GeneralInformation

Hostnames	ec2-3-222-181-49.compute-1.amazonaws.com app.sidepitch.com
Domains	amazonaws.com sidepitch.com
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Data Services NoVa
ISP	Amazon.com, Inc.
ASN	AS14618
Operating System	Ubuntu

WebTechnologies

Programming languages

Security

UI frameworks

Web frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

-1999624030 | 2024-05-05T09:36:54.568390

80 / tcp

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 09:36:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Access-Control-Request-Method: GET,POST,OPTIONS
ETag: W/"d7ca9200907244b3208933e79c5a2554"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _sidepitch_session=bMMOnT1oOK%2BLH%2BP%2BFMQTTS8HnDk4actfvPyj8GK3t4Zj%2BjszvsYhJQVeobJpHZpvh9wksK%2FvbXbcBWaPo%2BNilojvAdCjREJpbHc6WQyFQvi7Ig3qucskU6c1osjaiusUr%2FOSwtMWUV3u05MMXDc%3D--9aX1dlAM4i2g7UxB--7%2BfQQ0kg3N2XC7rA8Vpq8Q%3D%3D; path=/; HttpOnly
X-Request-Id: f6a69352-5b4d-4787-a079-42b690e810e0
X-Runtime: 0.005537

-1359204768 | 2024-05-05T22:02:25.162363

443 / tcp

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 22:02:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Access-Control-Request-Method: GET,POST,OPTIONS
ETag: W/"8e2eb5ee6e7f6c36915827098cb0d4ee"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _sidepitch_session=Gzw03ZofLd%2FUgKyaq8mAlxFgJz%2BvNlvdns7kqJqp40NOSzjquIdriRq%2BZvPltiUD%2B2qtknD4sE7Y7GvrZyXfmnDCn43xh0g%2FH%2BwfzlreXKv9hRn5XeLy3GdynDjt%2BxA84uhK6ZFzlO2rlfNHpYo%3D--lcWBK9DbvtlrF%2B%2Fe--2NP%2FNBRodxPVZEl2FPUT4w%3D%3D; path=/; HttpOnly
X-Request-Id: f148fcc5-cc29-4193-80fe-c98dfd155c64
X-Runtime: 0.005373

