GeneralInformation

Hostnames	teamplex.ddns.net dslb-002-201-020-207.002.201.pools.vodafone-ip.de
Domains	ddns.net vodafone-ip.de
Country	Germany
City	Haan
Organization	Vodafone GmbH
ISP	Vodafone GmbH
ASN	AS3209

WebTechnologies

JavaScript libraries

jQuery

Lodash

UI frameworks

Tailwind CSS

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(3)

CVE-2024-11236

9.8In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

CVE-2024-11234

4.8In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.

CVE-2024-11233

4.8In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.

2013(1)

CVE-2013-2220

7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

2007(1)

CVE-2007-3205

5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

80 443 8096 32400

80 / tcp

1850896816 | 2025-03-16T04:53:44.707523

Hashes

hash

1969704841

http.dom_hash

-1016127911

http.html_hash

1850896816

http.server_hash

23007404

http.title_hash

1287926718

y tho

HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Sun, 16 Mar 2025 04:53:44 GMT
Content-Type: text/html
Content-Length: 1589
Last-Modified: Thu, 07 Nov 2024 09:49:59 GMT
Connection: keep-alive
ETag: "672c8d47-635"
Accept-Ranges: bytes

443 / tcp

676603300 | 2025-03-24T05:12:07.241051

Hashes

hash

-1852643647

http.dom_hash

-1368330835

http.favicon.hash

167837543

http.html_hash

676603300

http.robots_hash

-1022729730

http.server_hash

23007404

http.title_hash

-1181849058

Nextcloud

HTTP/1.1 400 Bad Request
Server: nginx/1.25.5
Date: Mon, 24 Mar 2025 05:12:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP/8.2.22
Set-Cookie: oc23eeql1ygr=b42075a34265a927f76ad2eeed6192b9; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: oc_sessionPassphrase=dcJnYk6WymdlN6OPxXjMASSIGRt2ddBr2KK6zwoyqyX2ANP6OvUf5GFrlHwOurgjfh9E8egvCkPtuWQ6G4hjkOR2u9%2FFmOlzocSUoiyk8MqqD0uMO5mnce3QRWordsj%2F; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: oc23eeql1ygr=b42075a34265a927f76ad2eeed6192b9; path=/; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-WEdGdEFIaHY5Rk5scVN1VmxoZ044MmMxUkhacExsYnlGRHZIV3JrSnEzOD06TlRrTVZqb0ZzR1VtMnhqaTVuVkNoMThOZkVJNWZRKzNjQStNSUpaQThUQT0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Set-Cookie: oc23eeql1ygr=b42075a34265a927f76ad2eeed6192b9; path=/; secure; HttpOnly; SameSite=Lax

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9a:64:e6:06:3a:18:6d:2d:67:96:3f:29:11:86:a7:16:38
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Jan 31 01:39:56 2025 GMT
            Not After : May  1 01:39:55 2025 GMT
        Subject: CN=teamplex.ddns.net
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:ca:ee:00:75:dc:da:97:63:6f:80:43:9b:17:ea:
                    2e:fd:58:82:69:e7:7f:bf:63:96:2b:bf:4c:71:f1:
                    27:27:78:b2:c4:70:6a:7a:b0:ec:56:d4:3c:28:a3:
                    22:06:bd:13:d5:58:6e:eb:ae:e4:67:71:ce:ce:b2:
                    fd:80:4c:c1:df
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                B9:A6:0B:AC:ED:0A:C8:80:9C:86:31:CA:43:9F:DF:24:CE:85:C5:58
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:teamplex.ddns.net
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Jan 31 02:38:26.800 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:2D:3C:A0:0F:ED:90:3C:2C:BD:2C:A6:0D:
                                34:82:4B:C7:0A:3D:8C:9F:0C:46:E1:17:9A:1F:4C:3A:
                                06:F4:A5:89:02:20:66:82:14:8C:D8:46:26:65:13:70:
                                83:6A:A9:74:B2:8A:5D:AA:B8:7E:55:2F:E0:F3:54:3C:
                                20:3A:16:8E:E9:40
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Jan 31 02:38:26.740 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:96:D7:76:69:2D:CE:17:17:0A:62:F1:
                                14:CC:BD:21:17:1D:E6:53:E7:84:97:51:27:BB:25:6A:
                                E5:52:F9:BF:CF:02:21:00:B7:23:7F:78:2F:E8:A2:45:
                                60:D9:A0:45:B3:61:3A:79:89:D5:88:D0:A5:52:A4:05:
                                30:4F:CB:99:38:E5:81:57
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:64:02:30:4e:64:e6:95:61:2f:58:65:fe:4b:bb:3d:80:14:
        9d:1f:f7:59:b4:74:f4:bd:2a:36:55:81:b7:c3:cc:0a:77:dd:
        d3:9b:f1:37:83:33:b7:27:69:05:cd:7b:ee:6e:27:03:02:30:
        7d:4c:3b:67:10:2d:60:9b:9a:6b:d2:a0:0f:21:ed:c8:1f:87:
        9f:a9:a4:92:3c:4e:5c:f1:f9:65:2f:f8:e4:38:a4:69:67:b0:
        ac:2e:13:83:54:12:0d:26:cc:66:08:23

