GeneralInformation

Hostnames	cloudfront.opensourcepolitics.net decidim-app-develop.osp.dev 166-216-15-51.instances.scw.cloud
Domains	opensourcepolitics.net osp.dev scw.cloud
Country	France
City	Paris
Organization	Scaleway - Paris, France
ISP	SCALEWAY S.A.S.
ASN	AS12876
Operating System	Ubuntu

WebTechnologies

Programming languages

Ruby

Web frameworks

Ruby on Rails

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

1845118841 | 2024-04-20T05:47:43.901762

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 20 Apr 2024 05:47:43 GMT
Content-Type: text/html
Content-Length: 10918
Last-Modified: Fri, 02 Oct 2020 12:50:03 GMT
Connection: keep-alive
ETag: "5f7721fb-2aa6"
Accept-Ranges: bytes

-1160720967 | 2024-04-14T01:01:51.499754

443 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Status: 200 OK
Cache-Control: max-age=0, private, must-revalidate
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Request-Id: 11c8e6d4-13bc-4986-b1a1-e85813eef33b
ETag: W/"aafcbdc7b66c819d6144d637af423300"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Date: Sun, 14 Apr 2024 01:01:51 GMT
Set-Cookie: _session_id=EsqxDdi5SOsc6WAueUDVU1n6grMwKQTgz%2BF7ip9%2BG4TMb9RNjwxHPnra%2FZy3TwBR%2BPSJ3zopKZhlVIm1M8wnXVQr6HQpfAz196XtqgRJJvoAhoiOBTT9PlkqUNxpvLit4xOJ0rx3PJokkjuR%2BomAz69wZPPsJ4Zk6VH%2BbVh3SAmb5Nw5jibJS9gtsjjQISbMZlWzBKR6laN7NdNAqzhhHOvc5laHqg5AIjUku0kJB8rJ4APRhPX6%2BhljWFMWFazGMShoztZ98Vn7T2XKgEQhpT5H8jUQZWJ%2FXztbLs82lMxnzkEqC2Kx%2BWQ%3D--CPC1TtHUxyvZx8S4--gec0f3AenZtQ3Tj3f6F9AA%3D%3D; path=/; expires=Sun, 14 Apr 2024 04:01:51 GMT; secure; HttpOnly; SameSite=Lax
X-Powered-By: Phusion Passenger(R) 6.0.12
Server: nginx/1.18.0 + Phusion Passenger(R) 6.0.12

