GeneralInformation

Hostnames	map-backend.woningmedia.nl
Domains	woningmedia.nl
Country	United States
City	San Francisco
Organization	Namecheap, Inc.
ISP	Namecheap, Inc.
ASN	AS22612
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443 5432 8080

80 / tcp

589765266 | 2025-04-03T02:48:28.463707

Hashes

hash

1094978929

http.dom_hash

1239617585

http.html_hash

589765266

http.server_hash

967792298

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 03 Apr 2025 02:48:28 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://map-backend.woningmedia.nl/

Vulnerabilities

443 / tcp

869281729 | 2025-03-28T19:27:56.362299

Hashes

hash

1742340761

http.dom_hash

1239617585

http.html_hash

869281729

http.server_hash

967792298

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 28 Mar 2025 19:27:55 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ca:28:c6:0c:73:67:92:85:66:05:1e:98:4b:4d:3d:23:5f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Mar 22 11:05:11 2025 GMT
            Not After : Jun 20 11:05:10 2025 GMT
        Subject: CN=map-backend.woningmedia.nl
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:43:36:06:c8:08:c4:51:19:12:33:68:ef:
                    39:83:88:70:ac:91:8e:c7:9c:d0:72:7d:14:9d:8c:
                    2f:8f:96:f2:aa:58:ff:82:e2:44:5f:58:e4:72:f5:
                    2b:44:c8:b1:07:68:9f:7e:e3:84:46:af:94:fb:a8:
                    0c:ad:38:f4:36:de:e3:e6:a6:b4:d8:af:fb:4c:75:
                    90:41:3c:9a:80:c7:0e:ac:ac:00:ec:12:d5:df:09:
                    ca:aa:81:d7:66:d6:cf:76:9c:8f:35:75:32:7e:d6:
                    d5:39:d3:e4:5e:56:8a:57:7f:80:44:55:68:d5:90:
                    21:25:b9:c1:7e:b2:db:aa:82:26:e2:25:1c:df:91:
                    6f:98:b7:7e:96:12:9c:11:1e:85:8d:7c:c3:1b:56:
                    1b:ed:21:7d:24:fa:1c:3e:43:da:b6:3e:82:36:be:
                    fe:85:17:b3:18:bb:78:b1:27:e0:4c:50:59:3b:52:
                    3f:9a:f5:f1:7a:20:20:12:a2:28:ea:26:ef:15:4c:
                    6d:ac:a6:e9:30:54:2d:f8:ae:fa:d2:03:da:e6:f9:
                    75:71:07:2f:8e:f0:73:81:2c:fa:76:45:11:0e:3d:
                    d6:1b:1e:b8:d8:11:1d:bd:d3:4b:a6:fa:dc:7b:ee:
                    e7:89:49:c3:3f:c8:5e:ec:fb:1b:38:dd:b1:25:79:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                37:CF:13:FC:76:BF:AA:67:85:EE:D6:9A:0A:7C:6E:0C:16:E8:A8:6A
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:map-backend.woningmedia.nl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://r10.c.lencr.org/96.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar 22 12:03:41.404 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:6D:8C:FA:B6:6E:B9:82:3F:6D:FF:F6:5D:
                                59:99:A4:A5:68:B4:19:D8:DA:4B:72:99:4F:1B:66:D5:
                                3C:FF:42:89:02:21:00:AD:78:6E:68:E4:30:C8:8D:14:
                                7E:DC:02:3A:3E:1A:B4:69:61:11:06:45:4B:90:AE:44:
                                53:C6:CF:35:FB:C5:8C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Mar 22 12:03:41.896 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:CA:92:2C:3E:78:4B:1F:5E:39:7D:B2:
                                F4:25:AC:87:18:A5:A5:C9:B6:36:1D:9E:B1:74:DC:C8:
                                3A:18:87:3B:E1:02:20:6C:A4:A3:D8:BD:F4:25:32:9B:
                                9C:6B:F1:8D:2D:FA:15:DF:AD:A4:D5:D2:BF:1B:6B:67:
                                B6:FC:46:F6:9B:18:11
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        01:a2:18:0c:27:ec:34:be:21:99:85:2e:f7:48:6b:0d:65:55:
        f0:c6:b2:28:fb:57:74:83:8e:e0:7d:70:f0:fb:42:64:b7:9b:
        e6:64:25:39:1a:34:c4:5d:6c:d3:64:f4:c0:3b:4c:d1:2c:c9:
        94:07:42:ec:b4:f5:46:52:a4:2f:eb:dd:87:3e:d0:95:c2:6b:
        6c:4c:4b:fc:ad:13:30:26:3c:a5:0d:68:34:9b:17:ba:df:4a:
        da:7b:5b:32:e4:a9:5d:e3:0d:3e:57:f8:a9:a1:1a:8d:18:39:
        a2:f9:2e:e2:64:3e:db:bf:00:a8:7f:94:da:e9:09:32:65:e0:
        a4:c7:21:2c:cc:0e:a7:1b:cb:65:7e:2b:5d:9b:99:d5:f0:36:
        f4:79:7b:f2:aa:7d:64:11:82:b7:ef:0f:b3:6f:d7:d8:26:97:
        8b:d2:44:c2:5c:9a:1c:ea:6e:31:eb:21:fe:08:ea:4a:c8:7d:
        b8:04:8a:c2:84:cd:29:f0:a6:1b:c1:96:89:07:38:02:ee:99:
        e8:77:b0:c9:c6:0e:ec:bc:c2:a4:7e:c5:13:80:ce:2b:77:2b:
        1d:d8:2c:87:ee:e9:8c:7c:55:15:c7:3c:5c:fd:66:11:76:e3:
        ef:b0:be:91:b5:7e:43:5d:01:ee:29:15:6a:c8:b8:76:33:14:
        94:f5:84:e7

