GeneralInformation

Hostnames	ec2-34-251-246-49.eu-west-1.compute.amazonaws.com bo-api.ci.izberg-marketplace.com
Domains	amazonaws.com izberg-marketplace.com
Cloud Provider	Amazon
Cloud Region	eu-west-1
Cloud Service	EC2
Country	Ireland
City	Dublin
Organization	Amazon Data Services Ireland Limited
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

80 / tcp

-1027982702 | 2025-03-10T07:48:41.555910

Hashes

hash

-1487082508

http.dom_hash

-2006505642

http.html_hash

-1027982702

http.server_hash

-982608622

HTTP/1.1 503 Service Temporarily Unavailable
Server: awselb/2.0
Date: Mon, 10 Mar 2025 07:48:41 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 46
Connection: keep-alive

443 / tcp

0 | 2025-03-14T09:17:32.887029

Hashes

hash

-1905966891

http.dom_hash

http.html_hash

http.server_hash

-318251389

HTTP/1.1 404 Not Found
Date: Fri, 14 Mar 2025 09:17:32 GMT
Content-Length: 0
Connection: keep-alive
Server: nginx/1.20.0
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
X-XSS-Protection: 1; mode=block
Permissions-Policy: interest-cohort=()
Access-Control-Allow-Origin: *

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:90:b2:d1:e3:63:e5:d3:d5:8d:74:38:c7:ab:06:f7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Mar  2 00:00:00 2025 GMT
            Not After : Apr  1 23:59:59 2026 GMT
        Subject: CN=bo-api.ci.izberg-marketplace.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:68:dd:5a:2f:78:00:85:9b:b6:bd:f8:e7:
                    75:95:50:d4:da:c1:6f:b1:16:82:fb:c6:c4:18:27:
                    c0:41:3f:b9:42:f5:9d:e9:48:ae:1d:7c:9d:3d:d2:
                    0a:0a:29:84:92:4d:ac:e7:9a:53:41:71:ff:b4:4d:
                    d3:3b:76:75:c9:73:ab:3c:77:37:b4:5f:bb:c3:d0:
                    cd:e1:26:70:90:52:94:0e:d5:ee:17:03:4c:f3:2c:
                    66:7c:e0:93:e7:b6:3d:8f:06:22:0f:a4:85:10:3c:
                    f0:dc:5f:6d:9f:a7:9a:96:da:b2:95:c9:6f:03:e4:
                    2e:da:57:9f:0d:38:e2:3c:23:5f:59:f1:bf:8c:a8:
                    03:08:f3:0a:35:02:d1:b1:70:b0:94:13:3b:95:e7:
                    f3:3b:de:ae:85:78:10:26:ef:7a:6c:76:85:46:b9:
                    06:37:5b:70:2c:0b:74:2d:35:52:07:69:9d:b0:5d:
                    b6:8d:36:ef:2c:c5:68:4d:09:03:78:34:ac:f5:90:
                    3e:6c:b2:4c:2c:22:99:9c:f3:74:cc:53:82:c1:b3:
                    90:c5:e6:3b:d7:0d:3c:0b:14:db:b0:96:20:2d:25:
                    c9:4d:2a:73:db:6f:83:b3:32:a6:48:71:e2:b7:e9:
                    69:9f:cb:e4:e4:07:65:fe:a7:56:06:de:52:82:57:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                7B:71:A0:9A:75:4F:EE:2F:D8:4E:C7:BE:11:EF:D3:1D:35:72:6C:2D
            X509v3 Subject Alternative Name: 
                DNS:bo-api.ci.izberg-marketplace.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
                                E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
                    Timestamp : Mar  2 01:54:43.607 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C4:8B:5C:BE:92:7B:B0:46:7A:A2:7F:
                                5E:BD:43:85:BC:D7:27:89:FC:36:FC:AC:79:A7:FB:84:
                                8F:4F:4E:82:2E:02:21:00:AA:11:E8:15:AC:EB:A7:9A:
                                C1:E1:68:40:EC:08:ED:3B:BA:79:A5:0F:F9:DB:26:76:
                                7A:E3:B9:7F:F9:BC:CE:6A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Mar  2 01:54:43.591 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0B:E2:05:AB:2F:60:E7:3B:B6:A4:48:D5:
                                B4:84:E1:89:F6:AA:63:E3:D6:FF:9E:56:D4:76:2B:D2:
                                CF:25:B6:57:02:20:21:A5:D5:AC:44:44:58:AE:AD:CF:
                                32:DB:49:4A:49:6F:AE:7F:87:8C:AD:DB:5E:9A:9D:39:
                                3C:BB:52:81:AD:F7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Mar  2 01:54:43.608 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0B:33:97:26:5D:E2:75:7F:AD:24:14:78:
                                85:E1:55:2A:90:51:E0:1F:E2:D3:C0:48:D9:D8:2B:92:
                                B8:73:A9:C7:02:20:64:B0:7D:3D:4A:6B:79:22:B9:0B:
                                06:9C:19:0D:92:7A:2E:8F:98:EF:65:80:9B:D6:D4:20:
                                5C:38:2B:DD:85:19
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        03:bf:72:26:4c:a1:08:bf:76:7a:a9:5a:96:a3:2e:dc:e4:8b:
        d7:89:3e:99:ec:5c:c2:69:47:a6:9a:51:cf:eb:61:6b:0f:67:
        0b:91:a5:94:94:c6:5b:95:a2:29:0b:4f:93:bd:e0:a1:70:5d:
        e6:74:c5:55:56:0e:9b:a9:ae:64:65:3d:d5:ea:4f:25:c8:c6:
        e8:3c:98:40:62:e9:3a:96:12:a9:d1:e5:1d:5c:32:ee:a1:32:
        92:72:ca:54:fc:d0:98:78:2f:8f:a0:c1:16:b1:1f:a7:64:25:
        7b:fa:a6:52:ea:90:85:8d:86:0b:ca:14:46:88:43:34:76:73:
        a6:9c:ae:42:9c:50:49:a3:c0:4b:3d:a2:3f:33:f5:dd:ad:2d:
        49:e7:d6:80:de:21:a9:b1:a0:a4:23:4b:56:ec:ef:10:8b:72:
        88:d5:2b:1c:cc:34:2b:99:c8:92:ab:ac:6c:31:4b:49:54:11:
        85:da:a3:6f:9a:a4:cc:55:a2:06:a3:c4:dc:9e:88:32:70:b4:
        b6:2b:ce:99:7c:d5:31:78:31:5e:32:ff:07:68:26:b9:3f:c2:
        99:6b:07:27:04:ab:cc:db:3a:70:b2:01:3a:68:d2:c6:8c:b9:
        ac:4b:30:2a:ea:a0:01:d1:87:1d:1f:81:da:fe:d0:5e:01:f8:
        b1:64:48:6d

Vulnerabilities

34.251.246.49

Last Seen: 2025-03-14

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

-1027982702 | 2025-03-10T07:48:41.555910

Hashes

AWS ELB2.0

443 / tcp

0 | 2025-03-14T09:17:32.887029

Hashes

nginx1.20.0

Products

Pricing

Contact Us

34.251.246.49

Last Seen: 2025-03-14

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp -1027982702 | 2025-03-10T07:48:41.555910

Hashes

AWS ELB2.0

443 / tcp 0 | 2025-03-14T09:17:32.887029

Hashes

nginx1.20.0

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-1027982702 | 2025-03-10T07:48:41.555910

443 / tcp

0 | 2025-03-14T09:17:32.887029