Host

104.254.59.13

Tags: VPN Hosting Expired certificate

As of our latest check on 2026-08-28, 104.254.59.13 (PureVoltage Hosting Inc., AS26548, United States) had 2 open ports (80, 8080) and 128 known CVEs, 1 known to be exploited. It is a VPN service address.

Known CVEs on this host

2open ports
0names pointing here
128known CVEs
1known exploited

Open ports and CVEs as of our latest check of this host, 2026-08-28.

CVEs by severity: CRITICAL 47 HIGH 59 MEDIUM 21 LOW 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 1 only affects a particular platform; this host's is not known (php 5.4.45). See them

Network
PureVoltage Hosting Inc. AS26548
Open ports
80, 8080 · at our latest check, 2026-08-28
Location
United States US
Route
104.254.59.0/24 · announced by PureVoltage Hosting Inc. AS26548 no RPKI authorisation
Organisation
Purevoltage Hosting Inc. · Content / hosting
First seen
2026-08-28 02:45 UTC
Last seen alive
2026-08-28 02:48 UTC
Hosted domains
No host name points here

Reputation

VPN
An address of a VPN service

Services (2)

80/tcp HTTP nginx 128 CVEs first 2026-08-28 · last 2026-08-28
Status
301 Moved Permanently
Server
nginx
Powered by
PHP/5.4.45
Raw response
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 28 Aug 2026 02:42:55 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Set-Cookie: s=avgp8e78stql5p57pcu609h5u1; path=/
Last-Modified: Tue, 02 Jul 2019 22:19:33 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
location: http://proxylistpro.com/
8080/tcp TLS first 2026-08-28 · last 2026-08-28
TLS
TLSv1.2
Certificate for
seattle.protect-my-ip.com
Issued by
YR1
Valid
2026-08-02 → 2026-10-31
Raw response
HTTP/1.1 400 Bad Request
Server: nginx
Date: Fri, 28 Aug 2026 02:42:55 GMT
Content-Type: text/html
Content-Length: 666
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body bgcolor="white">
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Vulnerabilities

Only affects certain platforms (1)

These CVEs only apply when the software runs on a particular platform (for example Windows), and this host's platform is not known. They are not counted.

CVEs by severity: CRITICAL 1

CVESoftware
CVE-2024-3566 CRITICAL 9.8 php 5.4.45 · port 80

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.