GeneralInformation

Hostnames	ec2-18-140-90-199.ap-southeast-1.compute.amazonaws.com akamai-inputs-usiglobal.splunkcloud.com http-inputs-ack-usiglobal.splunkcloud.com http-inputs-firehose-usiglobal.splunkcloud.com http-inputs-usiglobal.splunkcloud.com usiglobal.splunkcloud.com pvt.usiglobal.splunkcloud.com
Domains	amazonaws.com splunkcloud.com
Cloud Provider	Amazon
Cloud Region	ap-southeast-1
Cloud Service	EC2
Country	Singapore
City	Singapore
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

1771052814 | 2024-03-25T01:57:34.385086

80 / tcp

HTTP/1.1 200 OK
Date: Mon, 25 Mar 2024 01:57:34 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2398
Connection: keep-alive
Server: nginx/1.18.0 (Ubuntu)
X-Powered-By: Express
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 28 Apr 2023 03:34:40 GMT
ETag: W/"95e-187c5ed5c84"

472526215 | 2024-04-17T08:45:05.633979

443 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Date: Wed, 17 Apr 2024 08:45:05 GMT
Server: Splunkd
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Length: 223
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a0:09:1a:bd:c5:f6:4f:69:36:7b:44:df:12:ce:47
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Oct 17 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2024 GMT
        Subject: C=US, ST=California, L=San Francisco, O=Splunk Inc., CN=*.usiglobal.splunkcloud.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:79:2e:a5:71:40:1d:59:8c:ce:dc:73:9a:
                    3a:e4:ac:3b:dd:c8:b4:d6:c4:fd:bb:63:14:53:51:
                    68:0a:72:14:72:ec:a1:c0:21:f8:6f:47:e1:93:26:
                    70:8a:db:71:c5:9d:b3:c7:6f:d5:e3:16:8b:e7:8f:
                    e1:77:98:b5:6c:97:31:f7:d8:d1:0f:06:e2:0f:ee:
                    a9:8f:55:3b:f2:e1:40:7f:04:06:9c:78:ff:9d:d8:
                    d0:6c:68:38:df:d7:e6:02:72:25:13:9c:53:87:2a:
                    04:09:11:7a:f1:bd:df:6f:e6:7a:5f:c7:39:3c:55:
                    87:6b:77:fb:52:db:88:29:8a:2d:ba:c2:d4:81:c4:
                    69:24:2c:ef:9d:f7:b9:08:9f:bb:02:b9:a3:85:80:
                    73:da:94:97:35:26:64:a5:26:5f:bf:05:4b:eb:6e:
                    87:92:37:0d:b2:c8:c7:47:23:a0:79:89:10:38:81:
                    cc:83:60:51:e2:9b:bd:e3:28:da:81:36:7f:5c:fd:
                    0e:da:a9:f3:89:ea:af:41:e0:3b:34:85:84:db:e1:
                    2e:b1:de:0a:0c:a6:0b:b5:96:0e:cb:f8:49:f0:99:
                    e6:a7:c0:1a:76:77:13:53:da:c4:8e:88:da:a1:4a:
                    14:a3:38:f4:7f:3c:d1:d0:77:fc:f0:1b:b4:2b:07:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                DE:89:DA:F8:11:C2:2F:C0:90:85:B2:34:2E:4F:D0:68:8B:57:16:C4
            X509v3 Subject Alternative Name: 
                DNS:*.usiglobal.splunkcloud.com, DNS:usiglobal.splunkcloud.com, DNS:http-inputs-usiglobal.splunkcloud.com, DNS:*.http-inputs-usiglobal.splunkcloud.com, DNS:akamai-inputs-usiglobal.splunkcloud.com, DNS:*.akamai-inputs-usiglobal.splunkcloud.com, DNS:http-inputs-ack-usiglobal.splunkcloud.com, DNS:*.http-inputs-ack-usiglobal.splunkcloud.com, DNS:http-inputs-firehose-usiglobal.splunkcloud.com, DNS:*.http-inputs-firehose-usiglobal.splunkcloud.com, DNS:*.pvt.usiglobal.splunkcloud.com, DNS:pvt.usiglobal.splunkcloud.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Oct 17 14:16:27.178 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:ED:83:95:9D:18:53:81:28:4C:F6:C7:
