GeneralInformation

Hostnames	beget.com ssl.buran4.beget.com beget.tech
Domains	beget.com beget.tech
Country	Russian Federation
City	Saint Petersburg
Organization	Hosting servers
ISP	Beget LLC
ASN	AS198610

WebTechnologies

CDN

jQuery CDN

Cloudflare

cdnjs

JavaScript libraries

jQuery

FancyBox

Lodash

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2025(1)

CVE-2025-26466

5.9A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.

OpenPorts

21 22 443 3306

21 / tcp

479147486 | 2025-04-01T15:27:19.368339

220 Welcome to LTD BeGet FTP Server 'buran4'
530 Login incorrect.
530 Please login with USER and PASS.
211-Features:
 EPRT
 EPSV
 MDTM
 PASV
 PBSZ
 PROT
 REST STREAM
 SIZE
 TVFS
211 End

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6c:96:54:8e:c3:3d:b5:71:32:cf:ba:33:01:5e:b7:79:3a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Mar 20 23:18:56 2025 GMT
            Not After : Jun 18 23:18:55 2025 GMT
        Subject: CN=beget.tech
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:4f:7c:b1:de:ae:b4:a8:42:bd:1c:3e:ef:
                    d9:3c:58:3b:8f:c3:7d:98:3f:55:00:29:7e:d8:cb:
                    26:1e:a6:f1:80:45:20:a4:44:a9:02:47:47:c6:21:
                    2c:93:f0:39:ed:18:00:56:e1:27:a7:be:bd:24:21:
                    ab:99:83:d9:39:3e:ec:d2:f9:7b:4b:e2:81:79:35:
                    ef:e9:ea:49:b3:de:a0:ef:f8:a3:20:d9:2a:ef:a6:
                    fc:46:54:64:f8:19:a6:b8:c0:56:a9:db:fe:74:7d:
                    cd:9b:7f:12:da:f2:cd:02:3a:59:ea:95:3c:22:93:
                    ac:e2:0a:df:85:18:de:c8:f9:c9:76:59:ff:e5:84:
                    3e:11:78:ad:6c:21:7e:cf:ad:f3:2a:5e:4d:73:f2:
                    57:fe:d2:75:8e:9c:ff:6d:59:a7:df:13:8d:c0:55:
                    a3:2e:5e:bd:9c:c4:5d:6b:5d:45:a5:e4:0e:05:fa:
                    68:7b:d9:c7:6b:f9:55:f0:8e:50:17:9e:a0:2c:20:
                    96:3c:e9:03:33:ef:0b:c6:b8:32:ef:51:46:76:23:
                    6a:8e:b5:f5:29:91:2d:e0:f2:7e:75:69:d8:c7:5d:
                    40:a3:9a:8e:94:f1:4e:a3:27:3a:fa:8e:5d:0d:ea:
                    db:08:0a:d3:a2:a3:4b:ad:19:a2:e0:09:7c:a1:34:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                7A:F2:0C:1D:1E:E3:EC:E9:09:D8:F6:5D:EE:00:7E:EF:86:C0:A1:BA
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.beget.tech, DNS:beget.tech
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://r10.c.lencr.org/59.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar 21 00:17:26.710 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:1B:92:96:8F:05:56:33:8E:99:75:87:5A:
                                40:15:09:4C:F8:FC:49:4D:CD:5A:E3:49:AF:38:AA:63:
                                7F:01:21:4C:02:21:00:F2:F5:35:78:E9:39:BA:E5:D8:
                                33:2A:36:F6:8C:35:35:73:6E:C4:E2:22:17:62:85:9E:
                                76:3E:19:E5:50:AD:38
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Mar 21 00:17:28.807 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:26:02:06:72:3D:E8:4D:E4:88:B3:0D:60:
                                0C:1B:6B:E6:71:D6:81:79:6C:91:59:22:21:5F:21:75:
                                12:7F:AF:82:02:21:00:83:BA:70:23:90:3E:05:E1:87:
                                92:49:C6:94:59:1C:17:59:E6:DE:4E:5E:94:94:5B:62:
                                17:EA:F2:C7:21:3C:CC
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        c3:12:0e:2f:94:79:18:62:6c:8f:6b:97:f7:f4:39:f4:2d:49:
        aa:55:b7:13:e2:38:5b:4c:a3:97:62:62:a4:9a:f1:f4:45:aa:
        ae:0b:02:e2:06:aa:5f:cd:65:c8:36:96:a5:a2:12:02:1c:a4:
        93:a2:de:af:14:c0:d8:8b:91:17:f0:a4:bf:ae:46:6e:c5:33:
        21:cc:02:64:04:c5:59:28:19:d3:21:dd:75:25:e9:14:e2:65:
        9a:a3:06:3b:b2:8a:81:40:f6:d5:4c:eb:92:42:38:85:93:5b:
        7b:ea:2d:a7:e1:c7:5d:83:cd:55:53:9d:8e:f8:8c:86:b2:45:
        23:a4:7f:2d:14:ef:16:88:b2:10:f0:ab:01:8a:f7:55:3c:ff:
        87:45:35:d1:cd:0c:94:3a:1c:f4:b7:db:82:43:1f:94:d9:8d:
        fa:94:dd:41:e0:e5:2e:86:32:19:21:7b:18:56:c1:28:66:6f:
        8d:5f:7c:59:c5:b0:5d:01:e2:6d:2c:12:51:9a:14:09:c8:b8:
        97:3b:e6:e0:44:09:7e:46:1c:46:98:23:62:04:41:41:00:1f:
        b1:24:80:1e:0f:76:87:14:5c:54:4b:61:e3:0e:18:bd:cb:4c:
        93:28:00:de:77:77:12:8b:31:d3:80:c7:cb:49:38:b6:4a:04:
        1c:66:8d:6f

