GeneralInformation

Hostnames	ec2-54-173-18-46.compute-1.amazonaws.com ai.services.sap api.da-be.ap10-prod.ai.services.sap apps.da-be.ap10-prod.ai.services.sap api.da-be.ap10-prod1.ai.services.sap apps.da-be.ap10-prod1.ai.services.sap api.da-be.ap10-prod2.ai.services.sap apps.da-be.ap10-prod2.ai.services.sap api.da-be.eu-prod1.ai.services.sap apps.da-be.eu-prod1.ai.services.sap api.da-be.eu10-prod.ai.services.sap apps.da-be.eu10-prod.ai.services.sap api.da-be.eu10-prod1.ai.services.sap apps.da-be.eu10-prod1.ai.services.sap api.da-be.eu10-prod2.ai.services.sap apps.da-be.eu10-prod2.ai.services.sap api.da-be.eu11-prod.ai.services.sap apps.da-be.eu11-prod.ai.services.sap api.da-be.eu11-prod1.ai.services.sap apps.da-be.eu11-prod1.ai.services.sap api.da-be.eu11-prod2.ai.services.sap apps.da-be.eu11-prod2.ai.services.sap api.da-be.us-prod1.ai.services.sap apps.da-be.us-prod1.ai.services.sap api.da-be.us10-prod.ai.services.sap apps.da-be.us10-prod.ai.services.sap api.da-be.us10-prod1.ai.services.sap apps.da-be.us10-prod1.ai.services.sap api.da-be.us10-prod2.ai.services.sap apps.da-be.us10-prod2.ai.services.sap
Domains	amazonaws.com services.sap
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS14618

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

427197390 | 2024-05-01T18:23:13.520843

80 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Wed, 01 May 2024 18:23:13 GMT
Server: nginx/1.20.0
Content-Length: 11
Connection: keep-alive

1631196553 | 2024-04-17T00:41:43.137429

443 / tcp

HTTP/1.0 503 Service Unavailable
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
content-type: text/html

