GeneralInformation

Hostnames	gstech.3cx.asia 3cx.gstech.com.hk static.reserve.wtt.net.hk
Domains	3cx.asia gstech.com.hk wtt.net.hk
Country	Hong Kong
City	Hong Kong
Organization	HKBN Enterprise Solutions HK Limited
ISP	HKBN Enterprise Solutions HK Limited
ASN	AS9381

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

80 443 5001

2143167989 | 2024-11-03T13:33:32.397332

80 / tcp

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.14.1
Date: Sun, 03 Nov 2024 13:33:34 GMT
Content-Type: text/html
Content-Length: 571
Connection: keep-alive

CVE-2019-9513 CVE-2019-9511 CVE-2021-23017 CVE-2021-3618 CVE-2019-20372 3 moreCVE-2019-9516 CVE-2018-16845 CVE-2023-44487

2143167989 | 2024-10-30T06:24:58.627705

443 / tcp

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.14.1
Date: Wed, 30 Oct 2024 06:24:59 GMT
Content-Type: text/html
Content-Length: 571
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7b:6d:21:b3:bd:d3:d2:0d:22:29:ec:00:fb:c4:09:e7:e0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Oct 25 15:04:28 2024 GMT
            Not After : Jan 23 15:04:27 2025 GMT
        Subject: CN=3cx.gstech.com.hk
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:4b:25:96:06:f4:a2:29:e0:c9:78:e3:a6:
                    53:b3:5a:3b:c3:5f:b1:a2:f5:08:88:a5:a2:1f:8f:
                    e9:69:50:15:2f:fc:ff:09:4e:e6:ff:02:02:d7:c5:
                    4d:97:00:50:c0:43:25:b8:5f:27:05:cc:cf:97:d9:
                    74:f2:7e:e6:5c:43:d3:d8:62:ac:ec:ea:8f:21:cc:
                    e9:ce:bc:f3:af:f6:e6:17:5f:c7:79:88:28:f9:e9:
                    46:d8:50:26:5e:f0:94:6e:f8:70:a0:55:dc:f2:93:
                    7e:10:da:95:3b:c9:94:4e:b0:8c:ef:66:1c:b0:57:
                    ac:5c:c5:78:ba:f1:e1:f1:9e:de:77:d5:27:79:50:
                    eb:4e:c8:a6:3f:90:be:8f:ee:2a:9b:fd:2b:37:a8:
                    d4:85:13:5d:24:b1:36:27:79:d5:d9:08:de:cc:3b:
                    94:06:a3:cf:71:3f:62:8b:cc:2a:1a:96:27:1b:80:
                    8c:56:45:ae:ef:e0:b2:ec:d3:d2:69:ad:2c:12:b2:
                    89:f9:4a:61:df:8a:cc:09:c0:87:4d:ff:74:1d:39:
                    ab:43:9f:41:ae:aa:94:f6:f8:85:8e:99:ee:71:3f:
                    fc:99:ce:68:46:eb:37:44:fe:5e:5c:88:ac:64:5b:
                    74:1e:e0:ff:55:f5:8e:bb:6c:08:f6:26:0f:ca:33:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                B1:B7:82:82:B9:76:B9:22:D0:9E:4A:10:62:A7:7E:17:07:D7:FA:AF
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:3cx.gstech.com.hk
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Oct 25 16:02:58.893 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:67:A1:34:36:BB:8C:A9:9C:B4:0A:3C:E1:
                                A5:E6:EB:F3:10:34:7E:AE:97:07:52:FC:05:B1:3F:99:
                                96:0C:4D:0B:02:21:00:90:14:65:C6:E7:06:2C:E1:42:
                                07:A4:ED:1F:BC:C1:0E:D9:46:29:8C:EC:4C:02:C9:C5:
                                78:0A:71:EB:CA:23:22
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Oct 25 16:02:58.887 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C9:2D:44:1C:17:89:05:78:0D:82:16:
                                13:84:7C:64:47:64:33:89:FB:AC:41:B1:68:71:30:3F:
                                58:5D:44:3E:E8:02:20:33:41:A0:79:DC:87:0E:FA:E6:
                                4B:65:8A:E4:BC:33:E7:A0:F8:72:C0:D4:CA:26:C5:F7:
                                1E:63:65:62:B7:11:C2
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        ce:01:34:ff:d9:af:88:97:d0:c8:47:a1:fe:ff:23:5c:98:db:
        ae:80:68:69:78:ec:40:36:8d:f4:e8:c2:8e:0d:ad:24:70:6c:
        14:e0:ed:53:63:7a:e2:fb:6d:d8:9b:44:31:29:18:30:f1:df:
        4e:0f:93:78:65:2d:c7:ac:6e:60:6e:ec:b6:f8:1a:2b:0c:d8:
        3e:ae:61:fb:59:dc:4e:b6:bb:7d:0d:ea:04:a5:a8:5b:83:53:
        a1:22:94:8c:c8:14:1f:7f:dd:8d:00:5b:23:1f:df:c7:a4:bc:
        b5:2c:99:f9:44:f2:66:f3:e8:22:9d:c5:2a:e4:59:32:2d:b5:
        64:06:07:b8:de:41:06:ac:73:14:73:7c:8c:ce:66:7c:94:69:
        5f:27:c3:25:73:7d:f6:99:d6:82:5e:01:ee:86:5a:32:f0:37:
        6a:4f:b9:cf:70:c2:e7:b4:54:fc:56:ff:4c:de:4d:c5:7d:7a:
        3b:59:1d:11:18:be:98:8c:18:00:3b:e4:11:64:ae:43:eb:67:
        b9:da:70:b3:f6:1e:11:2a:63:a2:92:ef:ae:c7:b3:e7:2d:76:
        c7:8e:92:0c:1a:aa:6c:ea:a6:c6:f4:30:6a:f2:3b:2c:6a:b0:
        f3:3d:df:ba:29:00:bc:3d:ac:53:6b:92:0b:06:18:4d:81:4d:
        45:68:6c:f4

