GeneralInformation

Hostnames	ec2-18-203-33-226.eu-west-1.compute.amazonaws.com
Domains	amazonaws.com
Cloud Provider	Amazon
Cloud Region	eu-west-1
Cloud Service	EC2
Country	Ireland
City	Dublin
Organization	Amazon Data Services Ireland Limited
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2019-20372	4.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts

80 443

501510358 | 2024-03-31T18:27:36.113505

80 / tcp

HTTP/1.1 200 OK
Date: Sun, 31 Mar 2024 18:27:36 GMT
Content-Type: text/html
Content-Length: 4833
Connection: keep-alive
Server: nginx/1.16.1
Last-Modified: Fri, 16 May 2014 15:12:48 GMT
ETag: "53762af0-12e1"
Accept-Ranges: bytes

586257981 | 2024-04-09T23:49:53.044306

443 / tcp

HTTP/1.1 403 Forbidden
Date: Tue, 09 Apr 2024 23:49:53 GMT
Content-Type: application/json
Content-Length: 136
Connection: keep-alive
x-amzn-requestid: 4bbede7d-4ff8-45eb-888b-89e7aa47a39f
access-control-allow-origin: *

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cb:ea:e0:70:34:0b:88:c7:38:b5:2f:e3:c2:41:fe
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Aug 13 00:00:00 2023 GMT
            Not After : Sep 11 23:59:59 2024 GMT
        Subject: CN=*.eu-west-1.es.amazonaws.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:1e:fc:58:a8:6e:67:ea:6f:4d:5c:51:bd:
                    c8:49:3a:81:93:ab:75:a8:f7:54:98:f9:ec:33:67:
                    4a:ef:fc:5a:c2:01:5d:e2:4a:c7:d2:e2:21:b4:b0:
                    e8:23:55:48:58:c1:77:b5:70:fc:85:61:8f:e2:ee:
                    2f:9d:35:2b:72:1e:44:23:2b:1b:ba:42:cd:ef:af:
                    3a:98:20:d8:31:c6:9c:5a:98:5f:c6:15:33:19:90:
                    01:be:91:76:05:3b:06:4e:eb:26:3b:59:82:0f:d3:
                    4f:c9:3d:ae:7c:c4:67:ea:84:f7:c4:09:bb:50:47:
                    e2:ff:81:3c:b9:20:50:2f:ce:3c:d7:68:71:ca:8a:
                    1b:76:b1:a4:42:67:7b:2f:01:8a:f0:d6:ec:f4:6e:
                    32:ea:49:c8:10:b2:8e:40:30:71:22:7a:b6:84:b0:
                    5f:37:84:fa:58:c1:69:25:a5:88:9c:b6:20:47:11:
                    0d:26:d3:4d:86:41:4d:15:5d:e8:e1:88:32:4a:de:
                    0b:b0:a8:a2:71:91:39:48:ac:ec:bc:a5:0e:54:8f:
                    d8:bb:0c:19:d6:6b:f3:0d:b3:d9:00:85:b8:1e:f7:
                    35:51:fa:22:a3:d0:53:ea:cb:bd:4f:20:d4:a0:b5:
                    55:e9:1e:b5:e8:f3:a5:b0:26:08:d6:a7:f5:70:eb:
                    71:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                E1:9A:5D:C0:29:A8:8C:35:A0:8E:3C:7F:AE:6B:64:05:3D:11:14:ED
            X509v3 Subject Alternative Name: 
                DNS:*.eu-west-1.es.amazonaws.com, DNS:*.cell-01.eu-west-1.es.amazonaws.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Aug 13 00:31:37.082 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:07:F6:31:FF:E2:ED:5D:C3:BE:83:7A:1B:
                                D3:69:54:34:BA:15:E3:0F:74:F9:C0:CA:93:A4:A3:73:
                                8B:D1:92:68:02:21:00:A4:61:59:5A:4E:EF:F6:6C:3B:
                                9C:18:4F:41:9C:12:D7:15:B0:F7:EB:84:8E:FE:4C:67:
                                DB:5E:8D:E9:4E:D1:F1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Aug 13 00:31:37.109 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:36:C6:6F:D0:FB:47:10:B5:0F:9D:1B:67:
                                07:C0:B0:74:29:A2:BC:B3:96:A9:86:F3:04:F8:22:97:
                                93:05:5D:59:02:20:1D:09:F2:60:72:BC:80:BC:67:06:
                                0F:C1:12:82:93:32:7E:4A:6E:03:02:EC:B3:70:76:18:
                                E0:F9:B5:A3:E8:A4
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Aug 13 00:31:37.016 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D3:FB:1A:9D:7F:13:F7:82:C4:E6:84:
                                A3:BD:29:0A:7D:69:4C:8A:8C:E0:91:A7:E4:5B:D6:BB:
                                1E:92:AC:CB:59:02:21:00:85:65:94:24:65:7B:C5:F4:
                                19:E0:ED:4B:C6:7F:22:DA:58:F0:7C:54:A7:73:18:FA:
                                7E:3D:DF:AC:42:10:86:C5
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        ac:ed:58:9c:f4:41:00:46:9f:e2:8d:78:d4:6b:80:05:51:5d:
        e7:3a:da:bc:e9:60:ea:71:7d:a1:41:d8:20:c8:56:be:25:c7:
        e2:46:52:6b:d0:7b:df:e7:ae:95:58:b9:fa:df:40:29:3b:2c:
        29:5b:47:f5:26:e5:b7:f6:d5:97:41:6b:3d:19:25:c8:f9:c2:
        6a:d2:de:c5:df:9f:5a:bf:90:28:5f:33:5f:4a:ac:c9:f7:d8:
        6f:26:0f:78:1e:5e:b9:ea:6b:db:fc:46:9d:77:ae:12:66:2d:
        4c:c6:76:4e:16:8b:0f:44:53:1a:61:32:b6:f6:2c:34:e6:e0:
        fb:99:dd:a5:99:3a:3b:09:e9:a1:e1:ce:59:09:c8:39:e1:89:
        20:a2:2b:5f:b7:d1:15:00:77:09:97:ae:31:81:78:7e:7b:11:
        80:55:39:27:85:db:f7:c0:5d:d5:61:e0:af:7c:1d:fe:9d:2e:
        c6:8e:41:c1:c3:2f:b4:bd:21:f2:a5:2e:46:08:88:75:e5:c3:
        ed:5a:2b:b9:94:c8:7e:57:d0:e2:ae:4e:3e:92:fc:3c:18:b3:
        b1:3c:f0:49:60:ba:24:06:5d:76:9a:fc:df:5b:29:b2:5f:f0:
        f4:19:8c:bf:ee:a9:27:4f:1e:83:74:4c:99:94:5d:b2:3a:21:
        ef:59:7b:7d

18.203.33.226

Last Seen: 2024-04-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

501510358 | 2024-03-31T18:27:36.113505
80 / tcp

nginx1.16.1

586257981 | 2024-04-09T23:49:53.044306
443 / tcp

Products

Pricing

Contact Us

18.203.33.226

Last Seen: 2024-04-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

501510358 | 2024-03-31T18:27:36.113505 80 / tcp

nginx1.16.1

586257981 | 2024-04-09T23:49:53.044306 443 / tcp

Products

Pricing

Contact Us

501510358 | 2024-03-31T18:27:36.113505
80 / tcp

586257981 | 2024-04-09T23:49:53.044306
443 / tcp