GeneralInformation

Hostnames	ns557400.ip-54-39-52.net eltonsalomao.whatsprofissional.com
Domains	ip-54-39-52.net whatsprofissional.com
Country	Canada
City	Châteauguay
Organization	OVH Hosting, Inc.
ISP	OVH SAS
ASN	AS16276

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 3000 3001 4000 4002 6379 8080

-1361355027 | 2024-04-23T20:11:29.595705

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQC2mOjEjNdnZmOdvCdSykQ8m+gP/By5nnxGSlCuG/LiCqM4
ofLotBseCtkaBdRRdb6j2S+pS+zDOE8/FnD4lMc3b5S4MfKGPI5fvDb/8sm/fTSu2lQguzbB9WXB
Et0R2zUM40CT974FMRthX70P06f82YpZhfXcNB6AC6Eqgj4w2BPZzsq/KzXj12+7vwhefMEdj8IS
8iJHTkRYFLBtwqPzz2xnSUM0QTgcrTAFQyA0MLkA2Ewj8UWs/+WmAuWcJpY8GCokkKV2XDXHzZiZ
RRgbtO5H/LbTFkpR4yr6WuLG8WH62qq8wi0OzhwVwcrwrZgOAJOFe4/HHXn5yLqjTI6mBxHrCXvz
jZxKIfjTKzyIFz8+b3a1jFrRHfzVF2EArqBnhBETfpO/XwrzS23KJCJ3koCNS0lqrssCv7qN8iUn
RKi9/T9kajbY0QQRZ+VFkikIjjthW7A6kJQoIvVyTWk+vwjTAxOqUSOOppQf+7FRCYDL03W4Puoo
HGX7QXHNwxk=
Fingerprint: fb:78:e0:dd:91:da:45:32:44:c1:7f:0c:f9:e6:af:9b

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

1651973090 | 2024-04-12T17:42:07.762385

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 12 Apr 2024 17:42:07 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Wed, 14 Feb 2024 13:55:26 GMT
Connection: keep-alive
ETag: "65ccc64e-264"
Accept-Ranges: bytes

1076033970 | 2024-04-18T04:46:39.065215

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 18 Apr 2024 04:46:38 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 3183
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Wed, 14 Feb 2024 13:58:58 GMT
ETag: W/"c6f-18da7e9dd2e"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3e:84:e7:2c:b1:1e:87:eb:29:77:36:35:4c:96:c1:16:6f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr 14 18:08:18 2024 GMT
            Not After : Jul 13 18:08:17 2024 GMT
        Subject: CN=eltonsalomao.whatsprofissional.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e7:47:d9:bc:9a:4d:9a:57:8b:0c:8e:08:2f:68:
                    df:e0:9c:ac:0c:88:3c:0e:9f:59:8c:4a:d8:7a:df:
                    38:ba:75:e0:f3:51:e6:8f:20:3f:df:55:bd:6d:ca:
                    e2:e5:87:d9:8c:b1:8e:8a:36:4e:af:ec:23:1f:e6:
                    0b:93:62:d5:9a:a8:ec:f7:b1:7d:18:90:a4:b7:df:
                    53:f5:c3:74:12:b6:cf:c8:f8:ad:06:34:91:c3:b9:
                    87:20:cf:4a:f8:2f:74:a7:af:f2:18:a8:df:4f:40:
                    aa:c4:90:41:be:77:53:02:83:d2:ab:68:e4:53:aa:
                    10:42:06:9d:cd:02:fe:8c:80:b9:fc:aa:6b:22:5e:
                    e2:6d:87:d0:09:7e:52:5a:8c:13:78:df:58:ad:bb:
                    0e:5c:ac:03:30:e8:36:8b:5c:3f:2d:52:36:d9:c2:
                    7a:48:05:7e:83:cf:2d:8b:43:51:9d:91:f7:71:64:
                    ce:58:f7:23:3f:cf:d5:6a:77:bd:89:30:35:4e:17:
                    e6:4b:c1:70:21:35:12:98:3f:db:60:5d:be:e3:e3:
                    90:2d:30:4e:ab:0c:d2:e7:2b:c4:57:ca:ff:f1:be:
                    e3:85:34:08:88:bb:37:b1:c6:96:31:28:4d:80:47:
                    62:23:99:34:c0:53:59:a4:42:1b:df:c7:39:2e:93:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                0F:42:77:05:23:76:5B:C4:4D:9C:AF:5E:66:4C:2A:5D:3E:14:18:4E
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:eltonsalomao.whatsprofissional.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Apr 14 19:08:18.514 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0A:6A:68:F2:2F:E8:66:C0:CA:E2:CB:6A:
                                A6:F3:4E:C3:AB:40:D5:BA:4B:C1:6C:A4:98:D9:C9:3B:
                                4B:5D:9E:8B:02:21:00:C9:E1:AC:0B:E1:67:B2:94:43:
                                CB:6C:11:77:81:0B:27:66:A3:28:E6:EA:7F:A7:97:E2:
                                04:7C:B0:23:6D:E5:13
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:98:10:71:09:F0:D6:52:2E:30:80:D2:9E:3F:64:BB:
                                83:6E:28:CC:F9:0F:52:8E:EE:DF:CE:4A:3F:16:B4:CA
                    Timestamp : Apr 14 19:08:18.535 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:9E:1A:40:35:DA:15:24:E9:FA:94:11:
                                BA:6E:78:DC:77:D6:5C:93:F6:81:D0:16:B5:F9:2F:C2:
                                B8:6B:63:B6:63:02:20:1A:74:1C:01:1F:E1:47:92:94:
                                BF:12:81:B1:85:BE:17:E8:D4:5B:13:20:B3:0F:14:26:
                                6C:E7:2C:17:9C:A5:0E
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6f:21:a9:29:b9:e9:01:23:78:58:72:88:5a:03:b4:03:aa:dd:
        ff:57:74:21:1f:ef:58:26:d0:63:eb:a4:00:ec:da:6a:9e:24:
        c2:14:57:7b:9b:92:b7:68:80:d5:5c:05:09:03:9b:6a:a5:93:
        a3:d7:e5:fd:41:c4:6c:05:00:24:a0:69:87:b7:59:a1:93:71:
        78:6c:3f:a7:9e:f1:f2:a3:06:19:b3:80:7d:61:89:c6:6d:33:
        df:f9:9c:69:d2:04:4b:3c:df:70:63:0e:7c:de:44:82:1d:84:
        55:f6:9e:3c:7d:e7:ab:28:4f:e4:43:51:57:10:46:eb:05:f3:
        fd:88:bc:69:a5:34:22:49:62:ad:d0:4e:85:86:fc:d7:9d:f6:
        86:4c:da:49:d7:11:89:d5:c0:30:83:89:91:fb:1b:c5:79:fe:
        39:90:84:ac:21:ff:8c:0b:ee:39:e5:b3:24:8f:db:28:d5:74:
        7f:f1:47:79:c3:17:64:ec:9b:88:fe:cb:9e:af:6a:b9:22:9f:
        f1:0b:92:b1:69:cd:2b:a5:10:50:a0:55:fe:ff:9a:b9:af:94:
        64:ab:68:1a:92:76:68:bd:10:c0:57:9d:e7:a0:5a:a2:1e:7a:
        ab:d5:96:d4:5d:06:31:f0:ec:35:67:46:41:a5:82:cf:74:fe:
        18:d8:5a:82

