GeneralInformation

Hostnames	sciexplore.colife.org.tw
Domains	colife.org.tw
Country	Taiwan
City	Tainan
Organization	Ministry of Education Computer Center
ISP	National Center for High-performance Computing
ASN	AS7539
Operating System	Ubuntu

WebTechnologies

Analytics

CDN

JavaScript libraries

Video players

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

677579724 | 2024-05-19T08:05:01.231041

80 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 19 May 2024 08:05:01 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

-618639058 | 2024-06-01T04:28:52.624077

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Sat, 01 Jun 2024 04:28:51 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlVZNzBMdEhEYld0RVhnOW05U21QM2c9PSIsInZhbHVlIjoiUFRKUjFIQW1MbUxuYzBIcWh5NmNQcUhmazFLc3pnWmhkVS9yMTlTdmZPODREL21ZK3VYQnlQeFI2b2ZXNFhrWGhpK28vTmhZVkRrbVYwYWp3YmZmNEZCTytsUkg1ZEhXNTdIS1B1a3AwNlJjdCtsMzBRSmxkaVcyRER2QUkrSGciLCJtYWMiOiI5YTU1YTE1NjJhYjhlZWZmZWYxMjlmNzBmMGQ5YjcyOThjOGEwMzM5MjBhNWQ0MjE0ZmZiMzI4M2UwMDU3NjIzIiwidGFnIjoiIn0%3D; expires=Sat, 01 Jun 2024 06:28:51 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: _session=eyJpdiI6IlZiSE5sRFYrMDdUVTlTS0hocDNyTnc9PSIsInZhbHVlIjoibWtCRUFMT2FqTkN5UVZFNnJPTG5Dc1VUUWdnMExvVTBqclFGYkZhdk1WUXMvLzhnWlZxVEpNMCtMSitRUTduOUs5OXNpc2pMRkliR200MWxWa25NNkJoUUJSZGxTNmQ5a0FDSzlsWU8ybklYLzh4QXdHZmdiUGgwazQrUE9uSnoiLCJtYWMiOiI3ODNhN2ZkMzg0Nzk2MWZkMzg2YzkyYjBkYTFmODcyODI4ZWZkZWI2YzNlM2I2MWU5YzEyNzcwMTRiM2ZlZTIyIiwidGFnIjoiIn0%3D; path=/; httponly; samesite=lax