Vulnerabilities

5432 / tcp

-726790289 | 2025-03-21T13:12:12.849831

PostgreSQL
fe_sendauth: no password supplied

8080 / tcp

-1708655800 | 2025-03-29T21:35:15.206129

Hashes

hash

-2145953068

http.dom_hash

-489335490

http.html_hash

-1708655800

http.server_hash

749042599

http.title_hash

1517026613

Hey, I'm imgproxy!

HTTP/1.1 200 OK
Content-Type: text/html
Server: imgproxy
X-Request-Id: APHR7ILp3kcSgjlkl6pvt
Date: Sat, 29 Mar 2025 21:35:15 GMT
Transfer-Encoding: chunked

199.192.17.56

Last Seen: 2025-04-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

589765266 | 2025-04-03T02:48:28.463707

Hashes

nginx1.18.0

443 / tcp

869281729 | 2025-03-28T19:27:56.362299

Hashes

nginx1.18.0

5432 / tcp

-726790289 | 2025-03-21T13:12:12.849831

PostgreSQL15.2 - 15.4

8080 / tcp

-1708655800 | 2025-03-29T21:35:15.206129

Hashes

Products

Pricing

Contact Us

199.192.17.56

Last Seen: 2025-04-03

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp 589765266 | 2025-04-03T02:48:28.463707

Hashes

nginx1.18.0

443 / tcp 869281729 | 2025-03-28T19:27:56.362299

Hashes

nginx1.18.0

5432 / tcp -726790289 | 2025-03-21T13:12:12.849831

PostgreSQL15.2 - 15.4

8080 / tcp -1708655800 | 2025-03-29T21:35:15.206129

Hashes

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

589765266 | 2025-04-03T02:48:28.463707

443 / tcp

869281729 | 2025-03-28T19:27:56.362299

5432 / tcp

-726790289 | 2025-03-21T13:12:12.849831

8080 / tcp

-1708655800 | 2025-03-29T21:35:15.206129