CVE-2019-9513 CVE-2019-9511 CVE-2021-23017 CVE-2021-3618 CVE-2019-20372 3 moreCVE-2019-9516 CVE-2018-16845 CVE-2023-44487

705306977 | 2024-10-29T23:33:52.643144

5001 / tcp

3CX Webclient

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Oct 2024 23:33:52 GMT
Content-Type: text/html
Content-Length: 1703
Last-Modified: Tue, 08 Oct 2024 09:30:43 GMT
Connection: keep-alive
ETag: "6704fbc3-6a7"
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Security-Policy: default-src 'self'; script-src 'self' blob: https://downloads-global.3cx.com https://127.0.0.1:32018 'sha256-RCMl7PJ3K2nMoGZppLZeArO5M70Pbu1k+t6RIHZO7gE=' 'sha256-v6MhWrgXnOZrJTw+mK9MqEYevK8vvSmRZFjINsy76Mw=' 'sha256-Tui7QoFlnLXkJCSl1/JvEZdIXTmBttnWNxzJpXomQjg='; worker-src 'self' blob:; connect-src 'self' https://wmr-cdn.3cx.net https://downloads-global.3cx.com https://www.gravatar.com https://127.0.0.1:32018 https://platform-lookaside.fbsbx.com ws: wss:; img-src * data: blob:; frame-src 'self' docs.3cx.cloud tcx+app:; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; media-src 'self' data:; object-src 'none'; form-action 'self'; base-uri 'self'
Strict-Transport-Security: max-age=31536000
Referrer-Policy: no-referrer
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: credentialless
Cache-Control: no-cache
Permissions-Policy: geolocation=(),accelerometer=(),gamepad=(),magnetometer=(),midi=(),payment=(),serial=(),xr-spatial-tracking=()
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a6:c3:77:49:78:5d:2e:8a:cf:5b:cf:2d:55:15:1a:63:6a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Sep 12 20:36:32 2024 GMT
            Not After : Dec 11 20:36:31 2024 GMT
        Subject: CN=gstech.3cx.asia
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:3c:a4:3d:eb:c5:01:35:de:04:4e:dc:5a:
                    93:45:a8:ea:eb:74:d9:96:91:60:70:35:ca:b9:84:
                    c0:a6:be:69:3e:a3:ab:3f:6f:7f:ca:4f:2e:7a:9c:
                    9d:f7:d8:28:c8:14:8d:c8:53:76:5b:36:8c:d0:70:
                    67:26:15:cf:3e:ab:58:92:8b:16:7c:1b:9d:67:ed:
                    54:9c:cd:7a:bd:3e:fb:b8:de:c7:45:94:03:00:a8:
                    02:35:03:5c:68:46:92:bd:6c:18:c6:07:fa:15:3d:
                    2f:05:91:a1:38:22:28:c0:7c:41:76:d1:ec:aa:10:
                    2a:bc:71:b5:8d:56:66:49:77:97:51:6b:65:76:db:
                    a5:62:c4:41:9e:17:19:cb:fb:05:34:c5:04:28:5c:
                    2e:e3:c7:45:3d:a8:90:d4:48:05:52:bf:9c:20:d5:
                    df:e3:6b:99:2c:7b:ae:2d:44:88:52:51:20:c7:13:
                    ae:3e:3d:8e:a7:80:59:f3:a1:a4:fb:4f:33:0f:4d:
                    16:f4:ce:2b:61:f2:43:c1:d7:3d:44:9c:b3:4e:1d:
                    26:72:a5:f1:9f:e4:1f:69:0b:ee:0c:ad:c4:46:14:
                    a4:d9:d2:81:30:fe:87:e4:63:1b:92:f2:56:86:14:
                    bd:8d:65:5b:d1:62:fb:ed:8c:d3:ed:de:19:1a:58:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                09:B3:06:85:94:2D:38:B7:B3:7A:E4:D3:71:E1:2F:45:54:3F:31:90
