GeneralInformation

Hostnames	sf4d85cc7.fastvps-server.com
Domains	fastvps-server.com
Country	Estonia
City	Jõhvi
Organization	Network for hosting services
ISP	P.A.G.M. OU
ASN	AS198068

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 143 443 993 7777 8888

80 / tcp

-1921206201 | 2025-03-23T08:03:53.528759

Hashes

hash

-1247978071

http.dom_hash

95874253

http.html_hash

-1921206201

http.server_hash

-1786963686

http.title_hash

-1200705160

FASTPANEL

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 23 Mar 2025 08:03:53 GMT
Content-Type: text/html
Content-Length: 11694
Last-Modified: Mon, 27 Jan 2025 13:13:36 GMT
Connection: keep-alive
ETag: "67978680-2dae"
Accept-Ranges: bytes

Vulnerabilities

143 / tcp

1133575510 | 2025-03-20T11:16:07.149628

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:33:ff:8b:3f:45:c6:38:99:87:5f:b1:20:30:b7:92:85:d8:df:66
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: O=s052d7854.fastvps-server.com Org, CN=s052d7854.fastvps-server.com
        Validity
            Not Before: Mar 26 12:22:24 2021 GMT
            Not After : Mar 26 12:22:24 2022 GMT
        Subject: O=s052d7854.fastvps-server.com Org, CN=s052d7854.fastvps-server.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:9e:3a:48:0f:2e:da:92:3c:88:ab:d8:d3:
                    a2:f9:29:2b:82:b6:e5:f4:a0:bf:70:89:2c:cd:b3:
                    8a:e8:14:54:08:08:1f:d3:6f:50:c5:64:f4:5c:68:
                    0d:8a:80:8a:8f:44:dc:e5:c9:40:50:7d:72:30:c8:
                    15:27:63:f1:a6:f9:cf:3c:89:ed:76:09:ae:8b:dd:
                    b1:72:f3:81:b5:9c:b0:fd:e3:18:ee:d8:be:85:7a:
                    56:08:ce:72:2a:5f:6c:43:70:4c:2b:cc:59:2c:25:
                    05:e4:28:9a:57:56:7c:56:bf:fa:94:6b:01:3e:8e:
                    55:10:04:2a:9e:be:ae:55:bd:17:f8:6c:20:0f:1d:
                    f3:d5:4e:5c:3f:87:29:65:0c:f7:14:05:62:a5:05:
                    70:31:21:ad:96:fa:1b:04:1d:22:dc:77:c6:28:32:
                    25:bd:ea:3c:47:18:e9:ff:1b:08:68:6e:43:e6:76:
                    c3:1c:6f:7e:6b:0c:69:e8:05:bd:70:40:77:27:b1:
                    b3:78:35:9d:54:94:95:a8:72:72:fd:aa:73:8d:0e:
                    33:3e:a3:54:31:cc:a0:00:6e:b7:0f:e7:4c:c0:7f:
                    c9:11:45:1e:5b:55:db:2e:63:c5:44:87:c2:30:6e:
                    c6:29:d3:68:61:09:ab:48:1d:61:84:f6:bf:01:0e:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                62:1F:F9:2A:66:5F:46:C4:38:3A:E8:4D:E5:E4:1A:9B:6D:22:64:F9
            X509v3 Authority Key Identifier: 
                62:1F:F9:2A:66:5F:46:C4:38:3A:E8:4D:E5:E4:1A:9B:6D:22:64:F9
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        44:60:69:1b:10:8c:0c:f3:45:ed:4c:c4:7f:00:b9:11:33:dd:
        bd:5d:eb:8f:ac:39:07:43:be:40:72:14:b9:fa:73:18:d7:47:
        65:28:5f:f5:6b:2b:fc:0c:56:20:7c:66:1f:fd:0f:28:7f:4e:
        46:3a:7d:54:47:a7:7e:e1:fb:a4:45:28:7e:b6:55:f0:6a:e7:
        2e:a6:60:a8:08:78:5d:b4:a6:08:0e:8e:08:c3:87:40:17:30:
        66:83:d3:e2:43:2d:bc:e8:40:03:02:0d:34:02:87:8f:78:0f:
        04:b6:a1:5f:99:5e:28:c1:86:7f:4e:03:6e:5f:92:b6:fa:31:
        8c:1a:db:3d:31:38:1b:48:c0:bb:4e:10:ff:66:93:d1:45:a2:
        0c:7f:b0:72:af:61:18:87:98:75:71:7a:59:cb:bc:96:c9:b3:
        c1:f9:c5:82:c4:43:d9:d4:94:24:b9:62:35:41:47:04:6c:9b:
        76:df:23:6f:63:08:70:65:2d:49:65:b0:69:03:4f:84:4b:3d:
        bd:4f:8d:c3:83:28:a5:16:89:d4:81:20:90:29:e7:f8:f1:0f:
        c1:e6:ec:8a:5a:bf:ff:c6:df:e4:3b:12:d0:93:dc:2c:ce:d8:
        0c:57:be:f2:9b:7d:ad:a8:34:7b:39:15:6f:53:cc:7a:9d:31:
        38:fc:bc:c2

