Nmap scan report for cldwaf20200825190022121800000005-1678780906.us-east-1.elb.amazonaws.com (75.101.233.189)
Host is up (0.057s latency).
Other addresses for cldwaf20200825190022121800000005-1678780906.us-east-1.elb.amazonaws.com (not scanned): 18.206.51.15 18.235.121.155 13.217.254.59 18.208.47.113 54.158.152.197
rDNS record for 75.101.233.189: ec2-75-101-233-189.compute-1.amazonaws.com
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
80/tcp open http awselb/2.0
|_http-title: Did not follow redirect to https://cldwaf20200825190022121800000005-1678780906.us-east-1.elb.amazonaws.com:443/
|_http-server-header: awselb/2.0
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 301 Moved Permanently
| Server: awselb/2.0
| Date: Wed, 10 Sep 2025 03:10:54 GMT
| Content-Type: text/html
| Content-Length: 134
| Connection: close
| Location: https://cldwaf20200825190022121800000005-1678780906.us-east-1.elb.amazonaws.com:443/nice%20ports%2C/Tri%6Eity.txt%2ebak
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
|
| GetRequest, HTTPOptions:
| HTTP/1.1 301 Moved Permanently
| Server: awselb/2.0
| Date: Wed, 10 Sep 2025 03:10:53 GMT
| Content-Type: text/html
| Content-Length: 134
| Connection: close
| Location: https://cldwaf20200825190022121800000005-1678780906.us-east-1.elb.amazonaws.com:443/
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
|
| RTSPRequest:
|
| 400 Bad Request
|
| 400 Bad Request
|
|
| X11Probe:
| HTTP/1.1 400 Bad Request
| Server: awselb/2.0
| Date: Wed, 10 Sep 2025 03:10:54 GMT
| Content-Type: text/html
| Content-Length: 122
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
|_
443/tcp open ssl/https BigIP
| tls-alpn:
| h2
|_ http/1.1
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 302 Found
| Date: Wed, 10 Sep 2025 03:11:00 GMT
| Content-Length: 0
| Connection: close
| Location: https://login.frontlineeducation.com/connect/authorize?grant_type=authorization_code&scope=openid+roles+flapi.public+fl.session+offline_access&acr_values=productId%3AestarV3&response_type=code&redirect_uri=https%3A%2F%2Ftx.esped.com%2Fservlet%2Fcom.esped.login.LoginIdm&state=3238e14dcb50c&nonce=1de810548ae33&client_id=estarV3
| Server-Timing: dtRpid;desc="929955239", dtSInfo;desc="0"
| Set-Cookie: dtCookie=v_4_srv_6_sn_45ECE1812FB8D2957502E02A6AF97B46_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.cldwaf20200825190022121800000005-1678780906.us-east-1.elb.amazonaws.com; Secure
| Set-Cookie: JSESSIONID=E5E417E2EBB75C2FE5187FC0E9A5979C; Path=/; HttpOnly; Secure
| Set-Cookie: BIGipServerProd_Esped_dallasV3_9080=1899501996.30755.0000; path=/; Httponly; Secure
| GetRequest:
| HTTP/1.1 302 Found
| Date: Wed, 10 Sep 2025 03:10:59 GMT
| Content-Length: 0
| Connection: close
| Location: https://cldwaf20200825190022121800000005-1678780906.us-east-1.elb.amazonaws.com/login/m.jsp
| Server: BigIP
| HTTPOptions:
| HTTP/1.1 302 Found
| Date: Wed, 10 Sep 2025 03:11:00 GMT
| Content-Length: 0
| Connection: close
| Location: https://cldwaf20200825190022121800000005-1678780906.us-east-1.elb.amazonaws.com/login/m.jsp
| Server: BigIP
| RTSPRequest:
|
| 400 Bad Request
|
| 400 Bad Request
|
|
| tor-versions:
| HTTP/1.1 400 Bad Request
| Server: awselb/2.0
| Date: Wed, 10 Sep 2025 03:11:00 GMT
| Content-Type: text/html
| Content-Length: 122
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
|_
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|_http-server-header: BigIP
|_ssl-date: TLS randomness does not represent time
| ssl-cert: Subject: commonName=*.esped.com/organizationName=Frontline Education/stateOrProvinceName=Pennsylvania/countryName=US
| Subject Alternative Name: DNS:*.esped.com, DNS:esped.com
| Not valid before: 2025-05-15T00:00:00
|_Not valid after: 2026-06-15T23:59:59
| tls-nextprotoneg:
| h2
|_ http/1.1
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.92%I=7%D=9/9%Time=68C0EC3D%P=x86_64-redhat-linux-gnu%r(G
SF:etRequest,182,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20a
SF:wselb/2\.0\r\nDate:\x20Wed,\x2010\x20Sep\x202025\x2003:10:53\x20GMT\r\n
SF:Content-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x20
SF:close\r\nLocation:\x20https://cldwaf20200825190022121800000005-16787809
SF:06\.us-east-1\.elb\.amazonaws\.com:443/\r\n\r\n\r\n3
SF:01\x20Moved\x20Permanently\r\n\r\n301\
SF:x20Moved\x20Permanently
\r\n\r\n\r\n")%r(HTT
SF:POptions,182,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20aw
