GeneralInformation

Hostnames	qutopia.at finale.qutopia.at deda.server.qutopia.at www.qutopia.at
Domains	qutopia.at
Country	Austria
City	Perchtoldsdorf
Organization	IPAX GmbH
ISP	IPAX GmbH
ASN	AS44133

WebTechnologies

JavaScript frameworks

Nuxt.js

Vue.js

Programming languages

Node.js

Static site generator

Nuxt.js

Web frameworks

Nuxt.js

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 3000 3001 3306 8080

-320888869 | 2024-09-30T06:33:57.498464

22 / tcp

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNo23X+awQD0XNN784QnWhUr
xkdDaamJdW15S7Lv+hwbCSMIqQsmfKAZtmeFbiMQ+A/cs6fKM0emmiDJtkqkk1M=
Fingerprint: 42:07:3a:3d:fb:48:e4:aa:e0:35:6c:fa:bf:de:7d:05

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

706953128 | 2024-10-01T15:52:02.164960

80 / tcp

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.23.1
Date: Tue, 01 Oct 2024 15:52:01 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://finale.qutopia.at/

CVE-2023-44487 CVE-2022-41742 CVE-2022-41741

-372203861 | 2024-10-01T17:21:03.709362

443 / tcp

ql-finale

HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 01 Oct 2024 17:21:03 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 2783
Connection: keep-alive
ETag: "adf-T9Na2ORdYAvVjvm0SMkIXPZd1Aw"
Accept-Ranges: none
Vary: Accept-Encoding
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:69:16:c3:d2:c3:b0:ea:7a:6b:d5:b5:40:54:6e:5d:ec:f0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Aug  8 02:56:24 2024 GMT
            Not After : Nov  6 02:56:23 2024 GMT
        Subject: CN=qutopia.at
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:fd:88:94:d8:36:cc:d2:58:40:f0:73:74:
                    f9:50:d2:8a:44:3f:4e:1c:02:21:a8:d9:20:a5:39:
                    06:16:30:86:83:49:bb:b7:4e:b8:cf:28:58:09:d8:
                    cb:ee:2a:4c:2b:0c:5e:3f:d7:ed:8a:9b:0a:17:f8:
                    20:b5:a5:2f:96:75:63:8f:84:02:5c:a6:de:1f:30:
                    03:50:7b:47:f3:a5:71:8a:75:53:03:98:40:0f:39:
                    b9:6f:e8:da:a2:69:01:9c:03:d1:0a:64:c4:aa:d1:
                    dc:0f:59:8f:9d:7c:89:90:d5:ca:4c:e5:74:36:a2:
                    3d:ab:a8:64:aa:ec:93:61:b5:c1:f5:d2:85:e0:40:
                    44:f7:79:7d:88:78:82:33:40:7e:a7:53:6b:80:7c:
                    9a:6b:14:bf:f9:7a:5d:dc:21:41:d2:88:1f:c9:df:
                    eb:d2:b3:49:06:2c:25:cf:b6:a0:4c:6a:bd:89:80:
                    fa:c4:23:db:f8:70:80:cf:e9:51:d5:37:a9:61:c4:
