GeneralInformation

Country	Russian Federation
City	Moscow
Organization	LLC BAXET
ISP	LLC Baxet
ASN	AS51659

WebTechnologies

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2022-41742	7.1NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.
CVE-2022-41741	7.8NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.

OpenPorts

80 81 443 500 8080 8443

731197476 | 2024-04-14T13:03:29.504822

80 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Sun, 14 Apr 2024 13:03:29 GMT
Content-Length: 19

111228364 | 2024-04-15T02:16:51.061261

81 / tcp

HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Mon, 15 Apr 2024 02:16:50 GMT
Content-Type: application/octet-stream
Content-Length: 7
Connection: keep-alive

-1714120448 | 2024-04-17T12:46:14.084137

443 / tcp

HTTP/1.0 400 Bad Request
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 310
Expires: Wed, 17 Apr 2024 12:46:13 GMT
Date: Wed, 17 Apr 2024 12:46:13 GMT
Connection: close

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca.fobwifi.com
        Validity
            Not Before: Aug 27 09:49:30 2020 GMT
            Not After : Aug 27 09:49:30 2022 GMT
        Subject: CN=tikvpn-alt
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:b7:4e:3c:85:79:ba:dc:8e:e9:eb:f7:39:
                    45:75:a1:20:ed:9e:6c:3a:44:e5:ba:f5:8a:30:f6:
                    56:45:f2:06:a9:6f:c4:20:5a:6a:3d:32:d0:58:b5:
                    da:15:f1:c3:bf:c2:57:4f:bd:03:18:15:49:7f:e2:
                    d2:72:67:8f:63:4d:1b:51:fa:6d:5f:8b:f3:c6:ad:
                    99:d1:04:a0:84:b7:41:d1:7b:ae:35:6a:c0:4b:64:
                    34:e6:e6:fe:e8:fa:46:68:49:94:a8:ec:89:ef:62:
                    31:6d:1f:4a:02:5f:4e:e4:c4:ad:c2:fb:0f:af:d9:
                    66:7c:d6:7c:51:b4:b5:e4:88:3e:7d:6a:25:91:8d:
                    3d:f5:59:62:f8:4e:7c:47:1c:d4:b9:d0:62:08:d7:
                    ab:b7:38:ab:8a:fa:60:3b:09:c9:8a:a0:11:b6:b7:
                    42:7f:38:bc:47:ca:73:56:9b:16:bb:5b:9e:d1:39:
                    ac:97:cd:4d:cf:89:45:ca:e8:a1:5c:f1:04:d4:ef:
                    90:13:14:0c:85:51:e3:2f:f5:87:40:76:c0:25:b2:
                    be:78:db:e6:ab:86:9a:b9:b0:6c:cc:a0:cf:5e:9e:
                    d6:a1:a8:97:0e:d0:e6:cf:29:1c:ec:a5:a5:3d:e3:
                    07:71:dc:8f:83:29:23:6d:d6:23:39:ea:c0:64:b1:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Key Identifier: 
                CA:23:B6:F2:EE:C7:BD:9E:3F:98:91:EE:29:8B:35:7D:78:55:EA:A7
            X509v3 Authority Key Identifier: 
                keyid:B2:B7:B6:FB:50:3C:E0:6D:26:A2:83:06:58:A9:51:6D:38:3D:B1:31
                DirName:/CN=ca.fobwifi.com
                serial:BE:F8:75:39:C8:6E:12:08
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Key Usage: 
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:*.tikvpn.app, DNS:*.tikvpn.in, DNS:*.tikvpn.net
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        05:df:eb:cd:22:be:7f:2f:26:8d:84:7e:a6:f4:ea:e4:cb:4d:
        86:00:67:fe:db:e5:85:04:0c:d9:47:17:e8:15:75:db:78:63:
        32:32:5d:61:dd:c4:76:64:4e:38:7f:2a:ec:0d:07:cd:c4:25:
        4b:3a:ca:b7:42:80:31:26:50:ca:7c:35:7f:bf:d5:58:80:49:
        70:62:c9:2d:ce:f9:d8:2d:10:74:95:a7:16:74:f2:40:e4:dc:
        f8:e6:41:b4:92:29:26:73:13:09:eb:47:d7:8b:29:3e:1a:37:
        95:f8:c1:40:c6:10:a3:1a:72:93:de:6f:5b:d9:07:c2:35:bf:
        f5:f9:06:c6:96:2a:fe:a5:41:28:e8:f7:11:10:ab:ad:75:c8:
        32:3b:55:b6:28:19:b1:24:53:ca:cb:a8:5b:70:27:df:71:7e:
        8d:d9:67:97:cc:92:f1:c8:5d:e4:eb:ae:29:67:6e:d1:56:8a:
        d0:5d:26:86:29:2a:17:a2:78:41:44:da:85:55:f3:0c:28:fc:
        d2:f5:25:c6:fb:cb:f8:30:ee:7b:2f:28:df:24:39:98:d5:b4:
        4c:fa:d6:e8:c5:e3:76:59:8f:af:7b:50:e8:8c:d7:a1:7c:f7:
        6f:df:84:9f:c7:f3:b0:49:d5:01:a2:c0:5c:64:93:8d:00:66:
        8a:fa:31:d9

