186.238.48.170
C2 Infrastructure Lumma Indicator 186.238.48.170 Type ip Category C2 Infrastructure Family Lumma Hosting TELEFÔNICA BRASIL S.A Confidence high VT Score 0/94 Source shodan First Seen 2026-04-18 05:03:23 UTC Last Seen 2026-04-25 08:00:05 UTC Shodan View on Shodan ↗
Raw JSON
{
"ip": 3136172202,
"http": {
"status": 200,
"robots_hash": 1714206274,
"redirects": [],
"title_hash": -1015724430,
"securitytxt": null,
"title": "Lumma Despachantes",
"sitemap_hash": null,
"robots": "User-agent: *\nDisallow:\n",
"dom_hash": -290984070,
"headers_hash": 770931567,
"host": "186.238.48.170",
"html": "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n <meta charset=\"UTF-8\"/>\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"/>\n\n <title>Lumma Despachantes</title>\n\n <!-- Fonts -->\n <link rel=\"preconnect\" href=\"https://fonts.googleapis.com\">\n <link rel=\"preconnect\" href=\"https://fonts.gstatic.com\" crossorigin>\n <link href=\"https://fonts.googleapis.com/css2?family=Mulish:wght@400;500;600;700&family=Poppins:wght@300;400;600&display=swap\" rel=\"stylesheet\">\n <link href=\"https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700&family=Readex+Pro:wght@400;600;700&display=swap\" rel=\"stylesheet\">\n <link href=\"https://cdn.jsdelivr.net/npm/@mdi/font@5.x/css/materialdesignicons.min.css\" rel=\"stylesheet\">\n\n <link href=\"https://186.238.48.170/css/app.css\" rel=\"stylesheet\">\n</head>\n\n<body class=\"antialiased\">\n<div id=\"app\">\n\n</div>\n<script src=\"/js/manifest.js?id=147537e28aa3ec696d6308dd8c5896b5\"></script>\n<script src=\"/js/vendor.js?id=7e2a4be9c2131b8ee60bd599b6dd1071\"></script>\n<script src=\"/js/app.js?id=75a07769872ee7223884daff2c219d78\"></script>\n</body>\n</html>\n",
"server_hash": 967792298,
"location": "/",
"components": {
"Nginx": {
"categories": [
"Web servers",
"Reverse proxies"
],
"versions": [
"1.18.0"
]
},
"Ubuntu": {
"categories": [
"Operating systems"
]
}
},
"securitytxt_hash": null,
"server": "nginx/1.18.0 (Ubuntu)",
"sitemap": null,
"html_hash": -1621988565
},
"port": 443,
"transport": "tcp",
"version": "1.18.0",
"location": {
"city": "Campinas",
"region_code": "SP",
"area_code": null,
"longitude": -47.06083,
"latitude": -22.90556,
"country_code": "BR",
"country_name": "Brazil"
},
"vulns": {
"CVE-2023-44487": {
"verified": false,
"ransomware_campaign": "Unknown",
"ranking_epss": 0.9997,
"cvss_v2": null,
"cvss_version": 3,
"summary": "The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.",
"references": [
"http://www.openwall.com/lists/oss-security/2023/10/10/6",
"http://www.openwall.com/lists/oss-security/2023/10/10/7",
"http://www.openwall.com/lists/oss-security/2023/10/13/4",
"http://www.openwall.com/lists/oss-security/2023/10/13/9",
"http://www.openwall.com/lists/oss-security/2023/10/18/4",
"http://www.openwall.com/lists/oss-security/2023/10/18/8",
"http://www.openwall.com/lists/oss-security/2023/10/19/6",
"http://www.openwall.com/lists/oss-security/2023/10/20/8",
"https://access.redhat.com/security/cve/cve-2023-44487",
"https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/",
"https://aws.amazon.com/security/security-bulletins/AWS-2023-011/",
"https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/",
"https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/",
"https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/",
"https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack",
"https://blog.vespa.ai/cve-2023-44487/",
"https://bugzilla.proxmox.com/show_bug.cgi?id=4988",
"https://bugzilla.redhat.com/show_bug.cgi?id=2242803",
"https://bugzilla.suse.com/show_bug.cgi?id=1216123",
"https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9",
"https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/",
"https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack",
"https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125",
"https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715",
"https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve",
"https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764",
