GeneralInformation

Hostnames	firma-optik.ru autodiscover.firma-optik.ru mail.firma-optik.ru owa.firma-optik.ru www.firma-optik.ru ideal-optica.ru
Domains	firma-optik.ru ideal-optica.ru
Country	Russian Federation
City	Moscow
Organization	JSC Datacenter
ISP	JSC IOT
ASN	AS29182

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2019(1)

CVE-2019-20372

5.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts

80 123 443

80 / tcp

-1984879341 | 2025-03-05T13:46:35.748378

Hashes

hash

-1377090614

http.dom_hash

1239617585

http.html_hash

-1984879341

http.server_hash

532903735

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.16.1
Date: Wed, 05 Mar 2025 13:46:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://37.46.131.74:443/

Vulnerabilities

3 1

123 / udp

-2037328890 | 2025-03-05T07:40:01.038717

NTP
protocolversion: 3
stratum: 0
leap: 3
precision: 0
rootdelay: 0.0
rootdisp: 0.0
refid: 1380013125
reftime: 0.0
poll: 3

443 / tcp

1363052987 | 2025-03-11T16:06:31.849381

Hashes

hash

-2075624551

http.dom_hash

427300722

http.html_hash

1363052987

http.server_hash

532903735

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.16.1
Date: Tue, 11 Mar 2025 16:06:31 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c6:36:c0:f7:0c:18:d5:76:37:d4:72
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R3 DV TLS CA 2020
        Validity
            Not Before: Jan 23 09:54:22 2025 GMT
            Not After : Feb 24 09:54:21 2026 GMT
        Subject: CN=www.firma-optik.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b7:59:da:00:f7:70:31:56:2e:38:52:6e:2c:6c:
                    d1:e0:84:51:53:67:94:83:c5:f7:ba:00:15:1b:d2:
                    f2:4f:b0:c0:59:fb:df:34:b1:8f:1e:ff:92:2e:16:
                    8d:d8:bb:9b:4d:53:0f:0e:fa:4e:02:99:02:9c:6e:
                    4f:0f:91:4d:19:5c:d5:1e:b1:b8:11:2c:96:2d:99:
                    73:d1:35:9b:ee:71:5e:b4:72:42:b2:fd:c6:41:2a:
                    6b:b3:c3:71:b6:35:da:24:fc:a5:9c:90:cc:dd:31:
                    18:06:d9:16:8e:f3:7c:d3:92:b1:f9:b7:66:da:5d:
                    7b:73:df:8a:58:ab:29:8c:19:58:da:a6:07:84:0e:
                    7d:11:68:60:e6:0b:e7:da:92:a9:00:22:28:4d:31:
                    82:1e:48:63:08:c5:30:02:8c:b8:ae:35:c0:6e:d6:
                    7e:c5:35:ff:df:67:3f:64:ea:44:f8:21:c9:44:8a:
                    5d:c8:c3:53:ba:06:ac:8b:46:c4:10:80:d5:b0:d7:
                    92:99:78:fe:b0:23:fc:fa:1c:39:ca:57:e9:9c:89:
                    f7:74:bf:3c:03:13:3a:38:22:43:01:77:c3:3f:63:
                    11:45:df:50:ae:d9:9b:c1:27:6d:35:38:62:52:59:
                    1e:95:31:89:7b:08:ad:4c:ef:c6:6d:7e:11:8f:47:
                    ac:45:bf:f9:a4:fd:dc:20:40:39:d0:7f:43:97:f6:
                    52:1d:2f:b5:80:ce:d6:ad:b1:d4:7b:24:f1:10:64:
                    78:e5:9f:80:23:97:0c:3c:60:bf:db:97:00:d4:0b:
                    98:b7:35:89:8f:7b:f9:8e:d4:36:d6:1f:60:ff:a6:
                    ba:bf:fb:b5:f2:c9:45:e8:47:3a:de:ac:42:80:53:
                    10:85:01:1b:15:8a:45:78:68:13:d5:9e:88:fa:96:
                    92:cb:50:5e:1b:f4:0b:2c:23:9d:a4:4c:e2:72:6b:
                    a4:38:a3:dc:d0:4c:50:9a:95:45:9a:1c:6c:b9:aa:
                    c2:33:b9:4d:68:7c:c0:cb:e8:15:72:c8:78:ee:76:
                    19:fa:ff:f4:79:78:aa:9e:44:64:98:f4:90:06:e0:
                    a5:fd:c8:29:80:49:0d:a8:76:c4:bc:6c:1f:a6:f8:
                    df:cb:8f:19:46:f0:05:7a:c8:c1:d8:21:ac:52:e5:
                    b1:06:4c:8e:24:13:94:9d:45:c8:14:86:00:2e:f5:
                    a7:db:b6:8b:71:d1:ba:20:e0:b1:b8:10:c9:4f:7c:
                    e3:06:e7:92:3c:63:d0:d9:5e:e9:3a:ae:f3:2e:74:
                    ea:6b:dc:6e:28:e7:50:0d:0a:b4:86:02:c6:51:4a:
                    b9:ff:51:98:05:09:67:79:4d:80:31:a0:8e:93:8e:
                    b0:12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt
                OCSP - URI:http://ocsp.globalsign.com/gsgccr3dvtlsca2020
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.10
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsgccr3dvtlsca2020.crl
            X509v3 Subject Alternative Name: 
                DNS:www.firma-optik.ru, DNS:autodiscover.firma-optik.ru, DNS:mail.firma-optik.ru, DNS:owa.firma-optik.ru, DNS:firma-optik.ru
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                0D:98:C0:73:7F:AB:BD:BD:D9:47:4B:49:AD:0A:4A:0C:AC:3E:C7:7C
            X509v3 Subject Key Identifier: 
                D8:94:2E:D6:3E:4A:CA:F9:7D:BB:79:F8:73:B9:1A:30:65:7A:74:BC
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Jan 23 09:54:23.857 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:DB:4C:0B:BC:12:8A:AA:E4:0E:0F:8A:
                                B3:AA:A0:D9:09:6D:08:0B:7C:BA:EF:88:2A:AA:E6:C3:
                                53:8A:83:BB:62:02:20:10:E4:B4:08:C0:A2:61:A0:81:
                                F8:22:D5:04:9D:D4:30:21:F4:22:DA:24:F8:42:5E:1B:
                                68:EB:E8:63:48:07:4B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Jan 23 09:54:23.834 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E4:7F:8D:31:8D:EC:B9:93:65:02:F7:
                                1E:9B:49:90:F0:9B:32:17:C6:AD:03:24:E1:9F:55:5B:
                                32:92:98:C6:E0:02:21:00:C2:6A:A7:74:92:F0:D8:2A:
                                2F:34:73:DD:78:3C:53:06:20:55:D3:93:26:B2:D5:BD:
                                CC:08:5F:CE:E3:BB:02:A8
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Jan 23 09:54:23.876 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:8F:8A:64:A9:BA:7D:10:E4:7E:AF:0A:
                                27:8B:8A:0E:F2:89:BB:5C:BF:B2:52:A0:9B:6B:97:38:
                                5D:B3:EB:04:05:02:20:4D:67:30:1C:F2:49:C5:88:D5:
                                00:B7:07:C6:D4:B0:E9:DF:57:47:7C:99:54:7A:0B:77:
                                F5:A3:80:45:87:23:D6
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        27:0c:85:e1:d0:b5:d8:37:0c:81:6f:da:62:9b:9f:d6:0b:9d:
        f1:34:4d:35:05:c9:ba:2c:b6:14:26:1f:b4:75:31:3d:9b:1a:
        f3:83:ce:21:9a:43:85:11:28:4e:f5:e7:34:63:9b:34:21:d5:
        df:dd:0d:39:85:56:7f:e6:9d:5a:2e:71:aa:fd:f5:bb:12:00:
        26:dc:81:c1:04:61:56:d2:c1:22:f1:3d:42:2b:d8:28:c1:b8:
        72:36:1a:e8:b3:f7:e2:b6:fd:f5:69:d1:d4:cd:f4:a1:9c:d6:
        fc:50:a9:41:61:8f:6a:79:fb:bd:db:85:a1:83:7b:bf:30:f7:
        0c:b9:6d:dd:46:b7:7a:a2:a8:49:73:37:31:ac:52:97:00:78:
        c2:ab:11:cd:7a:bf:7d:bb:04:4f:9e:dc:45:c5:79:a1:24:1b:
        64:4a:0f:d6:ab:77:a4:ba:52:59:b0:6c:ef:32:07:f1:1b:12:
        bf:40:0f:57:5a:97:2e:af:d5:d2:4e:b2:50:66:3a:7a:22:b3:
        b4:92:4a:61:b9:d5:4f:4d:ee:e2:d7:3b:1c:ee:a3:b3:f0:1c:
        bb:e1:41:ef:97:f5:00:45:d2:0d:55:99:44:72:8a:f7:61:5c:
        d3:b7:2f:a0:46:bc:6b:e6:97:b0:ab:22:bb:b3:d1:c7:85:86:
        ae:26:2e:2e

Vulnerabilities

3 1

37.46.131.74

Last Seen: 2025-03-11

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

-1984879341 | 2025-03-05T13:46:35.748378

Hashes

nginx1.16.1

123 / udp

-2037328890 | 2025-03-05T07:40:01.038717

443 / tcp

1363052987 | 2025-03-11T16:06:31.849381

Hashes

nginx1.16.1

Products

Pricing

Contact Us

37.46.131.74

Last Seen: 2025-03-11

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp -1984879341 | 2025-03-05T13:46:35.748378

Hashes

nginx1.16.1

123 / udp -2037328890 | 2025-03-05T07:40:01.038717

443 / tcp 1363052987 | 2025-03-11T16:06:31.849381

Hashes

nginx1.16.1

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-1984879341 | 2025-03-05T13:46:35.748378

123 / udp

-2037328890 | 2025-03-05T07:40:01.038717

443 / tcp

1363052987 | 2025-03-11T16:06:31.849381