1485674157 | 2024-04-15T22:31:05.455226

500 / udp

VPN (IKE)

Initiator SPI: 7465736e6b6b7276
Responder SPI: 7074657a66683463
Next Payload: RESERVED
Version: 2.0
Exchange Type: DOI Specific Use
Flags:
    Encryption:     False
    Commit:         False
    Authentication: False
Message ID: 00000000
Length: 36

334186255 | 2024-04-12T13:04:26.021392

8080 / tcp

HTTP/1.1 200 OK
Date: Fri, 12 Apr 2024 13:04:25 GMT
Content-Length: 476
Content-Type: text/html; charset=utf-8

-898720629 | 2024-04-12T23:40:11.105561

8443 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.23.1
Date: Fri, 12 Apr 2024 23:40:11 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca.fobwifi.com
        Validity
            Not Before: Jan 30 07:37:48 2023 GMT
            Not After : Jan 30 07:37:48 2024 GMT
        Subject: CN=*.tikvpn.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:2f:18:21:cf:a5:d8:89:ec:b7:7e:74:5d:
                    2f:68:71:7a:8c:ef:8e:e5:1a:54:85:c4:9d:bd:26:
                    f4:93:61:66:c3:4c:b5:24:36:a2:43:50:97:f7:97:
                    0c:60:dd:3f:5a:e7:06:2e:02:65:77:b7:5a:45:4d:
                    1c:5c:56:0b:e2:b6:19:08:b5:83:e8:37:59:a5:e2:
                    c0:62:a7:27:af:e0:00:81:dc:de:b1:d4:0f:cf:2b:
                    3f:1c:34:91:f0:64:15:5a:87:74:e9:4e:9a:48:52:
                    b5:d5:56:4a:cb:ef:bd:d3:9a:c9:b5:61:7d:48:77:
                    df:d4:fb:1f:24:ac:72:28:0f:64:73:25:bd:bc:6c:
                    78:c3:9b:a1:bc:56:30:29:99:23:06:11:71:5a:b7:
                    b3:e3:11:4a:93:c2:98:18:a4:c0:41:4b:56:bd:cb:
                    41:25:9f:f8:e7:b5:82:02:4f:b9:a4:03:1b:1f:bf:
                    41:b7:eb:5e:d9:87:d4:25:7e:69:82:0e:04:59:58:
                    3c:7d:5d:88:89:d2:9c:0a:b5:a0:c2:9c:6c:aa:5f:
                    cc:6b:59:45:0c:a4:e0:d7:82:92:45:68:dd:15:f0:
                    a6:ca:ef:71:84:3e:58:cd:17:87:4a:45:2c:14:1c:
                    b5:51:df:7d:36:ca:b7:83:8f:75:f7:4d:19:4b:7f:
                    76:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Key Identifier: 
                1C:1B:81:12:43:4B:EF:B2:BA:46:3F:BF:36:18:F0:6F:74:55:D4:B1
            X509v3 Authority Key Identifier: 
                keyid:B2:B7:B6:FB:50:3C:E0:6D:26:A2:83:06:58:A9:51:6D:38:3D:B1:31
                DirName:/CN=ca.fobwifi.com
                serial:BE:F8:75:39:C8:6E:12:08