Vulnerabilities

1 1 3

8096 / tcp

1270328231 | 2025-03-16T22:27:48.421786

Hashes

hash

1238916546

http.dom_hash

938028941

http.favicon.hash

-2069226242

http.html_hash

1270328231

http.server_hash

-1734924932

Jellyfin

HTTP/1.1 200 OK
Content-Length: 9723
Content-Type: text/html
Date: Sun, 16 Mar 2025 22:26:58 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1db80be3cd05b7b"
Last-Modified: Sun, 16 Feb 2025 22:00:49 GMT
Vary: Accept-Encoding
X-Response-Time-ms: 4.1268


TeamPlex:
  Version: 10.10.6
  OS: 
  Local Address: 192.168.0.5

32400 / tcp

1524593440 | 2025-03-31T11:51:32.220320

Hashes

hash

482869220

http.dom_hash

-351684302

http.favicon.hash

-895890586

http.html_hash

1524593440

http.title_hash

-1041937265

Unauthorized

HTTP/1.1 401 Unauthorized
X-Plex-Protocol: 1.0
Content-Length: 193
Content-Type: text/html
Connection: close
Cache-Control: no-cache
Date: Mon, 31 Mar 2025 11:51:32 GMT


Plex Media Server:
  Version: 1.41.3.9314-a0bfb8370
  Machine Identifier: 0c6178b48a511281c7f80b7f4fc8c2bf943a8437