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a4:e0:da:a0:54:d4:52:4f:09:cb:67:15:35:0e:81:b3:c8
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 14 14:56:46 2024 GMT
            Not After : Jun 12 14:56:45 2024 GMT
        Subject: CN=cloudfront.opensourcepolitics.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:9e:46:47:d2:d1:4e:8d:13:14:87:a4:27:
                    78:12:19:e0:07:89:92:20:8a:04:43:ba:d1:c4:30:
                    4e:86:a7:bd:fd:98:eb:c4:83:91:a4:66:77:44:ea:
                    b9:61:a0:29:01:12:38:8d:97:d2:3a:5b:92:15:dc:
                    88:7b:ec:80:0b:56:57:48:3a:83:61:71:89:a8:7a:
                    a9:3f:c2:73:bb:63:0e:78:1d:80:5c:c9:0d:a9:84:
                    2a:73:30:b1:a8:78:29:84:a5:7a:65:12:7b:ec:85:
                    ce:bb:53:9f:c7:86:2e:e8:50:11:c1:b6:2a:95:fc:
                    5d:a2:25:f5:da:6e:7a:1f:c7:0d:13:58:ab:1c:90:
                    37:b0:e5:69:c1:89:07:15:c4:b2:a6:01:41:99:df:
                    e6:38:39:6a:41:78:5d:b6:d1:56:e8:ac:e4:58:46:
                    ba:6e:f0:ad:39:be:c4:12:ef:ae:23:6c:fa:31:4a:
                    72:63:27:c2:46:8a:a4:32:bd:7e:d7:ad:40:d3:f8:
                    08:19:07:dc:75:a7:a6:3c:c6:24:cd:93:75:3b:7e:
                    ce:5e:82:0b:73:5c:77:59:d3:c5:89:aa:69:c9:85:
                    28:38:50:2d:41:92:60:82:35:6d:75:e2:a4:6a:bd:
                    6c:f3:cf:29:e9:23:c8:c4:9b:cd:dc:f7:45:3c:84:
                    3e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                68:79:8E:10:1C:60:45:01:1C:F0:95:E1:3B:69:D8:91:39:17:C0:81
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:cloudfront.opensourcepolitics.net, DNS:decidim-app-develop.osp.dev
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Mar 14 15:56:46.821 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:72:04:E7:9B:32:26:CE:70:F0:BF:F0:18:
                                DC:F4:AC:1E:48:80:BA:31:AD:2E:3F:29:3C:68:A4:10:
                                CF:F1:D1:04:02:20:24:50:99:FB:69:60:0A:69:7C:53:
                                83:25:B3:67:7B:5D:A7:E6:80:7C:47:B5:A2:19:FD:EB:
                                D9:14:EC:8F:8F:93
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
                                65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
                    Timestamp : Mar 14 15:56:47.342 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:01:4D:16:C7:18:E1:85:9F:76:E3:15:9C:
                                CF:DC:A5:5C:8B:E6:8C:75:65:06:26:7B:7B:58:17:A9:
                                78:1C:2A:D2:02:21:00:9A:BA:BD:05:98:5C:FC:15:2E:
                                5A:B9:29:F3:35:01:0A:4D:E8:4A:26:34:00:2A:D2:EB:
                                E6:15:95:87:C0:B2:3A
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        48:8a:75:d7:b9:36:84:35:17:56:b2:20:97:56:e9:2a:7f:d5:
        1b:37:91:60:11:f8:68:fa:83:13:f6:8a:d1:90:2e:6b:4f:d3:
        84:85:1c:ce:03:f4:44:1b:8e:de:78:d9:7f:9a:fb:1b:94:d7:
        ae:4d:b9:39:c0:24:38:6a:58:c7:93:8d:58:4d:26:a4:a8:15:
        01:de:1d:f7:37:22:46:15:97:9e:8f:72:ba:96:1b:a5:51:a4:
        ce:a3:60:ff:ac:46:7d:6e:4e:ff:fd:90:b2:64:d4:aa:cf:b6:
        93:17:22:4c:43:c9:be:ec:de:18:ad:9e:b7:c9:01:92:06:71:
        f1:48:cb:59:56:ba:70:ec:05:64:65:41:ff:56:e1:01:a4:41:
        34:dc:bd:ef:41:54:33:c5:1e:6f:c9:44:e5:4d:04:7a:b8:0d:
        99:f1:51:21:56:04:02:7e:63:4b:d8:23:c9:3b:de:ab:b0:c9:
        6f:c3:f4:ed:2b:2f:a0:43:a9:2b:cb:1b:c9:fc:af:3e:04:c4:
        21:10:a5:51:56:1e:21:ac:76:aa:5d:fd:8e:f9:9d:2d:48:d7:
        1d:42:a1:e9:30:a9:13:5a:83:26:64:8b:5f:42:45:73:48:03:
        8e:60:08:8b:9d:81:24:3e:75:66:3d:ba:53:ed:0b:c9:d7:7c:
        21:b9:54:11

51.15.216.166

Last Seen: 2024-04-20

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1845118841 | 2024-04-20T05:47:43.901762
80 / tcp

nginx1.18.0

-1160720967 | 2024-04-14T01:01:51.499754
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

51.15.216.166

Last Seen: 2024-04-20

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1845118841 | 2024-04-20T05:47:43.901762 80 / tcp

nginx1.18.0

-1160720967 | 2024-04-14T01:01:51.499754 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

1845118841 | 2024-04-20T05:47:43.901762
80 / tcp

-1160720967 | 2024-04-14T01:01:51.499754
443 / tcp