GeneralInformation

Hostnames	chalmers.eu www.chalmers.eu chalmers.se gts.chalmers.se ew-prod.ita.chalmers.se student-portal.ita.chalmers.se www-prod-ha.ita.chalmers.se doctoral.portal.chalmers.se student.portal.chalmers.se studentportal.chalmers.se www.studentportal.chalmers.se www.chalmers.se prod.www.chalmers.se
Domains	chalmers.eu chalmers.se
Country	Sweden
City	Göteborg
Organization	Chalmers University Network
ISP	Vetenskapsradet / SUNET
ASN	AS1653

WebTechnologies

Reverse proxies

Nginx1.20.1

Security

HSTS

Web servers

Nginx1.20.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2021-3618

5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

1402099545 | 2024-05-02T21:13:31.839202

80 / tcp

HTTP/1.1 307 Temporary Redirect
content-length: 0
location: https://chalmers.eu/
cache-control: no-cache

1504435099 | 2024-05-15T09:40:00.503102

443 / tcp

HTTP/1.1 200 
server: nginx/1.20.1
date: Wed, 15 May 2024 09:39:59 GMT
content-type: text/html
content-length: 4927
last-modified: Mon, 12 Jul 2021 19:36:32 GMT
etag: "60ec99c0-133f"
strict-transport-security: max-age=86400
accept-ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ca:24:17:b6:02:71:f5:52:b9:0f:ea:7f:50:95:9b:7a
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=NL, O=GEANT Vereniging, CN=GEANT OV RSA CA 4
        Validity
            Not Before: Aug 28 00:00:00 2023 GMT
            Not After : Aug 27 23:59:59 2024 GMT
        Subject: C=SE, ST=V\xC3\xA4stra G\xC3\xB6talands l\xC3\xA4n, O=Chalmers Tekniska H\xC3\xB6gskola AB, CN=www-prod-ha.ita.chalmers.se
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:d5:03:fd:1e:f5:09:f9:df:5f:9f:19:99:
                    56:a4:3e:b4:32:54:fb:0c:e6:d8:f7:32:d0:6c:e1:
                    71:11:6a:7c:66:e1:72:dc:b8:80:3c:9e:f3:ae:12:
                    47:4d:c5:16:88:20:7f:45:76:f5:4c:12:bd:ce:bf:
                    e3:52:63:34:e4:b1:9b:54:dd:05:8e:3d:47:bb:21:
                    99:7c:9e:a0:da:53:1d:ba:62:49:b8:bc:c8:8a:74:
                    04:b8:69:0f:df:f9:22:63:f9:a9:ac:ae:71:88:0a:
                    0f:f0:dd:53:d7:e7:cd:ec:f6:ea:b3:82:10:a9:d2:
                    14:99:08:0b:7a:90:62:82:0b:f7:72:44:19:76:1c:
                    7f:02:d5:7e:d2:57:a3:42:0d:30:97:03:44:16:8c:
                    04:e6:e2:e1:87:f6:76:62:80:f3:c1:02:f7:0f:c1:
                    78:ee:87:17:84:b6:61:56:c8:ea:3e:0e:e4:7e:52:
                    07:2d:d8:3c:8f:e3:37:62:bb:1a:52:a8:59:70:f1:
                    46:27:fa:62:45:61:b8:f0:c4:b0:b1:3a:8b:45:c7:
                    59:ea:4a:6f:1c:23:ce:47:36:e9:6f:a2:0e:70:0c:
                    9e:75:68:fa:4f:23:74:a6:d7:1f:26:d4:9c:f4:8e:
                    60:35:3e:04:29:07:14:6f:87:c5:8c:ac:db:4b:70:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                6F:1D:35:49:10:6C:32:FA:59:A0:9E:BC:8A:E8:1F:95:BE:71:7A:0C
            X509v3 Subject Key Identifier: 
                5B:8C:D4:8D:2D:FB:04:4C:90:CD:C7:CF:E2:AE:E1:88:8F:73:0C:6D
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.79
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
            Authority Information Access: 
                CA Issuers - URI:http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
                OCSP - URI:http://GEANT.ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Aug 28 10:48:47.939 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:93:B1:11:02:10:95:BC:74:B2:A6:A0:
                                29:24:3F:79:6E:EE:0B:85:49:4E:12:6D:CB:ED:39:DE:
                                B5:55:98:70:30:02:21:00:87:A3:ED:3B:81:75:FF:60:
                                9A:24:4B:C2:8A:5A:3C:59:41:93:C6:E4:4A:63:D1:53:
                                FF:8A:C3:5B:3B:E7:5B:11
