GeneralInformation

Hostnames	ecs-94-74-119-194.compute.hwclouds-dns.com itguru.tw
Domains	hwclouds-dns.com itguru.tw
Country	Thailand
City	Bangkok
Organization	Huawei Cloud Thailand Region
ISP	HUAWEI CLOUDS
ASN	AS136907
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

589765266 | 2024-04-23T08:57:48.268588

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 23 Apr 2024 08:57:47 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://ald88-buildsystem-qat.itguru.tw/

-166216652 | 2024-05-03T06:12:46.206559

443 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 03 May 2024 06:12:46 GMT
Content-Type: application/json
Content-Length: 22
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fe:8e:a4:10:5b:6f:df:41:40:3d:69:a4:9b:4a:ec
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Aug  1 00:00:00 2023 GMT
            Not After : Aug 23 23:59:59 2024 GMT
        Subject: CN=*.itguru.tw
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:27:3b:97:dc:df:5e:18:ef:cc:3a:e5:71:
                    30:25:e9:f1:80:99:de:df:dd:45:ba:51:28:a5:fb:
                    da:ba:fe:5a:27:ce:0c:25:63:5d:75:2b:4a:f8:a3:
                    d4:3e:9a:75:43:b8:3f:58:e0:23:fc:c4:9f:f0:c0:
                    89:23:19:19:42:0d:cf:45:25:f7:4f:04:b5:a6:46:
                    73:14:ca:5e:fd:81:7f:c1:6f:82:69:f2:b8:91:cf:
                    1f:1c:55:dc:ba:06:d1:b3:3f:7a:51:bf:a2:33:59:
                    e6:a0:3d:94:62:0b:08:74:b5:74:c1:6b:77:4c:dc:
                    c5:c8:7e:81:0f:5c:95:70:1e:09:3b:02:4a:70:de:
                    83:a0:03:41:dd:c7:f9:92:c2:d1:fe:97:7e:65:34:
                    96:5e:95:18:72:3a:38:05:44:ae:a6:3f:d5:38:ba:
                    87:11:18:e9:e0:55:be:5d:16:f1:19:3d:8f:a0:27:
                    3c:cc:a2:49:40:50:35:d6:5e:2e:26:2e:98:26:8e:
                    e9:24:59:e0:48:32:cc:94:96:37:0b:33:b8:8e:73:
                    39:13:92:56:7d:b0:5e:75:1e:82:28:ea:6f:2a:4c:
                    83:2e:26:8c:06:d2:d3:de:ea:bd:88:90:e2:4d:e4:
                    2e:2c:79:4b:26:ac:7f:08:14:1e:b8:26:ea:41:c6:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                6A:46:C5:B9:3F:65:B2:1D:89:22:70:3B:3A:36:05:6A:25:B8:80:F9
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.itguru.tw, DNS:itguru.tw
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Aug  1 02:35:30.189 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0D:D7:F0:ED:CB:E0:0A:0C:EF:C4:16:ED:
                                F5:50:5E:12:C1:09:11:72:E6:24:D0:C0:57:C6:7A:06:
                                C7:2C:6E:E5:02:21:00:CC:97:4E:51:A0:D5:2A:57:D4:
                                9B:76:DC:F5:BF:A2:23:64:D2:75:23:97:19:1A:A6:88:
                                2D:C6:86:AE:B8:A7:76
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Aug  1 02:35:30.261 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:36:7C:A6:F8:3E:9B:5A:89:18:C3:36:2A:
                                2F:62:12:46:60:C4:7F:90:2C:80:FB:D5:E6:94:17:4F:
                                B3:B6:35:01:02:20:13:63:3E:2E:84:C5:E7:BB:77:51:
                                13:58:D0:CD:41:4B:24:65:4E:38:CB:C6:5C:11:50:C7:
                                E8:07:B2:BD:6B:9B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Aug  1 02:35:30.230 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:CD:29:1C:85:B6:41:C3:20:12:B3:B7:
                                52:D1:82:2E:3F:BA:90:1B:E2:73:F7:59:53:81:85:4F:
                                1E:8B:59:35:8C:02:20:68:68:36:1B:02:D5:83:85:87:
                                DC:EC:73:7C:37:81:DB:8B:D0:A4:8F:0D:89:92:21:8D:
                                05:56:CC:98:AA:AE:47
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4d:d5:57:0d:cc:d5:28:e8:65:bb:ac:8c:c9:18:1e:71:48:34:
        bd:3d:76:26:a1:42:43:89:71:7d:7e:a9:e9:c6:0a:6e:40:85:
        dc:c0:15:11:8d:94:f9:82:03:83:54:1e:98:76:9f:a4:84:8b:
        c8:c4:49:8c:ea:c6:79:3c:d5:9f:9b:73:4c:8d:7a:de:ce:0c:
        43:3b:7c:25:93:ab:b2:9c:ba:5c:25:16:6c:11:df:0a:f0:29:
        14:f4:0c:c0:7c:66:53:fb:23:52:cc:9b:c7:e8:e9:f0:44:26:
        48:34:9c:7b:ba:87:87:5b:85:75:67:ea:9e:db:18:b2:c4:9d:
        e4:7c:d8:c1:90:1e:47:57:00:42:e7:6a:8a:a4:cc:f2:43:d0:
        69:28:20:28:0f:81:66:d4:40:08:94:3d:af:48:c8:e9:ef:c8:
        f0:c3:b9:b6:1f:f7:3d:24:a5:69:95:3a:4a:62:65:a9:6c:73:
        a2:f8:3c:5e:70:16:44:a7:ea:4d:de:75:e3:da:f9:98:4f:db:
        67:8d:2b:ba:71:38:3d:ca:ca:c9:6c:2b:60:be:7e:50:3e:22:
        42:8d:8b:04:05:12:b5:17:d0:3a:0f:a7:1d:92:25:1a:96:ae:
        44:04:e0:fe:60:08:d7:f5:6b:8c:71:82:08:17:65:19:aa:7a:
        77:cd:29:6c

94.74.119.194

Last Seen: 2024-05-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

589765266 | 2024-04-23T08:57:48.268588
80 / tcp

nginx1.18.0

-166216652 | 2024-05-03T06:12:46.206559
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

94.74.119.194

Last Seen: 2024-05-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

589765266 | 2024-04-23T08:57:48.268588 80 / tcp

nginx1.18.0

-166216652 | 2024-05-03T06:12:46.206559 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

589765266 | 2024-04-23T08:57:48.268588
80 / tcp

-166216652 | 2024-05-03T06:12:46.206559
443 / tcp