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:40:e0:41:c8:bc:6b:fe:6c:38:1b:9b:24:ae:1b:b2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Jan  9 00:00:00 2024 GMT
            Not After : Jan  8 23:59:59 2025 GMT
        Subject: C=DE, ST=Baden-W\xC3\xBCrttemberg, L=Walldorf, O=SAP SE, CN=ai.services.sap
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:d8:20:f3:02:58:12:58:fc:be:c2:b8:49:
                    ed:61:8b:d5:b7:0d:56:d3:69:84:f5:3d:72:b5:ee:
                    74:32:d0:bb:a9:b6:c1:3c:aa:0a:c1:26:f2:82:d4:
                    b4:cf:87:fd:7d:11:c7:35:67:85:fa:2c:8d:10:2c:
                    7e:38:13:32:5e:95:4b:d2:55:ea:37:9e:dc:4b:dc:
                    96:07:8a:33:06:19:d9:3c:a4:82:3f:8c:c7:39:45:
                    ca:30:4f:c0:db:78:73:b8:c9:c3:31:98:7b:3f:60:
                    62:bf:30:fe:71:76:34:97:7a:aa:bc:b0:6c:cc:b9:
                    f0:1a:ae:45:85:a7:b1:8b:59:99:16:a3:01:d1:ff:
                    91:9b:0d:dd:65:0f:8e:f2:d7:7e:60:bf:28:d8:8f:
                    b0:f4:77:91:6f:63:f3:7c:62:f6:19:82:9b:fe:3b:
                    17:a6:73:4c:1c:44:dc:76:7a:48:78:9d:11:67:7d:
                    5b:37:63:cf:9d:6d:4d:0f:48:90:9b:f3:a8:da:71:
                    f5:19:b7:55:56:13:19:7b:85:9a:83:3f:87:87:8e:
                    b3:48:99:20:c3:7d:c7:e6:fa:b0:a3:3c:5c:e3:80:
                    71:d8:ba:bd:2a:24:9f:dc:47:64:92:8f:44:c9:cf:
                    05:57:b5:79:06:57:ce:0d:b1:3b:51:d7:b1:4c:4c:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                D2:FB:20:DB:1F:01:B3:01:0B:7E:9F:49:19:BC:D5:7F:3F:D7:BA:E7
            X509v3 Subject Alternative Name: 
                DNS:ai.services.sap, DNS:*.ai.services.sap, DNS:apps.da-be.eu-prod1.ai.services.sap, DNS:*.apps.da-be.eu-prod1.ai.services.sap, DNS:api.da-be.eu-prod1.ai.services.sap, DNS:apps.da-be.us-prod1.ai.services.sap, DNS:*.apps.da-be.us-prod1.ai.services.sap, DNS:api.da-be.us-prod1.ai.services.sap, DNS:apps.da-be.eu10-prod.ai.services.sap, DNS:*.apps.da-be.eu10-prod.ai.services.sap, DNS:api.da-be.eu10-prod.ai.services.sap, DNS:apps.da-be.eu10-prod1.ai.services.sap, DNS:*.apps.da-be.eu10-prod1.ai.services.sap, DNS:api.da-be.eu10-prod1.ai.services.sap, DNS:apps.da-be.eu10-prod2.ai.services.sap, DNS:*.apps.da-be.eu10-prod2.ai.services.sap, DNS:api.da-be.eu10-prod2.ai.services.sap, DNS:apps.da-be.eu11-prod.ai.services.sap, DNS:*.apps.da-be.eu11-prod.ai.services.sap, DNS:api.da-be.eu11-prod.ai.services.sap, DNS:apps.da-be.eu11-prod1.ai.services.sap, DNS:*.apps.da-be.eu11-prod1.ai.services.sap, DNS:api.da-be.eu11-prod1.ai.services.sap, DNS:apps.da-be.eu11-prod2.ai.services.sap, DNS:*.apps.da-be.eu11-prod2.ai.services.sap, DNS:api.da-be.eu11-prod2.ai.services.sap, DNS:apps.da-be.us10-prod.ai.services.sap, DNS:*.apps.da-be.us10-prod.ai.services.sap, DNS:api.da-be.us10-prod.ai.services.sap, DNS:apps.da-be.us10-prod1.ai.services.sap, DNS:*.apps.da-be.us10-prod1.ai.services.sap, DNS:api.da-be.us10-prod1.ai.services.sap, DNS:apps.da-be.us10-prod2.ai.services.sap, DNS:*.apps.da-be.us10-prod2.ai.services.sap, DNS:api.da-be.us10-prod2.ai.services.sap, DNS:apps.da-be.ap10-prod.ai.services.sap, DNS:*.apps.da-be.ap10-prod.ai.services.sap, DNS:api.da-be.ap10-prod.ai.services.sap, DNS:apps.da-be.ap10-prod1.ai.services.sap, DNS:*.apps.da-be.ap10-prod1.ai.services.sap, DNS:api.da-be.ap10-prod1.ai.services.sap, DNS:apps.da-be.ap10-prod2.ai.services.sap, DNS:*.apps.da-be.ap10-prod2.ai.services.sap, DNS:api.da-be.ap10-prod2.ai.services.sap
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jan  9 13:09:08.715 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6C:E4:7F:4F:D3:97:67:B7:12:6C:8B:E4:
                                95:E6:16:BC:2C:BF:D7:DA:76:C4:AA:4E:68:B3:31:73:
                                B5:7B:5F:DA:02:20:54:6A:80:3A:87:7C:DA:02:6B:39:
                                7A:9B:AF:67:79:27:71:3F:38:4B:A6:7B:57:EC:FB:22:
                                7C:DF:B4:6E:A5:B1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Jan  9 13:09:08.764 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C3:85:C7:5D:6A:C1:AE:92:AB:4F:B6:
                                90:1A:16:59:B6:D1:EB:53:9D:9A:CD:7D:93:10:22:B9:
                                6B:33:79:71:F6:02:20:7B:EE:5D:AD:3E:42:24:DF:1F:
                                B5:83:A8:5E:34:E0:E5:C0:AB:F9:A2:47:0B:99:39:E5:
                                24:F4:F3:69:91:49:F8
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jan  9 13:09:08.743 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:94:58:3C:D7:42:F5:31:E0:42:4C:0D:
                                21:75:F8:49:ED:94:26:B9:39:B7:07:94:7D:93:8F:B3:
                                53:5A:1C:CD:4F:02:21:00:C6:CF:36:EC:B2:16:58:6D:
                                FE:A9:D1:E4:E8:9B:0B:BB:E2:D0:7F:84:B9:FF:8A:3E:
                                AB:57:FC:B7:8F:38:04:E5
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        c5:fd:cc:1b:71:92:a0:ed:53:fe:70:b9:30:25:94:a7:c1:f1:
        9e:a8:97:9a:07:42:25:29:15:e0:c0:79:18:34:ca:a0:92:ed:
        a3:8b:c7:8d:74:64:cc:21:36:3a:fb:ad:98:42:8d:81:8f:f7:
        ce:a1:e5:78:31:dc:a6:6c:6c:f3:73:c9:82:a8:15:e7:1f:eb:
        23:e1:c3:51:5e:4e:47:e3:99:85:b6:68:6d:8f:0d:5c:3f:aa:
        44:f4:05:96:90:97:51:f3:69:c0:a1:0b:c1:44:5c:d2:c0:10:
        9e:cc:04:31:64:cb:07:5f:ea:3e:16:c3:3c:14:12:fe:24:9f:
        a8:a4:2b:d8:ea:43:c6:d2:41:d6:4e:9d:44:bd:15:5a:a9:bc:
        b4:e8:be:9e:75:f5:89:71:c7:52:1a:43:a2:fc:a8:0a:43:05:
        b6:ca:2e:1d:e1:ab:2a:4b:58:9f:d3:58:b6:52:e0:ce:3f:15:
        f4:e5:1f:75:fa:e7:87:af:69:10:ae:08:6b:b7:3b:1e:15:58:
        db:e5:29:90:55:f0:44:12:b5:7b:7e:33:1a:37:74:29:cd:27:
        24:63:9c:8a:be:97:1c:35:ae:8d:57:59:fc:c8:9e:bf:b1:f7:
        36:6e:f3:9f:4a:16:ea:71:cf:66:64:1c:4c:b5:f5:10:f7:50:
        da:52:75:90

54.173.18.46

Last Seen: 2024-05-01

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

427197390 | 2024-05-01T18:23:13.520843
80 / tcp

nginx1.20.0

1631196553 | 2024-04-17T00:41:43.137429
443 / tcp

Products

Pricing

Contact Us

54.173.18.46

Last Seen: 2024-05-01

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

427197390 | 2024-05-01T18:23:13.520843 80 / tcp

nginx1.20.0

1631196553 | 2024-04-17T00:41:43.137429 443 / tcp

Products

Pricing

Contact Us

427197390 | 2024-05-01T18:23:13.520843
80 / tcp

1631196553 | 2024-04-17T00:41:43.137429
443 / tcp