GeneralInformation

Hostnames	yuriy1.lukaschuk.fvds.ru finance.praktika.fit kom.praktika.fit mailing.praktika.fit mol.praktika.fit report.praktika.fit sin.praktika.fit teh.praktika.fit worldfitnes.online worldfitnes.ru www.worldfitnes.ru
Domains	fvds.ru praktika.fit worldfitnes.online worldfitnes.ru
Country	Russian Federation
City	Moscow
Organization	JSC Datacenter
ISP	JSC IOT
ASN	AS29182
Operating System	Ubuntu

WebTechnologies

Database managers

Databases

JavaScript libraries

Programming languages

PHP

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-25727	In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
CVE-2022-23808	4.3An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.
CVE-2022-23807	4.0An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances.
CVE-2022-0813	5.0PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2020-22452	SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.

OpenPorts

21 80 225 443

-1062991961 | 2024-05-16T19:03:12.672157

21 / tcp

220 (vsFTPd 3.0.5)
530 Permission denied.
530 Please login with USER and PASS.
211-Features:
 EPRT
 EPSV
 MDTM
 PASV
 REST STREAM
 SIZE
 TVFS
211 End

-394987840 | 2024-05-17T11:43:02.681060

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 17 May 2024 11:43:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: pma_lang=en; expires=Sun, 16-Jun-2024 11:43:02 GMT; Max-Age=2592000; path=/; HttpOnly; SameSite=Strict
Set-Cookie: phpMyAdmin=07jnmp7ctveporr9g7jc9og8pt; path=/; HttpOnly
X-ob_mode: 1
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' ;style-src 'self' 'unsafe-inline' ;img-src 'self' data:  *.tile.openstreetmap.org;object-src 'none';
X-Content-Security-Policy: default-src 'self' ;options inline-script eval-script;referrer no-referrer;img-src 'self' data:  *.tile.openstreetmap.org;object-src 'none';
X-WebKit-CSP: default-src 'self' ;script-src 'self'  'unsafe-inline' 'unsafe-eval';referrer no-referrer;style-src 'self' 'unsafe-inline' ;img-src 'self' data:  *.tile.openstreetmap.org;object-src 'none';
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow
Expires: Fri, 17 May 2024 11:43:02 +0000
Cache-Control: no-store, no-cache, must-revalidate,  pre-check=0, post-check=0, max-age=0
Pragma: no-cache
Last-Modified: Fri, 17 May 2024 11:43:02 +0000
Vary: Accept-Encoding

-277813891 | 2024-05-08T06:11:06.866491

225 / tcp

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBiJ7rW7xx+Jgd2lXWlGiZJ1
RJTUSEPdk151aHS+NcEkfM04IEntc+UROoeuNYbWNAyue9pZy52fkQA1dG3lCDM=
Fingerprint: 26:d0:24:ae:c1:ff:59:fd:f7:20:d0:4c:54:c8:05:ac

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-554746519 | 2024-05-16T09:28:45.504916

