GeneralInformation

Cloud Provider	Alibaba Cloud
Country	Germany
City	Frankfurt am Main
Organization	Alibaba Cloud (Singapore) Private Limited
ISP	Alibaba (US) Technology Co., Ltd.
ASN	AS45102

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 80 443 8080 8083 8085

22 / tcp

-1634596056 | 2025-03-20T11:02:18.047485

SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBASiS6GxlLb74RQnxCxrDBc3
wMNBBNL/fbsfe1nmNyH2yVU+nppwqVirdn9SHwa9Ebj3I5Q3v1QlezZWaXA3OiU=
Fingerprint: 0e:77:f8:5b:e9:83:56:19:66:e3:b7:0b:0a:fc:cf:2a

Kex Algorithms:
	sntrup761x25519-sha512@openssh.com
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	ext-info-s
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

1348252211 | 2025-03-10T08:30:11.737556

Hashes

hash

1968576549

http.dom_hash

-2006505642

http.html_hash

1348252211

HTTP/1.1 404 The backend does not found.
Date: Mon, 10 Mar 2025 08:30:11 GMT
Content-Type: application/json
Content-Length: 66
Connection: keep-alive

443 / tcp

-303492713 | 2025-03-21T00:30:49.850585

Hashes

hash

-2129074061

http.dom_hash

-671173383

http.favicon.hash

607521958

http.html_hash

-303492713

http.server_hash

-1786963686

http.title_hash

-1748486975

ESL Management System

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 21 Mar 2025 00:30:49 GMT
Content-Type: text/html
Content-Length: 1568
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
ETag: "1db3be7b5bb5fa0"
Expires: -1
Last-Modified: Thu, 21 Nov 2024 07:33:51 GMT
Pragma: no-cache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload;

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1a:00:73:4e:26:d9:e3:44:77:3c:db:87:4c:a0:00:95:58
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Mar 20 11:06:11 2025 GMT
            Not After : Jun 18 11:06:10 2025 GMT
        Subject: CN=*.effirox.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:06:bc:fe:39:10:f4:3e:a7:c2:d2:9d:a7:8f:c8:
                    0e:7c:c6:fe:ac:c1:7f:bb:29:96:a7:e0:2a:f0:81:
                    fd:49:5f:94:1c:c3:e0:1a:54:6e:f2:fa:74:87:bb:
                    e1:1d:08:7c:52:b0:7f:7d:a2:01:3c:d9:ef:65:f5:
                    c5:3f:0d:98:37
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                74:93:86:D6:2B:81:3D:3A:72:7A:0E:31:14:C8:05:CD:6B:49:74:13
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.effirox.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://e6.c.lencr.org/89.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Mar 20 12:04:41.742 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F5:1C:BB:48:E7:12:93:EF:26:99:A7:
                                DA:EB:08:87:DB:A6:2A:D1:AB:C4:2B:0B:AC:32:55:76:
                                44:0D:23:72:37:02:20:12:7D:8C:E6:49:95:73:5D:83:
                                38:91:BA:35:9D:A1:C5:AE:3F:1C:D7:D7:1E:EA:9C:BD:
                                D6:7E:3D:62:A5:9E:EA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar 20 12:04:41.756 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:54:42:CA:37:4B:D3:6A:FA:76:7B:F0:3D:
                                9E:3D:7D:35:59:7C:3C:6A:25:94:69:E1:5A:F5:20:58:
                                8E:77:9F:42:02:20:0C:B4:64:35:73:D8:99:9F:CD:79:
                                67:4E:78:DF:E0:6F:B4:C1:A5:BF:1F:5F:A8:DF:DD:E0:
                                9A:28:8D:32:91:2B
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:31:00:e0:b1:95:77:44:bf:c5:f6:2d:06:54:6f:eb:
        81:f6:d4:d0:8d:53:56:44:30:01:ab:cb:6e:03:23:31:db:08:
        55:40:ef:3e:20:9e:9f:c7:4e:22:4b:09:81:54:5b:76:2b:02:
        30:09:8b:a4:19:5f:9a:ed:6d:df:0f:b7:2a:96:80:05:33:f4:
        27:78:2a:82:73:85:1b:8f:6a:73:35:b9:f0:b4:37:f5:3d:a6:
        d3:2a:91:47:6a:4a:e2:26:d6:41:b1:4c:0d

Vulnerabilities

8080 / tcp

1348252211 | 2025-03-12T09:27:42.794100

Hashes

hash

-267962221

http.dom_hash

-2006505642

http.html_hash

1348252211

HTTP/1.1 404 The backend does not found.
Date: Wed, 12 Mar 2025 09:27:42 GMT
Content-Type: application/json
Content-Length: 66
Connection: keep-alive

8083 / tcp

-1088556992 | 2025-03-16T13:12:04.729038

HTTP/1.1 404 The backend does not found.
Date: Sun, 16 Mar 2025 13:12:04 GMT
Content-Type: application/json
Content-Length: 66
Connection: keep-alive

{"error_code":"GW.0101","error_msg":"The backend does not found."}

8085 / tcp

-353976068 | 2025-03-14T19:46:16.962280

HTTP/1.1 404 The backend does not found.
Date: Fri, 14 Mar 2025 19:46:16 GMT
Content-Type: application/json
Content-Length: 66
Connection: keep-alive

{"error_code":"GW.0101","error_msg":"The backend does not found."}

8.209.72.179

Last Seen: 2025-03-21

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

-1634596056 | 2025-03-20T11:02:18.047485

OpenSSH9.6p1 Ubuntu 3ubuntu13.8

80 / tcp

1348252211 | 2025-03-10T08:30:11.737556

Hashes

443 / tcp

-303492713 | 2025-03-21T00:30:49.850585

Hashes

nginx1.18.0

8080 / tcp

1348252211 | 2025-03-12T09:27:42.794100

Hashes

8083 / tcp

-1088556992 | 2025-03-16T13:12:04.729038

8085 / tcp

-353976068 | 2025-03-14T19:46:16.962280

Products

Pricing

Contact Us

8.209.72.179

Last Seen: 2025-03-21

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

22 / tcp -1634596056 | 2025-03-20T11:02:18.047485

OpenSSH9.6p1 Ubuntu 3ubuntu13.8

80 / tcp 1348252211 | 2025-03-10T08:30:11.737556

Hashes

443 / tcp -303492713 | 2025-03-21T00:30:49.850585

Hashes

nginx1.18.0

8080 / tcp 1348252211 | 2025-03-12T09:27:42.794100

Hashes

8083 / tcp -1088556992 | 2025-03-16T13:12:04.729038

8085 / tcp -353976068 | 2025-03-14T19:46:16.962280

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

-1634596056 | 2025-03-20T11:02:18.047485

80 / tcp

1348252211 | 2025-03-10T08:30:11.737556

443 / tcp

-303492713 | 2025-03-21T00:30:49.850585

8080 / tcp

1348252211 | 2025-03-12T09:27:42.794100

8083 / tcp

-1088556992 | 2025-03-16T13:12:04.729038

8085 / tcp

-353976068 | 2025-03-14T19:46:16.962280