                                8A:47:74:EC:34:41:D0:D1:91:FB:FE:AF:20:77:F9:23:
                                13:76:87:5D:84:02:21:00:F2:D8:EB:60:7B:89:1B:D5:
                                ED:0B:53:78:A6:E7:70:C3:01:71:94:13:03:6C:65:43:
                                03:30:0E:DF:C9:90:8A:DB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Oct 17 14:16:27.245 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A7:F4:77:7F:05:B3:35:2C:A6:4A:45:
                                8A:21:56:9B:ED:D5:7A:FF:BF:B6:E0:13:83:84:D9:75:
                                16:6D:3D:1E:07:02:20:34:04:4A:23:46:48:91:4D:8E:
                                E3:E4:B3:3A:3F:92:D0:9E:B7:9C:D4:0C:8B:4F:CE:10:
                                A1:C1:ED:5E:1F:B1:A2
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Oct 17 14:16:27.228 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E1:2F:AF:7D:3E:E3:0E:29:1B:EF:23:
                                57:FE:C6:71:D0:BD:D9:AC:49:06:37:96:9D:3F:12:EC:
                                DE:94:C8:5C:4F:02:21:00:B7:46:2D:91:1D:DF:5A:05:
                                7B:79:E3:14:DA:E3:FF:C4:D8:72:F3:66:C6:12:2C:25:
                                54:47:FC:EE:68:73:8F:D3
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        53:59:96:1b:5f:da:20:ed:6a:8e:28:e5:d7:08:a1:43:4d:16:
        5e:3a:d1:1c:14:5c:28:6f:99:42:48:2f:9f:cc:cc:1e:61:df:
        d7:8a:98:49:38:8f:b3:35:6f:72:67:73:3a:70:13:1e:88:51:
        68:fb:41:17:76:92:bf:bf:20:04:9f:9a:42:d4:38:ab:d7:0f:
        8f:b6:d6:ab:8b:8e:ed:39:a3:5a:af:8c:09:3d:aa:fb:7c:ee:
        8a:e2:47:0d:26:61:c8:32:81:f3:d6:93:f5:e2:6d:91:e5:b6:
        eb:11:8d:57:71:4c:6c:60:54:c4:dd:8a:8c:da:f3:ca:61:15:
        b8:38:a9:a7:a8:c2:f3:06:e9:15:0c:15:9e:0d:9b:e9:4f:c5:
        2a:dc:bd:74:96:9c:9a:34:4c:8e:a3:56:59:ea:f7:ef:b0:13:
        75:d6:7e:4e:4b:0d:ae:1f:5c:96:e9:fe:3a:3e:a7:0f:a2:21:
        b4:23:2f:e5:fc:08:0a:d0:cd:cb:8f:22:75:c9:e4:74:0c:fd:
        30:ac:80:65:ff:2d:c5:66:92:2d:27:01:90:60:2e:0e:52:d5:
        5c:b9:44:7a:ee:2e:96:78:ae:57:84:17:25:7f:bd:a1:49:9f:
        ca:a4:d5:50:78:c9:6b:42:5f:bf:5c:e9:e4:60:8e:65:b2:73:
        e8:98:8d:75

18.140.90.199

Last Seen: 2024-04-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1771052814 | 2024-03-25T01:57:34.385086
80 / tcp

nginx1.18.0

472526215 | 2024-04-17T08:45:05.633979
443 / tcp

Splunk Server

Products

Pricing

Contact Us

18.140.90.199

Last Seen: 2024-04-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1771052814 | 2024-03-25T01:57:34.385086 80 / tcp

nginx1.18.0

472526215 | 2024-04-17T08:45:05.633979 443 / tcp

Splunk Server

Products

Pricing

Contact Us

1771052814 | 2024-03-25T01:57:34.385086
80 / tcp

472526215 | 2024-04-17T08:45:05.633979
443 / tcp