Nmap scan report for approvals.amazon.com (44.226.187.250) Host is up (0.028s latency). Other addresses for approvals.amazon.com (not scanned): 52.43.152.7 35.162.6.240 rDNS record for 44.226.187.250: ec2-44-226-187-250.us-west-2.compute.amazonaws.com Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http awselb/2.0 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Tue, 09 Sep 2025 20:34:52 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://midwayg-alb-1dpnrutkcsbsz-990879716.us-west-2.elb.amazonaws.com:443/nice%20ports%2C/Tri%6Eity.txt%2ebak | | 301 Moved Permanently | |

301 Moved Permanently

| | | GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Tue, 09 Sep 2025 20:34:52 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://midwayg-alb-1dpnrutkcsbsz-990879716.us-west-2.elb.amazonaws.com:443/ | | 301 Moved Permanently | |

301 Moved Permanently

| | | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| | | X11Probe: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Tue, 09 Sep 2025 20:34:52 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ |_http-title: Did not follow redirect to https://approvals.amazon.com:443/ |_http-server-header: awselb/2.0 443/tcp open ssl/https Server | http-title: Midway Authentication Portal |_Requested resource was https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fapprovals.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fapprovals.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3Dc4c8e42a5b629f4695aa46809bed42582c984cf518a1e676bd7450a88e24ff4b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26use_sentry_key%3D1%26state%3Daeagatewaystateparam%252F&require_digital_identity=false | fingerprint-strings: | DNSVersionBindReqTCP, RPCCheck: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Tue, 09 Sep 2025 20:35:04 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| | | FourOhFourRequest: | HTTP/1.1 404 Not Found | Date: Tue, 09 Sep 2025 20:34:58 GMT | Content-Type: text/html | Content-Length: 86 | Connection: close | Server: Server | ETag: "68bffc3b-56" | | |

| Midway Gateway |

| Found |

| | | GetRequest: | HTTP/1.1 403 Forbidden | Date: Tue, 09 Sep 2025 20:34:58 GMT | Content-Type: text/html | Content-Length: 147 | Connection: close | Server: Server | | 403 Forbidden | |

