GeneralInformation

Hostnames	ec2-52-27-210-85.us-west-2.compute.amazonaws.com vahara.aslanow.org vahara.coachmegthomas.com vahara.daylightglassutah.com vahara.eastwarehouseselfstorage.com vahara.flagdgolf.com vahara.franklindiscovery.org vahara.freeus.com vahara.frogtummy.com vahara.hawthornacademy.org vahara.indiecharters.org vahara.llacharter.org vahara.mountainlandcollections.com vahara.mountainvilleacademy.org vahara.utahcharters.org vahara.utahmilitaryacademy.com o2ac7.vahara.com o2asc.vahara.com o2brg.vahara.com o2cwa.vahara.com o2dm1.vahara.com o2dm2.vahara.com o2dsd.vahara.com o2dyg.vahara.com o2eby.vahara.com o2eut.vahara.com o2exc.vahara.com o2flgd.vahara.com o2frg.vahara.com o2frm.vahara.com o2ftm.vahara.com o2ftn.vahara.com o2grn.vahara.com o2hpm.vahara.com o2hwi.vahara.com o2hyp.vahara.com o2jmk.vahara.com o2lak.vahara.com o2lmn.vahara.com o2mnt.vahara.com o2nla.vahara.com o2par.vahara.com o2pdv.vahara.com o2pyt.vahara.com o2rms.vahara.com o2scm.vahara.com o2shd.vahara.com o2sld.vahara.com o2szp.vahara.com o2uapcs.vahara.com o2vra.vahara.com o2vta.vahara.com o2wst.vahara.com vahara.wsacharter.org
Domains	amazonaws.com aslanow.org coachmegthomas.com daylightglassutah.com eastwarehouseselfstorage.com flagdgolf.com franklindiscovery.org freeus.com frogtummy.com hawthornacademy.org indiecharters.org llacharter.org mountainlandcollections.com mountainvilleacademy.org utahcharters.org utahmilitaryacademy.com vahara.com wsacharter.org
Cloud Provider	Amazon
Cloud Region	us-west-2
Cloud Service	EC2
Country	United States
City	Boardman
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2019-20372	4.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts

80 443

-1563110999 | 2024-05-04T05:24:44.235854

80 / tcp

HTTP/1.1 302 Found
Server: nginx/1.16.1
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Sat, 04 May 2024 05:24:43 GMT
Location: https://axis1.vahara.io/login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlJNb29wTGY4d21Mb0NEZUpqZlF3K0E9PSIsInZhbHVlIjoiRFwvZ0lxazhcLzQ0ZUVwS2RUVFg1SGw2djZHQ2YySWJhczc0QTBBT082U0JDelNsMnBqTWlaTUZXSG56N240dFwvVll2YVBIMzZveTM4dVRGaVJhUUdlcGduSU9RcCtURzNYRVFhem5nVW12RUdaNU84OFdLU3pBY2VFWDNOMXlMVmYiLCJtYWMiOiIwYmYxYWI4YjcyZDg3ZTIwYjU3YzU2ODQwNzI4NGNjOWQwZmQzNmY3MjExMWE1MmU0N2E4N2E5NWMyZDQ4Y2QzIn0%3D; expires=Tue, 07-May-2024 05:24:43 GMT; Max-Age=259200; path=/; secure; samesite=none
Set-Cookie: vahara_orbit_2_session=eyJpdiI6ImhlSE1kVk4zZGNRYlZQaEczdzMrMGc9PSIsInZhbHVlIjoiU002bHFhYXh5Kzg1TjAwZkZSQ0VyZndmZVhyYkxUSmVHNVhsXC8xV0ViWnBcL2lrZVVVbmxBRm1IYk45SSszVldSdzdBSkN3QWU2dVN2TTlPdFFzTmFnQ3JQV0NZM0VCUTlqTFZLaFRyMVl2clRBT0thWGpvWThYUXB0cCsxOVlRKyIsIm1hYyI6ImNmYmM1NzA0NzdjZjg5MmMxNmE5MjVjYzljNTc1NzhlMmI5MDY3MWQ1ZDdhNTI2ZWJlNTAwNDlkYjg0MTljNDUifQ%3D%3D; expires=Tue, 07-May-2024 05:24:43 GMT; Max-Age=259200; path=/; secure; httponly; samesite=none
Set-Cookie: vahara=ZbD2SvmOG9AxUyG5uQYBN9WspA3VCCLkdy1oGhWmoDfmaH88i1AKkSu5fZlHVToNgc9cDyXmepVq3576; expires=Sun, 28-Aug-5289 18:07:43 GMT; Max-Age=103043536980; path=/; domain=52.27.210.85; secure; samesite=none

