GeneralInformation

Hostnames	ec2-54-225-215-243.compute-1.amazonaws.com cengage.com
Domains	amazonaws.com cengage.com
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS14618

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2019(1)

CVE-2019-20372

5.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts

80 443

80 / tcp

974570904 | 2025-03-17T00:16:29.676035

Hashes

hash

1969978479

http.dom_hash

-2060582466

http.html_hash

974570904

http.server_hash

-982608622

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Server: awselb/2.0
Date: Mon, 17 Mar 2025 00:16:29 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive

443 / tcp

-1812490505 | 2025-03-24T05:16:04.754824

Hashes

hash

-2073574180

http.dom_hash

1239617585

http.html_hash

-1812490505

http.server_hash

532903735

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Date: Mon, 24 Mar 2025 05:16:04 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive
Server: nginx/1.16.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: DELETE, GET, POST, PUT
Access-control-Allow-Headers: origin, x-requested-with, accept, content-type, range

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:90:52:67:62:cd:5a:eb:11:bb:6e:6e:4e:a9:c1:8b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Mar  5 00:00:00 2025 GMT
            Not After : Apr  3 23:59:59 2026 GMT
        Subject: CN=*.cengage.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:04:39:28:a1:8a:3d:f4:a3:12:bf:76:47:
                    24:25:b9:1f:98:39:75:ae:5f:58:ab:0e:a1:a1:41:
                    fd:54:10:ab:e5:e4:49:ad:65:f3:b1:8b:a3:aa:ac:
                    00:cc:5a:b4:f3:8b:50:63:85:68:f3:98:80:05:5f:
                    ea:fc:56:d4:4b:c4:2b:aa:df:15:50:e1:15:09:ec:
                    58:90:3b:fe:b3:de:14:7d:1a:d1:9e:c5:9c:2e:46:
                    fe:7d:d3:3c:c6:1b:a2:65:e8:fa:01:d1:da:93:8c:
                    0a:3c:06:c1:1e:8f:af:55:79:e1:f3:48:f7:94:51:
                    cc:12:cd:b9:e7:c7:27:de:66:97:ab:6d:a0:6f:98:
                    4f:9c:f9:7f:c2:97:00:8e:c5:d8:b4:f7:29:e5:50:
                    b0:e4:b1:89:34:29:a4:9c:1f:8d:ef:b8:8f:9d:62:
                    fb:88:66:a4:62:0e:cd:2d:c7:f7:d5:55:1e:5f:e9:
                    35:5b:37:91:e8:4d:b8:70:28:a1:6f:83:68:a1:51:
                    a7:11:51:e9:0f:dc:ef:9b:4e:9d:ac:db:db:96:b5:
                    41:15:1e:d6:0b:cc:ba:7a:30:6c:f5:c3:01:af:9d:
                    ed:03:a2:24:fd:02:10:49:27:11:bc:5e:a7:51:95:
                    1b:a5:bd:ab:1e:33:02:39:70:34:06:8f:0b:62:42:
                    72:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                3C:1A:3A:5B:E4:9A:24:B3:93:24:1A:07:58:0F:BE:3E:99:53:06:60
            X509v3 Subject Alternative Name: 
                DNS:*.cengage.com, DNS:cengage.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Mar  5 19:22:49.560 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:90:3A:23:15:8A:9C:20:5D:5C:EC:C7:
                                22:06:4E:3A:2C:92:6E:F0:01:8D:C9:7F:25:F3:7F:B9:
                                65:36:62:D1:EE:02:21:00:E3:27:F7:1A:98:22:48:59:
                                E1:C1:EB:DA:0D:FD:99:AA:A7:14:73:F4:BE:EA:57:92:
                                E4:DA:FC:79:61:AA:60:7B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Mar  5 19:22:49.626 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:34:88:4E:AF:1A:07:6B:5D:FE:C5:89:7F:
                                D9:1D:92:94:9F:3A:8A:3D:83:1E:CA:A7:DB:D3:C0:D7:
                                45:D3:B4:01:02:20:5F:91:D3:05:74:4F:CF:6A:72:03:
                                41:D9:6B:EA:99:0A:20:66:A3:29:FC:78:CE:63:EE:DE:
                                E8:5A:F5:54:B0:DB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Mar  5 19:22:49.645 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BB:70:70:7E:C1:A7:B3:EB:67:E7:65:
                                83:33:EF:CF:5D:51:D4:3B:3F:A4:31:89:89:B1:E3:D0:
                                7E:50:33:8E:B3:02:21:00:AF:51:DF:06:EB:DD:7F:25:
                                1E:7E:EA:AC:BE:41:F2:74:EA:9C:BD:BC:8A:D8:77:91:
                                A0:22:DB:F5:C0:A0:09:D3
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        28:38:bb:57:21:88:0d:a4:fa:2f:70:0f:88:83:c4:dd:4e:f0:
        52:51:34:6d:22:b3:ff:ea:b3:b2:33:79:41:e3:a7:0a:20:ed:
        e2:ad:3e:ca:0f:80:30:e9:f2:e3:3c:84:da:57:9e:83:fd:23:
        b5:0d:e5:ae:9f:92:ae:85:29:c4:19:c0:fe:dc:22:32:79:f6:
        5d:b3:7a:1f:5c:fc:2b:c4:a5:15:81:6d:a9:95:54:00:78:7b:
        2d:70:ad:57:4b:b5:20:c4:89:09:b3:01:9f:16:fd:93:da:a9:
        dc:43:5b:12:7d:96:d7:1e:dd:83:e4:b1:e8:8f:be:7e:4e:3b:
        50:a6:1c:c0:12:b9:40:69:f7:61:ad:09:0d:b9:a3:fa:0d:1b:
        cf:16:95:10:e3:7e:fd:60:28:7a:51:0a:52:6d:25:4d:5c:8a:
        12:7e:9f:57:44:b3:f1:df:25:a4:10:d8:7f:62:49:fd:d6:f6:
        50:95:76:20:29:8a:f4:c2:b5:43:74:44:ef:9e:a2:70:e1:48:
        7f:41:54:db:5f:3a:6b:28:a8:d2:77:d4:08:23:e8:9c:2c:29:
        dd:83:e7:de:48:fb:19:fe:e6:2c:91:ff:b2:cf:2f:f7:b5:4d:
        9a:6e:0b:3d:82:38:30:e9:76:34:29:cb:e9:a9:6d:9a:f7:96:
        25:66:07:19

Vulnerabilities

3 1

54.225.215.243

Last Seen: 2025-03-24

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

974570904 | 2025-03-17T00:16:29.676035

Hashes

AWS ELB2.0

443 / tcp

-1812490505 | 2025-03-24T05:16:04.754824

Hashes

nginx1.16.1

Products

Pricing

Contact Us

54.225.215.243

Last Seen: 2025-03-24

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp 974570904 | 2025-03-17T00:16:29.676035

Hashes

AWS ELB2.0

443 / tcp -1812490505 | 2025-03-24T05:16:04.754824

Hashes

nginx1.16.1

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

974570904 | 2025-03-17T00:16:29.676035

443 / tcp

-1812490505 | 2025-03-24T05:16:04.754824