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:gstech.3cx.asia
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Sep 12 21:35:02.064 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A2:1E:E5:79:E9:CE:E3:4B:84:D6:49:
                                F7:27:8F:B7:C3:CA:DB:90:DB:B6:48:F4:23:E7:ED:3F:
                                B6:3D:08:60:7F:02:20:49:45:01:03:D9:CB:4D:44:9F:
                                91:E3:D6:5A:3D:D9:02:D7:9C:85:90:D2:29:A4:0D:2B:
                                C1:67:B9:6B:B4:6B:B1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Sep 12 21:35:02.076 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:3A:68:DE:E7:53:F9:92:80:B9:6A:19:DC:
                                A3:5C:89:21:75:BD:77:94:66:73:54:8C:74:3E:0B:B7:
                                3E:B6:0B:14:02:21:00:FD:3C:30:3F:73:FA:F1:BC:54:
                                53:30:8F:97:8F:AA:E8:1E:D5:AC:AD:F1:38:E3:61:E2:
                                F8:3D:52:4A:4F:0E:2C
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        77:20:35:b3:47:ff:5d:c6:ac:5b:fb:19:0b:1b:dd:21:00:c5:
        84:e2:e6:6b:e8:19:c8:d2:19:e9:7d:7c:12:43:5b:2e:f9:52:
        3d:7d:49:ad:18:e2:f0:2d:f8:ea:10:91:1d:5f:7d:cd:98:f0:
        25:f6:8a:49:94:73:2c:72:6f:ec:67:32:41:41:a5:e5:75:93:
        f5:8c:91:e3:f9:4d:c6:91:ce:fd:d5:3e:4b:15:fd:65:8a:8e:
        06:01:5e:f8:55:cc:1c:f8:45:3f:9d:21:fd:5d:bc:5b:25:9b:
        4a:66:fe:5e:55:0f:38:38:06:34:56:02:48:44:6b:0a:58:c7:
        ef:54:f4:2f:52:47:65:c3:ea:12:f8:49:60:65:85:62:86:51:
        d6:ac:d3:ee:fe:7c:e5:18:24:31:3a:0b:b1:69:9c:94:16:cc:
        c6:78:5b:84:9d:34:39:0a:37:e2:88:81:46:64:33:9a:01:7e:
        62:4b:1c:2e:66:6f:b4:29:c6:9b:f0:8c:6e:03:7d:f7:c1:ba:
        ba:09:70:a5:cd:32:86:6e:05:56:07:ed:07:5a:f6:e5:1c:0a:
        10:24:fd:78:ba:3c:92:af:d6:f8:ad:32:6b:ee:1d:5d:df:39:
        20:68:85:cb:cf:12:4b:22:5e:c7:b6:31:27:7c:d1:e4:37:e0:
        2a:3f:f8:c5

218.255.8.54

Last Seen: 2024-11-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

2143167989 | 2024-11-03T13:33:32.397332
80 / tcp

nginx1.14.1

2143167989 | 2024-10-30T06:24:58.627705
443 / tcp

nginx1.14.1

705306977 | 2024-10-29T23:33:52.643144
5001 / tcp

3CX Phone System Management Console

Products

Pricing

Contact Us

218.255.8.54

Last Seen: 2024-11-03

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

2143167989 | 2024-11-03T13:33:32.397332 80 / tcp

nginx1.14.1

2143167989 | 2024-10-30T06:24:58.627705 443 / tcp

nginx1.14.1

705306977 | 2024-10-29T23:33:52.643144 5001 / tcp

3CX Phone System Management Console

Products

Pricing

Contact Us

Vulnerabilities

2143167989 | 2024-11-03T13:33:32.397332
80 / tcp

2143167989 | 2024-10-30T06:24:58.627705
443 / tcp

705306977 | 2024-10-29T23:33:52.643144
5001 / tcp