-1563110999 | 2024-05-17T19:35:12.328318

443 / tcp

HTTP/1.1 302 Found
Server: nginx/1.16.1
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 17 May 2024 19:35:12 GMT
Location: https://axis1.vahara.io/login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IklVWkxhK0RITDVcL1dhWDIxWjRza2h3PT0iLCJ2YWx1ZSI6Ikh0MFZaYWZEVHp5Um0rTEhBc0pCSjhsXC90S1dTZE5pOFRZdEhJT3hENGNBTHRmdG5rcERxbG92UXlYNjk4akxiZTRqeUZtYjU2Zkd5M0VBRVA5aU81RUN4dkdFRXh5bVJHOXJwZDc1V0t2eDY5THlrVG9zZ0UrZjNPRjZmbnd2QyIsIm1hYyI6IjdjODU0NTkzMWNmNzMwODMwOThiZTkwMDAxNWIxMjhkZGUzMDgxOWJlYTZlM2Q3NjhjOTg2YzUxOTAyNjA2MDcifQ%3D%3D; expires=Mon, 20-May-2024 19:35:12 GMT; Max-Age=259200; path=/; secure; samesite=none
Set-Cookie: vahara_orbit_2_session=eyJpdiI6InFXK1VCVU1ITHpVTWR0ZFQ4c2xHQmc9PSIsInZhbHVlIjoiWDA1VVg5WUNTcFNWWTZCZDN3dGVwYXY3XC9aalJ6bEt4eE9aWXZiTm1sRlhBRnkyOVZZZThHR3NLMnVrbkNXamxUQWVXRWhYbHdUcmJEV1FcL1NKTmpIbjk2ZTJXbERHY2F5QVplZVlSbUZDOHVCYTNiWVFjK1lDMExKb0sybmkyeSIsIm1hYyI6IjZmMjY0NDcxYjAxOTZiZTFmYjcxOGM0NGYzYzFiNzAyOWZmNjkwMGE5ZjZlMzYzNjA4ZjU3YjZhNDE5NzQ2ZDkifQ%3D%3D; expires=Mon, 20-May-2024 19:35:12 GMT; Max-Age=259200; path=/; secure; httponly; samesite=none
Set-Cookie: vahara=dSyuHCWxJUFgUxCAY1jkEmTGAki3LUHYblKkCKlKD2Dz0MXZyGGfTDslK10jHBZ7YHwxeRs2lPXP2e6M; expires=Wed, 05-Dec-5291 18:47:12 GMT; Max-Age=103113990720; path=/; domain=52.27.210.85; secure; samesite=none

