GeneralInformation

Hostnames	erk.eracare.cn
Domains	eracare.cn
Country	China
City	Hefei
Organization	CHINANET Anhui province network
ISP	CHINANET-BACKBONE
ASN	AS4134

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

443 7071 8007 8085 8086 8087 8089 8123 9091 9095

1871399378 | 2024-05-10T17:23:18.113846

443 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 17:23:45 GMT
Content-Type: text/html
Content-Length: 801
Last-Modified: Tue, 19 Sep 2023 02:19:56 GMT
Connection: keep-alive
ETag: "6509054c-321"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2f:8e:6e:a1:56:c1:ed:3b:ed:9b:03:af:83:97:64
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Encryption Everywhere DV TLS CA - G2
        Validity
            Not Before: Mar 21 00:00:00 2024 GMT
            Not After : Jun 18 23:59:59 2024 GMT
        Subject: CN=erk.eracare.cn
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:df:9c:33:be:45:a2:47:dc:27:c5:94:41:53:17:
                    6c:a7:fe:56:8b:31:e9:58:94:ed:7b:47:67:9e:9d:
                    6d:a8:d9:73:af:b2:69:a9:77:ca:3a:64:15:86:90:
                    00:37:45:12:de:cd:0d:b4:ff:5a:41:26:30:60:ff:
                    b0:37:a8:d1:31:bb:0c:ed:19:fa:44:dc:e8:eb:cc:
                    7d:51:6d:a9:05:29:a2:0e:24:8f:50:e9:bc:79:e8:
                    48:6c:ca:65:9b:08:f4:b0:d4:c0:75:18:ce:bb:b4:
                    c2:c8:31:48:45:8a:32:b2:73:0f:3d:13:18:2c:cb:
                    de:ef:8d:bd:f1:1d:cd:df:73:fb:ec:3d:22:b9:28:
                    34:bf:c6:0f:4f:31:08:d9:ac:0c:49:8b:b4:a4:d5:
                    83:93:54:66:d9:07:7b:0d:a2:bc:3b:a2:12:42:be:
                    4b:2c:b5:2f:1c:05:aa:d8:b6:38:5a:af:8b:3a:56:
                    39:06:2b:3f:9f:a5:15:2f:18:ab:2d:d5:a3:cc:3a:
                    f3:ff:d6:e7:bf:3f:42:be:40:ed:99:d0:18:f3:12:
                    ad:1d:cc:d1:06:14:8c:bd:62:60:50:19:98:10:b6:
                    a9:23:54:9a:ba:6e:c7:1b:1b:74:88:50:61:e3:83:
                    e2:18:11:fd:94:20:1f:45:9f:f1:43:0a:09:fa:0f:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                78:DF:91:90:5F:EE:DE:AC:F6:C5:75:EB:D5:4C:55:53:EF:24:4A:B6
            X509v3 Subject Key Identifier: 
                54:EF:78:90:16:32:6D:A3:1E:5C:60:2B:C5:3A:2D:65:95:29:8D:2E
            X509v3 Subject Alternative Name: 
                DNS:erk.eracare.cn
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Mar 21 16:40:05.529 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:16:F7:B7:5E:D6:D9:16:DA:AB:F8:E0:61:
                                CB:91:29:42:41:3B:B3:7C:91:8D:C6:63:16:52:8F:AA:
                                49:62:82:B7:02:21:00:DD:27:04:29:40:7D:DF:35:05:
                                5A:4D:B8:C7:45:B2:5D:33:A7:0C:3B:AB:6C:2E:3E:19:
                                CE:40:19:FE:F7:C9:45
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Mar 21 16:40:05.519 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A4:28:7A:38:70:08:06:54:40:31:8E:
                                BE:84:BB:07:19:D3:C0:0E:F0:2D:A7:9C:A0:BC:65:D4:
                                63:80:61:29:DF:02:20:25:3B:12:0A:9C:10:9C:C1:EF:
                                4D:18:18:84:5C:A1:ED:5F:4E:E0:08:82:95:15:7D:33:
                                74:EA:D3:44:7B:5B:4A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Mar 21 16:40:05.553 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:34:5F:F5:4E:5D:FB:F7:EA:92:FC:2A:7E:
                                8B:46:B7:97:EB:0D:69:58:15:52:25:6A:F6:E0:A4:4B:
                                03:02:77:B0:02:20:4D:6C:37:7F:23:0F:94:DB:58:67:
                                97:6C:47:71:0E:C0:B0:19:5B:91:6B:C2:84:B8:D3:BE:
                                65:AB:3E:2B:B5:F7
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        45:eb:83:68:cf:53:a0:ad:a4:67:92:d4:80:2c:dc:25:8d:ca:
        cb:f1:b2:f1:a7:84:85:59:8a:6c:e3:db:98:de:f8:7c:51:92:
        82:6d:a0:8b:25:e2:3d:4b:8e:ee:25:cb:21:a0:d9:62:c0:a6:
        14:23:48:ce:e0:e8:20:87:e0:f7:29:b8:06:65:fd:97:42:2b:
        59:95:35:47:75:68:c9:b7:46:02:64:a9:be:ce:d1:13:6c:20:
        36:6d:fd:bd:65:22:1e:e5:c2:9f:75:90:b6:fd:18:75:53:14:
        9a:70:ea:9a:c6:4e:9d:f5:18:6b:38:14:92:1a:5a:bb:42:5a:
        9f:30:9b:84:45:7f:cf:1a:b7:79:55:50:11:ef:3e:22:a5:c9:
        53:17:b0:13:38:6d:18:b0:16:1f:61:e8:ea:6b:01:27:b7:1c:
        f9:f2:bd:da:a1:3f:c7:89:05:46:8f:76:d3:db:78:09:23:95:
        8e:f9:0b:df:ea:7b:63:82:69:55:bb:16:1e:04:3f:87:73:7a:
        51:34:82:3e:9f:3b:58:d8:fd:e5:d3:0d:ff:b6:20:2c:42:0f:
        8c:76:19:5e:58:2a:8a:a3:6d:85:ae:62:68:31:05:29:2c:c4:
        8d:93:1a:40:5c:7a:1c:e4:82:c8:46:95:d7:5d:79:59:3d:20:
        4f:af:ba:ce

