GeneralInformation

Hostnames	atendimento24hrs.online acesso.atendimento24hrs.online app.atendimento24hrs.online storage.atendimento24hrs.online
Domains	atendimento24hrs.online
Cloud Provider	DigitalOcean
Cloud Region	us-nj
Country	United States
City	Clifton
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

22 80 443 3001 3002

-390022474 | 2024-05-16T00:05:54.980988

22 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDOlcimMerN1NZQHvKjaSj/JonBdqIHc5MYVkDNDejnsaqT
XY3cYf9+0fFWMmW5CwFkoLDnPsjIL9kmvzbVvFDxI/eSAlqZPfWQKYYFa170lZ0blrdExvT5cI4+
bl2yuCaSbq2aHXp7PLHGUnwKXLHfLKFXcXeQsJka/pq04zLP0G5z/87haXEnlAK8+Jti8iS6rVjJ
RFz1TvfKroocegHr2vYQ0uNvMBXoZNJV63DbNmgv9yDMyNT+SV2LPtqj3ki+pZxVlZj99eNs5RRO
rzwks4PzvNSptcpGVlV4nhbpygbKgy1vOA4Yktz0dvTiVermeLcz7TT6Qyw8WtY8TnS7R7wITLGt
DVVVAAJc/aKzQMs61x6y55dqKai2zyboEhUJZ/+je1Dtq1m16jYCUAMMuTgrDrWGKTLfLC+B08jF
k0BzQ3jY/bYdckjKrQ2Aspnh6UUx27Q5+ZigpvjSWpD7kbelWvkpwy77WG7nCDiqJdovvae7boqW
5Vk0ZTrFbME=
Fingerprint: 4f:48:83:89:63:ef:69:94:3f:8a:02:31:69:40:1c:f9

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

1651973090 | 2024-05-05T16:33:34.300000

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 16:33:34 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Wed, 17 Jan 2024 05:04:51 GMT
Connection: keep-alive
ETag: "65a75ff3-264"
Accept-Ranges: bytes

