GeneralInformation

Hostnames	io.deutschebahn.com htz-v-prod-web-002.mgmt.s-v.io
Domains	deutschebahn.com s-v.io
Country	Germany
City	Nürnberg
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940

WebTechnologies

Blogs

WordPress

CMS

WordPress

Databases

MySQL

Form builders

Contact Form 75.9.5

Programming languages

PHP

SEO

Yoast SEO22.8

Translation

WPML4.3.12

WordPress plugins

Contact Form 75.9.5

Yoast SEO22.8

WPML4.3.12

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

80 443

1765360226 | 2025-01-13T02:34:40.574901

80 / tcp

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx
Date: Mon, 13 Jan 2025 02:34:40 GMT
Content-Type: text/html
Content-Length: 548
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src 'none'; script-src 'self'; img-src 'self'; style-src 'self'; font-src 'self'; object-src 'none'; frame-ancestors 'self';
Strict-Transport-Security: max-age=63072000

1249521200 | 2025-01-13T07:13:02.297637

443 / tcp

DB International Operations

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 13 Jan 2025 07:13:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer
Link: <https://io.deutschebahn.com/wp-json/>; rel="https://api.w.org/"
Link: <https://io.deutschebahn.com/wp-json/wp/v2/pages/20>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://io.deutschebahn.com/en/>; rel=shortlink
Strict-Transport-Security: max-age=63072000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' https://io.deutschebahn.com https://db-engineering-consulting.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tags.tiqcdn.com https://assets.bahn-x.de https://app.usercentrics.eu https://dbwas.service.deutschebahn.com https://www.youtube.com; img-src 'self' https://db-engineering-consulting.com https://app.usercentrics.eu/ https://uct.service.usercentrics.eu https://privacy-proxy-server.usercentrics.eu https://i.ytimg.com https://secure.gravatar.com data:; style-src 'self' 'unsafe-inline'; connect-src https://io.deutschebahn.com https://api.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://graphql.usercentrics.eu https://consent-layer.analytics.bahn-x.de https://dbwas.service.deutschebahn.com https://csp.bahn-x.de https://aggregator.service.usercentrics.eu https://yoast.com; font-src 'self' data:; object-src 'none'; frame-ancestors 'self'; frame-src 'self' https://www.youtube-nocookie.com/