                    24:03:64:ff:19:41:c8:69:37:be:c6:fc:7f:b3:f0:
                    f4:33:f8:6d:15:32:10:f3:95:b6:f1:1f:02:95:43:
                    fa:bf:bc:71:e1:f7:38:34:99:64:4c:d5:dc:44:4f:
                    46:fa:4c:3f:ca:cd:73:3f:8a:2e:2f:72:0d:f1:18:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                D7:F6:D4:DB:9E:1B:8A:75:05:5C:C3:D1:FB:61:5E:9E:C2:18:C7:A4
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:deda.server.qutopia.at, DNS:finale.qutopia.at, DNS:qutopia.at, DNS:www.qutopia.at
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Aug  8 03:54:55.049 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A8:DC:F9:48:8D:53:05:C5:69:F8:CE:
                                17:36:FD:E6:CF:E6:E5:C7:D4:EE:98:21:70:EC:5A:6D:
                                2D:FD:E4:EA:17:02:20:1C:3B:53:BE:9A:A9:84:73:C0:
                                3D:BC:2B:27:7B:ED:A4:C8:45:BC:62:A6:8E:9F:52:6C:
                                3D:FA:60:9A:D2:BE:88
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : Aug  8 03:54:55.252 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E7:26:F5:FB:2A:F2:52:26:40:4C:D9:
                                E4:6D:0D:F3:A6:52:51:C8:C4:A6:65:0F:C0:A6:BB:E6:
                                99:65:B1:14:A3:02:21:00:EB:B7:0B:45:51:25:0E:3D:
                                32:58:20:5A:D2:0C:51:4C:E4:BA:5C:F7:72:7E:73:10:
                                8E:A2:4A:53:39:3F:AD:FE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        58:e0:17:87:a8:77:e8:a1:ef:b8:c9:a6:94:f0:f7:99:e6:f8:
        cc:82:20:a6:5a:dd:3c:f7:e4:42:4b:01:3f:36:fc:48:b5:ee:
        37:49:e7:39:bf:fe:74:b1:79:e5:cb:f0:e3:d8:49:47:f6:d8:
        33:b5:9a:c4:76:8c:e1:be:31:82:74:27:c5:27:f2:90:b2:9e:
        e9:69:d7:01:76:8f:ca:fd:0a:99:12:11:12:88:40:5d:19:49:
        bc:a3:ba:f6:02:e8:1d:e8:5a:73:7f:15:c2:9c:38:f4:3f:79:
        db:6f:38:01:ca:92:9b:b5:ed:06:64:f9:d0:bc:42:28:84:01:
        5b:1b:8d:18:02:23:bf:5b:0f:73:61:a4:45:75:18:c1:de:0d:
        c5:25:5f:19:5a:f9:ec:a3:19:e3:40:0d:ee:70:1f:af:2b:f6:
        85:ed:85:aa:e1:2f:b7:7c:9e:52:4f:ce:3e:e8:c1:43:03:8a:
        a2:a9:73:68:22:7f:fd:38:b7:8a:2a:36:5b:2b:67:28:2d:97:
        c4:ae:0c:de:c2:7e:d0:51:83:28:ad:ef:ed:bb:7a:4d:52:11:
        e1:34:f6:67:36:b4:a7:3c:29:69:89:18:35:15:67:11:6d:62:
        7d:fb:21:c3:78:50:54:12:20:f8:e9:cd:b6:70:ba:fc:54:e4:
        08:10:3d:98

