GeneralInformation

Hostnames	lb.vpmgroup.ru
Domains	vpmgroup.ru
Country	Russian Federation
City	Moscow
Organization	JSC Datacenter
ISP	JSC IOT
ASN	AS29182
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 9100

80 / tcp

589765266 | 2025-03-17T20:48:08.580335

Hashes

hash

-1245708900

http.dom_hash

1239617585

http.html_hash

589765266

http.server_hash

967792298

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 17 Mar 2025 20:48:08 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://77.246.157.232/

Vulnerabilities

9100 / tcp

-630959206 | 2025-03-13T23:07:47.451448

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Connection: close

400 Bad Request
Prometheus Node Exporter:
  node_exporter_build_info:
    branch: HEAD
    goversion: go1.17.3
    revision: a2321e7b940ddcff26873612bccdf7cd4c42b6b6
    version: 1.3.1
  node_os_info:
    id: ubuntu
    id_like: debian
    name: Ubuntu
    pretty_name: Ubuntu 20.04.1 LTS
    version: 20.04.1 LTS (Focal Fossa)
    version_codename: focal
    version_id: 20.04
  node_uname_info:
    domainname: (none)
    machine: x86_64
    nodename: 57660269114e
    release: 5.4.0-125-generic
    sysname: Linux
    version: #141-Ubuntu SMP Wed Aug 10 13:42:03 UTC 2022
  node_dmi_info:
    bios_date: 01/12/2021
    bios_vendor: American Megatrends International, LLC.
    bios_version: L4.02L
    board_name: X470D4U
    board_vendor: ASRockRack
    chassis_asset_tag: To Be Filled By O.E.M.
    chassis_vendor: To Be Filled By O.E.M.
    chassis_version: To Be Filled By O.E.M.
    product_family: To Be Filled By O.E.M.
    product_name: To Be Filled By O.E.M.
    product_sku: To Be Filled By O.E.M.
    product_version: To Be Filled By O.E.M.
    system_vendor: To Be Filled By O.E.M.
  node_nvme_info:
    nvme1:
      device: nvme1
      firmware_revision: 004C
      model: INTEL SSDPEKNW512G8
      serial: BTNH03340VLV512A
      state: live
    nvme0:
      device: nvme0
      firmware_revision: 004C
      model: INTEL SSDPEKNW512G8
      serial: BTNH10940SR8512A
      state: live
  node_network_info:
    vetheb218f6:
      address: 6e:5a:2e:55:2b:04
      broadcast: ff:ff:ff:ff:ff:ff
      device: vetheb218f6
      duplex: full
      operstate: up
    enp35s0:
      address: a8:a1:59:3f:a9:a8
      broadcast: ff:ff:ff:ff:ff:ff
      device: enp35s0
      duplex: full
      operstate: up
    docker0:
      address: 02:42:fe:9a:28:89
      broadcast: ff:ff:ff:ff:ff:ff
      device: docker0
      operstate: down
    lo:
      address: 00:00:00:00:00:00
      broadcast: 00:00:00:00:00:00
      device: lo
      operstate: unknown
    enxdadde6d410ce:
      address: da:dd:e6:d4:10:ce
      broadcast: ff:ff:ff:ff:ff:ff
      device: enxdadde6d410ce
      operstate: down
    enp36s0:
      address: a8:a1:59:3f:b0:f8
      broadcast: ff:ff:ff:ff:ff:ff
      device: enp36s0
      duplex: half
      operstate: up
    br-c972e75f3114:
      address: 02:42:e1:7d:00:56
      broadcast: ff:ff:ff:ff:ff:ff
      device: br-c972e75f3114
      operstate: down
    br-8a9747faf95f:
      address: 02:42:84:68:4b:d7
      broadcast: ff:ff:ff:ff:ff:ff
      device: br-8a9747faf95f
      operstate: up

77.246.157.232

Last Seen: 2025-03-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

589765266 | 2025-03-17T20:48:08.580335

Hashes

nginx1.18.0

9100 / tcp

-630959206 | 2025-03-13T23:07:47.451448

Prometheus Node Exporter1.3.1

Products

Pricing

Contact Us

77.246.157.232

Last Seen: 2025-03-17

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

80 / tcp 589765266 | 2025-03-17T20:48:08.580335

Hashes

nginx1.18.0

9100 / tcp -630959206 | 2025-03-13T23:07:47.451448

Prometheus Node Exporter1.3.1

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

589765266 | 2025-03-17T20:48:08.580335

9100 / tcp

-630959206 | 2025-03-13T23:07:47.451448