443 / tcp

-1921206201 | 2025-03-22T22:07:11.730252

Hashes

hash

-2123361632

http.dom_hash

95874253

http.html_hash

-1921206201

http.server_hash

-1786963686

http.title_hash

-1200705160

FASTPANEL

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 22 Mar 2025 22:07:11 GMT
Content-Type: text/html
Content-Length: 11694
Last-Modified: Mon, 27 Jan 2025 13:13:36 GMT
Connection: keep-alive
ETag: "67978680-2dae"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:46:c6:01:2a:c7:2a:5b:d1:c1:28:9e:6a:e4:50:0f:12:b8:25:78
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: O=FASTVPS, CN=parking
        Validity
            Not Before: Mar 26 12:22:24 2021 GMT
            Not After : Mar 26 12:22:24 2022 GMT
        Subject: O=FASTVPS, CN=parking
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:56:a4:c7:ec:f1:50:8d:a5:8f:84:0f:60:
                    27:b7:6f:f5:f4:59:4c:b4:cb:15:a6:04:b1:92:c4:
                    51:59:49:87:ab:37:a0:c2:e9:a6:7d:56:5b:50:76:
                    0a:da:78:ac:df:58:64:45:54:22:d5:e9:68:e0:d6:
                    66:8e:bf:ee:78:38:98:07:fc:68:36:09:d7:5c:20:
                    3c:e9:ba:7e:b4:f3:08:04:a4:f6:52:65:89:23:d6:
                    41:b5:fd:3b:68:87:55:89:31:12:cf:b8:6a:91:8f:
                    36:e6:c1:fd:9f:42:9f:06:57:da:43:ec:d9:b4:a4:
                    f9:48:03:65:90:4a:c4:8d:35:95:46:bc:5f:6b:34:
                    ad:cc:e2:eb:ac:0c:e0:a0:e2:ae:76:4f:fd:f5:ac:
                    b2:87:c4:a0:5d:21:7e:5b:a5:0f:09:c4:3b:28:b4:
                    9a:25:bc:7f:86:37:e1:0a:1a:10:13:8c:0a:fb:4a:
                    1e:4b:8e:a8:57:3a:7e:5b:b7:14:05:75:77:da:cb:
                    38:1d:df:f4:64:02:2d:b2:91:c0:be:88:77:36:2c:
                    32:cf:6b:ac:07:43:4c:c1:d8:75:ed:ea:22:d6:1d:
                    54:ef:73:64:e4:37:61:f6:79:50:82:85:79:c8:62:
                    cf:ef:ff:ae:b7:c4:0e:05:87:f9:a5:92:59:78:0c:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BC:3C:49:41:40:D0:DA:46:77:2B:0F:48:17:97:05:34:80:BD:7A:98
            X509v3 Authority Key Identifier: 
                BC:3C:49:41:40:D0:DA:46:77:2B:0F:48:17:97:05:34:80:BD:7A:98
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        cc:43:0e:0e:d6:5a:84:7d:7b:c2:58:9f:95:11:16:38:16:ee:
        b7:21:0f:74:db:90:a7:28:ea:74:7f:76:3f:42:55:c5:08:fa:
        d5:f5:87:d8:99:9c:64:0f:b8:71:a1:f3:7d:e4:c7:b7:c5:45:
        e3:15:a2:d5:c7:19:c7:54:73:3c:70:c5:80:5d:e5:22:a2:08:
        2e:6a:ac:8b:e0:9d:02:54:48:4a:48:08:cd:71:57:20:23:d0:
        a1:8a:39:56:87:76:30:12:75:e5:f7:f3:fc:15:60:88:b0:7c:
        01:af:0a:20:5c:2d:35:e1:62:94:0a:5f:8e:25:28:d6:c6:2b:
        18:87:7f:19:5a:6f:98:dd:b3:86:58:21:85:2d:7c:82:59:b6:
        76:70:e9:52:32:64:56:55:7e:14:06:45:62:80:b8:4d:13:a1:
        a2:36:60:e5:26:d4:4d:c4:c5:e2:97:72:52:18:e4:6f:c2:ef:
        b6:6f:6c:6a:1f:37:aa:ca:6a:3c:72:a7:c1:39:a6:f6:9b:b2:
        f9:81:36:44:0d:2b:d0:54:72:1a:d4:ec:b2:c9:95:db:b4:d2:
        97:af:2f:60:57:d0:bc:ee:71:e0:bd:72:b7:d2:f1:bd:5f:8d:
        77:67:3c:85:e3:41:98:f0:1d:c2:e3:9d:21:92:3b:68:43:c7:
        34:12:6a:cd

