GeneralInformation

Hostnames	ec2-52-198-137-128.ap-northeast-1.compute.amazonaws.com admin.steady-system.com
Domains	amazonaws.com steady-system.com
Cloud Provider	Amazon
Cloud Region	ap-northeast-1
Cloud Service	EC2
Country	Japan
City	Tokyo
Organization	Amazon Data Services Japan
ISP	Amazon.com, Inc.
ASN	AS16509
Operating System	Windows

WebTechnologies

CDN

jQuery CDN

JavaScript libraries

jQuery3.2.1

Web frameworks

Microsoft ASP.NET

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019(1)

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

2014(1)

CVE-2014-4078

5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."

OpenPorts

80 443

80 / tcp

1949896279 | 2025-03-20T12:30:07.576585

Hashes

hash

2051133391

http.dom_hash

-2060582466

http.html_hash

1949896279

http.server_hash

-982608622

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Thu, 20 Mar 2025 12:30:07 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://52.198.137.128:443/

443 / tcp

-638904139 | 2025-03-24T17:53:28.634847

Hashes

hash

-1355819338

http.dom_hash

1988430982

http.favicon.hash

390779205

http.html_hash

-638904139

http.server_hash

-945770239

Steady - LOGIN：ログイン

HTTP/1.1 200 OK
Date: Mon, 24 Mar 2025 17:53:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6803
Connection: keep-alive
Cache-Control: private
Server: Microsoft-IIS/8.5
Set-Cookie: ASP.NET_SessionId=slui5tphw1arh4wpgfh1bbzz; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=; path=/
X-Powered-By: ASP.NET

