GeneralInformation

Hostnames	dnas.fr vip-maeva.dunordausud.net
Domains	dnas.fr dunordausud.net
Country	France
City	Paris
Organization	LA FRANCE DU NORD AU SUD
ISP	IELO-LIAZO SERVICES SAS
ASN	AS29075

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

1120850221 | 2024-05-02T22:31:14.539257

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 02 May 2024 22:31:14 GMT
Content-Type: text/html
Content-Length: 342
Last-Modified: Fri, 24 Mar 2023 00:49:11 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "641cf387-156"
Accept-Ranges: bytes

396138133 | 2024-05-03T07:57:36.979572

443 / tcp

HTTP/1.1 403 Forbidden
Date: Fri, 03 May 2024 07:57:36 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 199
Connection: keep-alive
Server: PoudreVerte/6.28
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8f:dd:da:3b:9f:11:4a:32:c3:9a:a4:97:55:2c:ae
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=FR, O=Gandi, CN=Gandi RSA Domain Validation Secure Server CA 3
        Validity
            Not Before: Sep  8 00:00:00 2023 GMT
            Not After : Oct  7 23:59:59 2024 GMT
        Subject: CN=*.dnas.fr
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:c4:f3:11:38:95:65:f7:f5:6b:77:bb:df:c5:10:
                    e2:0f:d2:de:98:91:22:ba:26:92:85:d9:47:ae:6a:
                    af:8c:1f:fb:5c:be:f5:67:89:04:c4:54:a2:6c:ad:
                    05:3c:21:31:79:d8:07:4d:af:1a:83:5f:5d:2e:de:
                    b4:8b:07:56:d5:8c:91:28:74:0d:4f:24:fd:43:8b:
                    1f:11:e0:55:b9:9b:84:77:43:09:6f:2c:48:cc:45:
                    a0:f8:c6:c8:a5:b3:94:47:4b:e5:c0:f2:4c:0a:39:
                    4c:6d:96:8e:47:05:36:2c:19:d7:db:6b:3a:82:97:
                    82:5f:e5:3b:e0:5f:1a:e9:39:40:31:fc:4f:2b:94:
                    9a:74:fd:a6:86:de:0a:40:95:f6:0d:51:e0:74:85:
                    5b:c1:1f:76:83:26:66:1b:ad:2c:82:1d:4d:ad:81:
                    74:cb:c1:4c:4d:ff:bb:1c:5a:30:6e:43:b6:05:e3:
                    91:fb:8b:a5:c7:61:91:d3:e3:2c:7b:cc:5d:74:40:
                    f6:f8:ec:14:f9:36:ec:72:d7:5f:75:3c:42:0d:5f:
                    e5:9a:67:c4:5a:b0:b3:19:cc:d1:4c:4e:c4:85:9e:
                    71:dd:9b:11:c0:09:97:8e:88:f9:63:a3:8c:50:9e:
                    3d:67:4f:fa:c7:9a:94:94:3e:22:64:42:91:ce:7e:
                    4e:c8:ca:7a:a6:43:c9:05:e7:f0:eb:8c:d4:28:d8:
                    ac:b5:e0:cf:c2:35:22:38:60:75:88:f9:0e:bd:55:
                    b1:73:d1:c6:50:ad:d6:12:ae:0f:b4:f8:bf:a5:fd:
                    55:d6:7e:e9:02:d7:a5:9b:d1:5d:7a:8d:7a:4f:9c:
                    11:60:a9:29:0f:d3:a3:73:35:2a:d1:8a:38:d4:e7:
                    92:7c:e3:b2:c7:57:b6:b3:0b:da:9d:57:23:aa:c0:
                    25:02:6d:27:aa:04:b4:9c:41:90:a3:bf:94:6e:fb:
                    47:24:14:7e:f2:79:5a:06:f8:a9:21:b5:2f:17:d0:
                    f2:36:c8:01:ed:16:b4:c4:2e:b8:1a:75:8c:d1:7b:
                    2f:04:88:17:a8:20:62:79:c7:f9:98:f5:d8:d6:09:
                    71:2b:e2:57:7c:d1:ea:a9:19:a8:b2:f5:39:d3:fd:
                    d0:15:96:00:e9:44:dc:16:77:ab:0f:ff:bf:0e:f8:
                    b6:80:f0:29:20:9c:ee:47:e3:c2:b9:97:36:f8:5d:
                    f2:55:d4:ea:53:99:8a:9a:41:c0:e7:a6:40:78:1c:
                    17:fa:11:56:67:5f:46:c0:c5:8c:b1:e4:c7:90:41:
                    54:56:7e:06:ec:30:c6:b1:d1:f4:06:c7:49:33:3f:
                    57:27:7f:e6:8d:87:d2:a8:ac:33:c3:c2:c3:a4:a0:
                    37:f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                81:11:92:DE:66:32:A5:B0:5B:33:3D:65:43:85:FC:D4:04:2D:F1:AE