"https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088",
"https://github.com/Azure/AKS/issues/3947",
"https://github.com/Kong/kong/discussions/11741",
"https://github.com/advisories/GHSA-qppj-fm5r-hxr3",
"https://github.com/advisories/GHSA-vx74-f528-fxqg",
"https://github.com/advisories/GHSA-xpw8-rcwv-8f8p",
"https://github.com/akka/akka-http/issues/4323",
"https://github.com/alibaba/tengine/issues/1872",
"https://github.com/apache/apisix/issues/10320",
"https://github.com/apache/httpd-site/pull/10",
"https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113",
"https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2",
"https://github.com/apache/trafficserver/pull/10564",
"https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487",
"https://github.com/bcdannyboy/CVE-2023-44487",
"https://github.com/caddyserver/caddy/issues/5877",
"https://github.com/caddyserver/caddy/releases/tag/v2.7.5",
"https://github.com/dotnet/announcements/issues/277",
"https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73",
"https://github.com/eclipse/jetty.project/issues/10679",
"https://github.com/envoyproxy/envoy/pull/30055",
"https://github.com/etcd-io/etcd/issues/16740",
"https://github.com/facebook/proxygen/pull/466",
"https://github.com/golang/go/issues/63417",
"https://github.com/grpc/grpc-go/pull/6703",
"https://github.com/grpc/grpc/releases/tag/v1.59.2",
"https://github.com/h2o/h2o/pull/3291",
"https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf",
"https://github.com/haproxy/haproxy/issues/2312",
"https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244",
"https://github.com/junkurihara/rust-rpxy/issues/97",
"https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1",
"https://github.com/kazu-yamamoto/http2/issues/93",
"https://github.com/kubernetes/kubernetes/pull/121120",
"https://github.com/line/armeria/pull/5232",
"https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632",
"https://github.com/micrictor/http2-rst-stream",
"https://github.com/microsoft/CBL-Mariner/pull/6381",
"https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61",
"https://github.com/nghttp2/nghttp2/pull/1961",
"https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0",
"https://github.com/ninenines/cowboy/issues/1615",
"https://github.com/nodejs/node/pull/50121",
"https://github.com/openresty/openresty/issues/930",
"https://github.com/opensearch-project/data-prepper/issues/3474",
"https://github.com/oqtane/oqtane.framework/discussions/3367",
"https://github.com/projectcontour/contour/pull/5826",
"https://github.com/tempesta-tech/tempesta/issues/1986",
"https://github.com/varnishcache/varnish-cache/issues/3996",
"https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo",
"https://istio.io/latest/news/security/istio-security-2023-004/",
"https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/",
"https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html",
"https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html",
"https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/",
"https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html",
"https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html",
"https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html",
"https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/",
"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487",
"https://my.f5.com/manage/s/article/K000137106",
"https://netty.io/news/2023/10/10/4-1-100-Final.html",
"https://news.ycombinator.com/item?id=37830987",
"https://news.ycombinator.com/item?id=37830998",
"https://news.ycombinator.com/item?id=37831062",
"https://news.ycombinator.com/item?id=37837043",
"https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/",
"https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ",
"https://security.gentoo.org/glsa/202311-09",
"https://security.netapp.com/advisory/ntap-20231016-0001/",
"https://security.netapp.com/advisory/ntap-20240426-0007/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://security.netapp.com/advisory/ntap-20240621-0007/",
"https://security.paloaltonetworks.com/CVE-2023-44487",