Vulnerabilities

993 / tcp

1664207957 | 2025-03-22T13:40:05.174758

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:33:ff:8b:3f:45:c6:38:99:87:5f:b1:20:30:b7:92:85:d8:df:66
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: O=s052d7854.fastvps-server.com Org, CN=s052d7854.fastvps-server.com
        Validity
            Not Before: Mar 26 12:22:24 2021 GMT
            Not After : Mar 26 12:22:24 2022 GMT
        Subject: O=s052d7854.fastvps-server.com Org, CN=s052d7854.fastvps-server.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:9e:3a:48:0f:2e:da:92:3c:88:ab:d8:d3:
                    a2:f9:29:2b:82:b6:e5:f4:a0:bf:70:89:2c:cd:b3:
                    8a:e8:14:54:08:08:1f:d3:6f:50:c5:64:f4:5c:68:
                    0d:8a:80:8a:8f:44:dc:e5:c9:40:50:7d:72:30:c8:
                    15:27:63:f1:a6:f9:cf:3c:89:ed:76:09:ae:8b:dd:
                    b1:72:f3:81:b5:9c:b0:fd:e3:18:ee:d8:be:85:7a:
                    56:08:ce:72:2a:5f:6c:43:70:4c:2b:cc:59:2c:25:
                    05:e4:28:9a:57:56:7c:56:bf:fa:94:6b:01:3e:8e:
                    55:10:04:2a:9e:be:ae:55:bd:17:f8:6c:20:0f:1d:
                    f3:d5:4e:5c:3f:87:29:65:0c:f7:14:05:62:a5:05:
                    70:31:21:ad:96:fa:1b:04:1d:22:dc:77:c6:28:32:
                    25:bd:ea:3c:47:18:e9:ff:1b:08:68:6e:43:e6:76:
                    c3:1c:6f:7e:6b:0c:69:e8:05:bd:70:40:77:27:b1:
                    b3:78:35:9d:54:94:95:a8:72:72:fd:aa:73:8d:0e:
                    33:3e:a3:54:31:cc:a0:00:6e:b7:0f:e7:4c:c0:7f:
                    c9:11:45:1e:5b:55:db:2e:63:c5:44:87:c2:30:6e:
                    c6:29:d3:68:61:09:ab:48:1d:61:84:f6:bf:01:0e:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                62:1F:F9:2A:66:5F:46:C4:38:3A:E8:4D:E5:E4:1A:9B:6D:22:64:F9
            X509v3 Authority Key Identifier: 
                62:1F:F9:2A:66:5F:46:C4:38:3A:E8:4D:E5:E4:1A:9B:6D:22:64:F9
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        44:60:69:1b:10:8c:0c:f3:45:ed:4c:c4:7f:00:b9:11:33:dd:
        bd:5d:eb:8f:ac:39:07:43:be:40:72:14:b9:fa:73:18:d7:47:
        65:28:5f:f5:6b:2b:fc:0c:56:20:7c:66:1f:fd:0f:28:7f:4e:
        46:3a:7d:54:47:a7:7e:e1:fb:a4:45:28:7e:b6:55:f0:6a:e7:
        2e:a6:60:a8:08:78:5d:b4:a6:08:0e:8e:08:c3:87:40:17:30:
        66:83:d3:e2:43:2d:bc:e8:40:03:02:0d:34:02:87:8f:78:0f:
        04:b6:a1:5f:99:5e:28:c1:86:7f:4e:03:6e:5f:92:b6:fa:31:
        8c:1a:db:3d:31:38:1b:48:c0:bb:4e:10:ff:66:93:d1:45:a2:
        0c:7f:b0:72:af:61:18:87:98:75:71:7a:59:cb:bc:96:c9:b3:
        c1:f9:c5:82:c4:43:d9:d4:94:24:b9:62:35:41:47:04:6c:9b:
        76:df:23:6f:63:08:70:65:2d:49:65:b0:69:03:4f:84:4b:3d:
        bd:4f:8d:c3:83:28:a5:16:89:d4:81:20:90:29:e7:f8:f1:0f:
        c1:e6:ec:8a:5a:bf:ff:c6:df:e4:3b:12:d0:93:dc:2c:ce:d8:
        0c:57:be:f2:9b:7d:ad:a8:34:7b:39:15:6f:53:cc:7a:9d:31:
        38:fc:bc:c2

