GeneralInformation

Hostnames	ec2-34-252-58-89.eu-west-1.compute.amazonaws.com searchmetrics.com
Domains	amazonaws.com searchmetrics.com
Cloud Provider	Amazon
Cloud Region	eu-west-1
Cloud Service	EC2
Country	Ireland
City	Dublin
Organization	Amazon Data Services Ireland Limited
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2022-31629	In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVE-2022-31628	In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
CVE-2020-11579	5.0An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.
CVE-2017-8923	7.5The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.
CVE-2013-2220	7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.
CVE-2007-3205	5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

80 443

1254225044 | 2024-04-18T03:15:47.337797

80 / tcp

HTTP/1.1 404 Not Found
Server: awselb/2.0
Date: Thu, 18 Apr 2024 03:15:47 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 0
Connection: keep-alive

1057795155 | 2024-05-05T22:50:52.888142

443 / tcp

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 22:50:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Powered-By: PHP/7.1.33
Set-Cookie: UNIQUE_NAME=3671e928a7ae2f4dc7c3d0bc83783532; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ff:7d:5c:d3:ff:19:30:76:89:90:b7:45:2f:95:8e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Jul  2 00:00:00 2023 GMT
            Not After : Jul 30 23:59:59 2024 GMT
        Subject: CN=searchmetrics.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:df:c3:d3:df:5d:37:64:8f:7f:4b:06:94:
                    54:09:2a:c2:6d:28:d6:9d:fd:d6:d8:5c:1e:a2:18:
                    09:8d:1a:99:fd:ed:75:d5:52:43:74:82:e3:8f:4f:
                    47:d0:b9:7f:fc:e0:20:3d:6c:61:fd:da:c1:d9:12:
                    0d:fd:f6:e9:eb:1c:b0:e6:9c:8c:db:0b:a5:fc:78:
                    e2:78:5d:01:75:31:86:ed:d6:52:a4:8a:9e:72:33:
                    37:94:c6:ae:0a:72:ef:f8:92:a7:33:5d:1b:d5:7f:
                    b1:e1:8f:e9:69:d3:96:08:c1:34:2e:54:67:40:a8:
                    30:ed:e3:64:d3:1e:fe:fd:99:e2:d6:38:62:fa:f0:
                    6d:ca:6a:dd:d6:8c:4e:58:5e:f6:26:06:67:d5:6b:
                    e0:82:ae:bd:eb:ea:02:cd:4a:f8:02:88:3c:4a:42:
                    f9:0f:30:75:33:72:6c:7c:ce:a0:58:76:be:55:74:
                    04:9a:09:e6:0b:e9:9d:08:dc:a0:c4:91:ec:a1:3d:
                    01:02:be:d7:69:89:ed:06:81:5b:ad:56:e8:4e:dd:
                    6b:f9:20:47:df:d8:df:b3:2a:0c:ce:57:c0:af:08:
                    ad:f4:ac:28:63:6f:d9:eb:ea:5c:cd:93:33:e6:e9:
                    f7:cd:06:ea:a3:24:2c:6a:1c:4f:98:84:3f:ed:9f:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                44:F8:64:05:10:BF:30:F6:75:2F:A9:F4:13:57:61:F2:F3:D3:0A:F7
            X509v3 Subject Alternative Name: 
                DNS:searchmetrics.com, DNS:*.searchmetrics.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Jul  2 00:29:27.463 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:16:BE:E9:0F:00:49:9E:59:A1:7B:FA:25:
                                A0:1C:F2:02:34:19:2F:50:E9:35:67:AE:70:92:60:9C:
                                6F:3A:81:24:02:21:00:C2:23:77:B4:4D:79:A8:01:51:
                                3D:50:0E:71:31:98:D8:FA:A0:BA:86:FF:F0:5D:73:0C:
                                5B:BC:53:CD:8A:95:35
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jul  2 00:29:27.409 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:98:A9:58:3E:DC:22:B5:DC:B8:71:73:
                                0D:CD:9A:6E:03:DF:1A:39:27:0E:89:5A:AB:12:B6:07:
                                E5:76:81:42:2B:02:21:00:81:F3:78:3B:BE:B6:B7:DD:
                                20:38:70:52:5E:27:AF:BB:2F:AF:1E:68:B2:D0:53:05:
                                46:80:90:4A:1C:A3:1D:80
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Jul  2 00:29:27.359 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:45:41:10:C3:86:6F:43:8E:C4:94:D5:3E:
                                A7:19:9C:94:3C:68:ED:40:AB:86:48:FC:35:D7:F1:4B:
                                E5:A6:DA:DA:02:20:6D:9C:3C:62:23:E7:76:07:34:25:
                                64:20:69:CF:08:2B:8A:8B:3F:60:6E:DE:29:5A:7D:4D:
                                61:B8:98:D9:07:A1
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6e:7b:e4:56:79:72:f8:de:cf:94:7e:4f:6c:c2:9d:70:a9:23:
        c4:f1:c5:8c:69:2d:cc:b9:3c:a5:5e:c0:8d:e7:3a:05:58:df:
        d1:e3:b0:7d:9a:a2:6d:6e:f0:8f:7b:58:5b:b0:69:39:54:c7:
        a1:2b:25:9b:bb:a0:b3:9f:12:83:32:ee:a7:6b:a0:41:d1:51:
        6a:c2:82:1b:ba:59:1c:2f:a1:0b:07:6e:2b:d6:cf:db:3b:7f:
        4d:c8:07:b5:e6:7e:7a:da:da:00:ee:be:90:64:63:46:2d:9d:
        85:37:7b:b5:dc:24:92:ba:a1:57:be:58:90:dd:c8:0c:70:2c:
        a3:8f:b8:c4:8a:37:09:2e:8d:a8:46:89:b7:3c:d1:88:b8:e2:
        8a:33:32:50:ba:62:aa:e0:db:1c:62:90:16:c4:be:c0:fb:06:
        6b:2d:82:db:69:68:9f:c8:4a:bf:6d:20:dd:34:a5:fc:6e:00:
        a0:5c:0a:b8:cc:6e:c5:73:c7:ea:83:d1:29:83:8d:d2:6e:5f:
        08:97:c7:d8:92:6b:6a:62:e4:b6:dc:3e:4e:d1:b0:2c:38:1b:
        00:47:37:7c:7a:bf:7e:2d:9c:e6:f1:fc:93:8a:fd:35:1c:10:
        87:92:7b:f6:50:4f:41:a6:c9:c9:ae:f4:69:90:54:96:33:36:
        94:d6:65:a8

34.252.58.89

Last Seen: 2024-05-05

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1254225044 | 2024-04-18T03:15:47.337797
80 / tcp

AWS ELB2.0

1057795155 | 2024-05-05T22:50:52.888142
443 / tcp

nginx

Products

Pricing

Contact Us

34.252.58.89

Last Seen: 2024-05-05

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1254225044 | 2024-04-18T03:15:47.337797 80 / tcp

AWS ELB2.0

1057795155 | 2024-05-05T22:50:52.888142 443 / tcp

nginx

Products

Pricing

Contact Us

1254225044 | 2024-04-18T03:15:47.337797
80 / tcp

1057795155 | 2024-05-05T22:50:52.888142
443 / tcp