"https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14",
"https://ubuntu.com/security/CVE-2023-44487",
"https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/",
"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
"https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event",
"https://www.debian.org/security/2023/dsa-5521",
"https://www.debian.org/security/2023/dsa-5522",
"https://www.debian.org/security/2023/dsa-5540",
"https://www.debian.org/security/2023/dsa-5549",
"https://www.debian.org/security/2023/dsa-5558",
"https://www.debian.org/security/2023/dsa-5570",
"https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487",
"https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/",
"https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/",
"https://www.openwall.com/lists/oss-security/2023/10/10/6",
"https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack",
"https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/",
"http://www.openwall.com/lists/oss-security/2023/10/13/4",
"http://www.openwall.com/lists/oss-security/2023/10/13/9",
"http://www.openwall.com/lists/oss-security/2023/10/18/4",
"http://www.openwall.com/lists/oss-security/2023/10/18/8",
"http://www.openwall.com/lists/oss-security/2023/10/19/6",
"http://www.openwall.com/lists/oss-security/2023/10/20/8",
"http://www.openwall.com/lists/oss-security/2025/08/13/6",
"https://access.redhat.com/security/cve/cve-2023-44487",
"https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/",
"https://aws.amazon.com/security/security-bulletins/AWS-2023-011/",
"https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/",
"https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/",
"https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/",
"https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack",
"https://blog.vespa.ai/cve-2023-44487/",
"https://bugzilla.proxmox.com/show_bug.cgi?id=4988",
"https://bugzilla.redhat.com/show_bug.cgi?id=2242803",
"https://bugzilla.suse.com/show_bug.cgi?id=1216123",
"https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9",
"https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/",
"https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack",
"https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125",
"https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715",
"https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve",
"https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764",
"https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088",
"https://github.com/Azure/AKS/issues/3947",
"https://github.com/Kong/kong/discussions/11741",
"https://github.com/advisories/GHSA-qppj-fm5r-hxr3",
"https://github.com/advisories/GHSA-vx74-f528-fxqg",
"https://github.com/advisories/GHSA-xpw8-rcwv-8f8p",
"https://github.com/akka/akka-http/issues/4323",
"https://github.com/alibaba/tengine/issues/1872",
"https://github.com/apache/apisix/issues/10320",
"https://github.com/apache/httpd-site/pull/10",
"https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113",
"https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2",
"https://github.com/apache/trafficserver/pull/10564",
"https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487",
"https://github.com/bcdannyboy/CVE-2023-44487",
"https://github.com/caddyserver/caddy/issues/5877",
"https://github.com/caddyserver/caddy/releases/tag/v2.7.5",
"https://github.com/dotnet/announcements/issues/277",
"https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73",
"https://github.com/eclipse/jetty.project/issues/10679",
"https://github.com/envoyproxy/envoy/pull/30055",
"https://github.com/etcd-io/etcd/issues/16740",
"https://github.com/facebook/proxygen/pull/466",
"https://github.com/golang/go/issues/63417",
"https://github.com/grpc/grpc-go/pull/6703",
"https://github.com/h2o/h2o/pull/3291",
"https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf",
"https://github.com/haproxy/haproxy/issues/2312",
"https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244",
"https://github.com/junkurihara/rust-rpxy/issues/97",
"https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1",