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:80:8f:bd:16:00:3a:ab:1b:1c:3e:ae:36:94:b2:14:55:26
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 31 13:54:13 2024 GMT
            Not After : Jun 29 13:54:12 2024 GMT
        Subject: CN=vahara.aslanow.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:30:fa:2e:63:48:45:c3:57:8b:a0:e4:73:
                    df:89:c5:96:42:d5:e3:45:73:4a:1b:e8:89:4f:ec:
                    d6:a8:97:af:53:f8:cb:24:18:66:83:48:78:14:00:
                    48:e5:22:14:43:59:b6:cd:d2:ce:f4:4e:1e:82:75:
                    7f:50:4c:16:cd:59:7d:6e:c0:53:e6:9c:fb:91:75:
                    c1:7b:ed:ff:14:46:4b:4d:3f:e7:3a:b8:0a:77:63:
                    2d:16:40:32:bd:c8:14:c4:1b:24:d6:4b:8d:28:29:
                    5c:54:ea:e0:8d:49:c9:6e:2e:5d:3c:c5:18:aa:4e:
                    03:af:1f:d7:10:ce:38:5a:02:44:53:80:8d:83:8b:
                    07:00:aa:d2:cf:7d:57:26:a9:eb:31:6c:35:77:82:
                    3f:ec:34:46:08:88:07:d1:ff:bf:16:9b:5c:91:24:
                    c0:c7:25:d4:01:b4:e5:12:aa:f4:bd:03:a0:76:97:
                    b0:c1:4e:f1:d3:e9:07:b3:f5:bd:2d:2c:38:09:b1:
                    1e:3c:a3:57:7d:6e:2f:dc:f8:93:b9:39:70:27:39:
                    17:ca:08:6f:2e:d1:e1:fe:fb:5e:cc:4b:bc:a0:45:
                    13:7d:31:20:eb:8a:59:9f:22:eb:4e:19:98:c8:e2:
                    95:44:b1:1e:e9:9e:13:9d:fe:04:fa:2e:b9:d4:c2:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                5B:42:A5:6D:C6:0B:48:0A:C6:18:40:AE:5B:6A:DC:DA:B9:25:36:3B
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:o2ac7.vahara.com, DNS:o2asc.vahara.com, DNS:o2brg.vahara.com, DNS:o2cwa.vahara.com, DNS:o2dm1.vahara.com, DNS:o2dm2.vahara.com, DNS:o2dsd.vahara.com, DNS:o2dyg.vahara.com, DNS:o2eby.vahara.com, DNS:o2eut.vahara.com, DNS:o2exc.vahara.com, DNS:o2flgd.vahara.com, DNS:o2frg.vahara.com, DNS:o2frm.vahara.com, DNS:o2ftm.vahara.com, DNS:o2ftn.vahara.com, DNS:o2grn.vahara.com, DNS:o2hpm.vahara.com, DNS:o2hwi.vahara.com, DNS:o2hyp.vahara.com, DNS:o2jmk.vahara.com, DNS:o2lak.vahara.com, DNS:o2lmn.vahara.com, DNS:o2mnt.vahara.com, DNS:o2nla.vahara.com, DNS:o2par.vahara.com, DNS:o2pdv.vahara.com, DNS:o2pyt.vahara.com, DNS:o2rms.vahara.com, DNS:o2scm.vahara.com, DNS:o2shd.vahara.com, DNS:o2sld.vahara.com, DNS:o2szp.vahara.com, DNS:o2uapcs.vahara.com, DNS:o2vra.vahara.com, DNS:o2vta.vahara.com, DNS:o2wst.vahara.com, DNS:vahara.aslanow.org, DNS:vahara.coachmegthomas.com, DNS:vahara.daylightglassutah.com, DNS:vahara.eastwarehouseselfstorage.com, DNS:vahara.flagdgolf.com, DNS:vahara.franklindiscovery.org, DNS:vahara.freeus.com, DNS:vahara.frogtummy.com, DNS:vahara.hawthornacademy.org, DNS:vahara.indiecharters.org, DNS:vahara.llacharter.org, DNS:vahara.mountainlandcollections.com, DNS:vahara.mountainvilleacademy.org, DNS:vahara.utahcharters.org, DNS:vahara.utahmilitaryacademy.com, DNS:vahara.wsacharter.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
                                65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
                    Timestamp : Mar 31 14:54:13.663 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:4D:04:18:DA:37:E3:81:81:9F:2D:6A:32:
                                8F:33:BD:D9:75:86:25:BC:44:0C:A1:DE:1D:22:7A:18:
                                F9:83:13:B7:02:20:51:A9:64:91:7E:83:1F:65:54:F3:
                                48:E8:A4:17:B4:97:CA:3D:1B:56:F9:99:65:DB:96:84:
                                85:41:6A:FF:10:4A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Mar 31 14:54:13.663 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:44:95:0C:07:D3:DE:F0:3D:11:37:20:23:
                                65:0A:4C:56:63:82:A5:97:76:E9:2F:DB:2E:8E:4F:81:
                                A1:F1:18:DF:02:21:00:E1:EC:E6:21:28:5A:0E:A4:1F:
                                47:0F:B5:8C:ED:A9:5E:42:1E:2D:07:22:85:21:9E:38:
                                6B:D5:1E:1F:67:E8:98
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        ba:a4:c6:fa:28:08:59:a1:67:f2:c1:a7:db:aa:82:50:40:ba:
        e6:e2:8b:75:74:7e:f2:16:e6:b7:7f:28:72:f8:20:f2:92:54:
        8d:74:ba:cd:12:f2:23:6d:5a:87:3e:65:af:e4:6e:f0:14:a8:
        22:cf:91:46:75:4b:ed:69:8e:6e:9f:68:08:fa:36:04:66:66:
        9d:ad:03:03:e0:83:3f:22:30:30:20:8f:f7:7c:c0:4e:18:9d:
        c3:5a:e6:f7:34:d1:b3:1a:0a:25:25:7c:40:20:fb:32:67:30:
        fe:b4:bb:a5:12:c2:b5:72:ee:0e:79:ce:1c:05:40:b9:b1:e1:
        1a:45:21:eb:2e:c1:1e:dd:80:7c:82:f6:38:dd:ca:4f:38:d8:
        51:07:df:e1:39:d2:62:58:70:42:b3:00:bb:86:bb:1a:15:83:
        51:0a:10:2b:f1:1e:b0:96:ba:9e:4d:2c:3d:0f:15:ca:af:94:
        68:6a:c7:d9:b6:95:0b:38:29:e4:cc:c3:2d:12:55:70:37:4d:
        4c:7c:54:ac:36:fb:d1:b1:1a:be:e4:5d:27:25:eb:1c:70:f0:
        d2:eb:d1:e1:c8:a2:a9:13:3a:b6:7a:78:a3:41:3a:e0:f7:e3:
        c8:4c:7b:d2:60:08:78:c8:29:37:3f:6f:1a:38:8d:a2:41:8c:
        0b:4a:9c:3f

52.27.210.85

Last Seen: 2024-05-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1563110999 | 2024-05-04T05:24:44.235854
80 / tcp

nginx1.16.1

-1563110999 | 2024-05-17T19:35:12.328318
443 / tcp

nginx1.16.1

Products

Pricing

Contact Us

52.27.210.85

Last Seen: 2024-05-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1563110999 | 2024-05-04T05:24:44.235854 80 / tcp

nginx1.16.1

-1563110999 | 2024-05-17T19:35:12.328318 443 / tcp

nginx1.16.1

Products

Pricing

Contact Us

-1563110999 | 2024-05-04T05:24:44.235854
80 / tcp

-1563110999 | 2024-05-17T19:35:12.328318
443 / tcp