443 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 16 May 2024 09:28:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:20:a5:0c:04:2c:2d:e2:4f:7c:e9:5f:bd:6c:5c:31:eb:38
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: May 13 09:20:32 2024 GMT
            Not After : Aug 11 09:20:31 2024 GMT
        Subject: CN=finance.praktika.fit
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:d3:6c:67:d8:d8:c1:9a:5c:c2:76:6a:d6:9e:42:
                    ce:ea:8e:47:bb:7d:2d:fc:5e:22:27:7d:0e:55:44:
                    7c:5c:7a:0f:22:fc:73:6f:32:17:13:44:9d:2b:9c:
                    27:92:0e:b2:df:d1:31:9f:e8:9a:22:b9:02:d6:cc:
                    de:c3:f5:1a:ce
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                17:57:06:6E:E9:55:AB:43:1B:16:F2:BA:8E:B9:F0:16:57:DB:1C:B2
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:finance.praktika.fit, DNS:kom.praktika.fit, DNS:mailing.praktika.fit, DNS:mol.praktika.fit, DNS:report.praktika.fit, DNS:sin.praktika.fit, DNS:teh.praktika.fit, DNS:worldfitnes.online, DNS:worldfitnes.ru, DNS:www.worldfitnes.ru
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : May 13 10:20:32.304 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B0:1A:E0:22:5A:67:CC:7B:07:0E:DA:
                                25:3B:8C:4D:41:52:3A:05:79:A0:50:7B:10:9D:B6:0A:
                                A1:AB:F6:64:C5:02:21:00:9A:8E:A2:CE:E2:61:C5:DE:
                                60:14:1E:B9:E5:30:D1:19:BE:BA:F2:3F:3E:44:B7:25:
                                B1:6C:0C:12:55:62:7D:57
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : May 13 10:20:32.338 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BA:AB:CD:07:A6:B7:E8:AB:56:98:70:
                                48:D9:C5:61:CB:0D:F4:D4:85:CD:90:B3:47:0A:2D:A7:
                                6B:C3:69:A5:0C:02:21:00:F0:04:4C:79:73:47:61:27:
                                B8:24:D0:C0:24:6C:D5:50:3C:07:45:A5:07:44:DC:CD:
                                A2:F4:FF:51:FF:9C:D3:CF
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9f:ed:9e:7c:81:c8:d3:a3:1b:d9:22:c2:b3:7b:f9:0e:f0:c9:
        7f:82:00:cd:0e:28:07:1f:8c:cb:77:a1:b7:16:95:bb:eb:8d:
        e6:3b:a4:3a:a7:21:d3:e0:9b:87:aa:3c:37:f5:54:06:3b:5b:
        8d:d5:a5:86:3b:a6:5d:96:1d:ed:e1:71:a2:dc:91:b1:68:9a:
        9a:c4:e4:32:97:01:2e:f4:ce:14:e5:46:15:09:49:eb:98:3d:
        09:43:cf:ca:62:b6:6f:5b:50:18:41:dd:7c:88:e5:b2:04:6b:
        31:81:44:95:30:d5:d1:f2:1f:f2:f3:75:99:5c:92:95:45:8e:
        6f:10:cf:f2:d7:0b:47:3d:61:9f:42:ae:8f:60:18:41:70:35:
        52:81:c5:43:a9:b9:f5:5e:34:3e:b1:8a:63:62:5d:12:41:0e:
        74:e5:67:c3:12:f2:3b:aa:80:37:5c:11:ee:76:26:e0:45:ac:
        2e:43:b1:b6:bd:27:49:97:79:8f:bb:22:28:b2:be:53:8d:3e:
        8e:82:b1:85:3e:61:9d:4a:db:13:a6:6c:e8:08:a5:91:c6:23:
        91:d1:93:ed:e0:da:fb:c6:19:82:60:c3:d1:e6:41:90:ff:87:
        1b:b8:ef:ea:f7:dc:4e:98:12:32:b2:4f:9e:b3:9d:98:41:d6:
        f9:b1:9a:11

185.246.65.20

Last Seen: 2024-05-17

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1062991961 | 2024-05-16T19:03:12.672157
21 / tcp

-394987840 | 2024-05-17T11:43:02.681060
80 / tcp

nginx1.18.0

-277813891 | 2024-05-08T06:11:06.866491
225 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.6

-554746519 | 2024-05-16T09:28:45.504916
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

185.246.65.20

Last Seen: 2024-05-17

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1062991961 | 2024-05-16T19:03:12.672157 21 / tcp

-394987840 | 2024-05-17T11:43:02.681060 80 / tcp

nginx1.18.0

-277813891 | 2024-05-08T06:11:06.866491 225 / tcp

OpenSSH8.9p1 Ubuntu-3ubuntu0.6

-554746519 | 2024-05-16T09:28:45.504916 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

-1062991961 | 2024-05-16T19:03:12.672157
21 / tcp

-394987840 | 2024-05-17T11:43:02.681060
80 / tcp

-277813891 | 2024-05-08T06:11:06.866491
225 / tcp

-554746519 | 2024-05-16T09:28:45.504916
443 / tcp