.1 403 Forbidden
Server: nginx/1.20.1
Date: Tue, 09 Apr 2024 06:45:15 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive
Set-Cookie: BIGipServerPOOL_PACLOUD_PRDR20220505123812=161385431.20480.0000; path=/; Httponly; Secure

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cf:50:81:de:85:8d:1c:87:e3:75:33:f5:e1:4d:ba
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=GeoTrust RSA CN CA G2
        Validity
            Not Before: Nov  3 00:00:00 2023 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: C=CN, ST=\xE5\xB9\xBF\xE4\xB8\x9C\xE7\x9C\x81, L=\xE6\xB7\xB1\xE5\x9C\xB3\xE5\xB8\x82, O=\xE4\xB8\xAD\xE5\x9B\xBD\xE5\xB9\xB3\xE5\xAE\x89\xE4\xBF\x9D\xE9\x99\xA9\xEF\xBC\x88\xE9\x9B\x86\xE5\x9B\xA2\xEF\xBC\x89\xE8\x82\xA1\xE4\xBB\xBD\xE6\x9C\x89\xE9\x99\x90\xE5\x85\xAC\xE5\x8F\xB8, CN=*.pingan.com.cn
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:5a:78:a9:22:c5:89:ce:a7:4e:75:f3:f1:
                    bc:8f:e0:e9:dc:fc:94:89:47:2b:f8:1b:b5:99:b0:
                    8f:3c:fb:68:fa:c0:d0:39:26:a8:5e:49:7e:3b:b2:
                    16:3c:56:a8:b5:16:78:13:b5:bc:1c:70:73:3e:50:
                    3e:f3:a2:d6:a3:a6:6c:6a:8a:16:ee:2b:fd:06:0d:
                    07:75:43:2e:e8:f3:f9:e2:9c:41:17:dc:7a:c1:51:
                    b9:ce:20:6d:f0:b2:f2:ac:d5:3e:84:68:36:76:fb:
                    d0:17:30:f8:8e:8f:5a:de:dd:83:2b:cd:85:1d:78:
                    3a:e9:69:00:70:3e:e6:1a:75:79:98:7f:ff:2d:4a:
                    30:bc:64:3a:d5:68:49:01:cb:62:00:64:60:86:9d:
                    fa:1b:79:8e:0a:d1:99:c1:73:36:b0:09:8e:fd:4a:
                    6b:8b:8c:f5:63:64:42:28:d4:77:0f:80:a4:10:5b:
                    d5:bb:74:54:33:e9:08:84:82:31:ec:4a:83:85:64:
                    b5:81:a7:4b:a4:31:02:f9:c3:f1:37:59:f7:8f:bb:
                    20:bc:2d:1f:97:c4:5a:bc:36:f2:a8:dc:bc:28:38:
                    54:f2:e7:2b:61:3a:10:7e:5d:38:e3:ac:18:da:93:
                    3f:b8:73:8a:05:19:73:0b:49:d9:76:19:7a:67:1c:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                24:6F:91:3F:89:87:87:0E:32:C2:40:18:DF:C5:4C:EB:4F:C8:49:32
            X509v3 Subject Key Identifier: 
                1B:7A:6B:60:B1:B8:29:CC:6B:09:46:93:1A:DF:9A:C2:4E:D1:06:54
            X509v3 Subject Alternative Name: 
                DNS:*.pingan.com.cn, DNS:pingan.com.cn
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.digicert.cn/GeoTrustRSACNCAG2.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.cn
                CA Issuers - URI:http://cacerts.digicert.cn/GeoTrustRSACNCAG2.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Nov  3 03:42:57.027 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0B:F5:B3:DE:AC:84:A6:E9:BD:FB:A8:16:
                                24:DD:0F:46:5B:0C:F1:57:E5:93:37:DB:02:EF:47:6E:
                                46:26:FB:8C:02:21:00:CE:F0:1A:22:F4:F5:90:03:2B:
                                65:AA:BB:BF:45:6C:6F:2D:08:51:29:37:FD:00:96:E5:
                                89:33:9D:C0:FF:1C:0A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Nov  3 03:42:56.990 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E2:6D:F3:2B:85:4C:91:16:00:F0:F8:
                                BB:29:2A:C7:BF:48:B8:43:EC:4A:63:D9:4C:37:E9:6E:
                                52:21:1F:F7:D5:02:21:00:C7:EE:09:48:B8:FE:9F:66:
                                2E:08:57:24:12:47:F7:4E:3E:09:F3:D8:A7:02:00:89:
                                B7:E2:3B:04:5C:5A:63:E4
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Nov  3 03:42:57.027 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:8E:08:A5:E6:B4:A5:7D:55:D7:17:C9:
                                46:4D:B1:15:A2:94:75:27:18:DB:6A:61:AB:AE:AA:9E:
                                44:FD:21:7F:A3:02:21:00:E1:6A:CC:22:D9:20:D7:7D:
                                F0:0F:FA:E0:12:16:5E:1D:3C:52:04:6C:8C:BD:CB:CC:
                                24:EC:85:34:7F:56:16:6F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        71:b9:71:72:96:2e:30:8c:da:08:98:d6:0f:89:45:6a:b0:89:
        e6:d4:83:5e:81:0d:26:64:5f:db:f6:29:0a:de:b5:cf:ee:3d:
        d2:51:96:ad:5d:a1:c8:3b:3e:6f:93:2e:54:9c:1c:f1:31:66:
        0b:36:94:71:89:ae:e3:0d:cb:40:f5:e1:37:96:1f:8b:0f:3f:
        8b:18:6f:02:d6:8b:8c:2d:22:09:fc:a5:6b:f2:3d:f1:3f:1b:
        e2:91:8b:f0:70:25:73:5f:af:f6:00:6b:a0:1e:2b:b7:9c:c2:
        37:3b:6f:42:37:26:a6:eb:83:e4:1a:21:54:cb:2d:fa:d5:b4:
        11:ff:5d:a1:0e:34:5a:31:72:27:d2:af:04:5e:00:3a:41:b4:
        5f:fa:42:41:d7:03:39:da:61:70:8f:49:39:75:78:d9:f4:0a:
        bf:c1:e8:ea:d5:5a:2f:2c:a8:9d:69:30:3c:df:86:49:a8:07:
        b4:e7:de:21:af:51:31:ad:9f:a8:d6:30:f7:81:c9:02:3e:23:
        4e:c8:1c:d1:ac:17:af:16:50:36:d4:2a:00:d2:82:86:c3:20:
        00:e5:af:dc:30:79:3e:92:81:4e:76:cd:bd:aa:dc:69:02:07:
        10:f2:8b:88:35:bc:48:ef:81:88:53:d2:96:e4:8e:d6:84:6a:
        24:6e:45:1c

27.45.166.168

Last Seen: 2024-04-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-617618899 | 2024-04-09T06:45:16.185355
443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

27.45.166.168

Last Seen: 2024-04-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-617618899 | 2024-04-09T06:45:16.185355 443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

-617618899 | 2024-04-09T06:45:16.185355
443 / tcp