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Aug 28 10:48:48.017 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:7A:F2:B3:C0:7A:EA:CD:AA:77:20:0B:C7:
                                93:E8:E1:D6:F4:6C:8B:5E:F7:BF:0A:70:ED:76:22:00:
                                07:B6:77:87:02:20:56:2A:E4:59:50:EE:12:CE:E3:1E:
                                2D:96:A0:54:BC:3E:53:11:84:09:31:7D:8E:C1:C6:70:
                                18:51:FA:AE:66:D9
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Aug 28 10:48:47.984 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:49:E7:CD:63:90:90:3C:18:7C:C4:AD:FD:
                                36:B1:8F:DE:E0:2A:FF:15:1A:60:CC:F7:03:0F:C2:6C:
                                C9:2D:EB:12:02:20:30:89:EC:F7:6E:1E:5D:ED:0D:EE:
                                10:D4:96:BF:30:00:7F:35:DE:9B:CA:87:35:2C:50:D4:
                                C8:C4:5E:78:AB:E2
            X509v3 Subject Alternative Name: 
                DNS:www-prod-ha.ita.chalmers.se, DNS:chalmers.eu, DNS:chalmers.se, DNS:doctoral.portal.chalmers.se, DNS:ew-prod.ita.chalmers.se, DNS:gts.chalmers.se, DNS:prod.www.chalmers.se, DNS:student-portal.ita.chalmers.se, DNS:student.portal.chalmers.se, DNS:studentportal.chalmers.se, DNS:www.chalmers.eu, DNS:www.chalmers.se, DNS:www.studentportal.chalmers.se
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        29:e4:43:4c:52:21:7e:9e:b7:0e:ff:f9:95:1e:97:04:cb:95:
        d3:8b:1c:d6:b5:90:d4:da:64:cc:be:09:4c:a1:56:d7:10:ba:
        c7:e6:f0:9c:80:c3:a2:b8:45:52:31:02:84:d3:25:d4:34:4c:
        b7:9a:d5:24:65:55:86:94:f3:00:6b:6b:62:16:f1:d8:d2:10:
        a3:7a:f2:4e:1a:f2:a9:61:3d:74:4c:cc:00:9c:f7:8a:ce:a6:
        b8:a1:ba:a6:1b:57:ee:29:56:31:c6:8d:68:e8:07:6f:96:c7:
        1c:4d:39:37:5f:8f:c9:f4:ce:67:1f:57:30:1b:87:34:bc:c1:
        27:fe:0b:54:5d:0b:aa:c3:a4:13:06:69:8c:42:6d:38:12:3f:
        84:d9:b7:f0:eb:b1:dd:a0:e1:d0:60:ae:06:ca:74:08:a8:fa:
        64:53:b4:d2:6f:9c:d7:1b:96:31:fa:8f:4c:4e:ec:59:02:5d:
        5c:23:26:54:b7:ac:00:85:1a:2e:71:b4:c2:4a:ee:cb:9f:74:
        a4:81:26:ec:89:0e:33:31:6d:3d:17:1d:40:a7:e3:08:34:45:
        ee:72:db:f1:0a:8b:28:b8:c1:78:70:20:cc:29:8b:d0:be:80:
        00:b9:c4:84:0d:75:34:61:95:94:ec:29:51:55:75:91:5b:eb:
        17:35:b4:44:0a:0e:35:60:cd:b0:9c:93:c1:3c:e1:c1:9b:99:
        10:fe:ed:9a:03:4f:f1:77:d2:82:ea:e0:0e:62:0f:02:25:c0:
        73:8d:6d:be:17:23:b1:a3:d0:b8:77:08:44:6b:70:a6:d0:48:
        85:ff:3e:a7:6c:dd:03:62:66:73:5a:f4:7e:19:3c:75:98:47:
        dd:6e:4d:b1:fa:fc:a4:e4:57:c4:27:86:98:6a:d9:ea:a9:43:
        68:16:ba:ed:73:55:73:0a:2e:6a:c6:e8:97:2a:2a:d6:06:e1:
        df:72:44:27:a7:2b:89:6f:09:c4:d2:35:c0:55:8f:96:37:40:
        05:88:c8:bb:3e:28:c3:53:a6:78:e7:bb:5b:c1:2c:f2:d4:d1:
        49:db:ea:f4:bc:d4:2f:ae:61:39:6f:36:39:7f:94:2e:3d:17:
        fd:d6:cc:a0:86:2c:0d:63:fc:db:df:43:fb:ee:32:0a:bd:77:
        94:85:c3:f8:3d:f5:fe:46:8b:a3:2c:7d:a7:d3:f8:f7:18:d2:
        83:8d:bb:16:ed:da:86:b3:a0:b0:9c:ce:cb:0c:fc:6f:2b:1d:
        31:32:f5:4d:55:fc:ee:15:58:97:45:8e:17:33:18:d2:2e:21:
        8d:07:bd:a3:e4:74:fa:fa:2b:c9:4f:60:aa:37:19:9f:93:36:
        ca:42:dd:fd:79:d1:68:bf

2001:6b0:2:2009::611

Last Seen: 2024-05-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1402099545 | 2024-05-02T21:13:31.839202
80 / tcp

1504435099 | 2024-05-15T09:40:00.503102
443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

2001:6b0:2:2009::611

Last Seen: 2024-05-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1402099545 | 2024-05-02T21:13:31.839202 80 / tcp

1504435099 | 2024-05-15T09:40:00.503102 443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

1402099545 | 2024-05-02T21:13:31.839202
80 / tcp

1504435099 | 2024-05-15T09:40:00.503102
443 / tcp