GeneralInformation

Hostnames	vmi1516088.contaboserver.net mtandaomedics.tibanova.co.tz
Domains	contaboserver.net tibanova.co.tz
Country	Germany
City	Düsseldorf
Organization	Contabo GmbH
ISP	Contabo GmbH
ASN	AS51167
Operating System	Ubuntu

WebTechnologies

JavaScript libraries

jQuery

metisMenu

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443 9090

1651973090 | 2024-05-11T06:32:18.654939

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 11 May 2024 06:32:18 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Thu, 14 Dec 2023 15:25:47 GMT
Connection: keep-alive
ETag: "657b1e7b-264"
Accept-Ranges: bytes

-971492825 | 2024-05-12T07:22:17.117344

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Sun, 12 May 2024 07:22:17 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6Im5JSFZTQU52d2FnQisxNXlleDEwZFE9PSIsInZhbHVlIjoiRmFjbERJU1dWK2hwZDlwZ0lPVWZweS80emRiTmpOaUtTb3B4U3I0M0RBL0g1TXo0aEkxQlp2dldWOXJISVNVV3FLbFJiYVBQL092alpIOXNwR1pVSEZhYzJxMUw3alJpK0k1dlV6UWVqdTFpNENjZ1dKcDU1VWc1dWFyb21qQVoiLCJtYWMiOiJiOWJiMDI2MzAzZjQ2NWViNmNkYmY5NTJiZTU4MDdmYThmYzZiNjZkN2M1ZGUyOWFiOTgzN2JkZTRjNWRjNjcxIiwidGFnIjoiIn0%3D; expires=Sun, 12 May 2024 09:22:17 GMT; Max-Age=7200; path=/; secure; samesite=lax
Set-Cookie: afyanova_portal_session=eyJpdiI6IlJnWU9VLzk4YmNlSlpoaENUQWl2QVE9PSIsInZhbHVlIjoiNFRBSDZtNkFXa0h6QkxZbVpBb3FYb2xMSWJTL3BOVXBkTDFVWVJMYWlqVEtvL2VPS1ZEZTJjak5ITFBKSEpOQTQ0NFM3aDZtQmFnaG8vOCswc2plYlpFMWdNREZobk54TUQ2NEJTa2pUbjk1WFVaMFE2eURLZENzcng0OCtlaXciLCJtYWMiOiI0NGJhMzgyYmMzY2FjNjdlODZiYzZkODA1YTZkN2VhOGQ0NDdhZjU0ZDgyMGQyNWIyNWU2NDRhYWYzZDFlNjVlIiwidGFnIjoiIn0%3D; expires=Sun, 12 May 2024 09:22:17 GMT; Max-Age=7200; path=/; httponly; samesite=lax
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fa:f4:ba:02:9b:d5:35:cd:27:25:b6:ce:d0:f3:8e:62:bb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 25 19:32:55 2024 GMT
            Not After : Jun 23 19:32:54 2024 GMT
        Subject: CN=mtandaomedics.tibanova.co.tz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:9f:8f:03:1d:ee:4b:44:6d:a7:58:32:8e:
                    73:12:12:a9:4e:0f:1e:0c:03:52:1a:e9:41:6d:95:
                    96:42:87:e5:55:28:30:b7:b3:4b:7d:aa:78:83:34:
                    c8:c5:12:7c:7e:fb:80:67:12:52:52:98:b1:16:7c:
                    14:46:be:f7:05:fb:de:88:39:60:8b:b5:56:0e:50:
                    59:d1:26:41:09:be:92:1b:79:10:f4:af:4a:b2:59:
                    3b:4b:8e:a2:6c:aa:5b:a8:29:cd:dc:04:9b:d1:ff:
                    48:f5:f2:68:f3:f7:46:07:c3:c1:39:6f:e3:a4:dd:
                    32:ed:c3:a0:35:33:ca:ad:16:33:01:4e:43:9a:f6:
                    81:cf:33:cc:4f:48:f1:5a:f3:79:2c:db:fe:92:63:
                    09:8d:d4:d2:7b:d9:ca:cd:ac:3c:d5:17:4e:b0:38:
                    0a:db:79:bd:48:31:93:b6:d0:75:e8:0c:86:f9:64:
                    c5:37:68:33:6b:aa:58:f8:e6:d9:0a:e4:9a:8d:c1:
                    d0:7d:92:c3:1d:fd:8c:7b:f9:21:0d:0f:e7:7d:ba:
                    86:48:c8:4a:ac:7a:ec:07:61:ac:fd:ce:a6:b4:9f:
                    ba:fa:fb:87:a4:b3:e4:96:1b:3d:92:78:e9:2b:26:
                    48:04:0e:3f:43:ce:e1:47:d8:06:a6:03:fd:4f:c9:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                DC:CA:F0:79:4B:A0:DF:74:25:1E:60:87:B0:FE:E7:5E:92:8D:D4:72
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:mtandaomedics.tibanova.co.tz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Mar 25 20:32:56.026 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F6:94:AA:04:96:65:9F:0A:E9:12:75:
                                CD:C4:9A:D0:16:DC:33:37:77:C0:E5:5E:41:C0:75:EA:
                                B6:A0:4F:3B:E4:02:21:00:99:CD:99:AE:4E:81:07:0C:
                                C3:CF:41:E9:9A:B1:FF:19:F6:DF:CC:C6:54:B8:AF:EC:
                                19:B1:C6:8E:10:03:99:76
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Mar 25 20:32:56.041 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:33:44:BD:B3:2D:D7:C0:BB:AA:75:43:A0:
                                04:7F:5B:CC:5C:66:C4:41:6F:32:75:C4:FB:14:73:EC:
                                8F:22:C7:76:02:20:02:7D:4B:2E:05:E5:4C:EE:CB:44:
                                D6:D7:04:F3:2F:8F:AB:C4:EA:F0:94:6F:9C:07:7C:5F:
                                24:93:15:D4:3D:FB
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        02:60:56:c3:64:eb:f8:92:03:c5:95:f3:c5:e3:09:84:af:63:
        66:20:09:a2:0b:29:3d:3d:86:e2:52:68:e9:1c:14:27:d0:13:
        86:27:2c:d9:93:54:5c:bc:15:4c:62:59:43:69:fe:d2:37:5e:
        de:36:ec:77:28:a5:c1:d5:b3:b9:32:3e:fc:2e:04:42:82:fa:
        75:68:d0:01:d8:93:fa:e7:48:92:c5:64:73:1f:9e:f5:41:ff:
        d4:a8:f1:5c:26:b6:80:62:e2:ab:f3:8d:d5:9e:05:ee:24:57:
        b2:99:30:8b:c2:ce:b4:f2:86:93:fa:c1:85:e6:1a:c8:1e:db:
        06:d9:f3:d1:41:64:94:0f:8d:d6:d9:bd:8a:f1:dd:68:ab:1d:
        19:9e:91:67:7e:03:af:e5:46:28:ea:10:a0:00:7d:dc:ac:c7:
        96:72:8c:9d:ae:d6:22:7c:15:57:88:70:d2:49:3b:ec:06:c4:
        eb:56:4d:b7:c1:89:c4:80:ed:5e:7d:06:f2:a7:56:24:49:ad:
        a7:c9:e5:50:c6:78:89:32:c1:57:75:bb:7b:09:c9:60:ca:11:
        3f:3c:ba:05:f5:f4:25:3b:4a:38:b4:c6:b6:e6:52:9e:21:4d:
        73:11:5e:3e:61:d1:f1:25:22:15:d3:0a:0f:51:0c:3c:76:f4:
        e6:6b:b7:ee