1076033970 | 2024-04-14T06:44:08.143900

3000 / tcp

HTTP/1.1 200 OK
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Wed, 14 Feb 2024 13:58:58 GMT
ETag: W/"c6f-18da7e9dd2e"
Content-Type: text/html; charset=UTF-8
Content-Length: 3183
Date: Sun, 14 Apr 2024 06:44:08 GMT
Connection: keep-alive
Keep-Alive: timeout=5

-1246004407 | 2024-04-23T20:03:50.298233

3001 / tcp

HTTP/1.1 400 Bad Request
Connection: close

-1246004407 | 2024-04-17T09:52:59.486656

4000 / tcp

HTTP/1.1 400 Bad Request
Connection: close

-1060095501 | 2024-03-28T00:11:51.772636

4002 / tcp

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Origin: https://realizarcontabilidade.whatsprofissional.com
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 139
Date: Thu, 28 Mar 2024 00:11:51 GMT
Connection: keep-alive
Keep-Alive: timeout=5

-1927723706 | 2024-03-26T11:30:09.276321

6379 / tcp

-NOAUTH Authentication required.

-567194451 | 2024-04-12T19:58:35.520103

8080 / tcp

HTTP/1.1 403 Forbidden
Date: Fri, 12 Apr 2024 19:58:35 GMT
X-Content-Type-Options: nosniff
Set-Cookie: JSESSIONID.87bd04a5=node015lgyirq09wzm2voet0dulac912713.node0; Path=/; HttpOnly
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=utf-8
X-Hudson: 1.395
X-Jenkins: 2.426.3
X-Jenkins-Session: fabb0770
Content-Length: 541
Server: Jetty(10.0.18)

54.39.52.87

Last Seen: 2024-04-23

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1361355027 | 2024-04-23T20:11:29.595705
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-04-12T17:42:07.762385
80 / tcp

nginx1.18.0

1076033970 | 2024-04-18T04:46:39.065215
443 / tcp

nginx1.18.0

1076033970 | 2024-04-14T06:44:08.143900
3000 / tcp

-1246004407 | 2024-04-23T20:03:50.298233
3001 / tcp

-1246004407 | 2024-04-17T09:52:59.486656
4000 / tcp

-1060095501 | 2024-03-28T00:11:51.772636
4002 / tcp

-1927723706 | 2024-03-26T11:30:09.276321
6379 / tcp

Redis key-value store

-567194451 | 2024-04-12T19:58:35.520103
8080 / tcp

Jenkins2.426.3

Products

Pricing

Contact Us

54.39.52.87

Last Seen: 2024-04-23

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1361355027 | 2024-04-23T20:11:29.595705 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-04-12T17:42:07.762385 80 / tcp

nginx1.18.0

1076033970 | 2024-04-18T04:46:39.065215 443 / tcp

nginx1.18.0

1076033970 | 2024-04-14T06:44:08.143900 3000 / tcp

-1246004407 | 2024-04-23T20:03:50.298233 3001 / tcp

-1246004407 | 2024-04-17T09:52:59.486656 4000 / tcp

-1060095501 | 2024-03-28T00:11:51.772636 4002 / tcp

-1927723706 | 2024-03-26T11:30:09.276321 6379 / tcp

Redis key-value store

-567194451 | 2024-04-12T19:58:35.520103 8080 / tcp

Jenkins2.426.3

Products

Pricing

Contact Us

-1361355027 | 2024-04-23T20:11:29.595705
22 / tcp

1651973090 | 2024-04-12T17:42:07.762385
80 / tcp

1076033970 | 2024-04-18T04:46:39.065215
443 / tcp

1076033970 | 2024-04-14T06:44:08.143900
3000 / tcp

-1246004407 | 2024-04-23T20:03:50.298233
3001 / tcp

-1246004407 | 2024-04-17T09:52:59.486656
4000 / tcp

-1060095501 | 2024-03-28T00:11:51.772636
4002 / tcp

-1927723706 | 2024-03-26T11:30:09.276321
6379 / tcp

-567194451 | 2024-04-12T19:58:35.520103
8080 / tcp