-1725321926 | 2024-05-16T00:25:35.127480

7071 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 16 May 2024 00:23:48 GMT
Content-Type: text/html
Content-Length: 1708
Last-Modified: Tue, 14 May 2024 09:55:24 GMT
Connection: keep-alive
ETag: "6643350c-6ac"
Accept-Ranges: bytes

<!DOCTYPE html>
<html lang="en">
	<head>
		<meta charset="UTF-8" />
		<link rel="icon" href="/logo.svg" />
		<meta name="viewport" content="width=device-width, initial-scale=1.0" />
		<script src="../config.js"></script>
		<title>知识库维护系统</title>
		<script type="module" crossorigin src="/assets/index.e1484a97.js"></script>
		<link rel="stylesheet" href="/assets/index.a9c52a1c.css">
		<script type="module">try{import.meta.url;import("_").catch(()=>1);}catch(e){}window.__vite_is_modern_browser=true;</script>
		<script type="module">!function(){if(window.__vite_is_modern_browser)return;console.warn("vite: loading legacy build because dynamic import or import.meta.url is unsupported, syntax error above should be ignored");var e=document.getElementById("vite-legacy-polyfill"),n=document.createElement("script");n.src=e.src,n.onload=function(){System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))},document.body.appendChild(n)}();</script>
	</head>
	<body>
		<div id="app"></div>
		
		<script nomodule>!function(){var e=document,t=e.createElement("script");if(!("noModule"in t)&&"onbeforeload"in t){var n=!1;e.addEventListener("beforeload",(function(e){if(e.target===t)n=!0;else if(!e.target.hasAttribute("nomodule")||!n)return;e.preventDefault()}),!0),t.type="module",t.src=".",e.head.appendChild(t),t.remove()}}();</script>
		<script nomodule crossorigin id="vite-legacy-polyfill" src="/assets/polyfills-legacy.c3bf0243.js"></script>
		<script nomodule crossorigin id="vite-legacy-entry" data-src="/assets/index-legacy.7d94bbcb.js">System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))</script>
	</body>
</html>

274750042 | 2024-05-15T09:07:32.880070

8007 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Wed, 15 May 2024 09:07:25 GMT
Content-Type: text/html
Content-Length: 11991
Last-Modified: Fri, 26 Jan 2024 03:30:22 GMT
Connection: keep-alive
ETag: "65b3274e-2ed7"
Accept-Ranges: bytes

-1030354101 | 2024-05-02T20:06:50.299558

8085 / tcp

HTTP/1.1 200 
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: *
Access-Control-Allow-Headers: Content-Type,Access-Token
Access-Control-Expose-Headers: *
Content-Type: application/json
Transfer-Encoding: chunked
Date: Thu, 02 May 2024 20:05:30 GMT

