GeneralInformation

Hostnames	pepavpn.ru
Domains	pepavpn.ru
Country	Russian Federation
City	Moscow
Organization	Majordomo VDS & Managed Hosting
ISP	Hosting Ltd
ASN	AS43362
Operating System	Ubuntu

WebTechnologies

JavaScript frameworks

React

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443 9090

80 / tcp

68331763 | 2025-03-18T15:46:49.389428

Hashes

hash

-1178671800

http.dom_hash

1239617585

http.html_hash

68331763

http.server_hash

-1552297182

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.17.10 (Ubuntu)
Date: Tue, 18 Mar 2025 15:47:23 GMT
Content-Type: text/html
Content-Length: 179
Connection: keep-alive
Location: https://178.250.242.70/

Vulnerabilities

443 / tcp

-879413918 | 2025-03-18T15:48:10.243682

Hashes

hash

-1045023689

http.dom_hash

2033890071

http.favicon.hash

-2009722838

http.html_hash

-879413918

http.robots_hash

-368785367

http.server_hash

-1552297182

http.title_hash

479417315

React App

HTTP/1.1 200 OK
Server: nginx/1.17.10 (Ubuntu)
Date: Tue, 18 Mar 2025 15:48:44 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 644
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Cache-Control: no-store
Accept-Ranges: bytes
Last-Modified: Sun, 28 Jul 2024 22:50:29 GMT
ETag: W/"284-190fb89c708"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d4:44:86:37:ad:98:87:60:ea:59:26:ac:f3:bd:e3:8f:d0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb 10 15:34:11 2025 GMT
            Not After : May 11 15:34:10 2025 GMT
        Subject: CN=pepavpn.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:ef:d2:29:c1:9d:0e:0b:44:9f:a0:e4:62:
                    10:70:83:fa:d0:98:7f:9b:8e:82:36:2c:45:8a:ed:
                    3f:5f:e3:61:1b:25:88:4a:ea:81:63:65:a4:88:06:
                    ca:b0:64:37:09:75:28:b4:3d:14:ad:e3:d1:1b:c1:
                    45:a9:8d:5e:79:2b:8a:bc:49:cd:aa:94:bb:3a:4a:
                    e9:57:e5:2d:be:fa:49:ba:b6:46:52:1d:6b:7e:d6:
                    cd:a4:f8:6a:86:96:14:52:ff:a9:ba:2e:58:c2:9c:
                    e0:fb:ee:48:e5:fb:70:6a:73:d9:80:18:f3:59:89:
                    ba:b0:af:91:90:26:f4:45:c6:3c:00:65:03:0f:28:
                    66:dc:0a:35:75:85:d7:cd:dd:c4:f1:4f:45:41:1b:
                    07:f3:21:c0:80:32:56:c1:31:ee:20:f7:fb:7c:42:
                    19:b0:85:2f:24:5f:9d:ff:86:e3:28:29:b3:9e:c1:
                    7b:1f:b5:50:71:1b:91:34:95:08:1d:5b:f0:26:5c:
                    d1:ab:90:17:bc:83:ba:a7:fe:f8:99:e3:d9:d3:aa:
                    98:32:6a:a5:ab:ae:bc:96:93:d5:e5:f3:11:e6:88:
                    d6:6e:60:55:5e:88:d1:d7:b6:53:5b:af:c7:d3:4b:
                    2a:c4:ff:12:76:22:a3:6a:24:ee:79:af:c9:99:0c:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                80:CB:15:54:5B:E8:AA:F2:A5:1E:3C:71:25:9C:94:25:21:9A:14:D8
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:pepavpn.ru
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 73:20:22:0F:08:16:8A:F9:F3:C4:A6:8B:0A:B2:6A:9A:
                                4A:00:EE:F5:77:85:8A:08:4D:05:00:D4:A5:42:44:59
                    Timestamp : Feb 10 16:32:41.160 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F5:C3:BA:09:FB:6E:B4:14:08:12:83:
                                4C:16:FF:A5:FE:A5:02:1C:20:AB:10:74:46:C6:60:DA:
                                26:28:23:B8:08:02:20:7A:A4:2E:6C:51:10:02:42:6C:
                                77:A3:6D:49:27:0C:49:91:46:EE:8C:95:66:5E:D3:23:
                                9C:94:CE:9A:F9:DA:BB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 10 16:32:41.182 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3D:DD:EB:76:E9:9E:88:64:E4:12:86:A3:
                                78:FB:77:F5:1B:2F:87:54:BA:95:5C:1C:56:99:C5:B6:
                                B4:B2:1E:61:02:20:26:6E:F4:F2:62:D3:0B:C3:86:DD:
                                8A:B2:2A:CF:E2:8F:14:B9:62:BE:AC:75:21:9D:00:F5:
                                B0:75:E6:47:44:B7
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        c8:13:28:77:c6:5f:6c:41:08:ac:bc:88:b1:e7:1c:ce:8e:fa:
        5e:06:98:fb:cc:c9:c3:f2:a2:70:eb:68:50:a6:31:af:c7:8b:
        35:17:88:93:15:fd:9d:73:a1:07:5a:9a:56:80:a2:57:9c:64:
        b6:fe:5d:42:ac:4f:c5:16:a6:9a:c1:6b:57:d4:da:c0:e9:a8:
        97:c5:24:b6:6c:24:43:f0:6f:4d:61:a7:8b:67:45:53:14:d5:
        10:3a:e0:ec:fa:bb:0e:29:1f:d1:30:ae:c5:3e:81:87:05:ad:
        5d:a5:92:81:c4:46:65:3f:94:5e:90:5d:68:c3:7d:06:8e:87:
        08:54:4f:d5:1a:6d:32:fb:79:39:bd:cf:24:04:5d:72:48:f0:
        9b:cd:ae:1a:1f:ee:46:7c:4e:60:bb:ea:3c:9c:43:93:78:0b:
        a8:46:8e:15:97:20:7b:08:bd:9d:58:f4:9f:9e:7e:d1:ba:e2:
        45:83:81:c3:0a:4f:91:03:d1:c9:91:19:50:1d:46:ce:1b:2d:
        8e:59:15:78:c1:86:96:37:66:80:65:93:34:27:94:46:b7:f6:
        dc:bc:13:df:05:8f:68:f9:ee:c7:27:d6:43:fa:7d:7a:ff:1b:
        b2:5a:09:c0:a6:03:42:95:62:a6:56:10:8f:b8:ac:45:01:d4:
        3c:63:f0:e3

