GeneralInformation

Hostnames	ec2-3-130-205-187.us-east-2.compute.amazonaws.com api.demoassets.com
Domains	amazonaws.com demoassets.com
Cloud Provider	Amazon
Cloud Region	us-east-2
Cloud Service	EC2
Country	United States
City	Columbus
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

443

443 / tcp

290335303 | 2025-02-20T07:03:26.442177

Hashes

hash

-1335881592

http.dom_hash

365585628

http.html_hash

290335303

http.robots_hash

1714206274

http.server_hash

-318251389

http.title_hash

870307108

Laravel

HTTP/1.1 200 OK
Date: Thu, 20 Feb 2025 07:03:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.20.0
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token, Authorization, Accept,charset,boundary,Content-Length
Access-Control-Allow-Origin: *
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlJFTWNkNFVJY3pjVkdXa0VwVXdzL3c9PSIsInZhbHVlIjoiYlg0eTUva3dGODVwUzZYeEs5bkl4U2RITGVYM096SWwzSThYR0k2bnlsQnBzSHIrdGtVcXNQUlBsWnZ3cVNSU2s1YVh4NWFsRHA3QUd0dUtlL2RVcmtoR0d5dFoya25GcVVuVEJKQ0pxQU5WdHRQa0c5SFpwTnFYMHFkbjFiVnQiLCJtYWMiOiJmNTljZDk1MDA3YmU1OTI0OGQyYmU4Y2MxNWUzN2FmMTQzNmE4NTkyNjU2OGNiN2M4MjI1OWU2MDQ0MGFkNzFjIiwidGFnIjoiIn0%3D; expires=Thu, 20-Feb-2025 09:03:26 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: laravel_session=eyJpdiI6IkQ2dTVzazBmQnhjbFRITzBTV3ZaR2c9PSIsInZhbHVlIjoiMUJCYWJaMjBTVGhDQzJFQ213NDlJcDRFL0lUSUpUdkhacmYvVUhjQTBXYUZVYmpXbHovczByL1RGZ3EwM0pZQzJORW1qSlZ3aXFJalZjOCsyVWllMmFpTHJXWGMwOEpicW9KRngyYldDL0dETlQrWWtlK2xIU1JnZHdmYnRuNFAiLCJtYWMiOiI2NmFlYTYxNzk1ZGVmNGE5NjhkNzNhYjBmNjAxYzcyMDcwYzFiODYwYmRmODYyMmVlNzQ5NDZhYzdhZWM5MjYzIiwidGFnIjoiIn0%3D; expires=Thu, 20-Feb-2025 09:03:26 GMT; Max-Age=7200; path=/; httponly; samesite=lax