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8d:a4:d5:20:10:46:21:01:cf:e3:9e:6e:b7:88:10:88:55
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Jan 12 23:14:59 2025 GMT
            Not After : Apr 12 23:14:58 2025 GMT
        Subject: CN=io.deutschebahn.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:ee:87:e8:ab:1c:ae:dc:e8:44:08:87:67:f3:9a:
                    34:1d:55:43:3e:93:b0:4b:bc:6f:13:ae:05:8b:d8:
                    35:ed:0b:66:c9:56:29:c3:a7:8d:b5:dc:a7:cb:bf:
                    8b:df:4b:fc:47:bb:4a:00:b3:38:41:a7:e4:df:ef:
                    bd:39:23:a3:79:de:1c:78:6c:0a:1b:c3:33:76:25:
                    75:b8:91:d0:22:c5:6a:cf:3f:c2:1f:48:4a:3d:80:
                    2d:0e:41:5d:43:5a:1a:4b:06:a7:d3:81:53:9a:ae:
                    19:1e:ef:09:4f:28:d6:12:42:f5:a0:ca:35:fa:d1:
                    6b:c3:41:05:be:9a:2a:5b:21:d5:8d:d3:c1:87:ca:
                    ff:72:1c:b9:f0:6f:d6:96:c0:68:7e:4f:6c:31:2a:
                    70:95:d9:7a:28:4b:07:4b:a2:a5:af:2d:93:04:3f:
                    1e:42:cb:a0:0b:3f:19:5b:02:4e:1e:46:6c:c5:cb:
                    68:30:f3:d6:6d:27:00:3b:74:fc:99:da:08:d6:88:
                    39:8a:34:51:e4:e3:99:7b:ed:0c:91:c8:e4:62:dd:
                    03:b0:e4:6e:5f:4d:a4:b4:7a:ea:db:4f:aa:de:85:
                    6d:05:00:6b:1a:47:65:ba:cd:39:22:5d:53:f7:9b:
                    fc:54:b8:e4:ef:03:1c:f3:b8:53:71:d2:9b:36:ee:
                    9c:95:57:b9:6b:92:bb:2d:8f:01:de:a3:1e:cc:9e:
                    9f:d8:d5:94:67:b0:d7:45:c0:e5:16:33:9f:6b:d6:
                    65:06:f8:1b:d6:f8:cb:8e:da:a0:61:fa:c8:50:d8:
                    7e:0b:a3:5c:1b:61:43:72:2c:ec:2b:1d:39:12:49:
                    a3:d7:87:92:3c:c5:e5:26:ed:36:ff:26:4f:96:c2:
                    08:73:3b:7b:db:f8:a6:b2:98:26:1f:93:19:08:da:
                    11:cf:b8:e7:98:bd:24:26:4c:af:96:c3:9e:83:21:
                    63:44:96:c1:b4:a7:53:2e:97:e7:39:07:b3:f1:78:
                    43:fa:3e:a1:85:d2:c4:3e:2b:9e:d2:fa:f3:5f:b6:
                    e6:08:e2:c6:95:bd:69:9d:34:69:2b:61:0f:8a:97:
                    9d:a0:2f:1d:33:c2:cc:eb:c6:72:2a:e5:65:f8:6c:
                    9c:55:bf:23:39:85:62:5d:0b:24:c8:d4:19:44:4c:
                    6a:ce:a8:65:10:dd:14:30:d0:a0:aa:69:89:64:d1:
                    02:6d:0d:a0:78:14:bf:4e:8e:33:0d:34:ee:62:28:
                    37:05:35:f7:0e:df:21:48:bd:f5:16:cd:01:11:3b:
                    ce:54:58:30:ee:a6:60:d3:3f:ec:10:ac:b4:18:d2:
                    ee:e5:dd:0c:09:04:65:7a:fa:96:eb:8d:6e:01:77:
                    6a:c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                57:65:4B:AF:52:3B:91:8A:F8:2C:D7:4C:B1:2C:06:60:AD:EE:1D:1C
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:io.deutschebahn.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jan 13 00:13:30.193 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D2:06:46:A6:4E:4C:04:8E:0D:57:6A:
                                7F:AA:53:D8:5D:12:78:89:24:63:05:99:0D:ED:67:34:
                                63:9C:33:DA:4B:02:20:53:85:37:AC:DB:AF:B7:B9:F4:
                                CA:96:FA:68:97:46:54:3D:4F:A6:6D:1C:70:0A:77:18:
                                E0:ED:9A:35:C8:2F:12
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Jan 13 00:13:30.377 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:CE:9D:9E:30:F8:B7:7E:54:9B:80:59:
                                59:BC:5F:44:65:63:AF:F3:17:AA:16:81:9D:63:48:4F:
                                4B:E4:B4:AA:2C:02:20:6A:C4:34:8B:F2:30:A8:6F:96:
                                64:EE:63:C0:0B:AC:AA:5D:AD:6F:06:55:71:E7:5B:C8:
                                CD:92:B3:71:E1:23:1F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        94:4b:48:0d:d8:f6:5b:42:b1:e6:10:34:fd:76:0b:56:ff:f5:
        98:aa:23:a4:d2:5a:d3:13:e7:c7:07:85:3b:f0:6f:9a:8d:ff:
        8c:57:71:e9:43:0f:22:62:b8:b0:7a:82:2c:8d:a8:d1:e5:8a:
        12:d8:bb:50:de:eb:da:a5:1e:36:39:3b:4b:a8:61:74:32:3b:
        86:51:49:d0:c3:b5:7c:13:80:5a:98:b7:42:e8:18:1a:3a:a2:
        26:b4:a2:14:9b:c9:01:a8:93:a5:52:44:fd:1f:1d:59:05:b9:
        f6:eb:05:7e:aa:41:4e:24:23:f5:7f:8d:1a:68:45:2d:c6:39:
        6a:b7:1f:b9:9d:2c:55:d0:02:60:ff:dc:d6:20:ae:fc:5f:e9:
        e5:73:d2:7b:83:1c:86:95:fd:9c:ae:f4:20:03:20:b3:55:d4:
        6a:14:9e:ff:e0:82:21:20:2a:07:8e:f3:3c:5d:5f:96:b0:85:
        43:57:f0:07:95:08:8b:0e:d4:d0:13:49:c8:8e:0e:a2:35:11:
        c8:3a:50:c5:a4:49:c6:f6:b3:de:54:96:13:17:dd:c5:c2:aa:
        bc:5a:55:11:10:fa:07:34:ce:a8:7a:3d:85:2d:95:77:3e:22:
        a4:82:10:c2:bb:37:c4:f8:0e:f4:53:db:56:54:51:a0:0d:eb:
        13:c3:d9:37

CVE-2024-6386 CVE-2022-45072 CVE-2022-45071 CVE-2022-38974 CVE-2022-38461

88.198.196.163

Last Seen: 2025-01-13

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1765360226 | 2025-01-13T02:34:40.574901
80 / tcp

nginx

1249521200 | 2025-01-13T07:13:02.297637
443 / tcp

nginx

Products

Pricing

Contact Us

88.198.196.163

Last Seen: 2025-01-13

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

1765360226 | 2025-01-13T02:34:40.574901 80 / tcp

nginx

1249521200 | 2025-01-13T07:13:02.297637 443 / tcp

nginx

Products

Pricing

Contact Us

Vulnerabilities

1765360226 | 2025-01-13T02:34:40.574901
80 / tcp

1249521200 | 2025-01-13T07:13:02.297637
443 / tcp