7777 / tcp

1651973090 | 2025-02-26T00:27:53.515248

Hashes

hash

109525581

http.dom_hash

-2049760045

http.html_hash

1651973090

http.server_hash

-1340961475

http.title_hash

911614014

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Feb 2025 00:27:53 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Mon, 24 Jun 2024 08:36:47 GMT
Connection: keep-alive
ETag: "6679301f-264"
Accept-Ranges: bytes

8888 / tcp

-23674247 | 2025-03-22T14:03:06.498620

Hashes

hash

1675310389

http.dom_hash

1239617585

http.html_hash

-23674247

http.server_hash

-1340961475

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 22 Mar 2025 14:03:06 GMT
Content-Type: text/html
Content-Length: 138
Connection: close
Location: https://46.36.216.11:8888/

46.36.216.11

Last Seen: 2025-03-23

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

-1921206201 | 2025-03-23T08:03:53.528759

Hashes

nginx1.18.0

143 / tcp

1133575510 | 2025-03-20T11:16:07.149628

443 / tcp

-1921206201 | 2025-03-22T22:07:11.730252

Hashes

nginx1.18.0

993 / tcp

1664207957 | 2025-03-22T13:40:05.174758

7777 / tcp

1651973090 | 2025-02-26T00:27:53.515248

Hashes

nginx

8888 / tcp

-23674247 | 2025-03-22T14:03:06.498620

Hashes

nginx

Products

Pricing

Contact Us

46.36.216.11

Last Seen: 2025-03-23

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp -1921206201 | 2025-03-23T08:03:53.528759

Hashes

nginx1.18.0

143 / tcp 1133575510 | 2025-03-20T11:16:07.149628

443 / tcp -1921206201 | 2025-03-22T22:07:11.730252

Hashes

nginx1.18.0

993 / tcp 1664207957 | 2025-03-22T13:40:05.174758

7777 / tcp 1651973090 | 2025-02-26T00:27:53.515248

Hashes

nginx

8888 / tcp -23674247 | 2025-03-22T14:03:06.498620

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-1921206201 | 2025-03-23T08:03:53.528759

143 / tcp

1133575510 | 2025-03-20T11:16:07.149628

443 / tcp

-1921206201 | 2025-03-22T22:07:11.730252

993 / tcp

1664207957 | 2025-03-22T13:40:05.174758

7777 / tcp

1651973090 | 2025-02-26T00:27:53.515248

8888 / tcp

-23674247 | 2025-03-22T14:03:06.498620