"https://github.com/kazu-yamamoto/http2/issues/93",
"https://github.com/kubernetes/kubernetes/pull/121120",
"https://github.com/line/armeria/pull/5232",
"https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632",
"https://github.com/micrictor/http2-rst-stream",
"https://github.com/microsoft/CBL-Mariner/pull/6381",
"https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61",
"https://github.com/nghttp2/nghttp2/pull/1961",
"https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0",
"https://github.com/ninenines/cowboy/issues/1615",
"https://github.com/nodejs/node/pull/50121",
"https://github.com/openresty/openresty/issues/930",
"https://github.com/opensearch-project/data-prepper/issues/3474",
"https://github.com/oqtane/oqtane.framework/discussions/3367",
"https://github.com/projectcontour/contour/pull/5826",
"https://github.com/tempesta-tech/tempesta/issues/1986",
"https://github.com/varnishcache/varnish-cache/issues/3996",
"https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo",
"https://istio.io/latest/news/security/istio-security-2023-004/",
"https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/",
"https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html",
"https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html",
"https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/",
"https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html",
"https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html",
"https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html",
"https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/",
"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487",
"https://my.f5.com/manage/s/article/K000137106",
"https://netty.io/news/2023/10/10/4-1-100-Final.html",
"https://news.ycombinator.com/item?id=37830987",
"https://news.ycombinator.com/item?id=37830998",
"https://news.ycombinator.com/item?id=37831062",
"https://news.ycombinator.com/item?id=37837043",
"https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/",
"https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected",
"https://security.gentoo.org/glsa/202311-09",
"https://security.netapp.com/advisory/ntap-20231016-0001/",
"https://security.netapp.com/advisory/ntap-20240426-0007/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://security.netapp.com/advisory/ntap-20240621-0007/",
"https://security.paloaltonetworks.com/CVE-2023-44487",
"https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14",
"https://ubuntu.com/security/CVE-2023-44487",
"https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/",
"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487",
"https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event",
"https://www.debian.org/security/2023/dsa-5521",
"https://www.debian.org/security/2023/dsa-5522",
"https://www.debian.org/security/2023/dsa-5540",
"https://www.debian.org/security/2023/dsa-5549",
"https://www.debian.org/security/2023/dsa-5558",
"https://www.debian.org/security/2023/dsa-5570",
"https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487",
"https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/",
"https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/",
"https://www.openwall.com/lists/oss-security/2023/10/10/6",
"https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack",
"https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/",
"https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487"
],
"epss": 0.94385,
"kev": true,
"cvss": 7.5
},
"CVE-2021-3618": {
"verified": false,
"ranking_epss": 0.69695,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.",
"references": [
"https://alpaca-attack.com/",
"https://bugzilla.redhat.com/show_bug.cgi?id=1975623",
"https://lists.debian.org/debian-lts-announce/2022/11/msg00031.html",
"https://alpaca-attack.com/",
"https://bugzilla.redhat.com/show_bug.cgi?id=1975623",
"https://lists.debian.org/debian-lts-announce/2022/11/msg00031.html"
],
"epss": 0.00615,
"cvss": 7.4
},
"CVE-2021-23017": {
"verified": false,
"ranking_epss": 0.98792,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.",
