GeneralInformation

Hostnames	metrics-backend.net www.metrics-backend.net w0f.rzone.de
Domains	metrics-backend.net rzone.de
Country	Germany
City	Karlsruhe
Organization	STRATO AG
ISP	Strato AG
ASN	AS6724

WebTechnologies

Analytics

Matomo Analytics

Issue trackers

Redmine

JavaScript frameworks

AngularJS

JavaScript libraries

jQuery1.11.1

Programming languages

Ruby

Web frameworks

Ruby on Rails

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

21 80 443

-1403991200 | 2024-04-17T20:58:32.055874

21 / tcp

220 Speak friend, and enter
530 Login incorrect
214-
  ftpd.bin - Round-robin File Transfer Server, version 3.4.0r16
  (C)1997,1998,1999 by Marc Huber <marc@sixpack.de>

  The following FTP commands are available:
  ABOR  ALLO  APPE  AUTH  CWD   CDUP  DELE  HELP  HOST  FEAT  LANG  LIST
  LPRT  LPSV  NLST  MDTM  MFMT  MKD   MLSD  MLST  NOOP  OPTS  PASS  PASV
  PBSZ  PORT  PROT  PWD   QUIT  REIN  REST  RETR  RMD   RNFR  RNTO  SITE
  SIZE  STAT  STOR  STOU  SYST  TYPE  USER  XCUP  XCWD  XMKD  XPWD  XRMD


214 That's all, folks.
211-Extensions supported:
 HOST
 MDTM
 REST STREAM
 SIZE
 MFMT
 MLST Type*;Size*;Modify*;Create;Unique*;Perm*;UNIX.mode;UNIX.owner;UNIX.group;
 LANG EN*;DE;FR;NL;ES;IT;
211 End.

-916718359 | 2024-04-19T00:24:16.129633

80 / tcp

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:24:08 GMT
Server: Apache
Cache-Control: max-age=0, private, must-revalidate
X-XSS-Protection: 1; mode=block
X-Request-Id: 3d690f8c-c69b-4c05-82ef-f71d79e7fb2e
X-Frame-Options: SAMEORIGIN
X-Runtime: 0.014745
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger 5.1.2
ETag: W/"7ef764d34f7fc0fcd27924193b993deb"
Status: 200 OK
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Set-Cookie: _redmine_session=S0k1YjVTdnZwejN1dUwyeVFCMWEzM2J6ZUZkM3BsSzFaMVdlVHJ5cEJtK0tTSzFuTHFTTFBDNGhWMm11Slk1M0RnTHpIdVI5WU1aR2h6KzdWSzREYzVXMENUOVMwbEVyZ1FxaDJPdTZMekg1dGMxaVZwTEw4WEF1MmVxT2RZQTAwZjd1VnJ2bW1ScWtmVlpXcDFucTN2U0M4WGZzM0NFaHd0di9jbVA3b1paeHVYUmltVWNhaUFzVzJDL3FqQzBnLS0xZjBya1ZiR2U2RlFvbExZNVlBcmNnPT0%3D--49d3ed3e3589cd57f41ee2997ed57d1d59576315; path=/; HttpOnly
Transfer-Encoding: chunked

1925169428 | 2024-04-19T12:42:01.900147

443 / tcp

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 12:42:00 GMT
Server: Apache/2.4.59 (Unix)
X-Powered-By: PHP/8.1.28
X-Matomo-Request-Id: ffa84
Vary: Origin,User-Agent
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: no-store, must-revalidate
X-Frame-Options: ALLOW-FROM *
Referrer-Policy: same-origin
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' 'unsafe-inline' 'unsafe-eval' data:;
Content-Type: text/html; charset=utf-8
Set-Cookie: MATOMO_SESSID=g20gsc138ah30g17vehmp0p8hk; path=/; secure; HttpOnly; SameSite=Lax
Transfer-Encoding: chunked