403 Forbidden

|
Server
| | | HTTPOptions: | HTTP/1.1 405 Not Allowed | Date: Tue, 09 Sep 2025 20:34:58 GMT | Content-Type: text/html | Content-Length: 0 | Connection: close | Server: Server | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| | | tor-versions: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Tue, 09 Sep 2025 20:34:58 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ |_http-trane-info: Problem with XML parsing of /evox/about | http-methods: |_ Potentially risky methods: PUT PATCH DELETE |_ssl-date: TLS randomness does not represent time | ssl-cert: Subject: commonName=rds-access-bom.corp.amazon.com | Subject Alternative Name: DNS:rds-access-bom.corp.amazon.com, DNS:aani-map-viewer.corp.amazon.com, DNS:art-service-schedule-beta.integ.amazon.com, DNS:guitar-webtools-cn.aka.amazon.com, DNS:rds-access-arn.corp.amazon.com, DNS:art-service.amazon.com, DNS:rds-access-icn.corp.amazon.com, DNS:local-it-items-beta.integ.amazon.com, DNS:ims-gamma.corp.amazon.com, DNS:sauron.amazon.com, DNS:categorizer.corp.amazon.com, DNS:rds-access-pdx.corp.amazon.com, DNS:sentry-coral-test-website.integ.amazon.com, DNS:local-it-items-gamma.integ.amazon.com, DNS:mwfedtestmw.corp.amazon.com, DNS:team-resource-analyzer.corp.amazon.com, DNS:rds-access-dub.corp.amazon.com, DNS:hire-gamma.amazon.com, DNS:simfarm.integ.amazon.com, DNS:catfinder-beta.corp.amazon.com, DNS:rds-access-cmh.corp.amazon.com, DNS:wiki.amazon.com, DNS:rds-access-lhr.corp.amazon.com, DNS:rds-access-cdg.corp.amazon.com, DNS:itmarketplace-gamma.corp.amazon.com, DNS:edge-tools.amazon.com, DNS:gsam.corp.amazon.com, DNS:itmarketplace-beta.corp.amazon.com, DNS:muster-gru.corp.amazon.com, DNS:odd.corp.amazon.com, DNS:jira-staging.audible.com, DNS:rds-access-iad.corp.amazon.com, DNS:dora.corp.amazon.com, DNS:art-service-schedule.corp.amazon.com, DNS:epim-console-beta.corp.amazon.com, DNS:vipster.amazon.com, DNS:cdservice.amazon.com, DNS:art-service-schedule-gamma.corp.amazon.com, DNS:rds-access-fra.corp.amazon.com, DNS:guitar-webtools.aka.amazon.com, DNS:rds-access-sfo.corp.amazon.com, DNS:guitar-webtools-eu.aka.amazon.com, DNS:orgchart-api.amazon.com, DNS:amp.aka.amazon.com, DNS:rds-access-nrt.corp.amazon.com, DNS:workdocadapter-prod.corp.amazon.com, DNS:approvals.amazon.com, DNS:code.amazon.com, DNS:jira.audible.com, DNS:art-service-gamma.amazon.com, DNS:permissions.amazon.com, DNS:epim-console-gamma.corp.amazon.com, DNS:dailyorders.amazon.com, DNS:aha.amazon.com, DNS:carnaval.amazon.com, DNS:local-it-items.corp.amazon.com, DNS:ims-beta.corp.amazon.com, DNS:rds-access-sin.corp.amazon.com, DNS:meetings-beta-nrt.corp.amazon.com, DNS:w-gamma.corp.amazon.com, DNS:guitar-webtools-fe.aka.amazon.com, DNS:noflawsservice.corp.amazon.com, DNS:wiki.audible.com, DNS:rds-access-yul.corp.amazon.com, DNS:art-service-beta.amazon.com, DNS:itmarketplace.corp.amazon.com, DNS:epim-console.corp.amazon.com, DNS:insite.corp.amazon.com, DNS:tarviewer.aka.amazon.com, DNS:rds-access-kix.corp.amazon.com, DNS:vip-management-portal.amazon.com, DNS:vulnerabilities.amazon.com, DNS:vulnerabilities.corp.amazon.com, DNS:ekarulf.corp.amazon.com, DNS:epim.amazon.com, DNS:rds-access-syd.corp.amazon.com, DNS:katamari.corp.amazon.com, DNS:wacms-gamma.corp.amazon.com, DNS:rds-access-gru.corp.amazon.com, DNS:sauron-gamma.amazon.com | Not valid before: 2025-07-06T00:00:00 |_Not valid after: 2026-08-03T23:59:59 |_http-server-header: Server 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/9%Time=68C08F6B%P=x86_64-redhat-linux-gnu%r(G SF:etRequest,17A,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20a SF:wselb/2\.0\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2020:34:52\x20GMT\r\n SF:Content-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x20 SF:close\r\nLocation:\x20https://midwayg-alb-1dpnrutkcsbsz-990879716\.us-w SF:est-2\.elb\.amazonaws\.com:443/\r\n\r\n\r\n301\x20Mo SF:ved\x20Permanently\r\n\r\n

301\x20Moved SF:\x20Permanently

\r\n\r\n\r\n")%r(HTTPOptions SF:,17A,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20awselb/2\. SF:0\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2020:34:52\x20GMT\r\nContent-T SF:ype:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x20close\r\n SF:Location:\x20https://midwayg-alb-1dpnrutkcsbsz-990879716\.us-west-2\.el SF:b\.amazonaws\.com:443/\r\n\r\n\r\n301\x20Moved\x20Pe SF:rmanently\r\n\r\n