2d
{"code":0,"msg":"成功","data":"hello 9002"}
0

665863643 | 2024-05-12T22:25:22.165079

8086 / tcp

HTTP/1.1 200 
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: *
Access-Control-Allow-Headers: Content-Type,Access-Token
Access-Control-Expose-Headers: *
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Date: Sun, 12 May 2024 22:23:27 GMT

1628226817 | 2024-05-11T16:43:24.538666

8087 / tcp

HTTP/1.1 400 
Content-Type: text/html;charset=utf-8
Content-Language: en
Content-Length: 435
Date: Sat, 11 May 2024 16:41:26 GMT
Connection: close

<!doctype html><html lang="en"><head><title>HTTP Status 400 – Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 – Bad Request</h1></body></html>

1450214159 | 2024-05-17T21:18:37.800948

8089 / tcp

HTTP/1.1 404 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/json
Transfer-Encoding: chunked
Date: Fri, 17 May 2024 21:15:35 GMT

66
{"timestamp":"2024-05-17T21:15:35.646+00:00","status":404,"error":"Not Found","message":"","path":"/"}
0

18530155 | 2024-05-17T22:52:52.651369

8123 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 17 May 2024 22:51:50 GMT
Content-Type: text/html
Content-Length: 10083
Last-Modified: Wed, 26 Apr 2023 08:47:12 GMT
Connection: keep-alive
ETag: "6448e510-2763"
Accept-Ranges: bytes

421213216 | 2024-05-17T10:16:51.973532

9091 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 17 May 2024 10:14:28 GMT
Content-Type: text/html
Content-Length: 24474
Last-Modified: Fri, 29 Mar 2024 06:40:52 GMT
Connection: keep-alive
ETag: "66066274-5f9a"
Accept-Ranges: bytes

<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>DRG运营管理平台</title><link href="/static/css/chunk-0061fd81.06e60ab1.css" rel="prefetch"><link href="/static/css/chunk-0161abf5.833cb898.css" rel="prefetch"><link href="/static/css/chunk-024fdc23.e60ab722.css" rel="prefetch"><link href="/static/css/chunk-03566cd1.833cb898.css" rel="prefetch"><link href="/static/css/chunk-03f44526.833cb898.css" rel="prefetch"><link href="/static/css/chunk-04c42053.821aab81.css" rel="prefetch"><link href="/static/css/chunk-0629adf4.c086b9db.css" rel="prefetch"><link href="/static/css/chunk-0867337c.21ded25d.css" rel="prefetch"><link href="/static/css/chunk-09f84da7.32be7820.css" rel="prefetch"><link href="/static/css/chunk-0a784358.47ce1414.css" rel="prefetch"><link href="/static/css/chunk-0d7e00bf.d1d562e2.css" rel="prefetch"><link href="/static/css/chunk-0d84c496.d88c47be.css" rel="prefetch"><link href="/static/css/chunk-0e712d66.3ae3c146.css" rel="prefetch"><link href="/static/css/chunk-0f7f0235.7ff06ec6.css" rel="prefetch"><link href="/static/css/chunk-12404460.833cb898.css" rel="prefetch"><link href="/static/css/chunk-134504fe.4b998e62.css" rel="prefetch"><link href="/static/css/chunk-1526d9c9.6502fab6.css" rel="prefetch"><link href="/static/css/chunk-156c8850.93c2783f.css" rel="prefetch"><link href="/static/css/chunk-16118842.833cb898.css" rel="prefetch"><link href="/static/css/chunk-180716a9.833cb898.css" rel="prefetch"><link href="/static/css/chunk-1b82b775.833cb898.css" rel="prefetch"><link href="/static/css/chunk-1b8d508e.833cb898.css" rel="prefetch"><link href="/static/css/chunk-1be0e304.833cb898.css" rel="prefetch"><link href="/static/css/chunk-1cb80a74.833cb898.css" rel="prefetch"><link href="/static/css/chunk-1d36104b.ff653e30.css" rel="prefetch"><link href="/static/css/chunk-1dc32fbe.14c518c0.css" rel="prefetch"><link href="/static/css/chunk-206a6eed.5a30e3b7.css" rel="prefetch"><link href="/static/css/chunk-20f06312.890a22d1.css" rel="prefetch"><link href="/static/css/chunk-215ce55b.833cb898.css" rel="prefetch"><link href="/static/css/chunk-22fad8ca.bd3b53bf.css" rel="prefetch"><link href="/static/css/chunk-23c4ac01.833cb898.css" rel="prefetch"><link href="/static/css/chunk-243ad7f2.1bdff42f.css" rel="prefetch"><link href="/static/css/chunk-2464880e.034195c4.css" rel="prefetch"><link href="/static/css/chunk-26acca21.eabbc367.css" rel="prefetch"><link href="/static/css/chunk-26b8b344.833cb898.css" rel="prefetch"><link href="/static/css/c

