GeneralInformation

Hostnames	new.bileton.ru shooter.bileton.ru
Domains	bileton.ru
Country	Russian Federation
City	Kazan
ISP	Autonomous public institution High technology park IT-park
ASN	AS197765

WebTechnologies

Analytics

JavaScript libraries

Programming languages

PHP

UI frameworks

Bootstrap

Web frameworks

Yii

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2021-3618

5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

53 80 443 2000

1608738576 | 2024-04-22T20:32:25.117201

53 / tcp

9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.9
Resolver name: shooter.bileton.ru

1608738576 | 2024-04-25T06:49:13.348793

53 / udp

9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.9
Resolver name: shooter.bileton.ru

772258679 | 2024-05-06T12:00:49.533324

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Mon, 06 May 2024 12:00:49 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://new.bileton.ru/

-440620884 | 2024-05-06T13:27:16.792150

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 06 May 2024 13:27:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 04 May 2024 21:00:00 21MayGMT
Set-Cookie: session=206udk0d9dds9djggepqia64og; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: _csrf-frontend=74b200c69b5f999a6ab4d5133f5b85c84f1240b6f70b8a4af8b46a1cb57203cda%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%22GERRKU5BlZJbzArWkU5WmJ361IRuvdxn%22%3B%7D; path=/; samesite=Lax; HttpOnly

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:88:ff:63:4a:5f:00:64:52:92:20:a7:4c:74:73:80:ae:e4
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  2 12:12:46 2024 GMT
            Not After : Jul  1 12:12:45 2024 GMT
        Subject: CN=new.bileton.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d6:65:a3:d9:03:21:8d:83:9f:d6:0b:6d:7c:75:
                    44:c5:f9:68:7f:b6:f9:1e:88:75:46:57:2a:b3:4f:
                    d9:b7:52:76:b1:17:3a:08:b9:d4:78:0e:6d:5d:16:
                    a3:7a:9b:f0:d3:27:18:22:21:ba:46:d1:b4:63:32:
                    c9:db:6f:7d:38:44:cf:bd:46:b3:cd:d9:ec:e2:65:
                    e7:86:31:6c:7b:91:31:99:16:92:a4:8e:17:39:73:
                    4c:1d:f0:10:a8:d3:b7:7e:67:a7:ff:03:55:14:80:
                    df:5e:5f:86:97:07:84:a6:7d:c7:2c:02:a6:48:07:
                    a1:e5:52:e6:5d:50:27:bd:26:36:f9:83:b4:05:55:
                    8d:fc:23:b9:79:ad:64:c5:64:ca:79:26:19:51:bf:
                    ff:9e:03:a4:f9:89:11:12:5c:f0:aa:a0:02:45:f5:
                    f1:1e:1d:c1:e5:4d:35:3f:c5:6d:00:03:77:9c:93:
                    65:6d:6a:f9:09:60:5e:00:ed:ac:a5:e7:9a:1c:62:
                    0d:3d:0d:cf:ff:bb:09:0e:35:5c:7c:53:ee:f6:81:
                    69:85:e7:7c:66:4e:b9:dd:84:08:cc:cd:ae:00:47:
                    2b:1a:82:6c:f9:3d:a0:dd:aa:b1:d3:af:ce:cf:8a:
                    d5:e6:a2:14:85:67:db:cd:50:56:a9:26:d3:75:cf:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                6D:D2:2F:EF:7C:65:5E:E7:2B:A3:1F:34:51:8D:8B:19:F5:93:E4:23
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:new.bileton.ru
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:98:10:71:09:F0:D6:52:2E:30:80:D2:9E:3F:64:BB:
                                83:6E:28:CC:F9:0F:52:8E:EE:DF:CE:4A:3F:16:B4:CA
                    Timestamp : Apr  2 13:12:47.163 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D4:EC:1F:27:20:B9:C4:F3:7C:51:73:
                                3E:ED:3F:76:10:9A:66:D2:2E:72:3E:F0:90:EF:42:C2:
                                A2:6E:99:E7:8A:02:20:1C:0A:93:0F:48:09:1C:B2:E7:
                                98:39:C5:25:EF:88:F6:22:48:4D:9D:FF:62:95:AE:04:
                                7F:E7:F3:78:62:19:C1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Apr  2 13:12:47.162 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:64:6F:C8:E8:E8:9E:54:45:28:57:DB:47:
                                2F:7A:9D:6F:04:D2:E2:01:C3:FA:DE:7B:01:B6:EB:01:
                                BE:8A:B3:7C:02:20:2A:1B:39:68:79:84:A2:3F:07:A2:
                                5F:2F:AC:00:18:0A:F7:7F:6C:47:22:AF:81:B7:96:7D:
                                B5:4E:A6:F2:8E:24
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        84:ca:e6:f7:09:b3:95:dc:5b:a1:18:62:a2:34:ce:af:b0:26:
        39:b0:fc:58:dc:2a:77:1b:0d:be:7f:f3:8b:7c:b8:d2:69:7c:
        20:4c:e0:4d:7b:f4:cf:4b:6a:24:f3:88:27:ae:9c:ec:fd:1f:
        d1:72:d8:57:40:1a:31:00:0e:4b:2b:d7:b4:cd:cd:73:64:60:
        9d:4a:8e:d8:ba:73:d3:66:2a:c8:a3:e1:8c:88:3d:4a:77:02:
        9d:04:38:f4:09:6b:44:dd:32:22:fb:3b:c1:c6:09:5c:d7:99:
        06:76:b7:02:61:55:24:b2:8e:fc:d1:cc:e6:62:44:99:b4:b8:
        61:5d:b7:13:d1:7a:e3:f2:e5:9d:44:47:2d:86:01:16:2d:df:
        e9:48:a5:50:64:a2:87:4d:f4:5c:af:d2:ae:62:25:32:f9:9b:
        9f:c7:e7:1d:ec:36:8d:1f:9b:7e:f6:a2:d5:61:95:7a:d1:e6:
        11:de:db:5a:21:1f:4a:4d:f6:93:57:ab:56:a4:41:47:95:7a:
        d5:a5:cd:de:79:a9:bd:6e:ea:53:fb:0c:db:be:1a:5b:72:e7:
        b8:e4:12:f9:0b:59:03:35:2f:73:58:96:2e:73:72:57:df:0e:
        3c:06:dd:7e:79:22:57:07:47:86:26:3b:16:cc:ac:06:48:d1:
        0b:91:f6:54

31.13.130.171

Last Seen: 2024-05-06

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1608738576 | 2024-04-22T20:32:25.117201
53 / tcp

1608738576 | 2024-04-25T06:49:13.348793
53 / udp

772258679 | 2024-05-06T12:00:49.533324
80 / tcp

nginx1.20.1

-440620884 | 2024-05-06T13:27:16.792150
443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

31.13.130.171

Last Seen: 2024-05-06

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1608738576 | 2024-04-22T20:32:25.117201 53 / tcp

1608738576 | 2024-04-25T06:49:13.348793 53 / udp

772258679 | 2024-05-06T12:00:49.533324 80 / tcp

nginx1.20.1

-440620884 | 2024-05-06T13:27:16.792150 443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

1608738576 | 2024-04-22T20:32:25.117201
53 / tcp

1608738576 | 2024-04-25T06:49:13.348793
53 / udp

772258679 | 2024-05-06T12:00:49.533324
80 / tcp

-440620884 | 2024-05-06T13:27:16.792150
443 / tcp