GeneralInformation

Hostnames	jmsmon.yc.efko.org
Domains	efko.org
Country	Russian Federation
City	Saint Petersburg
Organization	Yandex.Cloud LLC
ISP	Yandex.Cloud LLC
ASN	AS200350

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443 3000

80 / tcp

1651973090 | 2025-03-23T12:38:21.738781

Hashes

hash

-1004244239

http.dom_hash

-2049760045

http.html_hash

1651973090

http.server_hash

-1786963686

http.title_hash

911614014

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 23 Mar 2025 12:38:21 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Thu, 22 Dec 2022 15:19:47 GMT
Connection: keep-alive
ETag: "63a47593-264"
Accept-Ranges: bytes

Vulnerabilities

443 / tcp

-2093658690 | 2025-03-25T20:49:01.176671

Hashes

hash

1341875334

http.dom_hash

-1042576832

http.favicon.hash

2123863676

http.html_hash

-2093658690

http.robots_hash

-1022729730

http.server_hash

-1786963686

http.title_hash

-1035334129

Grafana

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 25 Mar 2025 20:49:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:52:15:f0:12:1d:e9:06:64:95:17:b2:0c:c6:49:98:d1:20
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Feb  2 04:44:50 2025 GMT
            Not After : May  3 04:44:49 2025 GMT
        Subject: CN=jmsmon.yc.efko.org
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:04:ec:bf:af:8b:37:2b:dd:98:0d:ba:c7:31:65:
                    09:75:79:88:0c:dd:3c:64:25:d4:4d:0d:39:0d:43:
                    5c:9b:bd:d1:1d:3f:15:6e:18:a5:9b:23:57:fb:77:
                    db:cf:7b:af:db:3f:c4:f4:64:06:94:e6:cb:62:c2:
                    b6:5b:83:c2:61
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                EE:F9:8A:7B:8F:40:C3:21:CA:98:D4:64:F2:16:26:63:83:16:59:47
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:jmsmon.yc.efko.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb  2 05:43:20.109 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:78:DC:90:C2:45:B6:EA:6F:D3:1D:B8:59:
                                C8:C6:62:99:CA:1C:E6:D7:4A:97:A6:F2:95:09:F6:CD:
                                7A:97:65:E9:02:20:70:17:1A:CB:DA:B7:74:B3:70:98:
                                4A:49:9B:9D:70:8C:A9:02:D7:09:8B:79:A9:FB:48:9F:
                                D0:42:0C:92:D1:AE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Feb  2 05:43:20.342 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F1:E5:49:E0:8A:A2:EB:55:B5:CB:BF:
                                19:7C:6C:49:9C:36:75:E0:FD:78:FC:BF:FF:96:FF:6D:
                                46:95:44:05:A2:02:21:00:CC:06:22:63:40:E3:FE:6C:
                                51:0D:0B:75:E9:AB:CB:B8:1B:DB:44:83:AF:07:5B:ED:
                                54:DD:77:97:83:17:4E:14
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:31:00:ad:26:d7:4c:65:a4:67:d2:09:13:38:ca:ed:
        20:f6:8f:ce:26:03:1b:ff:7c:83:f3:60:9c:50:ab:aa:e1:99:
        1b:7d:a4:e3:d8:bd:0a:04:c8:31:47:01:ce:4f:4f:e1:34:02:
        30:1c:e4:86:b9:d0:24:1e:43:94:64:78:de:4a:41:b2:c7:76:
        f6:5e:7c:91:90:ab:1f:9d:2e:68:c8:87:1f:6b:b3:a4:4e:29:
        f3:41:25:18:b3:13:41:09:f6:fa:97:73:2d

Vulnerabilities

3000 / tcp

916559633 | 2025-03-25T20:48:38.059453

Hashes

hash

99009588

http.dom_hash

-1399918778

http.html_hash

916559633

HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://jmsmon.yc.efko.org/
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Tue, 25 Mar 2025 20:48:29 GMT
Content-Length: 62

51.250.111.250

Last Seen: 2025-03-25

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

1651973090 | 2025-03-23T12:38:21.738781

Hashes

nginx1.18.0

443 / tcp

-2093658690 | 2025-03-25T20:49:01.176671

Hashes

Grafana (Open Source)10.0.1

3000 / tcp

916559633 | 2025-03-25T20:48:38.059453

Hashes

Products

Pricing

Contact Us

51.250.111.250

Last Seen: 2025-03-25

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp 1651973090 | 2025-03-23T12:38:21.738781

Hashes

nginx1.18.0

443 / tcp -2093658690 | 2025-03-25T20:49:01.176671

Hashes

Grafana (Open Source)10.0.1

3000 / tcp 916559633 | 2025-03-25T20:48:38.059453

Hashes

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

1651973090 | 2025-03-23T12:38:21.738781

443 / tcp

-2093658690 | 2025-03-25T20:49:01.176671

3000 / tcp

916559633 | 2025-03-25T20:48:38.059453