CVE-2023-44487 CVE-2022-41742 CVE-2022-41741

-216485092 | 2024-10-02T06:05:09.522316

3000 / tcp

HTTP/1.1 403 Forbidden
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Origin-Agent-Cluster: ?1
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
Vary: Origin
X-RateLimit-Limit: 100
X-RateLimit-Remaining: 99
X-RateLimit-Reset: 0
Content-Type: application/json; charset=utf-8
Content-Length: 60
ETag: W/"3c-EyUU2/FJjujSJynRqZUby832WTo"
Date: Wed, 02 Oct 2024 06:05:09 GMT
Connection: keep-alive
Keep-Alive: timeout=5

-2014375412 | 2024-09-30T10:17:50.017172

3001 / tcp

Backend

HTTP/1.1 200 OK
Date: Mon, 30 Sep 2024 10:17:49 GMT
Server: Warp/3.3.17
Content-Length: 933
Content-Type: text/html; charset=utf-8
Vary: Accept, Accept-Language
X-XSS-Protection: 1; mode=block

-618606703 | 2024-09-29T10:35:09.494711

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 8.0.25
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 53247
  Authentication Plugin: caching_sha2_password

CVE-2022-21489 CVE-2022-21483 CVE-2022-21482 CVE-2022-21479 CVE-2022-21478 207 moreCVE-2022-21454 CVE-2022-21427 CVE-2022-21425 CVE-2022-21417 CVE-2022-21412 CVE-2022-21378 CVE-2022-21374 CVE-2022-21372 CVE-2022-21370 CVE-2022-21368 CVE-2022-21367 CVE-2022-21362 CVE-2022-21358 CVE-2022-21356 CVE-2022-21352 CVE-2022-21351 CVE-2022-21348 CVE-2022-21344 CVE-2022-21342 CVE-2022-21339 CVE-2022-21337 CVE-2022-21336 CVE-2022-21335 CVE-2022-21334 CVE-2022-21332 CVE-2022-21330 CVE-2022-21329 CVE-2022-21328 CVE-2022-21327 CVE-2022-21326 CVE-2022-21322 CVE-2022-21320 CVE-2022-21318 CVE-2022-21316 CVE-2022-21315 CVE-2022-21314 CVE-2022-21310 CVE-2022-21309 CVE-2022-21308 CVE-2022-21307 CVE-2022-21304 CVE-2022-21303 CVE-2022-21301 CVE-2022-21297 CVE-2022-21290 CVE-2022-21289 CVE-2022-21288 CVE-2022-21287 CVE-2022-21286 CVE-2022-21285 CVE-2022-21284 CVE-2022-21280 CVE-2022-21279 CVE-2022-21278 CVE-2022-21270 CVE-2022-21265 CVE-2022-21264 CVE-2022-21256 CVE-2022-21254 CVE-2022-21253 CVE-2022-21249 CVE-2022-21245 CVE-2021-35648 CVE-2021-35647 CVE-2021-35646 CVE-2021-35645 CVE-2021-35644 CVE-2021-35643 CVE-2021-35642 CVE-2021-35641 CVE-2021-35640 CVE-2021-35638 CVE-2021-35637 CVE-2021-35636 CVE-2021-35635 CVE-2021-35634 CVE-2021-35633 CVE-2021-35631 CVE-2021-35630 CVE-2021-35629 CVE-2021-35628 CVE-2021-35627 CVE-2021-35626 CVE-2021-35625 CVE-2021-35624 CVE-2021-35623 CVE-2021-35622 CVE-2021-35612 CVE-2021-35610 CVE-2021-35607 CVE-2021-35602 CVE-2021-35597 CVE-2021-35596 CVE-2021-35591 CVE-2021-35577 CVE-2021-35575 CVE-2021-35546 CVE-2021-35537 CVE-2021-2481 CVE-2021-2479 CVE-2021-2478 CVE-2021-2357 CVE-2021-2356 CVE-2021-2354 CVE-2021-2352 CVE-2021-2340 CVE-2021-2339 CVE-2024-21171 CVE-2024-21165 CVE-2024-20985 CVE-2024-20983 CVE-2024-20981 CVE-2024-20977 CVE-2024-20973 CVE-2024-20971 CVE-2024-20969 CVE-2024-20967 CVE-2024-20965 CVE-2024-20963 CVE-2024-20961 CVE-2023-22115 CVE-2023-22114 CVE-2023-22113 CVE-2023-22112 CVE-2023-22111 CVE-2023-22110 CVE-2023-22104 CVE-2023-22103 CVE-2023-22097 CVE-2023-22092 CVE-2023-22084 CVE-2023-22079 CVE-2023-22078 CVE-2023-22070 CVE-2023-22068 CVE-2023-22066 CVE-2023-22065 CVE-2023-22064 CVE-2023-22059 CVE-2023-22032 CVE-2023-22028 CVE-2023-22026 CVE-2023-22015 CVE-2023-22007 CVE-2023-21982 CVE-2023-21980 CVE-2023-21977 CVE-2023-21976 CVE-2023-21972 CVE-2023-21950 CVE-2023-21887 CVE-2023-21883 CVE-2023-21882 CVE-2023-21881 CVE-2023-21880 CVE-2023-21879 CVE-2023-21878 CVE-2023-21877 CVE-2023-21876 CVE-2023-21875 CVE-2022-39410 CVE-2022-39408 CVE-2022-39403 CVE-2022-39402 CVE-2022-39400 CVE-2022-21641 CVE-2022-21640 CVE-2022-21638 CVE-2022-21637 CVE-2022-21635 CVE-2022-21633 CVE-2022-21632 CVE-2022-21625 CVE-2022-21617 CVE-2022-21611 CVE-2022-21608 CVE-2022-21607 CVE-2022-21605 CVE-2022-21604 CVE-2022-21600 CVE-2022-21599 CVE-2022-21595 CVE-2022-21594 CVE-2022-21592 CVE-2022-21486 CVE-2022-21485 CVE-2022-21484 CVE-2022-21460 CVE-2022-21451 CVE-2022-21444 CVE-2022-21357 CVE-2022-21355 CVE-2022-21333 CVE-2022-21331 CVE-2022-21325 CVE-2022-21324 CVE-2022-21323 CVE-2022-21321 CVE-2022-21319 CVE-2022-21317 CVE-2022-21313 CVE-2022-21312 CVE-2022-21311 CVE-2022-21302 CVE-2021-35632 CVE-2021-35608 CVE-2021-22570