"references": [
"http://mailman.nginx.org/pipermail/nginx-announce/2021/000300.html",
"http://packetstormsecurity.com/files/167720/Nginx-1.20.0-Denial-Of-Service.html",
"https://lists.apache.org/thread.html/r37e6b2165f7c910d8e15fd54f4697857619ad2625f56583802004009%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.apache.org/thread.html/r4d4966221ca399ce948ef34884652265729d7d9ef8179c78d7f17e7f%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.apache.org/thread.html/r6fc5c57b38e93e36213e9a18c8a4e5dbd5ced1c7e57f08a1735975ba%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.apache.org/thread.html/rf232eecd47fdc44520192810560303073cefd684b321f85e311bad31%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.apache.org/thread.html/rf318aeeb4d7a3a312734780b47de83cefb7e6995da0b2cae5c28675c%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7SFVYHC7OXTEO4SMBWXDVK6E5IMEYMEE/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNKOP2JR5L7KCIZTJRZDCUPJTUONMC5I/",
"https://security.netapp.com/advisory/ntap-20210708-0006/",
"https://support.f5.com/csp/article/K12331123%2C",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"http://mailman.nginx.org/pipermail/nginx-announce/2021/000300.html",
"http://packetstormsecurity.com/files/167720/Nginx-1.20.0-Denial-Of-Service.html",
"https://lists.apache.org/thread.html/r37e6b2165f7c910d8e15fd54f4697857619ad2625f56583802004009%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.apache.org/thread.html/r4d4966221ca399ce948ef34884652265729d7d9ef8179c78d7f17e7f%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.apache.org/thread.html/r6fc5c57b38e93e36213e9a18c8a4e5dbd5ced1c7e57f08a1735975ba%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.apache.org/thread.html/rf232eecd47fdc44520192810560303073cefd684b321f85e311bad31%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.apache.org/thread.html/rf318aeeb4d7a3a312734780b47de83cefb7e6995da0b2cae5c28675c%40%3Cnotifications.apisix.apache.org%3E",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7SFVYHC7OXTEO4SMBWXDVK6E5IMEYMEE/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNKOP2JR5L7KCIZTJRZDCUPJTUONMC5I/",
"https://security.netapp.com/advisory/ntap-20210708-0006/",
"https://support.f5.com/csp/article/K12331123%2C",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"epss": 0.73544,
"cvss": 7.7
},
"CVE-2025-23419": {
"verified": false,
"ranking_epss": 0.88044,
"cvss_v2": null,
"cvss_version": 3,
"summary": "When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
"references": [
"https://my.f5.com/manage/s/article/K000149173",
"http://www.openwall.com/lists/oss-security/2025/02/05/8",
"https://lists.debian.org/debian-lts-announce/2025/03/msg00017.html"
],
"epss": 0.0383,
"cvss": 4.3
}
},
"product": "nginx",
"hash": 1854965108,
"tags": [
"eol-product"
],
"timestamp": "2026-03-26T19:08:34.934148",
"ssl": {
"chain_sha256": [
"77a4f2d00572c487bb40a2dd44f56e928fdcf0a29bd51ce3d7568fe8505d58cf",
"131fce7784016899a5a00203a9efc80f18ebbd75580717edc1553580930836ec"
],
"jarm": "15d3fd16d21d21d00042d43d000000fe02290512647416dcf0a400ccbc0b6b",
"tlsext": [
{
"id": 43,
"name": "supported_versions"
},
{
"id": 51,
"name": "key_share"
},
{
"id": 0,
"name": "server_name"
}
],
"chain": [
"-----BEGIN CERTIFICATE-----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\nGRmJ\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\n0zrLnOrAj/dfrlEWRhCvAgbuwLZX1A2sjNjXoPOHbsPiy+lO1KF8/XY7\n-----END CERTIFICATE-----\n"
],
"versions": [
"-TLSv1",
"-SSLv2",
"-SSLv3",
"-TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"acceptable_cas": [],
"alpn": [],
"cert": {
"sig_alg": "sha256WithRSAEncryption",
"issued": "20251222120907Z",
"expires": "20260322120906Z",
"pubkey": {
"bits": 2048,
"type": "rsa"
},
"version": 2,
"extensions": [
{
"critical": true,
"data": "\\x03\\x02\\x05\\xa0",
"name": "keyUsage"
},
{
"data": "0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02",
"name": "extendedKeyUsage"
},
{
"critical": true,
"data": "0\\x00",
"name": "basicConstraints"
},
{
"data": "\\x04\\x14GUae\\t\\xca ~!\\x0e\\xd5\\xf0\\x802\\x07\\xbb\\x1ecQ\\xdd",