1050601966 | 2024-05-10T20:46:03.696073

9095 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 10 May 2024 20:43:17 GMT
Content-Type: text/html
Content-Length: 877
Last-Modified: Tue, 19 Dec 2023 08:12:38 GMT
Connection: keep-alive
ETag: "65815076-36d"
Accept-Ranges: bytes

<!DOCTYPE html><html lang=en><head><meta charset=utf-8><meta http-equiv=X-UA-Compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1"><link rel=icon href=/favicon.ico><title>正在加载...</title><link href=/css/app.621a2766.css rel=preload as=style><link href=/css/chunk-vendors.119eb9a9.css rel=preload as=style><link href=/js/app.51ec3ab6.js rel=preload as=script><link href=/js/chunk-vendors.afe9fcbf.js rel=preload as=script><link href=/css/chunk-vendors.119eb9a9.css rel=stylesheet><link href=/css/app.621a2766.css rel=stylesheet></head><body><noscript><strong>We're sorry but doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id=app></div><script src=./config.js></script><script src=/js/chunk-vendors.afe9fcbf.js></script><script src=/js/app.51ec3ab6.js></script></body></html>

36.7.140.111

Last Seen: 2024-05-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1871399378 | 2024-05-10T17:23:18.113846
443 / tcp

nginx

-1725321926 | 2024-05-16T00:25:35.127480
7071 / tcp

nginx1.18.0

274750042 | 2024-05-15T09:07:32.880070
8007 / tcp

nginx1.18.0

-1030354101 | 2024-05-02T20:06:50.299558
8085 / tcp

665863643 | 2024-05-12T22:25:22.165079
8086 / tcp

1628226817 | 2024-05-11T16:43:24.538666
8087 / tcp

1450214159 | 2024-05-17T21:18:37.800948
8089 / tcp

18530155 | 2024-05-17T22:52:52.651369
8123 / tcp

nginx1.18.0

421213216 | 2024-05-17T10:16:51.973532
9091 / tcp

nginx1.18.0

1050601966 | 2024-05-10T20:46:03.696073
9095 / tcp

nginx1.18.0

Products

Pricing

Contact Us

36.7.140.111

Last Seen: 2024-05-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1871399378 | 2024-05-10T17:23:18.113846 443 / tcp

nginx

-1725321926 | 2024-05-16T00:25:35.127480 7071 / tcp

nginx1.18.0

274750042 | 2024-05-15T09:07:32.880070 8007 / tcp

nginx1.18.0

-1030354101 | 2024-05-02T20:06:50.299558 8085 / tcp

665863643 | 2024-05-12T22:25:22.165079 8086 / tcp

1628226817 | 2024-05-11T16:43:24.538666 8087 / tcp

1450214159 | 2024-05-17T21:18:37.800948 8089 / tcp

18530155 | 2024-05-17T22:52:52.651369 8123 / tcp

nginx1.18.0

421213216 | 2024-05-17T10:16:51.973532 9091 / tcp

nginx1.18.0

1050601966 | 2024-05-10T20:46:03.696073 9095 / tcp

nginx1.18.0

Products

Pricing

Contact Us

1871399378 | 2024-05-10T17:23:18.113846
443 / tcp

-1725321926 | 2024-05-16T00:25:35.127480
7071 / tcp

274750042 | 2024-05-15T09:07:32.880070
8007 / tcp

-1030354101 | 2024-05-02T20:06:50.299558
8085 / tcp

665863643 | 2024-05-12T22:25:22.165079
8086 / tcp

1628226817 | 2024-05-11T16:43:24.538666
8087 / tcp

1450214159 | 2024-05-17T21:18:37.800948
8089 / tcp

18530155 | 2024-05-17T22:52:52.651369
8123 / tcp

421213216 | 2024-05-17T10:16:51.973532
9091 / tcp

1050601966 | 2024-05-10T20:46:03.696073
9095 / tcp