22 / tcp

-48405373 | 2025-03-28T21:51:02.381842

SSH-2.0-OpenSSH_9.8
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQC79eqnSq694mx8awFxoDDbQ4A88tYFGjcf8Jw20lh2tABm
ZtVG8j6sc0/OOWo5XYsQhmwe6gAsxG1oPL0bKjOCopaVXv7weOt5jQbm67rMF1uC9nftmxJ/XH1S
Hstk7xJKqP+1CIxtyIUbH12b3AYvBSH83G6VgVdQz0ahI6mNoWCpGlaEEZcsJezkVRz3sdZyzP82
O0F9BbvVEkP84q58sWAFdwrvU/1i88ektZ/QSVxd7WaZnzEtyxRGNu6mq/pKuZJzQEN7IlfeEREw
fAw035Wxy/Bd2jpF6wQpg65DtJU5S4F9nr+2/k2mfTt5k/HzyITESSn1PclidksO5jXloLNsNhIv
K9kVaR9E9yCxd2lDsvVbOBHVFEBO/XiMGLohlibWQCSkxls/cRYDGNv5tzyD6QHaR1CcnVZhq38G
yiOQYksNh30L3Cl76dUgbjMV0rxpk58AGEwi+VKzXiiobWm19LSQq19xOqhvn7ZpZ4QSoRe4j2wX
FUh8Q3bJeqM=
Fingerprint: fc:d8:61:85:ee:b8:8e:06:00:54:c2:68:02:d7:28:1a

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	diffie-hellman-group18-sha512
	diffie-hellman-group16-sha512
	diffie-hellman-group-exchange-sha256
	ext-info-s
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	ssh-ed25519
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes256-gcm@openssh.com
	aes128-gcm@openssh.com
	aes256-ctr
	aes192-ctr
	aes128-ctr

MAC Algorithms:
	hmac-sha2-512-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512
	hmac-sha2-256

Compression Algorithms:
	none
	zlib@openssh.com

Vulnerabilities

443 / tcp

816436942 | 2025-03-31T22:25:41.901098

Hashes

hash

2138871277

http.dom_hash

-1674230010

http.html_hash

816436942

http.robots_hash

-1022729730

http.server_hash

-1762257857

Домен не прилинкован ни к одной из директорий на сервере!

HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Mon, 31 Mar 2025 22:25:41 GMT
Content-Type: text/html
Content-Length: 36777
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2024 13:15:20 GMT
ETag: "8fa9-61d49056a3267"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5c:f1:37:53:6d:b9:d2:9a:01:5d:ed:dd:c6:6b:3a:98:97
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Mar  3 23:17:20 2025 GMT
            Not After : Jun  1 23:17:19 2025 GMT
        Subject: CN=beget.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:99:70:76:47:e6:4b:6d:2c:c1:97:33:03:f1:5f:
                    15:c7:62:89:c0:98:38:66:a5:19:92:69:a2:0f:f9:
                    6d:55:00:6e:7b:47:7a:47:ea:4f:44:b7:df:20:52:
                    6b:ff:ae:1d:fa:70:4e:58:28:5f:38:bb:29:2f:d0:
                    c8:a9:bb:4c:41:ba:d2:2a:5e:f8:e6:cc:f7:e9:cb:
                    17:8d:73:93:ac:a1:79:ec:60:f3:4e:22:eb:32:e4:
                    96:70:03:62:28:aa:13:7c:43:34:e4:41:00:b6:5c:
                    c9:cd:05:af:d5:01:48:12:4a:cf:88:5f:e5:06:c0:
                    04:96:ab:a9:67:30:97:f4:d2:17:74:20:d8:37:16:
                    d7:bc:55:76:e3:00:4a:cd:33:c8:5c:d8:da:27:08:
                    ab:24:62:8c:62:a4:2b:f4:e9:42:86:7d:12:c3:30:
                    c2:e0:c1:38:ca:f6:fc:39:6b:25:d6:ac:ed:95:3d:
                    c5:45:53:d5:95:51:e4:35:b9:6a:45:1d:55:b2:57:
                    4b:3a:ab:4c:56:a4:b3:dd:61:c7:a2:78:d8:60:1d:
                    07:4e:a0:99:93:6c:78:0c:bd:79:cf:6b:91:c1:ae:
                    f9:43:49:1d:c7:bb:6d:1c:a1:a3:8a:9b:bd:59:b1:
                    86:94:9f:5e:1b:ad:7e:5f:fc:df:92:28:d7:ef:46:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                9C:50:04:AD:7A:A1:3B:38:FD:7F:DF:20:DB:1F:C1:80:6B:1D:C6:DF
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.beget.com, DNS:beget.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Mar  4 00:15:50.717 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:50:44:25:0E:0B:8F:E3:16:FB:22:A0:B1:
                                25:77:27:B4:65:D9:1D:50:22:D0:39:3A:44:E8:93:91:
                                77:5B:9C:C1:02:21:00:82:E8:C1:94:84:87:BE:5F:98:
                                CD:BD:94:F4:84:ED:A7:A8:E2:CE:ED:B3:F6:21:42:A4:
                                9E:03:80:C1:45:F5:95
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 73:20:22:0F:08:16:8A:F9:F3:C4:A6:8B:0A:B2:6A:9A:
                                4A:00:EE:F5:77:85:8A:08:4D:05:00:D4:A5:42:44:59
                    Timestamp : Mar  4 00:15:50.692 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0D:F6:0E:E7:2D:15:4C:91:5E:55:7A:DE:
                                51:D4:FF:14:EB:B1:DC:FA:F1:0A:65:E0:E1:45:17:FE:
                                A5:39:40:F6:02:20:52:DB:A7:35:67:34:C6:53:9D:EA:
                                81:53:05:B2:EF:4D:88:22:3F:5D:0A:3C:2A:1C:7E:86:
                                3C:F5:C6:24:03:9D
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        61:41:05:59:8a:19:55:be:d8:88:cb:32:dd:6f:d7:9b:85:0a:
        45:5f:4b:02:7b:d9:bf:c1:ba:b5:0a:b2:27:9e:3d:2b:99:69:
        f6:69:41:c6:38:0b:25:8a:63:48:8e:30:f5:f5:dc:1f:6b:8d:
        43:8c:e7:5d:ba:7c:67:af:ea:a7:60:cc:e4:f1:e6:cb:06:b4:
        4e:be:a7:7c:8a:95:f5:9b:ea:e1:9e:d3:e1:b9:44:93:fb:91:
        0b:53:59:4d:4c:a8:6e:f9:b7:04:14:fc:b1:c4:10:84:63:00:
        9f:1e:f6:f7:c6:fa:6e:4a:3f:15:45:76:e9:8b:13:44:9a:b5:
        95:7c:5e:2f:a1:86:72:30:52:3d:49:df:8e:41:31:98:8c:ed:
        43:61:ba:7c:47:ca:a5:0e:e6:1c:c0:8a:2d:25:46:25:91:ab:
        b8:66:ce:7b:e5:24:7d:b5:cf:b0:4d:42:16:5b:ea:79:0e:12:
        40:12:32:e1:cd:bf:85:9b:76:1f:0c:51:0c:9f:7a:82:5f:a2:
        85:c7:87:1f:0a:3f:7e:32:c0:34:a5:48:49:97:2c:6d:01:f8:
        3e:d3:a9:8c:7d:69:41:9d:3f:8c:0f:aa:f8:42:00:62:c2:f5:
        f2:93:6d:94:b2:b0:d3:9d:aa:eb:d4:35:ed:98:37:e0:02:29:
        53:8d:a1:3b

3306 / tcp

-96294589 | 2025-04-01T02:54:30.078657

MySQL:
  Error Message: Host '224.120.128.112' is not allowed to connect to this MySQL server
  Error Code: 1130

5.101.153.5

Last Seen: 2025-04-01

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

21 / tcp

479147486 | 2025-04-01T15:27:19.368339

22 / tcp

-48405373 | 2025-03-28T21:51:02.381842

OpenSSH9.8

443 / tcp

816436942 | 2025-03-31T22:25:41.901098

Hashes

nginx

3306 / tcp

-96294589 | 2025-04-01T02:54:30.078657

MySQL

Products

Pricing

Contact Us

5.101.153.5

Last Seen: 2025-04-01

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 22 Latest CVSS

OpenPorts

21 / tcp 479147486 | 2025-04-01T15:27:19.368339

22 / tcp -48405373 | 2025-03-28T21:51:02.381842

OpenSSH9.8

443 / tcp 816436942 | 2025-03-31T22:25:41.901098

Hashes

nginx

3306 / tcp -96294589 | 2025-04-01T02:54:30.078657

MySQL

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

479147486 | 2025-04-01T15:27:19.368339

22 / tcp

-48405373 | 2025-03-28T21:51:02.381842

443 / tcp

816436942 | 2025-03-31T22:25:41.901098

3306 / tcp

-96294589 | 2025-04-01T02:54:30.078657