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:52:d6:16:4b:56:77:bd:84:f9:48:3b:01:2f:18:f7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Aug 22 00:00:00 2023 GMT
            Not After : Sep 18 23:59:59 2024 GMT
        Subject: CN=app.sidepitch.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:6a:3f:a8:23:c2:b4:fe:d9:d1:8a:c7:aa:
                    d2:a7:91:5d:c9:f0:75:b9:c6:09:b0:25:31:40:7e:
                    32:56:85:ca:de:32:ee:59:9b:a6:2b:4f:0c:46:e0:
                    bf:bf:6f:ca:63:a6:d6:34:eb:0f:04:50:c2:16:ea:
                    2c:d3:c6:86:42:1f:6c:43:86:e3:a5:4c:96:5f:2b:
                    ae:25:fe:dc:71:10:d8:db:93:7f:bf:a9:85:bc:45:
                    61:bd:33:94:06:a1:c3:91:27:37:63:f1:0e:5a:87:
                    f9:22:7a:fa:e0:49:19:69:d7:b3:d8:88:c7:29:72:
                    ed:a2:eb:89:a6:69:af:5c:f4:03:2c:42:c7:b1:1f:
                    42:cf:d5:46:09:3e:f4:67:3a:42:15:95:d3:70:23:
                    01:f7:c8:e5:df:9a:c2:ed:71:1a:4a:c2:52:c6:e5:
                    8b:5e:35:15:77:c5:4b:f3:53:0e:7c:4a:1d:a8:af:
                    68:9b:ea:5c:b6:f0:6c:8c:c7:8a:e7:18:36:49:5a:
                    3f:04:51:f8:c9:d8:c0:be:f2:e3:67:c7:26:7d:a6:
                    b1:86:c3:3c:ec:58:9d:af:01:e2:d1:9d:12:63:e9:
                    9a:a3:14:3a:dc:46:f2:cd:d5:98:6b:78:46:42:5d:
                    54:58:3c:1d:d4:ae:3a:29:2d:0e:18:37:97:8b:45:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                A6:73:1C:7D:58:F9:31:9F:02:81:94:13:52:F9:04:A4:57:76:E5:2E
            X509v3 Subject Alternative Name: 
                DNS:app.sidepitch.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Aug 22 10:49:27.932 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:2C:AB:EC:65:C4:7E:2A:3E:E5:FE:AC:9F:
                                31:A1:35:72:B6:29:6E:68:89:B2:1A:72:E9:AF:3F:B5:
                                08:66:CB:1A:02:21:00:A7:85:82:B9:2C:5E:4B:FD:0A:
                                97:FA:A9:65:9F:D8:CB:63:99:93:F0:C8:98:4C:3D:9C:
                                A3:08:EB:27:BD:8A:8D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Aug 22 10:49:27.784 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B7:E4:E7:4D:EF:D5:AF:0C:BB:61:88:
                                17:66:3B:FE:2F:FB:14:C7:DE:54:60:16:41:24:31:24:
                                9C:D5:19:49:BB:02:21:00:FD:BE:93:1B:A2:A9:BE:86:
                                98:3C:12:92:2F:B8:99:7A:2B:12:8B:F8:EE:80:16:2F:
                                EF:37:66:A9:97:FD:28:45
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Aug 22 10:49:27.734 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:68:50:15:FE:BF:C5:9F:44:F6:7F:76:65:
                                4D:DD:65:1E:C5:62:E7:CC:2F:7E:70:C9:40:28:F6:E2:
                                4F:EB:49:7D:02:20:68:19:81:00:80:62:69:8E:52:10:
                                35:37:0F:04:BC:C2:A6:EA:A6:DD:F5:9A:C9:32:6F:47:
                                96:D8:98:CF:56:C6
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        33:a3:86:1c:75:84:f2:53:18:52:9f:79:3b:98:ea:47:d4:ad:
        a1:ec:90:4d:b0:28:8e:3d:5d:82:c4:03:b7:18:f6:28:a6:a8:
        98:a6:cd:e7:5a:71:47:69:8a:09:ec:8c:d7:a7:e4:23:91:55:
        e7:a0:a3:d0:e9:22:4b:9e:cb:0e:db:6a:68:a9:05:36:6b:55:
        eb:1b:4d:8a:da:0b:92:67:7e:46:8e:a3:d3:00:e4:92:b3:b4:
        4b:e5:7d:e1:ca:36:c2:8b:c8:dc:20:2a:9e:cc:e7:f9:bb:1c:
        9d:93:d2:22:f1:10:14:9d:84:18:38:d7:a2:94:03:ba:8d:60:
        c9:3d:45:55:3b:7c:bb:d4:10:40:a4:ea:c0:63:2d:2c:11:d9:
        5c:62:14:89:cf:ed:c3:d5:90:4d:7d:8c:38:93:85:71:a6:d7:
        38:ce:7c:b7:85:9f:73:e3:65:59:dc:5d:80:50:4f:cf:67:66:
        36:d9:a5:88:82:62:d4:fb:e7:f9:03:d7:d6:84:d4:3d:66:35:
        48:ab:fa:64:eb:01:2f:5f:d5:2a:21:4e:27:e7:de:3d:e7:7b:
        30:ba:83:d7:13:23:b0:2d:d1:55:eb:d6:f0:71:a5:ad:ba:4e:
        80:11:2b:3f:6b:9d:7d:9d:db:91:f6:91:79:64:3c:14:db:b9:
        bb:ee:5b:40

3.222.181.49

Last Seen: 2024-05-05

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1999624030 | 2024-05-05T09:36:54.568390
80 / tcp

nginx1.18.0

-1359204768 | 2024-05-05T22:02:25.162363
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

3.222.181.49

Last Seen: 2024-05-05

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1999624030 | 2024-05-05T09:36:54.568390 80 / tcp

nginx1.18.0

-1359204768 | 2024-05-05T22:02:25.162363 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

-1999624030 | 2024-05-05T09:36:54.568390
80 / tcp

-1359204768 | 2024-05-05T22:02:25.162363
443 / tcp