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Key Usage: 
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:*.tikvpn.com, DNS:*.tikvpn.in, DNS:*.tikvpn.net, DNS:*.tikvpn.app
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1f:3e:8d:b5:c1:85:1f:ea:bc:51:2f:c0:31:14:93:6f:da:51:
        68:cf:cc:7d:8d:ac:cd:c2:c9:fc:a2:0d:f4:79:b2:3f:2c:8e:
        cb:61:a4:2f:23:4b:6c:82:e2:2f:81:60:20:b3:1d:1b:c8:19:
        7a:9c:64:67:60:5f:59:d0:fe:76:94:62:e7:27:d5:3b:a0:dc:
        6e:9e:14:77:9f:80:3c:8d:a1:3d:3f:09:b8:6c:14:64:d1:68:
        f2:fc:57:08:e2:a6:2d:4d:35:8b:4e:40:be:be:e8:92:22:af:
        05:84:93:8b:d4:40:05:c2:fe:78:af:cf:9a:90:14:a5:ef:c1:
        81:5b:55:cd:5c:8b:cf:0b:34:4a:f4:bb:dd:17:9f:f8:8c:40:
        9b:6d:4c:07:33:6a:66:68:2a:1a:f8:d5:0d:d5:f5:44:50:01:
        70:d7:f3:7a:6f:2c:01:f4:c9:9b:49:28:16:49:ac:f4:ed:2a:
        2b:85:c6:0d:27:a4:6b:eb:e1:9b:1a:9a:72:8e:3c:dd:fd:e0:
        2c:2d:20:b0:33:63:4c:b1:65:2f:3c:bb:c4:1a:40:c8:0f:f4:
        ab:40:5a:9f:bb:34:88:f3:1f:4d:f9:37:b4:94:4c:ae:04:04:
        17:1f:84:c5:de:c7:2a:37:94:6b:07:0f:bb:d0:24:d4:ad:6b:
        00:b3:75:bd

46.17.45.153

Last Seen: 2024-04-17

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

731197476 | 2024-04-14T13:03:29.504822
80 / tcp

111228364 | 2024-04-15T02:16:51.061261
81 / tcp

nginx1.23.1

-1714120448 | 2024-04-17T12:46:14.084137
443 / tcp

AkamaiGHost

1485674157 | 2024-04-15T22:31:05.455226
500 / udp

334186255 | 2024-04-12T13:04:26.021392
8080 / tcp

-898720629 | 2024-04-12T23:40:11.105561
8443 / tcp

nginx1.23.1

Products

Pricing

Contact Us

46.17.45.153

Last Seen: 2024-04-17

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

731197476 | 2024-04-14T13:03:29.504822 80 / tcp

111228364 | 2024-04-15T02:16:51.061261 81 / tcp

nginx1.23.1

-1714120448 | 2024-04-17T12:46:14.084137 443 / tcp

AkamaiGHost

1485674157 | 2024-04-15T22:31:05.455226 500 / udp

334186255 | 2024-04-12T13:04:26.021392 8080 / tcp

-898720629 | 2024-04-12T23:40:11.105561 8443 / tcp

nginx1.23.1

Products

Pricing

Contact Us

731197476 | 2024-04-14T13:03:29.504822
80 / tcp

111228364 | 2024-04-15T02:16:51.061261
81 / tcp

-1714120448 | 2024-04-17T12:46:14.084137
443 / tcp

1485674157 | 2024-04-15T22:31:05.455226
500 / udp

334186255 | 2024-04-12T13:04:26.021392
8080 / tcp

-898720629 | 2024-04-12T23:40:11.105561
8443 / tcp