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d2:88:f7:e8:ff:0b:a8:ef:ce:70:e7:41:7f:d3:87:e2:61
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb  7 03:06:46 2025 GMT
            Not After : May  8 03:06:45 2025 GMT
        Subject: CN=*.157ef558149347ac92b438567c4f1c4a.plex.direct
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:a5:1e:2e:86:58:31:84:39:e8:19:72:fe:
                    83:30:d7:61:f1:53:38:b1:dd:91:cc:3d:ee:ac:5a:
                    ff:b5:08:90:d8:1d:21:cf:7c:16:40:37:f2:90:2c:
                    2e:1c:50:5f:2e:8e:34:53:ce:13:da:e0:10:05:20:
                    4c:a7:11:53:26:7f:1f:8f:fd:cc:e0:41:f4:e7:f1:
                    b3:a4:70:52:a2:49:9f:5d:f4:5c:76:74:3e:a1:43:
                    1e:23:e0:0a:75:0d:96:d4:ca:7a:67:01:c2:90:96:
                    c6:3d:71:d8:f8:31:c2:5a:e8:ce:e2:03:46:8e:90:
                    f0:77:e2:46:87:7c:61:2d:f3:36:dc:ce:10:b3:54:
                    31:87:ee:15:1c:a9:94:97:24:6d:e1:7d:cb:ad:21:
                    5c:f6:0d:ee:93:9e:f9:0f:c3:22:0d:02:29:41:7b:
                    4b:a6:5a:8f:7d:9a:15:9d:e6:31:d6:47:a2:61:9b:
                    3a:4a:47:f3:2f:f1:ce:6e:83:2a:50:79:20:94:86:
                    69:e4:89:dd:30:6d:7e:bc:a0:7d:35:0d:7c:fa:e2:
                    31:46:c6:3e:e2:3d:44:89:c2:a0:32:18:c9:45:8e:
                    3a:ac:73:e8:2b:7d:94:37:2e:15:a7:14:79:00:54:
                    c4:3e:86:7d:f4:f9:58:be:9d:cd:8a:19:02:7a:d0:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                1E:77:CC:D4:68:1A:40:12:89:D0:13:2C:7E:0D:13:9D:DF:E5:8E:07
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.157ef558149347ac92b438567c4f1c4a.plex.direct
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb  7 04:05:16.574 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:EE:56:35:55:93:12:3C:6C:7A:59:A0:
                                E0:26:71:3F:FC:F4:92:3F:33:38:07:D7:2D:52:7D:2F:
                                EB:C5:62:E5:60:02:20:49:60:A8:20:51:29:68:E4:54:
                                99:AE:6E:C9:77:D6:2D:7F:74:C6:EE:7C:47:9E:CB:B7:
                                FF:4C:89:71:36:32:9B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Feb  7 04:05:16.708 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B3:81:1D:DC:5E:B4:11:CC:CE:70:60:
                                D5:6A:03:5E:82:79:8C:59:B0:03:34:D3:35:D2:26:53:
                                D3:29:A6:68:59:02:20:75:A4:95:2E:DD:D9:4B:29:5B:
                                FF:8A:42:3B:1D:72:82:01:DA:21:EE:D2:C0:D4:5F:9A:
                                88:98:19:E2:78:F8:8F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a6:d4:f3:e2:ed:0f:10:04:b2:2d:0d:c0:10:18:4b:b2:33:06:
        20:d7:4e:fa:79:7e:ae:79:90:5b:f2:0b:0f:2c:44:14:90:39:
        c7:ac:dd:2b:fa:72:28:5b:bb:9d:53:56:cd:91:3b:3b:15:a4:
        b7:d6:33:d2:03:64:a1:15:03:eb:b5:5e:f5:0a:f5:a5:72:0f:
        ad:44:04:1d:35:6f:b7:ab:46:1c:09:a8:93:0c:8a:a8:a2:10:
        a9:bf:79:a9:bf:0f:3b:61:fd:d5:63:86:8a:12:5a:58:2c:ef:
        2b:a5:cb:f7:76:58:d4:88:39:30:8f:69:ef:d1:4c:4a:98:cb:
        33:6b:0f:31:0b:cf:73:c4:c0:2e:1a:b4:47:d5:ad:2c:79:f0:
        57:37:40:c4:ef:b7:0c:25:32:b6:7c:40:e7:d4:56:2c:65:50:
        b2:02:45:79:c0:af:43:81:63:71:08:c8:e2:5d:8c:5a:3d:ce:
        f4:f2:8f:5c:1b:4e:a7:ee:a0:9f:d8:7c:da:d6:e4:4c:1e:b0:
        c3:36:5b:35:c3:d8:db:8f:14:b1:72:93:f7:e0:fb:63:14:f3:
        9b:da:ab:f2:f4:6a:3f:71:fc:11:5b:87:c6:9c:02:6a:7c:fc:
        ce:a1:2e:a7:6b:c2:91:fb:3d:ab:7c:07:6d:ce:91:07:f9:14:
        57:00:fa:cf

MAC Addresses

15:7E:F5:58:14:93
    Unknown

2.201.20.207

Last Seen: 2025-03-31

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

1850896816 | 2025-03-16T04:53:44.707523

Hashes

nginx1.25.5

443 / tcp

676603300 | 2025-03-24T05:12:07.241051

Hashes

Nextcloud

8096 / tcp

1270328231 | 2025-03-16T22:27:48.421786

Hashes

Jellyfin10.10.6

32400 / tcp

1524593440 | 2025-03-31T11:51:32.220320

Hashes

Plex Media Server1.41.3.9314-a0bfb8370

Products

Pricing

Contact Us

2.201.20.207

Last Seen: 2025-03-31

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp 1850896816 | 2025-03-16T04:53:44.707523

Hashes

nginx1.25.5

443 / tcp 676603300 | 2025-03-24T05:12:07.241051

Hashes

Nextcloud

8096 / tcp 1270328231 | 2025-03-16T22:27:48.421786

Hashes

Jellyfin10.10.6

32400 / tcp 1524593440 | 2025-03-31T11:51:32.220320

Hashes

Plex Media Server1.41.3.9314-a0bfb8370

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

1850896816 | 2025-03-16T04:53:44.707523

443 / tcp

676603300 | 2025-03-24T05:12:07.241051

8096 / tcp

1270328231 | 2025-03-16T22:27:48.421786

32400 / tcp

1524593440 | 2025-03-31T11:51:32.220320