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c9:cc:88:7a:a1:ca:0a:43:a7:35:aa:94:80:8b:6c:72:52
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: May 11 20:34:53 2024 GMT
            Not After : Aug  9 20:34:52 2024 GMT
        Subject: CN=sciexplore.colife.org.tw
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:3b:05:21:f0:3f:73:54:4e:c1:31:23:a5:5e:
                    09:fb:26:14:06:0b:15:e3:ec:35:67:f0:7c:75:25:
                    11:ce:16:07:21:23:96:f3:76:1f:f8:c9:dd:5e:2f:
                    12:93:87:bc:5d:5a:7f:c8:d0:f6:41:cb:7f:9f:61:
                    e8:0e:f0:b3:6b:aa:9a:32:0a:67:af:d8:18:c6:2d:
                    fb:dc:fe:a4:94:dc:32:6e:f1:a1:08:b2:bc:52:91:
                    8c:3b:9e:46:0f:12:92:cd:24:d6:b7:fa:16:a1:97:
                    f6:8d:00:80:fb:f9:28:99:35:47:da:f0:ad:c4:80:
                    1b:4a:f9:ff:6f:83:f1:78:36:64:06:bd:bb:81:af:
                    a6:cc:b9:05:5f:5c:90:6f:ae:1e:26:66:c8:8f:73:
                    69:20:58:80:29:e9:85:f6:cc:a3:39:c2:bc:e4:71:
                    e7:e3:38:73:c3:68:66:6e:35:ea:4d:4d:3d:7a:68:
                    b2:b3:fb:80:9f:82:9c:ca:1d:9a:c0:2e:6e:a5:03:
                    e8:8b:30:f4:4d:b5:21:af:ad:d0:68:66:f3:32:84:
                    00:86:fa:71:f2:0e:a0:e6:6a:8e:ce:10:62:e7:d6:
                    e4:0d:cb:4c:01:50:34:7d:65:d9:ab:78:ca:4f:4d:
                    69:21:7c:e2:12:6b:e3:8f:d7:ec:45:83:ba:0c:7d:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                A5:74:D6:25:E3:32:78:A5:5E:DD:98:7A:80:8F:43:52:05:26:C4:36
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:sciexplore.colife.org.tw
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : May 11 21:34:53.700 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0D:69:5A:D6:FA:CF:F4:D3:55:CD:D4:90:
                                DA:AE:CA:80:48:E3:43:56:C4:18:14:EE:27:C2:55:6B:
                                B8:AD:37:43:02:21:00:A6:7E:FD:29:46:75:CF:5B:2E:
                                94:1C:9C:F7:44:94:9C:C8:E7:D5:B8:3D:08:04:29:70:
                                B2:CB:8E:CC:D5:D0:3F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : May 11 21:34:53.704 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9B:CF:2B:8E:7C:8C:0A:47:3B:8E:2C:
                                5C:C2:F9:A5:63:E1:92:2E:70:73:A7:3F:DB:2B:0D:72:
                                C6:A5:99:47:01:02:21:00:FE:0B:98:4A:60:D1:2C:1B:
                                0A:13:C5:16:F8:D0:C3:75:AF:CA:67:DF:CF:5A:FE:32:
                                6B:E1:42:CE:08:D7:60:FF
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        af:cd:32:8b:c8:50:76:74:3d:f6:e6:81:ea:fd:b9:9f:ac:de:
        34:05:1f:da:16:ed:cc:d2:67:88:2a:16:a3:92:ea:e8:f6:1c:
        9c:79:b7:0c:de:79:f1:a9:12:5f:46:46:97:3b:5c:55:c5:61:
        01:81:6e:f8:c2:e1:78:fb:65:13:8a:15:1e:a0:1b:e8:a9:cf:
        64:5e:cd:02:7e:0c:2e:ab:f2:9d:06:6d:69:3a:ba:34:b4:2b:
        ea:08:3e:89:9a:df:d4:5e:2f:6a:58:e6:bd:91:e0:e7:c8:83:
        a5:61:af:62:36:3f:02:02:20:ac:65:f7:2a:ad:73:a2:91:a2:
        c6:17:ee:16:e4:ab:71:c9:0f:1a:f6:4a:2e:00:66:ea:94:c8:
        48:5a:e1:fc:a1:ea:5c:67:2f:24:95:54:60:5a:b0:77:d9:80:
        5c:07:10:32:65:dc:45:d4:e1:5d:9b:11:57:27:31:0e:6e:c5:
        3e:f5:b2:12:be:6c:cb:ef:54:2b:5d:a2:3a:a1:50:cd:a8:97:
        f8:5f:a3:97:61:ea:72:e4:91:18:8e:83:3c:b9:a3:22:7f:67:
        a1:55:3e:5a:03:b5:82:23:de:44:f8:7c:e1:fb:8a:97:15:af:
        8c:b4:34:9b:e5:f9:c9:6b:3f:e8:51:f2:3c:3a:16:48:56:20:
        22:5d:74:4f

140.110.96.34

Last Seen: 2024-06-01

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

677579724 | 2024-05-19T08:05:01.231041
80 / tcp

nginx1.18.0

-618639058 | 2024-06-01T04:28:52.624077
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

140.110.96.34

Last Seen: 2024-06-01

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

677579724 | 2024-05-19T08:05:01.231041 80 / tcp

nginx1.18.0

-618639058 | 2024-06-01T04:28:52.624077 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

677579724 | 2024-05-19T08:05:01.231041
80 / tcp

-618639058 | 2024-06-01T04:28:52.624077
443 / tcp