Vulnerabilities

9090 / tcp

-2123370925 | 2025-02-28T19:16:13.251545

Hashes

hash

-1572412494

http.dom_hash

1239617585

http.html_hash

-2123370925

http.server_hash

-1552297182

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx/1.17.10 (Ubuntu)
Date: Fri, 28 Feb 2025 19:20:33 GMT
Content-Type: text/html
Content-Length: 565
Connection: keep-alive

Vulnerabilities

178.250.242.70

Last Seen: 2025-03-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

68331763 | 2025-03-18T15:46:49.389428

Hashes

nginx1.17.10

443 / tcp

-879413918 | 2025-03-18T15:48:10.243682

Hashes

nginx1.17.10

9090 / tcp

-2123370925 | 2025-02-28T19:16:13.251545

Hashes

nginx1.17.10

Products

Pricing

Contact Us

178.250.242.70

Last Seen: 2025-03-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Port 9090 Latest CVSS

OpenPorts

80 / tcp 68331763 | 2025-03-18T15:46:49.389428

Hashes

nginx1.17.10

443 / tcp -879413918 | 2025-03-18T15:48:10.243682

Hashes

nginx1.17.10

9090 / tcp -2123370925 | 2025-02-28T19:16:13.251545

Hashes

nginx1.17.10

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

68331763 | 2025-03-18T15:46:49.389428

443 / tcp

-879413918 | 2025-03-18T15:48:10.243682

9090 / tcp

-2123370925 | 2025-02-28T19:16:13.251545