| Hostnames |
ec2-204-236-147-21.us-west-1.compute.amazonaws.com globalsms.cn onbuka.com |
| Domains | amazonaws.com globalsms.cn onbuka.com |
| Cloud Provider | Amazon |
| Cloud Region | us-west-1 |
| Cloud Service | EC2 |
| Country | United States |
| City | San Jose |
| Organization | Amazon.com, Inc. |
| ISP | Amazon.com, Inc. |
| ASN | AS16509 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
| CVE-2023-44487 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
1949896279 | 2024-05-19T02:39:49.62925580 / tcp
HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 19 May 2024 02:39:49 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://204.236.147.21:443/
1637199859 | 2024-05-20T23:29:32.454350443 / tcp
HTTP/1.1 200 OK Date: Mon, 20 May 2024 23:29:32 GMT Content-Type: text/html Content-Length: 615 Connection: keep-alive Server: nginx/1.21.6 Last-Modified: Thu, 31 Mar 2022 13:16:07 GMT ETag: "6245a997-267" Accept-Ranges: bytes
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:74:86:d6:70:69:34:27:7c:3b:6f:f0:4b:60:11:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
Validity
Not Before: Aug 2 00:00:00 2023 GMT
Not After : Aug 31 23:59:59 2024 GMT
Subject: CN=onbuka.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ac:9d:ec:e4:b2:d2:d3:c1:8c:ff:a5:ab:cc:ed:
6f:94:74:37:97:86:fe:7f:c4:a8:99:98:07:13:1c:
87:f5:93:82:1d:8f:66:f9:35:70:dd:48:1a:80:12:
8e:d9:9d:e6:52:c6:89:b1:ca:18:29:87:a3:45:d3:
e8:17:61:d4:68:db:90:a2:20:cf:fa:0c:4f:99:96:
df:d1:39:b7:d1:ee:ac:4e:25:5c:e8:51:54:f1:22:
17:38:f7:8e:89:4b:3f:9e:3c:fc:f9:4a:ee:30:b4:
d5:76:6d:18:73:50:2d:25:28:18:ba:c6:e7:47:09:
a7:c3:21:92:cb:bd:81:ed:09:23:62:c0:c8:7f:b4:
92:bc:e0:7e:63:37:9d:ae:e1:12:ff:1e:87:b4:f2:
d5:18:03:33:6d:e8:32:7a:c5:21:2b:e0:aa:9b:ce:
5f:ee:b6:8e:9f:5c:ec:f0:28:03:38:c6:f9:07:62:
6e:35:be:2a:b2:90:66:ea:60:77:86:cf:e4:c9:9d:
b4:e2:65:04:0e:08:95:34:83:38:a3:4c:ad:44:62:
08:fa:47:ac:c8:4a:6b:4e:e8:3f:a8:99:e4:b7:90:
5c:c9:22:be:24:d3:1f:d9:ed:41:9f:bf:6c:33:02:
d7:0e:27:e7:89:27:66:9b:d0:b4:b4:1f:fe:f8:fb:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
X509v3 Subject Key Identifier:
8D:94:FE:B7:86:68:40:9C:17:3B:DD:E3:7A:17:56:F4:F3:88:59:48
X509v3 Subject Alternative Name:
DNS:onbuka.com, DNS:*.onbuka.com
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.r2m02.amazontrust.com/r2m02.crl
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Authority Information Access:
OCSP - URI:http://ocsp.r2m02.amazontrust.com
CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Aug 2 02:35:54.788 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:3C:EE:DA:79:DF:C6:59:D8:CB:B6:80:46:
06:76:74:7A:1D:1A:CD:DF:3F:07:64:17:4E:DC:62:5E:
59:82:F7:C4:02:20:06:1A:B6:BE:FC:2F:92:93:46:6A:
5F:14:B7:73:03:EB:8E:11:E6:9A:D7:36:21:D3:EE:5B:
68:44:2E:8D:02:31
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Aug 2 02:35:54.818 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:BC:53:34:50:1D:DC:F9:75:FE:47:1E:
9F:F9:70:1D:0D:86:1E:21:2E:96:99:8F:68:B8:42:C6:
86:92:CD:21:B0:02:21:00:A2:D0:A3:74:B6:E1:12:27:
DD:66:94:D4:67:61:A0:A8:97:C6:6B:F0:E1:90:B3:2E:
0E:74:23:E5:0C:EE:C4:8D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
Timestamp : Aug 2 02:35:54.770 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:30:C5:3E:CC:12:03:DE:01:FE:49:3A:F6:
AC:5F:F0:A7:CF:48:96:60:98:69:7C:DB:61:AD:6D:AA:
7E:90:D3:2F:02:21:00:88:4C:0B:85:61:3D:FC:67:F5:
E0:EF:BA:09:29:01:2B:76:2E:33:30:5E:30:A2:CF:5F:
CC:13:C5:62:3D:D7:9D
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
59:2d:88:05:42:51:19:f2:92:b8:b4:73:c1:d8:67:cc:cf:66:
e7:d9:37:f5:2b:b9:3c:bd:f1:3d:52:bf:62:fb:56:de:d0:dd:
16:ff:54:4a:18:ed:42:3b:1d:ad:be:47:dc:e5:d5:29:de:51:
a8:fe:64:9d:9d:92:6b:aa:17:0b:6b:34:9e:06:18:17:36:d2:
a1:41:32:03:96:bb:40:21:50:40:71:9f:18:5d:ab:b0:33:c6:
ac:9f:b1:5b:6b:30:11:0a:fc:69:16:b5:ee:f6:cc:61:12:6e:
74:e1:1a:03:c4:3f:e2:a2:7b:78:6b:b2:03:0c:2a:ef:15:6a:
1a:04:cf:d0:52:c6:5a:54:19:ff:84:fb:40:10:a5:d4:ac:34:
f4:f1:2e:74:da:6f:a1:b2:1c:d5:f7:c4:5b:86:da:b4:3b:09:
da:ae:6c:9c:1e:92:18:8d:b6:41:44:bb:cd:59:d6:a9:18:90:
bd:b4:3a:2c:2b:f0:19:5b:67:f6:46:ba:b1:a4:4c:a2:ac:d3:
62:78:51:8d:21:b7:b7:16:88:fd:fc:88:0e:28:1c:67:16:30:
0a:73:d5:3e:70:7c:40:ab:9d:60:26:08:3a:81:71:8e:dc:70:
51:98:89:c0:48:8a:3a:f9:bf:65:89:4a:8e:58:ea:7e:38:58:
ae:93:e2:ed
1102849523 | 2024-05-22T19:44:06.5103059090 / tcp
HTTP/1.1 400 Bad Request Server: awselb/2.0 Date: Wed, 22 May 2024 19:44:06 GMT Content-Type: text/html Content-Length: 622 Connection: close
1637199859 | 2024-05-17T11:52:46.0934289091 / tcp
HTTP/1.1 200 OK Date: Fri, 17 May 2024 11:52:46 GMT Content-Type: text/html Content-Length: 615 Connection: keep-alive Server: nginx/1.21.6 Last-Modified: Thu, 31 Mar 2022 13:16:07 GMT ETag: "6245a997-267" Accept-Ranges: bytes
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9d:75:7a:d1:e8:8f:59:aa:46:c5:ed:3b:27:1b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M01
Validity
Not Before: Sep 19 00:00:00 2023 GMT
Not After : Oct 18 23:59:59 2024 GMT
Subject: CN=*.globalsms.cn
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:be:2a:9e:6c:53:4d:a0:0a:22:b6:75:c6:97:25:
f3:c4:08:67:d5:35:c3:70:43:22:05:21:1b:90:f2:
e8:d8:1a:3d:e8:43:86:ef:7f:48:43:03:c1:fc:6d:
2d:cb:99:2d:be:7d:12:1b:b1:e3:ba:b8:49:70:16:
0c:66:5a:37:6b:d9:25:40:a8:63:0c:ac:53:c9:58:
fc:46:7a:f2:56:4b:69:b6:fc:a9:ad:f3:95:c2:9d:
78:d6:80:9c:ae:ad:a7:0c:0b:a9:84:53:58:73:57:
d1:d0:8e:fe:1c:92:29:fb:86:86:a0:f1:99:d5:0d:
94:c7:51:3a:bb:b3:85:7d:52:7e:1b:b7:5d:d1:f6:
f2:d7:f7:c8:22:1a:fe:5e:7b:40:91:13:cd:9b:5e:
6c:cd:83:47:46:41:ad:ff:ba:8e:30:5e:98:27:e3:
56:53:db:80:8c:f1:81:6e:0f:5b:c0:4c:0d:f9:63:
31:48:a8:e9:30:b3:c4:a0:13:63:c8:c9:65:24:7f:
1c:40:de:05:9b:47:69:49:95:1f:0b:81:75:17:a1:
57:bd:0d:9f:3d:c7:4c:62:a9:6f:dc:17:74:77:15:
1e:34:43:1f:ea:8a:ec:c0:cc:b0:f9:68:07:89:26:
32:9d:f1:f7:4c:d6:93:09:db:d3:f9:3b:5a:62:cf:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
81:B8:0E:63:8A:89:12:18:E5:FA:3B:3B:50:95:9F:E6:E5:90:13:85
X509v3 Subject Key Identifier:
74:2F:B7:B0:39:CF:05:30:D3:44:5A:BD:08:7D:9B:84:BB:1D:D9:A6
X509v3 Subject Alternative Name:
DNS:*.globalsms.cn, DNS:globalsms.cn
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.r2m01.amazontrust.com/r2m01.crl
Authority Information Access:
OCSP - URI:http://ocsp.r2m01.amazontrust.com
CA Issuers - URI:http://crt.r2m01.amazontrust.com/r2m01.cer
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Sep 19 03:20:57.674 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:FC:AD:FC:A3:41:3F:D3:F3:22:3D:C9:
55:A6:66:C6:BF:ED:B2:72:3C:A8:FE:A1:FD:8E:91:46:
A7:18:77:86:5F:02:21:00:B1:D4:6F:49:C7:97:23:C9:
C7:34:F1:B6:B6:A2:9C:73:38:71:6F:9F:F9:00:4A:8B:
34:0F:13:91:2B:07:99:79
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Sep 19 03:20:57.741 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:D7:4F:1A:EF:4A:67:80:E0:BD:DC:D4:
28:84:E7:43:9B:D6:D6:AF:C2:07:82:D8:C9:D3:91:18:
7A:82:06:A9:4D:02:21:00:ED:84:8F:EE:8E:3D:EF:94:
54:F7:7F:19:53:DB:9E:74:74:A6:DE:CE:7D:D1:DB:18:
C6:8F:A4:45:77:B2:7A:2F
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
Timestamp : Sep 19 03:20:57.696 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:D5:1B:04:B4:2D:BB:A1:3A:AF:9A:E9:
6D:B1:F3:CD:43:AB:1A:CE:3E:D9:EE:54:C3:B5:1C:1B:
C8:EC:E9:66:EA:02:21:00:CE:CC:A2:C5:2C:6F:AB:CE:
07:6D:D8:10:85:C4:AB:05:A3:32:35:1F:57:0A:BA:B9:
06:36:F1:D2:A3:DE:C4:3A
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
5f:1b:05:3e:26:27:04:17:7e:57:33:be:ea:fb:fc:b0:b3:bc:
cc:26:72:84:b3:e7:e4:4a:40:51:10:44:3e:5e:88:0b:cf:97:
94:b1:a5:bd:d1:45:0b:d8:16:60:5b:de:b9:ff:7b:6b:be:c6:
ba:03:2e:37:f1:44:68:0e:47:0a:fc:9d:70:ee:5e:3b:b9:f9:
fe:e2:43:83:ea:d5:e6:c2:8e:59:ef:e6:c2:38:88:e6:b7:85:
12:e7:23:6f:4d:32:8e:8e:82:63:67:b7:4a:1e:23:57:7d:5f:
1f:5a:ff:76:49:42:5e:4d:c4:aa:05:60:a0:e0:db:5e:f6:e9:
6a:e5:c7:6a:4b:30:1b:b1:08:b2:88:74:a7:60:58:d1:1b:f2:
76:81:83:5b:f3:c8:f5:44:5c:80:0a:48:72:ca:cc:63:33:e2:
d1:ae:fd:9a:bb:e4:9c:d2:20:a0:c3:b5:cd:6b:f9:e9:86:78:
bb:f9:fb:00:45:a2:70:7a:45:44:53:f4:07:e0:7a:97:b6:c7:
91:8e:ec:8b:7d:4c:de:5a:ea:2a:fd:a4:39:1d:4f:4e:eb:78:
75:14:07:33:94:ab:f5:08:fa:2d:ed:67:3d:52:5a:fb:aa:86:
04:39:7f:9a:70:53:f2:6d:ec:b9:be:cc:55:9d:bc:6f:4f:fa:
c2:f0:2a:78