            X509v3 Subject Key Identifier: 
                B0:5F:F8:DF:CB:60:FB:85:06:27:A5:15:B9:27:21:72:49:EE:4D:1A
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.26
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.dnas.fr, DNS:dnas.fr
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Sep  8 07:22:17.126 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:A7:7E:79:09:9C:D4:C9:88:68:A1:8D:
                                F5:83:16:15:C7:12:10:B6:77:F1:49:CD:A0:BF:6B:19:
                                10:D7:5A:B6:09:02:21:00:8A:01:A7:F1:62:00:1C:2A:
                                63:BA:AF:0B:D3:13:79:60:92:02:36:96:62:8E:E3:4B:
                                69:6A:09:94:1B:C5:A3:A1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Sep  8 07:22:17.209 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:07:A7:49:37:AD:D2:B5:65:44:51:1C:C3:
                                A8:E7:67:78:E7:80:4D:95:AF:2F:53:B7:31:4C:43:68:
                                F7:3E:2E:94:02:20:44:96:D6:D6:8D:42:82:B3:FA:78:
                                A6:53:51:02:06:F9:4D:33:A5:B5:B1:AF:8A:21:9D:7A:
                                50:B4:AD:46:ED:34
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Sep  8 07:22:17.170 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:99:53:F2:31:52:DE:46:82:6C:82:46:
                                AD:5E:3E:CD:B0:0E:CB:74:F5:5F:C7:B9:A2:25:F8:20:
                                C2:1E:AB:98:3F:02:21:00:B9:BE:0D:63:BC:13:F3:2E:
                                20:F8:17:A0:75:61:C1:15:9E:47:D0:0D:F1:7E:19:F1:
                                6D:C8:4C:2A:B5:BD:58:48
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        49:4b:81:d0:dc:f4:f5:9b:ff:75:c3:6c:ce:4e:ec:1f:f8:f7:
        80:95:0f:8c:e7:78:1b:d8:d7:31:14:56:fb:27:c7:16:09:bf:
        a0:f5:ab:1c:29:4c:c7:af:39:59:16:75:4c:de:77:a0:91:9e:
        a6:83:a6:60:25:5d:2e:58:a7:ca:07:19:ab:eb:a0:de:32:fb:
        a7:91:6b:07:23:f2:6d:49:37:bf:6b:9c:4f:55:90:46:bf:77:
        f5:b6:28:f3:83:ab:e6:69:6a:26:3c:41:4d:08:e0:c1:4c:20:
        62:ee:0f:b1:35:04:3d:52:85:3d:a6:de:e5:31:95:a9:03:6c:
        d0:cb:ae:34:63:25:07:f3:02:ea:8a:a2:1d:6d:36:bb:a9:c4:
        49:b1:da:c8:49:17:b9:e7:8b:92:e5:de:95:87:9c:f7:b8:01:
        1b:fd:38:a0:26:e8:f6:05:d5:7b:af:14:c2:fe:82:ed:77:e7:
        31:24:09:25:33:92:be:81:2c:1e:45:11:28:72:aa:7b:b0:97:
        37:a7:16:c9:7b:17:80:1b:07:a9:ae:94:05:51:3f:db:aa:8b:
        e5:10:02:d5:c3:9e:1c:9b:9f:d0:a2:41:66:6e:25:83:54:b5:
        43:90:2a:bf:d7:4c:df:69:e5:6f:bc:9a:18:48:95:4e:45:2a:
        0d:95:2b:17:fd:2c:94:ed:b7:a8:65:bb:8e:18:be:b5:57:33:
        de:19:0c:40:b2:96:07:12:7b:ff:a5:88:3e:0e:ae:80:42:a8:
        a4:61:f4:68:5d:15:26:55:03:f7:85:44:97:00:ff:bd:8c:8d:
        f4:03:1f:bd:ff:bb:39:0b:21:7a:a8:d6:c2:7e:a0:5d:f5:c8:
        53:d6:40:54:69:a9:ad:f5:a2:d9:08:c1:2e:27:7d:2f:1d:d7:
        37:93:00:6c:39:a0:9b:91:cb:3e:b4:62:fb:19:b8:5e:c2:65:
        2d:fe:ce:1c:c2:ba:f9:90:d4:0f:39:33:9b:39:a9:e8:12:13:
        52:1b:dc:bb:0d:b6

91.226.98.180

Last Seen: 2024-05-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1120850221 | 2024-05-02T22:31:14.539257
80 / tcp

nginx1.18.0

396138133 | 2024-05-03T07:57:36.979572
443 / tcp

Products

Pricing

Contact Us

91.226.98.180

Last Seen: 2024-05-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1120850221 | 2024-05-02T22:31:14.539257 80 / tcp

nginx1.18.0

396138133 | 2024-05-03T07:57:36.979572 443 / tcp

Products

Pricing

Contact Us

1120850221 | 2024-05-02T22:31:14.539257
80 / tcp

396138133 | 2024-05-03T07:57:36.979572
443 / tcp