-1490123246 | 2024-05-07T11:41:24.619389

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 May 2024 11:41:24 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1836
Connection: keep-alive
X-Powered-By: Next.js
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
ETag: "wjasttl7ti1f0"
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:75:88:a6:a4:b7:07:e7:5e:64:97:e5:63:c6:ad:e1:f0:df
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 17 09:28:01 2024 GMT
            Not After : Jun 15 09:28:00 2024 GMT
        Subject: CN=acesso.atendimento24hrs.online
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:22:d0:cd:1e:08:d5:3c:aa:bf:28:59:a8:
                    a1:1b:80:94:29:91:6f:ea:c7:99:c4:b2:43:3f:63:
                    8b:8c:d0:13:ce:1c:9e:1a:a9:1f:18:d6:5d:d6:47:
                    d3:6f:19:93:14:97:c0:3b:67:01:5e:60:2a:bf:3e:
                    67:8b:67:56:25:29:bc:cd:90:fa:1a:6a:70:06:19:
                    a6:da:7b:23:0f:69:1d:8f:10:2e:b4:2a:a3:45:5e:
                    b1:c6:f5:d0:55:3e:e5:83:70:0a:f7:a2:8a:6b:1f:
                    ab:c0:9f:58:cb:40:12:b7:61:4e:0c:4d:9c:01:c7:
                    18:f5:8c:b2:84:37:c9:c7:9b:1c:21:a7:0f:eb:55:
                    cd:99:f5:5b:64:db:95:0d:87:6d:ab:2d:12:9a:40:
                    92:d7:62:31:ea:c1:0b:2f:2e:7a:30:6f:92:ce:bb:
                    b3:95:be:72:74:e2:35:9f:17:34:c2:5d:be:8f:53:
                    7b:a6:fc:4c:11:08:6b:75:3d:66:6c:22:1a:f5:c4:
                    68:cd:30:ae:ff:ce:a9:c4:30:d4:bb:c5:a6:ab:ab:
                    c4:9d:3e:4f:37:90:71:10:aa:75:0a:06:06:94:3c:
                    99:85:dc:35:38:06:e2:40:30:68:d3:89:11:67:e7:
                    1e:7d:f4:95:cd:1e:c3:8e:b2:2d:08:99:35:ed:f3:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                1C:EA:93:1D:C7:95:D5:FC:CA:D7:DA:A0:EF:8D:B9:DC:39:45:1A:CB
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:acesso.atendimento24hrs.online, DNS:app.atendimento24hrs.online, DNS:storage.atendimento24hrs.online
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Mar 17 10:28:01.621 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:CB:34:CE:89:60:F1:54:A9:12:07:46:
                                C3:9F:88:68:F3:3C:D6:FD:B8:C9:0C:C2:ED:F0:BD:97:
                                01:76:1E:A0:DD:02:20:5B:AA:FA:F1:27:C0:28:9C:71:
                                43:9D:35:BC:16:FF:5E:2A:23:40:12:36:86:9F:F6:A4:
                                B9:58:EF:0C:20:42:E8
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Mar 17 10:28:01.640 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:06:CB:AB:3C:C1:86:09:A0:09:50:E7:4C:
                                CA:95:F5:95:1F:A2:93:0E:92:69:DD:07:FF:AF:6E:FE:
                                78:E8:9E:ED:02:20:73:34:37:96:24:CC:C9:6F:81:1B:
                                47:A2:CD:58:36:16:A9:56:49:85:3A:51:46:3B:80:D3:
                                30:37:81:12:BA:62
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        00:29:c3:7d:e0:01:0a:c5:08:0a:28:ca:aa:14:eb:7c:11:10:
        60:c0:dc:83:cc:94:0f:2d:25:ab:53:94:7d:15:2d:3e:b2:18:
        a1:71:b2:d9:95:93:97:72:41:54:cc:e4:af:b8:7e:6c:c4:9d:
        88:11:67:ef:7b:42:f0:b0:93:1b:e1:10:f7:c3:66:4f:7d:c5:
        24:ef:ce:f2:19:3f:46:c3:b9:16:56:32:23:3f:57:17:06:55:
        74:93:13:08:7c:bc:b8:7c:d2:58:df:f2:f0:39:05:c9:79:f8:
        44:1b:8d:eb:e1:12:c7:35:c1:fa:5f:00:86:27:e4:75:99:c5:
        d2:51:a0:9a:48:b8:43:6a:18:b3:c3:13:2c:46:a3:01:bf:d1:
        e3:71:3e:98:f6:36:f8:30:e8:56:ef:a7:90:db:87:5c:ad:5d:
        ed:6d:b7:26:2c:73:fc:0b:bd:cc:67:7b:34:8e:05:89:43:cc:
        aa:a6:1d:30:e2:9e:72:2e:6a:6d:94:0f:7c:02:59:41:3f:6f:
        ba:7e:6f:05:87:05:2a:e7:c4:4b:40:d0:6f:be:05:61:66:eb:
        33:f2:f4:d0:ad:8e:0f:03:78:be:56:29:96:eb:81:02:22:f1:
        b8:3a:22:9d:36:d7:4f:83:37:ec:97:5d:79:dd:9c:85:18:ce:
        46:56:04:2b

-1246004407 | 2024-05-16T04:49:10.497012

3001 / tcp

HTTP/1.1 400 Bad Request
Connection: close

-1490123246 | 2024-05-02T23:47:38.974346

3002 / tcp

HTTP/1.1 200 OK
X-Powered-By: Next.js
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
ETag: "wjasttl7ti1f0"
Content-Type: text/html; charset=utf-8
Content-Length: 1836
Vary: Accept-Encoding
Date: Thu, 02 May 2024 23:47:38 GMT
Connection: keep-alive
Keep-Alive: timeout=5

167.71.92.187

Last Seen: 2024-05-16

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-390022474 | 2024-05-16T00:05:54.980988
22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-05-05T16:33:34.300000
80 / tcp

nginx1.18.0

-1490123246 | 2024-05-07T11:41:24.619389
443 / tcp

nginx1.18.0

-1246004407 | 2024-05-16T04:49:10.497012
3001 / tcp

-1490123246 | 2024-05-02T23:47:38.974346
3002 / tcp

Products

Pricing

Contact Us

167.71.92.187

Last Seen: 2024-05-16

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-390022474 | 2024-05-16T00:05:54.980988 22 / tcp

OpenSSH8.2p1 Ubuntu-4ubuntu0.11

1651973090 | 2024-05-05T16:33:34.300000 80 / tcp

nginx1.18.0

-1490123246 | 2024-05-07T11:41:24.619389 443 / tcp

nginx1.18.0

-1246004407 | 2024-05-16T04:49:10.497012 3001 / tcp

-1490123246 | 2024-05-02T23:47:38.974346 3002 / tcp

Products

Pricing

Contact Us

-390022474 | 2024-05-16T00:05:54.980988
22 / tcp

1651973090 | 2024-05-05T16:33:34.300000
80 / tcp

-1490123246 | 2024-05-07T11:41:24.619389
443 / tcp

-1246004407 | 2024-05-16T04:49:10.497012
3001 / tcp

-1490123246 | 2024-05-02T23:47:38.974346
3002 / tcp