956736763 | 2024-09-29T04:16:29.632738

8080 / tcp

Qutopia • Qutopia

HTTP/1.1 200 OK
Set-Cookie: qutopia_language=en; Path=/; Expires=Mon, 29 Sep 2025 04:16:28 GMT; SameSite=Lax
ETag: "11d338-8Nx9B9qeAXnJbx+MpaAn0OkeAY4"
Content-Type: text/html; charset=utf-8
Accept-Ranges: none
Content-Length: 1168184
Vary: Accept-Encoding
Date: Sun, 29 Sep 2024 04:16:28 GMT
Connection: keep-alive
Keep-Alive: timeout=5

185.119.118.87

Last Seen: 2024-10-02

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-320888869 | 2024-09-30T06:33:57.498464
22 / tcp

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

706953128 | 2024-10-01T15:52:02.164960
80 / tcp

nginx1.23.1

-372203861 | 2024-10-01T17:21:03.709362
443 / tcp

nginx1.23.1

-216485092 | 2024-10-02T06:05:09.522316
3000 / tcp

-2014375412 | 2024-09-30T10:17:50.017172
3001 / tcp

-618606703 | 2024-09-29T10:35:09.494711
3306 / tcp

MySQL8.0.25

956736763 | 2024-09-29T04:16:29.632738
8080 / tcp

Products

Pricing

Contact Us

185.119.118.87

Last Seen: 2024-10-02

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Port 3306 Latest CVSS

OpenPorts

-320888869 | 2024-09-30T06:33:57.498464 22 / tcp

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

706953128 | 2024-10-01T15:52:02.164960 80 / tcp

nginx1.23.1

-372203861 | 2024-10-01T17:21:03.709362 443 / tcp

nginx1.23.1

-216485092 | 2024-10-02T06:05:09.522316 3000 / tcp

-2014375412 | 2024-09-30T10:17:50.017172 3001 / tcp

-618606703 | 2024-09-29T10:35:09.494711 3306 / tcp

MySQL8.0.25

956736763 | 2024-09-29T04:16:29.632738 8080 / tcp

Products

Pricing

Contact Us

Vulnerabilities

-320888869 | 2024-09-30T06:33:57.498464
22 / tcp

706953128 | 2024-10-01T15:52:02.164960
80 / tcp

-372203861 | 2024-10-01T17:21:03.709362
443 / tcp

-216485092 | 2024-10-02T06:05:09.522316
3000 / tcp

-2014375412 | 2024-09-30T10:17:50.017172
3001 / tcp

-618606703 | 2024-09-29T10:35:09.494711
3306 / tcp

956736763 | 2024-09-29T04:16:29.632738
8080 / tcp