SF:selb/2\.0\r\nDate:\x20Wed,\x2010\x20Sep\x202025\x2003:10:53\x20GMT\r\nC
SF:ontent-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x20c
SF:lose\r\nLocation:\x20https://cldwaf20200825190022121800000005-167878090
SF:6\.us-east-1\.elb\.amazonaws\.com:443/\r\n\r\n\r\n30
SF:1\x20Moved\x20Permanently\r\n\r\n301\x
SF:20Moved\x20Permanently
\r\n\r\n\r\n")%r(RTSP
SF:Request,7A,"\r\n400\x20Bad\x20Request
SF:\r\n\r\n400\x20Bad\x20Request
\r\n\r\n\r\n")%r(X11Probe,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r
SF:\nServer:\x20awselb/2\.0\r\nDate:\x20Wed,\x2010\x20Sep\x202025\x2003:10
SF::54\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20122\r\nC
SF:onnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request
SF:\r\n\r\n400\x20Bad\x20Request
\r\n\r\n\r\n")%r(FourOhFourRequest,1A5,"HTTP/1\.1\x2
SF:0301\x20Moved\x20Permanently\r\nServer:\x20awselb/2\.0\r\nDate:\x20Wed,
SF:\x2010\x20Sep\x202025\x2003:10:54\x20GMT\r\nContent-Type:\x20text/html\
SF:r\nContent-Length:\x20134\r\nConnection:\x20close\r\nLocation:\x20https
SF:://cldwaf20200825190022121800000005-1678780906\.us-east-1\.elb\.amazona
SF:ws\.com:443/nice%20ports%2C/Tri%6Eity\.txt%2ebak\r\n\r\n\r\n301\x20Moved\x20Permanently\r\n\r\n301\x20Moved\x20Permanently
\r\n\r\n\r\
SF:n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/9%Time=68C0EC43%P=x86_64-redhat-linux-
SF:gnu%r(GetRequest,D7,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Wed,\x2010\x
SF:20Sep\x202025\x2003:10:59\x20GMT\r\nContent-Length:\x200\r\nConnection:
SF:\x20close\r\nLocation:\x20https://cldwaf20200825190022121800000005-1678
SF:780906\.us-east-1\.elb\.amazonaws\.com/login/m\.jsp\r\nServer:\x20BigIP
SF:\r\n\r\n")%r(HTTPOptions,D7,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Wed,
SF:\x2010\x20Sep\x202025\x2003:11:00\x20GMT\r\nContent-Length:\x200\r\nCon
SF:nection:\x20close\r\nLocation:\x20https://cldwaf20200825190022121800000
SF:005-1678780906\.us-east-1\.elb\.amazonaws\.com/login/m\.jsp\r\nServer:\
SF:x20BigIP\r\n\r\n")%r(FourOhFourRequest,403,"HTTP/1\.1\x20302\x20Found\r
SF:\nDate:\x20Wed,\x2010\x20Sep\x202025\x2003:11:00\x20GMT\r\nContent-Leng
SF:th:\x200\r\nConnection:\x20close\r\nLocation:\x20https://login\.frontli
SF:needucation\.com/connect/authorize\?grant_type=authorization_code&scope
SF:=openid\+roles\+flapi\.public\+fl\.session\+offline_access&acr_values=p
SF:roductId%3AestarV3&response_type=code&redirect_uri=https%3A%2F%2Ftx\.es
SF:ped\.com%2Fservlet%2Fcom\.esped\.login\.LoginIdm&state=3238e14dcb50c&no
SF:nce=1de810548ae33&client_id=estarV3\r\nServer-Timing:\x20dtRpid;desc=\"
SF:929955239\",\x20dtSInfo;desc=\"0\"\r\nSet-Cookie:\x20dtCookie=v_4_srv_6
SF:_sn_45ECE1812FB8D2957502E02A6AF97B46_perc_100000_ol_0_mul_1_app-3Aea7c4
SF:b59f27d43eb_1_rcs-3Acss_0;\x20Path=/;\x20Domain=\.cldwaf202008251900221
SF:21800000005-1678780906\.us-east-1\.elb\.amazonaws\.com;\x20Secure\r\nSe
SF:t-Cookie:\x20JSESSIONID=E5E417E2EBB75C2FE5187FC0E9A5979C;\x20Path=/;\x2
SF:0HttpOnly;\x20Secure\r\nSet-Cookie:\x20BIGipServerProd_Esped_dallasV3_9
SF:080=1899501996\.30755\.0000;\x20path=/;\x20Httponly;\x20Secure\r\nStr")
SF:%r(tor-versions,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20a
SF:wselb/2\.0\r\nDate:\x20Wed,\x2010\x20Sep\x202025\x2003:11:00\x20GMT\r\n
SF:Content-Type:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20
SF:close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n400\x20Bad\x20Request
\r\n\r\n\r\n")%r(RTSPRequest,7A,"\r\n400\x20Bad
SF:\x20Request\r\n\r\n400\x20Bad\x20Reque
SF:st
\r\n\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (90%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
Aggressive OS guesses: Linux 2.6.32 (90%), Linux 3.2 - 4.9 (90%), Linux 2.6.32 - 3.10 (89%), Linux 2.6.32 - 3.13 (89%), Linux 3.10 - 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 14 hops
TRACEROUTE (using port 80/tcp)
HOP RTT ADDRESS
1 0.21 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177)
2 0.61 ms gw.mcom-colocationamerica.com (208.64.231.81)
3 0.63 ms r1b4.n1p1400.lax.multacom.net (64.69.46.9)
4 ...
5 33.00 ms be2931.ccr31.phx01.atlas.cogentco.com (154.54.44.85)
6 19.78 ms be5471.ccr21.elp02.atlas.cogentco.com (154.54.166.57)
7 30.95 ms be3821.ccr31.dfw01.atlas.cogentco.com (154.54.165.25)
8 31.42 ms be2763.ccr41.dfw03.atlas.cogentco.com (154.54.28.74)
9 ... 13
14 56.64 ms ec2-75-101-233-189.compute-1.amazonaws.com (75.101.233.189)
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 44.00 seconds