Search for Applications Exposed to Attack Surface Using Product Filter on Asset Search

There are different applications with official product names in the Information Technology fields and you can identify which of them are running on a specific IP with product filter on Criminal IP.

All you have to do is simply using the filter product;. Using this, you can search for open source products such as nginx, apache, microsoft-iis, and lighttpd, as well as commercial softwares. Take a look at the following search result for sonicwall, often used as a firewall or VPN equipment.

product: filter can be found in IP details

product:sonicwall

Result when Searched product:sonicwall on Criminal IP Asset Search

As the above displays, we can see that sonicwall’s login page also pops up.

sonicwall login page

How to search for the Microsoft Exchange server

Taking the same approach, you can also search for Microsoft Exchange servers. In this case, you can narrow down your search results by adding port:443 to your filter as smtp protocol, an email protocol, can also be searched. For your information, the Microsoft Exchange server was dealt heavy blow by the Zero-Day vulnerability in March, 2021.

product: “microsoft exchange” port:443

Result when Searched product: “microsoft exchange” port:443 on Criminal IP Asset Search

Outlook Login Page

How to search for the VMWare ESXi server

For another example, as of now, 46,000 results were found when searched for VMWare ESXi. If you want to search for used cases of the 443 port and OVH host server as an application to Microsoft Exchange server example, type as below. Our CIP team has posted an analysis report on VMWare ESXi attack surface vulnerability before. Click on the following link to learn more about the case.

product: vmware vcenter server as_name: “ovh sas” port:443 

VMWare login page

Criminal IP’s Element Analysis feature allows you to check the full list of products by port. The link below is a product list on the 443 port.

Result when Searched port:443 on Criminal IP Element Analysis

Source: Criminal IP