GeneralInformation

Hostnames	ec2-13-239-100-215.ap-southeast-2.compute.amazonaws.com dept13-staging.tmadev.com.au
Domains	amazonaws.com tmadev.com.au
Cloud Provider	Amazon
Cloud Region	ap-southeast-2
Cloud Service	EC2
Country	Australia
City	Sydney
Organization	Amazon Corporate Services Pty Ltd
ISP	Amazon.com, Inc.
ASN	AS16509
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

443

1932601856 | 2024-04-09T20:57:23.744883

443 / tcp

HTTP/1.1 301 Moved Permanently
Date: Tue, 09 Apr 2024 20:57:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.18.0 (Ubuntu)
Expires: Tue, 09 Apr 2024 21:57:23 GMT
Cache-Control: max-age=3600
X-Redirect-By: WordPress
Location: https://department13.com/

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c2:f6:00:ac:5a:be:c3:c7:5a:a3:7a:ff:75:df:1f
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Amazon, CN=Amazon ECDSA 256 M02
        Validity
            Not Before: Jul 24 00:00:00 2023 GMT
            Not After : Aug 21 23:59:59 2024 GMT
        Subject: CN=dept13-staging.tmadev.com.au
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:a9:50:c9:18:18:db:e7:a3:0c:bd:01:f3:32:67:
                    b8:01:68:81:8a:eb:01:a5:5a:c4:a6:db:fe:41:07:
                    61:98:a7:80:c3:47:85:9c:27:f7:de:a5:49:70:a7:
                    96:2a:d8:2e:2b:2e:09:0e:7e:9a:3e:3e:a9:eb:d9:
                    b1:e0:3b:a7:d0
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                BB:78:9A:D7:68:33:32:9D:1A:BB:6C:FD:B1:34:4C:01:DE:CB:D0:75
            X509v3 Subject Key Identifier: 
                BC:47:5C:5B:31:90:98:41:1C:10:00:C4:61:C0:12:19:79:F8:9A:8E
            X509v3 Subject Alternative Name: 
                DNS:dept13-staging.tmadev.com.au
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.e2m02.amazontrust.com/e2m02.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.e2m02.amazontrust.com
                CA Issuers - URI:http://crt.e2m02.amazontrust.com/e2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Jul 24 08:51:14.927 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F7:57:C6:A5:92:68:E4:ED:0E:16:7E:
                                EA:54:59:7E:FA:F5:10:00:08:4F:6F:06:C7:0A:48:B2:
                                74:C8:51:ED:AD:02:21:00:F5:01:33:FA:F4:93:85:27:
                                81:4A:B3:E9:9B:87:45:A6:67:89:64:A2:34:2E:6A:75:
                                50:26:71:0E:A1:D7:60:6F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jul 24 08:51:14.925 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0A:A3:DD:AF:3A:89:05:E8:86:18:2E:20:
                                9A:3B:EA:B6:28:30:35:6E:9E:BB:1B:10:49:0A:13:49:
                                CF:29:F8:26:02:20:53:71:43:DE:4A:17:D3:AA:4A:67:
                                4F:5F:56:5D:4B:FB:67:88:57:91:41:C6:D5:C2:2B:41:
                                98:59:F6:D6:0B:F7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Jul 24 08:51:14.841 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:88:6C:4E:5C:CE:66:51:4F:2F:79:4D:
                                CA:AB:BB:A0:9F:C5:A6:C7:B8:31:BC:2F:3F:13:DA:8F:
                                58:B6:91:70:4C:02:20:55:97:DF:37:19:A3:E7:39:A8:
                                64:E3:AB:EE:70:60:C1:CE:B9:34:3D:E3:B3:D4:DF:4B:
                                07:B6:F1:6F:06:05:71
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:44:02:20:02:0d:7f:1f:f2:7a:96:d0:ba:9d:e9:21:45:1a:
        73:02:44:f7:97:0a:96:66:0e:80:21:32:d9:89:49:ac:bd:1a:
        02:20:2d:a1:71:28:b8:c1:82:20:9c:89:03:5a:76:07:1f:7d:
        0b:d4:75:2f:46:d9:f9:30:12:74:62:26:a8:8c:96:4a

13.239.100.215

Last Seen: 2024-04-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1932601856 | 2024-04-09T20:57:23.744883
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

13.239.100.215

Last Seen: 2024-04-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1932601856 | 2024-04-09T20:57:23.744883 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

1932601856 | 2024-04-09T20:57:23.744883
443 / tcp