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:85:6b:0a:83:54:f5:01:9a:fa:eb:54:e9:44:cc:d8
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Encryption Everywhere DV TLS CA - G2
        Validity
            Not Before: Apr 27 00:00:00 2023 GMT
            Not After : May 11 23:59:59 2024 GMT
        Subject: CN=www.metrics-backend.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:5c:22:7e:8d:6a:41:46:d8:35:94:50:4b:
                    70:ae:7e:62:65:d7:0c:4a:5e:61:ba:03:1b:86:36:
                    57:bf:5f:82:4f:24:70:53:9e:6a:f0:46:a0:ba:07:
                    4f:cf:d4:c6:bc:e7:2c:c6:7a:23:90:b5:35:28:03:
                    45:21:f8:1c:48:b8:1d:9d:bb:dd:a1:02:d6:f6:cd:
                    ac:a7:7b:4d:db:b3:d7:9c:d0:23:4c:07:be:54:bb:
                    53:a7:46:0d:c4:cb:9c:d6:25:4a:8c:ce:d9:91:9a:
                    e7:c7:a4:dd:6c:d7:d4:b1:0e:ac:3d:25:5a:b4:d2:
                    df:82:c1:8a:0e:c7:dc:69:14:b7:da:c6:1e:13:8d:
                    09:bc:a7:b7:fb:96:65:2b:40:2d:28:65:12:78:ae:
                    ec:b7:35:4c:ab:af:e8:57:69:f9:ff:c1:98:f0:cf:
                    aa:77:f0:fd:05:b6:5e:7f:71:06:31:76:06:79:a8:
                    db:cf:c8:6c:78:02:b3:44:12:81:e2:bf:21:ed:6a:
                    8f:ef:68:7b:1f:68:a8:32:59:2f:88:c9:3d:de:56:
                    f1:61:25:4d:ed:d1:68:5c:2d:c1:16:11:ac:7d:40:
                    42:ee:70:50:b1:12:40:e7:2b:56:a7:9d:cc:1a:5e:
                    27:78:ad:15:60:c2:66:b5:76:f1:d1:85:84:c2:e5:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                78:DF:91:90:5F:EE:DE:AC:F6:C5:75:EB:D5:4C:55:53:EF:24:4A:B6
            X509v3 Subject Key Identifier: 
                8A:E8:E7:D5:B6:5E:A8:0E:01:BD:62:58:C1:3D:4C:FA:43:66:A6:89
            X509v3 Subject Alternative Name: 
                DNS:www.metrics-backend.net, DNS:metrics-backend.net
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                  CPS: http://www.digicert.com/CPS
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt
            X509v3 Basic Constraints: 
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Apr 27 02:33:08.196 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:42:6F:8E:0C:FD:51:BB:C8:4D:09:76:C9:
                                4C:8F:48:27:3F:E4:35:44:88:13:1B:7B:2F:22:0F:21:
                                78:1A:B0:03:02:21:00:D7:B1:2A:32:6B:1E:C1:54:B2:
                                53:74:8B:BA:3F:B7:7E:84:0C:CD:4A:D9:04:4B:CD:44:
                                CC:4D:9F:45:5A:C2:A9
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 73:D9:9E:89:1B:4C:96:78:A0:20:7D:47:9D:E6:B2:C6:
                                1C:D0:51:5E:71:19:2A:8C:6B:80:10:7A:C1:77:72:B5
                    Timestamp : Apr 27 02:33:08.251 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D9:DA:E6:1C:0D:68:D7:9A:60:3F:86:
                                19:8A:5B:B2:40:23:8B:9B:11:9F:FD:B9:68:3F:EC:26:
                                88:FE:60:0C:30:02:20:73:55:40:1F:6D:64:18:1F:A2:
                                11:08:7D:FA:98:BF:CE:4E:11:E7:1C:88:3B:02:AE:98:
                                A1:DD:56:FC:E9:03:DA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr 27 02:33:08.196 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:81:FD:EB:4E:AC:50:FC:64:7C:32:4F:
                                97:56:01:5A:4E:32:48:DF:C1:11:4E:FA:C9:DB:1C:68:
                                AF:7A:3B:76:76:02:20:4C:8B:15:83:41:52:7B:B9:E5:
                                93:1E:81:04:0B:A4:4E:84:95:3C:F7:B9:9D:EB:E5:DC:
                                25:51:07:7B:61:BB:63
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        d6:b8:f7:d7:d2:4a:ae:67:06:ba:e7:bf:f2:8d:91:1a:a9:f3:
        e9:9c:70:5e:72:7a:14:d1:45:fe:93:63:b2:72:07:14:79:82:
        09:48:65:bf:78:3c:b3:13:07:59:de:27:14:09:00:39:2c:eb:
        c3:38:e0:72:0a:58:8e:55:ac:17:3a:90:cf:be:aa:81:1a:fa:
        fd:58:27:c9:23:a6:8e:02:25:5e:68:af:5b:ce:91:88:b3:b6:
        22:15:b0:23:ef:64:56:c8:fa:b3:7d:67:39:cf:69:d9:07:d5:
        e0:67:54:4a:f0:52:c2:06:50:40:8f:04:d6:ce:90:30:6f:f5:
        3d:85:81:6c:bd:6b:fb:b3:35:ba:fc:ef:ad:87:e0:a3:91:04:
        9d:60:a9:47:e5:4e:c8:2b:2c:f1:fc:41:60:92:dd:e6:1c:1d:
        dd:1e:40:77:cd:b0:da:07:6d:56:2c:d1:00:e4:57:21:d7:30:
        61:91:2d:2e:a3:a5:14:ca:bf:1e:cd:20:a1:07:54:3c:9d:11:
        8c:97:76:59:84:10:32:8f:32:e6:26:7c:43:ac:d7:6f:af:30:
        9f:33:5b:36:8c:50:0e:dd:00:35:6d:12:3c:21:4e:8b:ac:c4:
        4e:f4:eb:25:d1:3d:24:bc:a8:b5:6a:8a:1b:4c:3e:7a:1b:3f:
        97:cc:97:cf

2a01:238:20a:202:1079::

Last Seen: 2024-04-19

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1403991200 | 2024-04-17T20:58:32.055874
21 / tcp

-916718359 | 2024-04-19T00:24:16.129633
80 / tcp

Apache httpd

1925169428 | 2024-04-19T12:42:01.900147
443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

2a01:238:20a:202:1079::

Last Seen: 2024-04-19

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1403991200 | 2024-04-17T20:58:32.055874 21 / tcp

-916718359 | 2024-04-19T00:24:16.129633 80 / tcp

Apache httpd

1925169428 | 2024-04-19T12:42:01.900147 443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

-1403991200 | 2024-04-17T20:58:32.055874
21 / tcp

-916718359 | 2024-04-19T00:24:16.129633
80 / tcp

1925169428 | 2024-04-19T12:42:01.900147
443 / tcp