GeneralInformation

Hostnames	start.dachstiftung-diakonie.de start.ddedv.de diacampus.de dkh.diacampus.de dkhi.diacampus.de dkwf.diacampus.de dkwob.diacampus.de www.diacampus.de zeb.diacampus.de www.zeb.diacampus.de diacampus.online dkh.diacampus.online dkhi.diacampus.online dkwf.diacampus.online dkwob.diacampus.online www.diacampus.online zeb.diacampus.online www.zeb.diacampus.online haiiloproxy.diaserv-braunschweig.de start.diaserv-braunschweig.de xn--grnes-viertel-stephansstift-j3c.de www.xn--grnes-viertel-stephansstift-j3c.de xn--grnesviertelstephansstift-gwc.de www.xn--grnesviertelstephansstift-gwc.de zeb-diacampus.de www.zeb-diacampus.de
Domains	dachstiftung-diakonie.de ddedv.de diacampus.de diacampus.online diaserv-braunschweig.de xn--grnes-viertel-stephansstift-j3c.de xn--grnesviertelstephansstift-gwc.de zeb-diacampus.de
Country	Germany
City	Roding
Organization	Dachstiftung Diakonie Zentrale RZ Gifhorn
ISP	Deutsche Telekom AG
ASN	AS3320

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

80 / tcp

2130940350 | 2025-04-04T00:09:56.594465

Hashes

hash

-2012545390

http.dom_hash

2033138705

http.html_hash

2130940350

http.server_hash

-1786963686

http.title_hash

-1911128262

neue Seite

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 04 Apr 2025 00:09:56 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1792
Last-Modified: Wed, 13 Nov 2024 12:32:55 GMT
Connection: keep-alive
ETag: "67349c77-700"
Accept-Ranges: bytes