"name": "subjectKeyIdentifier"
},
{
"data": "0\\x16\\x80\\x14\\x00\\xb5)\\xf2-\\x8eo1\\xe8\\x9bL\\xadx>\\xfa\\xdc\\xe9\\x0c\\xd1\\xd2",
"name": "authorityKeyIdentifier"
},
{
"data": "0%0#\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x86\\x17http://r12.i.lencr.org/",
"name": "authorityInfoAccess"
},
{
"data": "0\\x16\\x82\\x14otimiza.lumma.com.br",
"name": "subjectAltName"
},
{
"data": "0\\n0\\x08\\x06\\x06g\\x81\\x0c\\x01\\x02\\x01",
"name": "certificatePolicies"
},
{
"data": "0&0$\\xa0\"\\xa0 \\x86\\x1ehttp://r12.c.lencr.org/117.crl",
"name": "crlDistributionPoints"
},
{
"data": "\\x04\\x81\\xfc\\x00\\xfa\\x00\\x7f\\x00q~\\x95\\xf3\\xc28\\x8am\\xb1\\xe3\\x84I=1\\xe1Z\\xa9b\\x08v-B\\x00\\xe0\\x05\\x0c\\xd0g\\xb5\\xa6a\\xe2\\x00\\x00\\x01\\x9bF,\\'\\xa4\\x00\\x08\\x00\\x00\\x05\\x00\\x04\\xdd\\xf4#\\x04\\x03\\x00H0F\\x02!\\x00\\xc4\\xd9\\x8a\\xaa\\xb80\\xf8\\x1eKz\\xea\\x1f\\x81H\\xcb,9\\xf3\\xeb\\xff-E\\xae5o\\xc5\\xd6\\x8d\\x05\\xccG\\x81\\x02!\\x00\\xb0\\x1a\\xe3K\\xc2\\xb3\\xad\\x98\\xf9\\xd1&\\x05\\x06\\xd4\\x1f\\xb3\\xaa\\xcf\\xe6{\\xdf\\xfe\\x1c\\x81t\\x8dX\\xcc\\xf1\\x16\\x18l\\x00w\\x00d\\x11\\xc4l\\xa4\\x12\\xec\\xa7\\x89\\x1c\\xa2\\x02.\\x00\\xbc\\xabO(\\x07\\xd4\\x1e5\\'\\xab\\xea\\xfe\\xd5\\x03\\xc9}\\xcd\\xf0\\x00\\x00\\x01\\x9bF,.\\x82\\x00\\x00\\x04\\x03\\x00H0F\\x02!\\x00\\xeea\\x87 y \\xee\\xbc\\xe6}\\xf9\\xbf5\\xb2\\x91D\\x87\\x1a\\xa6\\x85\\xad\\x98\\x1a\\x1d\\xaa\\xa2\\xd0\\xabs\\xd2\\x9d7\\x02!\\x00\\x8fJ2g\\xfc\\xa3k&\\x07QB \\xe1\\xc6\\xb4NCJZ\\xd5<\\xe3jDz\\x08\\x14\\x05\\xc7^W\\x83",
"name": "ct_precert_scts"
}
],
"fingerprint": {
"sha256": "77a4f2d00572c487bb40a2dd44f56e928fdcf0a29bd51ce3d7568fe8505d58cf",
"sha1": "9c6ba405d290d45715109a283ca46640500a0af2"
},
"serial": 5.1381352505968755e+41,
"issuer": {
"C": "US",
"CN": "R12",
"O": "Let's Encrypt"
},
"expired": true,
"subject": {
"CN": "otimiza.lumma.com.br"
}
},
"cipher": {
"version": "TLSv1.3",
"bits": 256,
"name": "TLS_AES_256_GCM_SHA384"
},
"trust": {
"revoked": false,
"browser": null
},
"handshake_states": [
"before SSL initialization",
"SSLv3/TLS write client hello",
"SSLv3/TLS read server hello",
"TLSv1.3 read encrypted extensions",
"SSLv3/TLS read server certificate",
"TLSv1.3 read server certificate verify",
"SSLv3/TLS read finished",
"SSLv3/TLS write change cipher spec",
"SSLv3/TLS write finished",
"SSL negotiation finished successfully"
],
"ja3s": "574866101f64002c6421cc329e4d5458",
"ocsp": {}
},
"hostnames": [
"186-238-48-170.customer.tdatabrasil.net.br",
"otimiza.lumma.com.br"
],
"org": "TELEFÔNICA BRASIL S.A",
"data": "HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Thu, 26 Mar 2026 19:08:34 GMT\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IlE5MXpCWm5NMk1YTmgrSGh3SHgwK3c9PSIsInZhbHVlIjoiZndmazBoWG5ncGlYMisvUmRHQ2RRcStDT2FwdVBPOFd0enJNWVJWeDJPek51K1JuTzZHTHgwVzVoci9tV2lObUtjVXdkRlloQkljb0ZoeXd3WHlvdFpXL2ttbnhNbE9NWldmTlN5ckllNlJ3UUF4S0xoYVJWY3dUYXl5VmZieHgiLCJtYWMiOiI3N2ExNmEzOGJiZTc5MzkzOGExMzMyOTc2YmIxYWMzNGMxOTRjNTUxZTMwNGI1ODA3YjdkMmI5NzFkMjY5NWY2IiwidGFnIjoiIn0%3D; expires=Thu, 26-Mar-2026 21:08:34 GMT; Max-Age=7200; path=/; samesite=lax\r\nSet-Cookie: laravel_session=eyJpdiI6Iit3eTBaWXpsckYwNkNjMk9mN25XTFE9PSIsInZhbHVlIjoiZkhyRW5nZWMxTGphRDl2M2xERTlrOUR0TTdIT2N1MU9Gb3FLV0dtTzlrNVI0S0JzNEJHL1pXQ01WZUp2akJYQzY0Um4yN3FReEZYRWM0ZEhFcmtvUGVCRWlTd0dKakpzbGJnMm9ZUGRqdTIyM0hUZFAzUnN3cWk1SDBuY0ptYkgiLCJtYWMiOiIxNzY5ZmNjZjdkNjNjOGIxY2Q5M2RiNjZiZmYyZmY3NmQ2MzZhNjRmMGJjZGU1NWY1NDBlNGE4MWM3MjY5YTdhIiwidGFnIjoiIn0%3D; expires=Thu, 26-Mar-2026 21:08:34 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\n\r\n",
"asn": "AS10429",
"cpe23": [
"cpe:2.3:a:f5:nginx:1.18.0",
"cpe:2.3:o:canonical:ubuntu_linux",
"cpe:2.3:o:linux:linux_kernel"
],
"isp": "TELEFÔNICA BRASIL S.A",
"cpe": [
"cpe:/a:f5:nginx:1.18.0",
"cpe:/o:canonical:ubuntu_linux",
"cpe:/o:linux:linux_kernel"
],
"domains": [
"tdatabrasil.net.br",
"lumma.com.br"
],
"ip_str": "186.238.48.170",
"os": "Ubuntu",
"_shodan": {
"region": "eu",
"module": "https",
"ptr": true,
"options": {},
"id": "1336f40e-1455-4419-bb16-df04c7032a1c",
"crawler": "ff86e688231c6949ffdf668cab6dfe300bd98baf"
}
}