GeneralInformation

Hostnames	ec2-35-156-42-214.eu-central-1.compute.amazonaws.com sapre.sms-digital.cloud admin.sapre.sms-digital.cloud api.sapre.sms-digital.cloud mc.sapre.sms-digital.cloud sastg.sms-digital.cloud admin.sastg.sms-digital.cloud api.sastg.sms-digital.cloud mc.sastg.sms-digital.cloud
Domains	amazonaws.com sms-digital.cloud
Cloud Provider	Amazon
Cloud Region	eu-central-1
Cloud Service	EC2
Country	Germany
City	Frankfurt am Main
Organization	A100 ROW GmbH
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

-652665405 | 2024-04-28T10:32:54.331334

80 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.19.1
Date: Sun, 28 Apr 2024 10:32:54 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding

-652665405 | 2024-05-09T22:24:40.979203

443 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.19.1
Date: Thu, 09 May 2024 22:24:40 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bd:7f:b8:bd:0a:0d:2b:d4:f0:f9:4b:8a:61:57
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Mar 23 00:00:00 2024 GMT
            Not After : Apr 21 23:59:59 2025 GMT
        Subject: CN=sapre.sms-digital.cloud
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:34:81:3b:42:0d:98:64:ae:22:86:d0:93:
                    e3:ff:35:cf:2c:4b:e3:2a:ec:6f:6e:de:f4:01:68:
                    76:ee:0d:51:45:47:7d:3d:51:c9:6a:90:7c:f2:9f:
                    2f:f6:e0:b4:f2:05:8d:b1:30:03:77:a9:a5:14:7b:
                    f8:4c:84:23:d6:02:0f:17:66:de:78:1f:54:cb:89:
                    5b:37:e0:c7:41:1d:f7:52:e9:f8:2b:f0:8f:62:7b:
                    2b:27:e5:79:cf:17:2d:6c:67:34:91:2a:78:2d:d1:
                    ec:96:84:cc:2c:93:4b:38:df:6a:9d:01:d5:ab:0b:
                    0a:8c:49:9e:bf:26:93:f5:71:84:40:56:bb:8c:41:
                    a0:99:aa:e1:d5:10:55:21:06:a6:49:2b:05:56:e4:
                    a0:06:20:99:8a:d8:4d:36:0a:f8:51:13:b8:df:2d:
                    28:16:ee:c9:2f:65:1e:85:e3:d1:cf:86:ee:d3:4f:
                    32:17:06:6f:52:b4:a9:4d:2b:ab:61:88:17:5b:fe:
                    19:c5:1f:42:4c:e6:d3:c4:ac:92:f3:cb:0f:bf:20:
                    04:80:59:de:59:50:de:37:c0:87:0a:be:09:b7:0d:
                    22:8e:b7:c0:a7:a6:0a:34:61:db:10:70:8a:47:2c:
                    71:d6:e1:a3:c4:6b:c1:86:15:a1:e5:b1:e9:c0:e4:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                54:48:AE:D3:48:71:13:5D:42:72:9F:2A:13:E9:81:F9:48:33:29:1B
            X509v3 Subject Alternative Name: 
                DNS:sapre.sms-digital.cloud, DNS:sastg.sms-digital.cloud, DNS:api.sastg.sms-digital.cloud, DNS:mc.sapre.sms-digital.cloud, DNS:admin.sastg.sms-digital.cloud, DNS:api.sapre.sms-digital.cloud, DNS:mc.sastg.sms-digital.cloud, DNS:admin.sapre.sms-digital.cloud
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Mar 23 00:22:02.913 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:21:DD:DC:70:7C:58:1F:62:80:5D:F3:85:
                                D4:85:2D:24:3B:78:E8:1F:D8:BE:EE:75:EC:D7:63:12:
                                3F:AE:FA:5E:02:21:00:9B:10:73:44:22:D1:F0:FE:7E:
                                DE:78:88:0B:A1:AA:04:D0:05:DB:59:E3:6B:F6:6B:E6:
                                E8:91:E5:8C:7A:AD:FA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar 23 00:22:02.858 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5E:8D:D6:FC:D3:B8:80:19:4D:D8:09:22:
                                40:9A:01:E0:B8:A9:25:D5:D7:9E:38:C3:9B:A9:4B:72:
                                53:DF:53:19:02:21:00:B8:56:6D:27:1C:C7:0D:CC:4D:
                                73:F6:9F:B9:D4:54:19:46:66:97:C6:6D:4D:1A:8B:DC:
                                BB:6C:68:6E:90:87:9A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar 23 00:22:02.876 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E5:05:FC:9F:79:09:18:62:55:1C:35:
                                9F:35:97:A2:DA:85:F2:73:3F:80:87:69:FE:DD:11:BE:
                                ED:F8:A7:E8:4F:02:21:00:95:4C:00:73:ED:AD:B8:08:
                                F3:55:9A:15:26:96:B8:04:73:23:26:1F:76:B1:B2:87:
                                E7:27:F1:3A:4E:79:A0:E4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5a:0b:b6:d5:32:19:cb:ef:16:f6:d9:74:04:56:65:21:da:59:
        ce:a9:4e:e2:ac:1c:99:e3:93:bb:e6:5c:40:80:b2:64:f7:e5:
        51:4f:73:ab:3c:ec:b1:25:d4:11:4e:23:f0:8d:53:5c:58:63:
        81:4d:38:29:d5:b9:b8:cd:dc:f2:bd:e8:88:53:05:6c:d3:dd:
        37:a3:0d:1a:31:fd:59:5e:4a:48:99:df:47:f2:43:f2:db:a9:
        ed:e0:9f:20:a0:8a:aa:7e:21:74:bd:ea:be:da:a4:28:a1:21:
        85:96:ea:5d:63:3e:42:47:20:03:86:cc:a7:b9:42:8d:1d:1c:
        64:28:de:02:0a:ed:1c:4c:3e:75:8e:48:7b:ad:84:f1:d0:26:
        bc:67:18:d1:82:ad:a1:ed:f6:db:41:03:1b:70:41:99:22:28:
        85:f4:aa:09:88:8e:bd:ae:11:65:e2:7b:eb:4f:cc:0b:6a:42:
        30:cd:eb:0a:30:15:10:e9:58:7c:42:ef:f0:01:40:ca:53:ea:
        54:9d:33:85:f7:e0:de:b4:d9:76:d7:dc:75:42:d2:c3:b1:89:
        dd:33:bc:ce:50:86:79:20:5d:8e:92:86:b6:19:61:43:f2:f2:
        ab:89:ae:e8:66:3d:fb:33:3c:e4:28:e1:87:52:a5:81:7b:42:
        69:67:3c:60

35.156.42.214

Last Seen: 2024-05-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-652665405 | 2024-04-28T10:32:54.331334
80 / tcp

nginx1.19.1

-652665405 | 2024-05-09T22:24:40.979203
443 / tcp

nginx1.19.1

Products

Pricing

Contact Us

35.156.42.214

Last Seen: 2024-05-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-652665405 | 2024-04-28T10:32:54.331334 80 / tcp

nginx1.19.1

-652665405 | 2024-05-09T22:24:40.979203 443 / tcp

nginx1.19.1

Products

Pricing

Contact Us

-652665405 | 2024-04-28T10:32:54.331334
80 / tcp

-652665405 | 2024-05-09T22:24:40.979203
443 / tcp