GeneralInformation

Hostnames	btping.octo.uz
Domains	octo.uz
Country	Uzbekistan
City	Tashkent
Organization	Uzbektelekom Joint Stock Company
ISP	"Uzbektelekom" Joint Stock Company
ASN	AS8193

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2021-3618

5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

834175644 | 2024-04-23T08:16:23.473558

80 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 08:16:22 GMT
Content-Type: text/html
Content-Length: 145
Connection: keep-alive
Location: http://championat.asia

-341126049 | 2024-04-20T20:20:08.734442

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.2
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Sat, 20 Apr 2024 20:20:08 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImsweloyNitVb0tYa0p1MWJNWDR0Q2c9PSIsInZhbHVlIjoiZkxNdTFsdXhBdnBVWXZHVE9vYTJ5WWo5bzdzRHBiOWJBTFdnMnByZzNDSVR2blJ6OEhBanJwMTZEMkprT2FneSIsIm1hYyI6IjQzMTIzZWU3ZDMwYzJlYzJjODE4MWE4MTVkNjhmYTM1MWU2OGE2OWU2NDM3ZjRjNjgwMDMxYzU0NzFiOTUwZGMifQ%3D%3D; expires=Sat, 20-Apr-2024 22:20:08 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6ImVzQUFWNkVndTdabTRIUDdpTDdHY3c9PSIsInZhbHVlIjoiTE9mTTczeXJDNVZIZHpHVE15K0pzeXBCSTJmSnJuWkc0SDNrMFhhZ0phcmVSb3I5VngzNzdhXC9GMTQrWmRlOHgiLCJtYWMiOiI3NzMyOGQ5ZWM1NjQwMTc2ZWE4NjJhOWY3MTE2ODAyZDBkMjE1ZGFjZjhhYWQ1M2ViZjM4YmI5YmQyYjk0YTcwIn0%3D; expires=Sat, 20-Apr-2024 22:20:08 GMT; Max-Age=7200; path=/; httponly
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f1:e0:18:1e:8d:21:6a:a1:95:7e:5b:02:d7:65:1c:47:a1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 11 23:21:03 2024 GMT
            Not After : Jun  9 23:21:02 2024 GMT
        Subject: CN=btping.octo.uz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:06:68:a6:c0:c6:64:03:3a:bb:c3:03:51:
                    10:b5:7c:a8:c9:31:e6:6c:ac:19:c9:36:7d:39:d5:
                    c1:d7:5a:5c:bf:b7:a5:34:d9:8d:89:8c:0e:8e:f0:
                    51:9d:57:48:76:b9:56:55:fa:f8:d0:9c:34:e2:99:
                    46:96:0c:72:53:e2:82:f1:aa:a5:8b:a9:09:a4:75:
                    46:b0:80:b6:c0:d4:c5:19:9b:c8:2d:5b:0e:75:2e:
                    88:5c:d7:98:a2:e3:6d:81:03:59:c6:d4:ec:dc:40:
                    b7:60:e5:4a:5a:b1:20:9c:95:7d:bd:fd:a9:b0:f7:
                    5f:2c:1d:dc:a3:a1:63:4a:a7:59:c5:0f:2b:88:4b:
                    4f:eb:ce:f3:6f:94:6c:ab:a2:8d:cc:97:3e:68:f2:
                    35:9c:65:62:19:03:cc:9b:7a:ee:ef:49:65:08:73:
                    9a:40:41:4a:5e:a2:db:78:59:88:9e:7c:c4:b7:8f:
                    9b:88:c4:61:96:5d:9a:16:8d:4f:b9:71:89:97:00:
                    67:4b:62:3f:d1:0d:83:ff:8b:e2:ac:a0:9d:c4:73:
                    27:6e:64:88:7b:b5:fc:eb:c0:cc:cd:03:b1:4d:35:
                    22:2a:0a:27:53:b1:fa:92:2a:0b:a9:03:9c:e2:1a:
                    09:91:fe:71:16:ed:4c:6d:8c:ba:e8:9e:91:60:3e:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                B1:88:E6:BD:A3:55:C9:9C:91:3D:54:E8:B6:37:F8:9B:4E:63:01:E5
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:btping.octo.uz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Mar 12 00:21:03.518 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:60:2C:27:4C:40:49:82:B9:DE:C7:1E:0B:
                                58:C3:CC:59:04:46:20:1A:76:7C:93:0E:22:E8:AA:42:
                                A6:34:57:B1:02:21:00:C4:69:2B:EF:E2:32:27:C5:76:
                                08:8E:E6:F3:C9:9F:C1:D6:48:E7:F1:C0:FF:63:9B:64:
                                D4:90:ED:AD:F9:18:5D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Mar 12 00:21:03.514 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:1D:A2:65:1B:8F:4E:61:E5:C1:06:00:CC:
                                D3:15:3E:2F:D8:EF:EF:2F:80:4F:DA:89:F1:69:67:35:
                                03:82:55:BA:02:21:00:D6:14:0E:D5:E9:F4:2E:03:64:
                                72:9D:07:A0:6D:D5:45:EC:11:3D:47:E7:DA:78:94:3F:
                                2A:93:38:F5:07:E8:A7
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        31:04:59:47:74:9b:6e:2c:2b:18:f6:f7:73:6a:c5:50:23:83:
        a5:3a:91:af:ba:fc:12:46:6c:5c:99:62:5e:e1:5c:c6:13:79:
        64:99:02:74:ba:e6:6c:6c:a4:b1:2f:de:d4:6d:0f:d3:ce:70:
        bf:99:2a:34:2a:31:c1:5a:b8:a2:b0:7e:98:a6:b1:d4:25:3b:
        0e:c1:47:ca:6d:03:b8:bf:0c:26:08:97:49:75:17:d7:6c:4d:
        2c:0d:ae:c9:74:c2:53:5e:c5:ed:62:c2:4c:a6:07:3e:27:75:
        14:c8:60:d3:35:ae:23:ef:56:75:88:df:47:eb:1f:03:ee:5f:
        d1:a9:c0:80:8b:90:06:b2:f3:dd:c6:58:e7:c8:7d:fc:d7:5e:
        78:17:36:a1:c9:dc:74:11:c3:98:3d:36:48:c5:2f:5e:90:4b:
        16:e9:5e:ba:f6:4c:de:49:0b:25:5c:88:fa:3b:6b:b7:15:8f:
        bd:01:e9:6f:9e:cc:13:12:0d:99:db:7f:c7:8c:9b:a1:12:95:
        8f:d7:01:38:29:8a:21:ac:5a:f0:d5:b1:8d:76:54:60:ab:4a:
        37:35:f2:7b:f0:9f:0d:3d:53:fa:98:7e:1b:05:00:1a:0c:97:
        5f:20:e5:97:cb:9d:c6:d8:bf:52:78:3c:57:d9:49:e4:36:ba:
        78:95:bc:83

195.158.29.137

Last Seen: 2024-04-23

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

834175644 | 2024-04-23T08:16:23.473558
80 / tcp

nginx1.20.2

-341126049 | 2024-04-20T20:20:08.734442
443 / tcp

nginx1.20.2

Products

Pricing

Contact Us

195.158.29.137

Last Seen: 2024-04-23

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

834175644 | 2024-04-23T08:16:23.473558 80 / tcp

nginx1.20.2

-341126049 | 2024-04-20T20:20:08.734442 443 / tcp

nginx1.20.2

Products

Pricing

Contact Us

834175644 | 2024-04-23T08:16:23.473558
80 / tcp

-341126049 | 2024-04-20T20:20:08.734442
443 / tcp