There are different applications with official product names in the Information Technology fields and you can identify which of them are running on a specific IP with product filter on Criminal IP.
All you have to do is simply using the filter product;. Using this, you can search for open source products such as nginx, apache, microsoft-iis, and lighttpd, as well as commercial softwares. Take a look at the following search result for sonicwall, often used as a firewall or VPN equipment.
product: filter can be found in IP details
Result when Searched product:sonicwall on Criminal IP Asset Search
As the above displays, we can see that sonicwall’s login page also pops up.
sonicwall login page
How to search for the Microsoft Exchange server
Taking the same approach, you can also search for Microsoft Exchange servers. In this case, you can narrow down your search results by adding port:443 to your filter as smtp protocol, an email protocol, can also be searched. For your information, the Microsoft Exchange server was dealt heavy blow by the Zero-Day vulnerability in March, 2021.
Result when Searched product: “microsoft exchange” port:443 on Criminal IP Asset Search
Outlook Login Page
How to search for the VMWare ESXi server
For another example, as of now, 46,000 results were found when searched for VMWare ESXi. If you want to search for used cases of the 443 port and OVH host server as an application to Microsoft Exchange server example, type as below. Our CIP team has posted an analysis report on VMWare ESXi attack surface vulnerability before. Click on the following link to learn more about the case.
VMWare login page
Criminal IP’s Element Analysis feature allows you to check the full list of products by port. The link below is a product list on the 443 port.
Result when Searched port:443 on Criminal IP Element Analysis
Source: Criminal IP
Leave a Reply