301\x20Moved\x20Perma SF:nently

\r\n\r\n\r\n")%r(RTSPRequest,7A,"\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n SF:")%r(X11Probe,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20aws SF:elb/2\.0\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2020:34:52\x20GMT\r\nCo SF:ntent-Type:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20cl SF:ose\r\n\r\n\r\n400\x20Bad\x20Request\ SF:r\n\r\n

400\x20Bad\x20Request

\r\n SF:\r\n\r\n")%r(FourOhFourRequest,19D,"HTTP/1\.1\x20301\x20Moved\x2 SF:0Permanently\r\nServer:\x20awselb/2\.0\r\nDate:\x20Tue,\x2009\x20Sep\x2 SF:02025\x2020:34:52\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Lengt SF:h:\x20134\r\nConnection:\x20close\r\nLocation:\x20https://midwayg-alb-1 SF:dpnrutkcsbsz-990879716\.us-west-2\.elb\.amazonaws\.com:443/nice%20ports SF:%2C/Tri%6Eity\.txt%2ebak\r\n\r\n\r\n301\x20Moved\x20 SF:Permanently\r\n\r\n

301\x20Moved\x20Per SF:manently

\r\n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/9%Time=68C08F72%P=x86_64-redhat-linux- SF:gnu%r(GetRequest,123,"HTTP/1\.1\x20403\x20Forbidden\r\nDate:\x20Tue,\x2 SF:009\x20Sep\x202025\x2020:34:58\x20GMT\r\nContent-Type:\x20text/html\r\n SF:Content-Length:\x20147\r\nConnection:\x20close\r\nServer:\x20Server\r\n SF:\r\n\r\n403\x20Forbidden\r\n\r\ SF:n

403\x20Forbidden

\r\n
Server\r\n\r\n\r\n")%r(HTTPOptions,90,"HTTP/1\.1\x20405\x20N SF:ot\x20Allowed\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2020:34:58\x20GMT\ SF:r\nContent-Type:\x20text/html\r\nContent-Length:\x200\r\nConnection:\x2 SF:0close\r\nServer:\x20Server\r\n\r\n")%r(FourOhFourRequest,FA,"HTTP/1\.1 SF:\x20404\x20Not\x20Found\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2020:34: SF:58\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x2086\r\nCon SF:nection:\x20close\r\nServer:\x20Server\r\nETag:\x20\"68bffc3b-56\"\r\n\ SF:r\n\n\n

\n\x20\x20\x20\x20Midway\x20Gateway\n

\n

\ SF:n\x20\x20\x20\x20404\x20Not\x20Found\n

\n\n")%r(tor-ve SF:rsions,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\. SF:0\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2020:34:58\x20GMT\r\nContent-T SF:ype:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n SF:\r\n\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n")%r(RTSPRequest,7A,"\r\n400\x20Bad\x20Reque SF:st\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n")%r(RPCCheck,110,"HTTP/1\.1\x20400\x2 SF:0Bad\x20Request\r\nServer:\x20awselb/2\.0\r\nDate:\x20Tue,\x2009\x20Sep SF:\x202025\x2020:35:04\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20122\r\nConnection:\x20close\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n\r\n\r\n")%r(DNSVersionBindReqT SF:CP,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\ SF:nDate:\x20Tue,\x2009\x20Sep\x202025\x2020:35:04\x20GMT\r\nContent-Type: SF:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n SF:\r\n400\x20Bad\x20Request\r\n\r SF:\n

400\x20Bad\x20Request

\r\n\r\n SF:\r\n"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (90%) OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 Aggressive OS guesses: Linux 2.6.32 (90%), Linux 3.2 - 4.9 (90%), Linux 2.6.32 - 3.10 (89%), Linux 2.6.32 - 3.13 (89%), Linux 3.10 - 3.13 (86%) No exact OS matches for host (test conditions non-ideal). Network Distance: 11 hops TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.21 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.60 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.67 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 1.06 ms 206.72.211.146.any2ix.coresite.com (206.72.211.146) 5 ... 10 11 28.72 ms ec2-44-226-187-250.us-west-2.compute.amazonaws.com (44.226.187.250) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 36.93 seconds