GeneralInformation

Hostnames	rpweb1.kunden.fz.matthies.de nordostseewohnwagen.de www.nordostseewohnwagen.de
Domains	matthies.de nordostseewohnwagen.de
Country	Germany
City	Hamburg
Organization	Dokumenta AG
ISP	Dokumenta AG
ASN	AS24657

WebTechnologies

CMS

TYPO3 CMS

Programming languages

PHP

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

897585984 | 2024-04-13T14:34:20.822443

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.2
Date: Sat, 13 Apr 2024 14:34:20 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://auto.fz.matthies.de/

-837372531 | 2024-04-14T17:18:12.460429

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 14 Apr 2024 17:13:27 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 95370
Connection: keep-alive
Content-Language: de
Cache-Control: max-age=0
Expires: Sun, 14 Apr 2024 06:29:23 GMT
Vary: Accept-Encoding
X-UA-Compatible: IE=edge
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: https://www.matthies.de
Access-Control-Allow-Credentials: true
X-Cache-Status: HIT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:66:63:ef:13:fc:b6:16:ae:7d:71:4e:60:71:3f:76:99:83
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  5 01:46:52 2024 GMT
            Not After : Jul  4 01:46:51 2024 GMT
        Subject: CN=nordostseewohnwagen.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:a4:32:3f:40:39:41:f5:d8:7b:53:57:44:57:da:
                    3b:6e:d2:b4:bc:89:92:24:54:8c:d1:11:ed:37:9e:
                    fc:61:17:d2:61:e8:47:f3:4f:30:d9:69:07:8e:71:
                    2b:41:14:3f:43:95:d1:5c:9f:4e:87:70:77:76:42:
                    cc:27:c9:73:d8:2f:86:0b:f0:96:ba:a4:98:3d:f9:
                    22:1b:65:8f:d3:e0:ec:d4:da:fe:f0:e2:17:ff:c8:
                    66:c8:2f:05:9c:b0:29:3e:6d:70:2e:01:89:47:d6:
                    e7:f8:6d:ec:3a:60:5e:ee:7c:ef:1f:3f:7f:86:72:
                    c3:cd:56:6d:c3:29:e0:57:80:39:68:1c:43:13:91:
                    b2:db:b0:00:bf:6f:f5:e9:47:e9:d1:56:40:c4:fc:
                    c0:f1:db:92:4e:0d:30:84:7a:58:fa:1f:8e:41:1e:
                    e0:ed:3b:4f:42:43:28:8c:1b:91:46:6a:5f:1c:32:
                    36:9a:ab:71:36:8d:05:45:7a:e8:c6:3d:94:a7:bf:
                    0e:35:c7:3a:33:7e:83:dd:a4:c2:34:91:d7:64:d3:
                    5f:27:45:6f:66:68:a9:b5:34:1a:fb:fa:86:63:24:
                    12:e7:72:76:d6:5a:de:72:72:f2:8a:fa:5b:fa:9a:
                    ad:d9:d7:bd:24:66:bd:27:4b:68:ab:ed:92:0c:a5:
                    d3:ab:65:9b:66:75:b5:c6:d9:a9:e9:af:ba:ef:5c:
                    d0:f0:30:4e:7a:d4:c8:c6:58:b2:1b:24:72:33:e7:
                    c9:01:14:e8:5c:63:1b:c7:07:c6:28:cb:c1:0c:87:
                    7f:a0:fd:b2:ea:79:50:5f:e9:d5:0b:69:87:d2:5c:
                    54:5e:9b:5f:ed:1d:5d:2b:cc:49:46:aa:fd:c1:30:
                    9b:d5:6f:be:ab:39:27:fe:ee:28:cb:d2:81:f7:cf:
                    65:3d:6c:a3:df:da:63:a9:cd:0f:25:11:8f:6c:30:
                    f8:b8:09:74:6b:39:bf:60:1d:6e:56:83:b5:26:23:
                    00:4a:3b:30:3b:3b:28:47:0c:b7:70:a3:21:a7:dc:
                    25:3a:27:e0:21:96:22:b0:8a:5f:b9:6d:86:d9:cb:
                    42:d3:a5:93:56:00:0b:55:79:af:59:a0:e0:94:c4:
                    a9:d1:45:e4:f6:b2:84:5e:e4:d8:d9:99:95:e3:86:
                    bc:ec:50:46:cb:69:ab:2d:ed:85:dc:16:ec:69:c4:
                    e0:9f:fa:f4:67:99:5c:36:f0:ea:61:33:69:fb:7d:
                    45:6c:16:60:8f:87:eb:78:16:24:eb:9c:49:c5:70:
                    86:fc:4e:f8:2f:79:48:74:11:0e:74:a6:34:d3:cd:
                    66:48:d9:c6:f8:70:e0:ae:d1:aa:4f:00:23:6e:0b:
                    96:66:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                D9:2C:10:CD:D4:34:A3:1F:43:4C:8C:B2:47:DD:C7:5D:50:64:7F:80
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:nordostseewohnwagen.de, DNS:www.nordostseewohnwagen.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Apr  5 02:46:53.584 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E3:04:2C:25:D9:34:48:34:E7:CA:B2:
                                8F:A7:E7:0E:FD:B6:C8:CB:93:8D:C6:8A:DA:03:B7:E5:
                                B8:5D:17:77:B8:02:21:00:8D:87:F1:98:F6:4B:F3:07:
                                25:5C:1E:FF:57:61:BF:23:04:0E:2F:B3:75:30:E3:A7:
                                A4:48:4D:81:1F:75:36:21
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr  5 02:46:53.604 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:95:BF:E7:89:F8:08:4F:C8:0C:19:C8:
                                8B:EA:81:6B:C7:C3:1B:27:77:7C:53:13:E0:1A:C2:35:
                                74:69:30:07:3E:02:21:00:9B:8F:A9:62:E2:31:6F:0C:
                                48:1B:33:43:D2:D8:E2:27:65:04:19:31:B8:02:74:97:
                                9D:B5:E2:C2:ED:07:CC:6E
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        04:02:c2:82:a5:f6:a9:3c:7f:51:ad:53:af:11:a7:17:35:3a:
        a3:ae:5a:16:19:41:0e:2f:bf:c9:a5:89:9a:82:e4:41:c8:27:
        3d:7c:00:91:03:2d:58:ad:dd:98:a8:92:fa:4c:6c:52:77:22:
        15:7a:4e:92:7b:ad:3d:4d:e8:65:da:88:60:91:69:db:33:59:
        cb:6f:aa:30:e1:f2:6f:72:98:5d:3a:be:e8:62:94:99:5a:2e:
        3d:ec:d4:fe:37:10:b0:3d:da:09:b6:8e:43:f5:31:ae:2a:39:
        87:13:23:5b:41:54:e9:9a:74:01:6b:58:9f:ae:2a:3f:f4:c8:
        25:8f:ba:1d:e4:c0:15:7c:a0:e6:50:37:36:3a:47:47:07:16:
        ed:06:79:d8:74:0c:36:9b:8d:8d:aa:90:36:3d:7f:a9:6c:1f:
        1f:b0:a7:8b:b5:86:46:e9:5e:9b:e2:b0:1f:60:fc:d3:4c:28:
        82:61:b4:a8:1c:20:e1:48:ae:92:fb:03:41:1b:25:c6:12:e9:
        72:d4:4f:8a:17:3e:ba:d4:c2:42:b8:69:d4:50:fa:f8:61:a1:
        7c:fb:b4:87:a7:ba:25:c2:d4:01:9a:02:a3:c4:d7:ab:4a:49:
        e8:8e:c7:be:95:db:a1:cb:a6:32:d7:d6:8e:56:3d:01:97:d9:
        ff:59:f8:da

81.18.101.90

Last Seen: 2024-04-14

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

897585984 | 2024-04-13T14:34:20.822443
80 / tcp

nginx1.20.2

-837372531 | 2024-04-14T17:18:12.460429
443 / tcp

nginx1.20.2

Products

Pricing

Contact Us

81.18.101.90

Last Seen: 2024-04-14

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

897585984 | 2024-04-13T14:34:20.822443 80 / tcp

nginx1.20.2

-837372531 | 2024-04-14T17:18:12.460429 443 / tcp

nginx1.20.2

Products

Pricing

Contact Us

897585984 | 2024-04-13T14:34:20.822443
80 / tcp

-837372531 | 2024-04-14T17:18:12.460429
443 / tcp