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:16:88:0e:00:0c:ec:47:4b:e8:f3:da:02:d2:a2:98
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M01
        Validity
            Not Before: Feb  9 00:00:00 2023 GMT
            Not After : Aug  4 23:59:59 2023 GMT
        Subject: CN=api.demoassets.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:18:6b:b5:88:ba:bf:00:22:06:19:42:47:
                    0b:1d:18:c4:8e:10:7c:f3:20:69:6b:57:2a:d1:f0:
                    1f:36:b2:8c:e4:0c:87:f5:d1:e1:e4:1d:04:63:0c:
                    5a:7c:46:a8:05:18:e1:62:ce:0f:64:93:4d:a3:a0:
                    0a:df:4f:d1:8e:96:4a:0e:78:46:e1:a5:2c:9b:fe:
                    11:60:36:6e:07:16:a3:d1:fd:2d:9c:69:1a:6a:f6:
                    46:45:3e:3e:c4:d6:2b:8a:f9:63:9e:0f:e2:42:66:
                    89:52:a8:26:cf:1b:7d:bb:95:15:79:c2:6b:31:f9:
                    c1:7a:57:a4:11:db:6c:a7:83:df:cc:9a:63:12:fa:
                    d9:d3:6a:4c:16:39:bd:56:34:98:e5:b8:7c:94:3c:
                    9f:08:54:53:98:dd:2d:d1:19:8f:a5:14:0d:f7:ed:
                    17:3f:20:10:3f:06:74:9b:41:7e:b6:c7:55:6f:d6:
                    19:a0:39:1e:27:5a:d3:6e:e3:99:9a:48:bb:c8:fa:
                    2c:c5:e1:67:d9:2f:a7:8b:e5:57:e5:20:3d:72:c5:
                    91:13:f6:77:20:4b:8f:17:bf:70:86:94:d9:54:43:
                    f6:05:62:81:c6:2e:f5:26:c9:52:03:28:03:74:c3:
                    3e:68:50:d4:82:83:51:c7:1d:9d:53:4d:57:47:f9:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                81:B8:0E:63:8A:89:12:18:E5:FA:3B:3B:50:95:9F:E6:E5:90:13:85
            X509v3 Subject Key Identifier: 
                83:C1:50:75:2A:8D:44:48:CA:5F:59:A1:71:43:0F:0E:60:78:73:04
            X509v3 Subject Alternative Name: 
                DNS:api.demoassets.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m01.amazontrust.com/r2m01.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m01.amazontrust.com
                CA Issuers - URI:http://crt.r2m01.amazontrust.com/r2m01.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
                                03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
                    Timestamp : Feb  9 05:40:33.647 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:17:5B:4E:85:76:A2:A2:3A:D6:D9:45:F1:
                                7E:DF:FE:39:14:DE:DA:D3:76:56:58:2F:EE:C7:5E:DE:
                                1C:B0:FF:19:02:21:00:BD:28:41:37:24:C6:FE:04:7F:
                                1F:09:4D:EF:0B:CD:64:F5:BF:B7:FA:EF:CB:0A:AD:DA:
                                5D:71:BB:EC:4E:9C:63
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : B3:73:77:07:E1:84:50:F8:63:86:D6:05:A9:DC:11:09:
                                4A:79:2D:B1:67:0C:0B:87:DC:F0:03:0E:79:36:A5:9A
                    Timestamp : Feb  9 05:40:33.716 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:1E:A0:5A:E5:3E:84:F9:6A:6A:E3:CE:34:
                                A2:E0:42:74:77:EB:EB:2C:40:26:CF:4A:C9:DE:40:F3:
                                F3:2E:2D:66:02:21:00:E8:A6:01:AB:83:25:AD:56:15:
                                5A:F5:91:A5:D3:5F:2E:7D:1C:3D:C0:E4:36:C0:B7:2B:
                                BE:AA:DF:68:FD:9E:A8
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : B7:3E:FB:24:DF:9C:4D:BA:75:F2:39:C5:BA:58:F4:6C:
                                5D:FC:42:CF:7A:9F:35:C4:9E:1D:09:81:25:ED:B4:99
                    Timestamp : Feb  9 05:40:33.656 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CE:50:FF:C4:27:97:11:B2:D9:10:6F:
                                9F:3B:55:B2:4B:B5:A4:08:66:B2:BA:D4:41:F5:25:A0:
                                09:8E:B2:95:D8:02:21:00:A4:56:DC:56:7F:53:52:FE:
                                84:9B:BB:0E:55:A7:EE:8C:D4:96:D3:77:90:96:9B:03:
                                F6:75:25:70:A7:72:D5:17
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        62:e2:85:62:86:ca:22:57:6f:74:7b:75:c2:15:9c:64:5d:b2:
        da:8a:66:ad:68:62:18:21:97:23:00:7d:0a:84:92:a6:39:4a:
        09:b5:57:6f:3b:43:6b:9d:80:93:4b:8c:25:13:f7:ed:6b:ae:
        da:4a:7f:cf:ef:ae:69:85:e0:57:6b:87:5b:90:0c:87:36:28:
        19:0b:45:a7:89:55:fc:24:f6:80:30:26:22:a0:e5:8e:84:8a:
        3e:40:d3:1b:2d:f7:ce:7e:38:26:61:17:27:24:f7:a8:7e:a4:
        08:4f:07:9e:4a:2d:32:02:eb:89:46:fb:77:b6:db:e4:8a:19:
        77:98:aa:a9:d3:63:a0:83:32:53:44:7a:6f:51:ab:4f:bf:5b:
        7d:b4:20:d9:92:cc:a4:cc:a0:24:6a:82:7c:3b:94:a3:31:4c:
        29:fa:56:69:42:f0:2e:ac:fc:0c:cf:6f:ee:dc:c1:12:7c:a6:
        a7:42:5b:6b:1c:a6:37:59:f9:7b:3d:a4:d3:a4:41:28:4c:79:
        2a:bf:04:0c:e4:cc:a8:bd:e5:de:ce:c0:bf:de:9e:24:ad:87:
        ae:7d:80:d2:9c:cc:00:9d:ab:56:c4:7a:3b:e4:bf:63:8c:fc:
        2b:d2:4e:f1:a5:13:b8:1c:93:d0:8d:d3:29:1d:a2:54:8d:83:
        b9:be:a3:af

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

3.130.205.187

Last Seen: 2025-02-20

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

443 / tcp

290335303 | 2025-02-20T07:03:26.442177

Hashes

nginx1.20.0

Products

Pricing

Contact Us

3.130.205.187

Last Seen: 2025-02-20

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

443 / tcp 290335303 | 2025-02-20T07:03:26.442177

Hashes

nginx1.20.0

Products

Pricing

Contact Us

Vulnerabilities

443 / tcp

290335303 | 2025-02-20T07:03:26.442177