Vulnerabilities

443 / tcp

1563265241 | 2025-04-03T20:53:36.877999

SSL Error: TLSV1_ALERT_PROTOCOL_VERSION

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:33:a3:c6:4e:48:46:fb:20:a7:fc:22:94:ef:34:d8:61:57
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb 26 15:23:43 2025 GMT
            Not After : May 27 15:23:42 2025 GMT
        Subject: CN=haiiloproxy.diaserv-braunschweig.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:1c:b4:bb:c9:d7:da:4d:fb:a2:92:7e:6d:
                    67:fd:3f:48:3f:5e:f5:3a:2c:7a:e6:99:bd:be:68:
                    6a:19:57:8b:cb:5e:6b:f2:43:65:59:dd:83:79:64:
                    3d:83:93:a8:8a:45:9c:f5:5f:d8:fc:82:5e:6e:a1:
                    ac:6b:c2:50:71:0f:0e:d4:54:59:57:00:9a:3c:dc:
                    14:4d:58:b0:b8:1b:e2:8b:76:67:7f:ff:d0:f0:d5:
                    47:25:ab:2e:c0:d6:d5:d5:d6:25:f7:0d:91:d8:7f:
                    71:dc:1c:43:9f:70:2a:cc:62:f4:c9:02:3b:9c:99:
                    b1:44:1b:f2:1c:f1:b1:cf:15:fb:25:ef:b8:71:38:
                    59:db:e4:9e:4e:b6:cf:27:ac:63:7b:77:7e:74:06:
                    6a:3b:95:d9:49:68:5e:b8:07:2b:27:21:ad:70:97:
                    e2:cc:95:38:e7:b3:67:c1:12:42:1f:80:3e:63:73:
                    3f:06:12:56:95:c7:eb:c8:54:72:4d:1c:4f:d1:25:
                    2f:79:b9:fc:0b:36:d3:07:82:a3:08:b8:e1:48:9d:
                    ed:ed:f2:c7:4e:f0:9d:73:b3:17:48:ef:4b:ab:52:
                    d1:c1:91:d4:91:63:27:9e:a8:34:49:0b:3d:6f:af:
                    01:97:06:c2:64:78:bb:14:d9:1c:55:e9:49:2b:72:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                11:CB:8F:AB:B3:35:57:81:8D:DB:F0:5A:D7:79:8F:7A:1A:52:E1:95
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:diacampus.de, DNS:diacampus.online, DNS:dkh.diacampus.de, DNS:dkh.diacampus.online, DNS:dkhi.diacampus.de, DNS:dkhi.diacampus.online, DNS:dkwf.diacampus.de, DNS:dkwf.diacampus.online, DNS:dkwob.diacampus.de, DNS:dkwob.diacampus.online, DNS:haiiloproxy.diaserv-braunschweig.de, DNS:start.dachstiftung-diakonie.de, DNS:start.ddedv.de, DNS:start.diaserv-braunschweig.de, DNS:www.diacampus.de, DNS:www.diacampus.online, DNS:www.xn--grnes-viertel-stephansstift-j3c.de, DNS:www.xn--grnesviertelstephansstift-gwc.de, DNS:www.zeb-diacampus.de, DNS:www.zeb.diacampus.de, DNS:www.zeb.diacampus.online, DNS:xn--grnes-viertel-stephansstift-j3c.de, DNS:xn--grnesviertelstephansstift-gwc.de, DNS:zeb-diacampus.de, DNS:zeb.diacampus.de, DNS:zeb.diacampus.online
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 26 16:22:13.911 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9C:D6:65:9F:26:DB:7C:72:5A:50:3A:
                                C6:7A:53:FF:46:FA:41:E0:DF:A2:13:3B:E5:57:5F:83:
                                B1:0E:50:12:67:02:21:00:CA:08:7F:4D:39:D3:18:72:
                                C0:34:F3:2D:FD:9F:84:22:8D:11:72:98:33:E0:10:47:
                                90:02:FA:FD:04:0D:D7:11
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DE:85:81:D7:50:24:7C:6B:CD:CB:AF:56:37:C5:E7:81:
                                C6:4C:E4:6E:D6:17:63:9F:8F:34:A7:26:C9:E2:BD:37
                    Timestamp : Feb 26 16:22:13.911 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D1:F1:7B:9B:30:FE:6E:CB:53:3F:DF:
                                F3:6B:CA:7C:46:E0:F7:3F:B7:50:F1:96:8F:43:08:2A:
                                66:F1:30:1B:7F:02:21:00:C4:21:F6:8F:E7:39:5F:45:
                                3A:BB:8E:9E:97:E2:CA:5E:5A:9D:F5:D8:6E:2D:DD:FC:
                                E7:48:A2:41:39:4E:DA:80
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        98:e9:50:0b:71:5a:00:74:c0:4b:6d:94:7a:da:06:90:0d:eb:
        4f:88:b3:53:56:4b:f8:c7:bc:8a:9c:1a:79:ea:72:37:80:a7:
        51:c0:61:6a:a7:10:50:12:31:1a:ed:1a:51:c9:f2:b2:99:70:
        12:d1:00:0d:3e:90:d3:94:79:b7:dd:97:df:59:89:ff:94:b5:
        3e:0f:c1:bc:e0:47:f6:59:d3:e7:d5:02:f7:1c:7b:6b:8e:69:
        c1:1e:30:8b:e9:fd:61:d1:6f:3d:25:34:4f:df:f5:94:f3:6f:
        9a:f2:68:73:b7:ec:59:4b:ff:91:9c:7c:d7:3b:db:42:59:a8:
        a7:13:f6:f7:df:18:e5:44:dd:ba:80:ac:9e:45:62:23:29:a7:
        57:75:fd:7e:c9:a3:f8:e9:58:e0:1d:76:10:40:0b:bb:dc:0a:
        aa:25:01:e9:be:5b:f0:17:eb:9f:fc:17:76:88:e1:87:28:62:
        c2:94:eb:52:60:1c:12:50:93:22:40:a3:a4:87:fe:47:d5:47:
        bf:ae:00:92:ef:dc:f1:99:a9:a1:64:4d:4b:6d:29:b1:cf:02:
        d2:5d:ce:f8:6a:5d:1d:66:c9:02:79:38:8e:13:e7:3f:39:ea:
        85:7e:a4:79:49:1a:ad:a2:13:af:ce:48:da:9a:f8:df:bf:60:
        2b:38:7e:5b

194.25.157.68

Last Seen: 2025-04-04

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

2130940350 | 2025-04-04T00:09:56.594465

Hashes

nginx1.18.0

443 / tcp

1563265241 | 2025-04-03T20:53:36.877999

Products

Pricing

Contact Us

194.25.157.68

Last Seen: 2025-04-04

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

80 / tcp 2130940350 | 2025-04-04T00:09:56.594465

Hashes

nginx1.18.0

443 / tcp 1563265241 | 2025-04-03T20:53:36.877999

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

2130940350 | 2025-04-04T00:09:56.594465

443 / tcp

1563265241 | 2025-04-03T20:53:36.877999