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f6:fd:10:4d:d3:56:f3:fe:57:5b:bc:45:46:dd:80
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Dec 22 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2026 GMT
        Subject: CN=admin.steady-system.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:b0:d2:06:2d:02:d1:83:a4:b7:62:46:52:
                    d1:10:7a:a7:f2:b9:78:7c:98:20:67:d8:b3:e3:5d:
                    61:87:18:75:33:85:26:72:93:53:4c:17:43:cc:dd:
                    09:b8:f7:f5:5a:7e:4b:16:db:c4:c2:ad:dd:a4:17:
                    bc:2c:e7:a9:d2:86:f6:a9:a5:19:23:c7:c9:2a:88:
                    fc:e9:32:ac:6d:e3:24:e1:1e:fc:d4:3c:7e:9d:6e:
                    09:c3:e1:84:0a:bd:ce:c3:99:e3:8b:09:fd:97:1c:
                    77:07:75:41:8b:ed:8b:c0:05:21:99:26:a8:27:b8:
                    ba:e1:71:be:f7:5c:1f:4c:8e:c6:7c:70:fb:93:0f:
                    95:13:4b:4e:24:b7:95:ed:b1:2f:3a:f9:0d:35:9a:
                    71:d3:a2:cf:1b:b6:a8:93:66:73:45:69:a1:48:c6:
                    84:63:24:8e:11:20:e9:9b:31:1f:9e:e6:41:20:d6:
                    17:81:5e:1e:93:ac:cc:8f:0a:e3:0a:6a:77:fe:df:
                    e2:dc:4a:fb:29:45:c7:80:da:91:46:ca:67:ea:d4:
                    89:68:ae:db:17:d2:0e:de:b2:60:3f:0c:98:cf:28:
                    13:cd:f4:0e:21:9a:59:fa:5f:7f:fd:91:a4:df:c3:
                    2e:f9:71:b6:5a:89:ef:1a:b2:e0:af:cf:3f:96:8b:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                4F:A8:01:98:62:2B:4C:95:67:23:AB:24:F7:D2:94:AE:FB:FB:74:05
            X509v3 Subject Alternative Name: 
                DNS:admin.steady-system.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Dec 22 00:57:47.943 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D1:D0:9B:CE:D3:A6:A7:01:D2:9F:5C:
                                12:90:F8:E5:05:6B:68:AA:AF:F8:31:5F:60:43:0C:C8:
                                8B:70:0A:05:87:02:20:35:C3:3A:80:E9:46:06:DB:94:
                                9E:81:EA:F1:07:78:2E:21:74:28:C1:A0:93:09:F9:CE:
                                69:8B:76:6A:C4:E9:DF
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Dec 22 00:57:47.972 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:56:2C:FD:41:64:B5:E5:29:EC:BF:A4:D6:
                                5A:86:A3:AC:37:05:F0:F1:E4:3F:00:ED:A3:AD:97:EA:
                                42:AE:C4:E9:02:21:00:E1:3F:8D:33:08:C5:6E:5E:00:
                                F7:69:5D:83:0E:0D:A8:86:3E:E5:C6:FD:FB:66:BC:4F:
                                98:D2:5D:A8:BA:7B:32
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Dec 22 00:57:47.992 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B7:20:37:5F:B9:1F:4D:C4:0F:54:89:
                                BB:06:AE:07:E5:82:5C:E3:21:9C:23:36:91:03:B6:C8:
                                8F:F0:A6:FF:24:02:20:69:47:58:9E:A4:D9:7A:E8:1C:
                                D0:60:B5:1D:66:67:BF:2F:4D:ED:59:1C:5F:59:B8:7C:
                                E0:5A:C8:01:F3:BC:0A
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1c:31:69:a1:58:5e:71:3c:77:ed:cf:48:96:13:f7:1e:b7:04:
        fc:c3:14:6a:7b:71:37:e1:c0:7e:f1:fe:62:a5:d9:7d:60:cd:
        00:a4:7c:45:1e:f9:a2:23:f8:84:a9:77:6c:14:98:72:80:21:
        b2:5b:48:b6:74:06:26:84:88:22:90:d4:a4:71:4f:b2:91:1d:
        c4:c8:ef:1c:e5:0c:37:fa:62:41:02:bb:76:12:6c:27:73:93:
        75:75:a7:4e:80:4a:5a:67:11:2f:7d:9f:21:e6:12:5d:6f:45:
        39:0f:50:17:45:62:4d:a9:f4:11:6d:21:31:f9:d8:f8:1b:5a:
        87:d8:a0:db:8e:a6:eb:96:33:01:96:f3:b5:a3:fb:e2:59:a7:
        56:c2:f5:33:2a:84:95:d7:d6:5f:eb:28:b9:5d:95:22:86:6b:
        76:54:fa:1c:d7:c1:77:df:54:d4:b6:61:0a:24:90:4a:bd:d3:
        b0:e2:5f:a8:62:a8:17:22:90:0d:05:0a:62:07:57:e6:12:37:
        26:f5:42:2c:28:42:c2:e5:88:ed:45:5c:f0:63:87:e3:79:20:
        3e:a2:90:8a:fe:7a:e0:a1:12:35:81:62:20:8e:65:c1:0c:9b:
        ee:24:8e:4c:7d:04:73:a2:47:16:90:c3:ba:11:47:2e:b5:9e:
        8b:74:0b:4e

Vulnerabilities

52.198.137.128

Last Seen: 2025-03-24

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

1949896279 | 2025-03-20T12:30:07.576585

Hashes

AWS ELB2.0

443 / tcp

-638904139 | 2025-03-24T17:53:28.634847

Hashes

Microsoft IIS httpd8.5

Products

Pricing

Contact Us

52.198.137.128

Last Seen: 2025-03-24

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp 1949896279 | 2025-03-20T12:30:07.576585

Hashes

AWS ELB2.0

443 / tcp -638904139 | 2025-03-24T17:53:28.634847

Hashes

Microsoft IIS httpd8.5

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

1949896279 | 2025-03-20T12:30:07.576585

443 / tcp

-638904139 | 2025-03-24T17:53:28.634847