-910698373 | 2024-05-03T12:30:40.615414

9090 / tcp

HTTP/1.1 200 OK
Host: 45.8.132.14
Connection: close
X-Powered-By: PHP/8.2.13
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, private
Date: Fri, 03 May 2024 12:30:40 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6Img1UHE3eDdBNmVSTEY3a0M1VDhKZlE9PSIsInZhbHVlIjoiUGFUM2taYVNTZG9yVzFmZmk2VVV0WTE2cHhQMTBqZ0ZLV1c3TGVQdDkraUNoTTM0b1RDYlRtN0ltY1pYY0pxS0tjeEZuWmNlODRkQlgvNnZhSDExemV2dndwMDJPOENyazQxL3JaWWsxWE5JTkQ1blZLemU3WFZFV0NrREQyZksiLCJtYWMiOiJlNjRiYmZjY2U2YTM5YWYwY2FlZGVjMzNiYWI3MThlMTBjOTMzM2E4NjlkZDhhYzgxZjdmZDc5ZjFiZjhhM2ZkIiwidGFnIjoiIn0%3D; expires=Fri, 03 May 2024 14:30:40 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: laravel_session=eyJpdiI6IkpBTmZLbWtqWmdSbGRzemFFRW1idFE9PSIsInZhbHVlIjoiL3ZlRmh5NlBiZEMyOW5wclJKaU5nVWtYUlVGRjE2MFVQMmsrc0tSKzJhYVR2VzkrcE1vYXlWa3VKOE14d0xyZmw4M09RWkhOTE9jUnZzMHFQNWo2RUsyUG5NdXE2TlI4Y0xYRkQ3aFBleHFkM21TaWNkZ1NkdXZMdHNKbk4xM28iLCJtYWMiOiJlYmE4YmQ0ODljNDI0YTNjNzE2NWIzNGEwOGU5M2YzNDFkMWYxZjU4YzUyNjA5OTI3MDQ0MGU2OTJmNmU2MjU1IiwidGFnIjoiIn0%3D; expires=Fri, 03 May 2024 14:30:40 GMT; Max-Age=7200; path=/; httponly; samesite=lax

45.8.132.14

Last Seen: 2024-05-12

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1651973090 | 2024-05-11T06:32:18.654939
80 / tcp

nginx1.18.0

-971492825 | 2024-05-12T07:22:17.117344
443 / tcp

nginx1.18.0

-910698373 | 2024-05-03T12:30:40.615414
9090 / tcp

Products

Pricing

Contact Us

45.8.132.14

Last Seen: 2024-05-12

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1651973090 | 2024-05-11T06:32:18.654939 80 / tcp

nginx1.18.0

-971492825 | 2024-05-12T07:22:17.117344 443 / tcp

nginx1.18.0

-910698373 | 2024-05-03T12:30:40.615414 9090 / tcp

Products

Pricing

Contact Us

1651973090 | 2024-05-11T06:32:18.654939
80 / tcp

-971492825 | 2024-05-12T07:22:17.117344
443 / tcp

-910698373 | 2024-05-03T12:30:40.615414
9090 / tcp