178.154.131.216

Regular View Raw Data
Last Seen: 2024-05-15
Tags:
eol-product

GeneralInformation

Hostnames css.yandex.net
img-css.friends.yandex.net
img.yandex.net
imgl.yandex.net
site.yandex.net
static.yandex.net
js.static.yandex.net
lego.static.yandex.net
css.yandex.ru
img.yandex.ru
yandex.st
i.yandex.st
static.yandex.st
www.yandex.st
static.yandex.sx
yastat.net
yastatic-net.ru
yastatic.net
Domains yandex.net yandex.ru yandex.st yandex.sx yastat.net yastatic-net.ru yastatic.net 
Country Russian Federation
City Moscow
Organization Yandex enterprise network
ISP YANDEX LLC
ASN AS13238

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

138170184 | 2024-05-06T03:46:25.607503
  
80 / tcp
-669436478 | 2024-05-15T00:37:22.324089
  
443 / tcp



Contact Us

Shodan ® - All rights reserved