44.249.249.89

{
  "ip": 754579801,
  "http": {
    "status": 404,
    "robots_hash": null,
    "redirects": [],
    "title_hash": null,
    "securitytxt": null,
    "title": null,
    "sitemap_hash": null,
    "robots": null,
    "dom_hash": 0,
    "components_hash": 0,
    "headers_hash": 2129120964,
    "host": "44.249.249.89",
    "html": "",
    "server_hash": null,
    "location": "/",
    "components": {},
    "securitytxt_hash": null,
    "headers": {
      "date": "Thu, 10 Sep 2026 14:23:37 GMT",
      "content-length": "0",
      "content-type": "text/plain"
    },
    "server": null,
    "sitemap": null,
    "html_hash": 0
  },
  "port": 443,
  "transport": "tcp",
  "cpe23_hash": -527748401,
  "cloud": {
    "region": "us-west-2",
    "service": "EC2",
    "provider": "Amazon"
  },
  "location": {
    "city": "Boardman",
    "region_code": "OR",
    "area_code": null,
    "longitude": -119.70058,
    "latitude": 45.83986,
    "country_code": "US",
    "country_name": "United States"
  },
  "product": "Cobalt Strike Beacon",
  "hash": 505746088,
  "tags": [
    "cloud",
    "self-signed"
  ],
  "timestamp": "2026-09-10T14:23:37.290636",
  "ssl": {
    "chain_sha256": [
      "0e9c9291b6f77d9f65e230500c0d7fc0dc979240fde0f14a48cf885eaeecaac2"
    ],
    "jarm": "2ad2ad16d2ad2ad00042d42d00042ddb04deffa1705e2edc44cae1ed24a4da",
    "tlsext": [
      {
        "id": 43,
        "name": "supported_versions"
      },
      {
        "id": 51,
        "name": "key_share"
      },
      {
        "id": 10,
        "name": "supported_groups"
      }
    ],
    "chain": [
      "-----BEGIN CERTIFICATE-----\nMIIDJDCCAgygAwIBAgIJAPPVzUTomffyMA0GCSqGSIb3DQEBCwUAMEAxCzAJBgNV\nBAYTAlVTMRgwFgYDVQQKEw9WaWEtU2VjdXJlLm9yZy4xFzAVBgNVBAMTDnZpYS1z\nZXVjcmUub3JnMB4XDTI1MTAyNzE4NDYyNFoXDTI2MTAyNzE4NDYyNFowQDELMAkG\nA1UEBhMCVVMxGDAWBgNVBAoTD1ZpYS1TZWN1cmUub3JnLjEXMBUGA1UEAxMOdmlh\nLXNldWNyZS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkxw2/\nmzJUgV7F1fCE+gm9KmIyxjOEsSYU4UyoLswlZGbvXNBb8CvyHCQz/usk8iGeEnuw\nqfyoo43lgFXYfPU2lcSLs6T5VvH86VkbngA2NXyiGVu5NycX1i7p9nVW7cHSudz8\n1oMTqm+i/EnL2L09DKgGUk4TnaEYZZ/zpPDZ0mpXFRQVOaWNvK1zEcCtnZIk3rgh\ntW0MaIR8kG3DVDHTniFev9lPdBenRXFjfXqX68cjcn3eUB0Erxr5pqJEOBSXZ8IT\nUvnAJxQAhlMWBkurlLIgjMBX1n0KLwBl5/JLuLV7LJyJqTyRiGPJPOwFy1+AHoPj\nBZ1+51tCmkftxDeZAgMBAAGjITAfMB0GA1UdDgQWBBQXoeg43+iEoAWdWuCol8U4\nI292QDANBgkqhkiG9w0BAQsFAAOCAQEA304qxJ64iFUkVtBlUR/Zl6q9ujeHH75R\n8QcWFh8ZPtiHfEUAyP7briLB3iQnQ3wfcqai3WQb7Tat1oLYRusigwc1ao3Z5Vv/\nshhxndR+/ql/llJ7wMwYGJFezlx3xbpWR13YkfgXdUoH1jQHj6Uh0piHPvr+c+WG\nmpHjB2oNTZQRLm63QV+np4a3ctuvvXjatjAiKxwi725sr21QZZwJLUnilrYplHHK\n7jHnEWaEGoQh32Qo6pXHKZQGDZRHkxXI0Fz2p5exSEoS0yzH3bp3Dh//UPB0uOug\nrP6B1A/1vKjz8J4t5mhUAIe9mw+P6c1QS0TS0Q/JQby+t/rXrNHHiw==\n-----END CERTIFICATE-----\n"
    ],
    "versions": [
      "-TLSv1",
      "-SSLv2",
      "-SSLv3",
      "-TLSv1.1",
      "TLSv1.2",
      "TLSv1.3"
    ],
    "acceptable_cas": [],
    "alpn": [],
    "cert": {
      "sig_alg": "sha256WithRSAEncryption",
      "issued": "20251027184624Z",
      "expires": "20261027184624Z",
      "pubkey": {
        "bits": 2048,
        "type": "rsa"
      },
      "version": 2,
      "extensions": [
        {
          "data": "\\x04\\x14\\x17\\xa1\\xe88\\xdf\\xe8\\x84\\xa0\\x05\\x9dZ\\xe0\\xa8\\x97\\xc58#ov@",
          "name": "subjectKeyIdentifier"
        }
      ],
      "fingerprint": {
        "sha256": "0e9c9291b6f77d9f65e230500c0d7fc0dc979240fde0f14a48cf885eaeecaac2",
        "sha1": "42a81ff7f0861fd6f086ef627c5e922d6ac42dfc"
      },
      "serial": 17570175217099733000,
      "issuer": {
        "C": "US",
        "CN": "via-seucre.org",
        "O": "Via-Secure.org."
      },
      "expired": false,
      "subject": {
        "C": "US",
        "CN": "via-seucre.org",
        "O": "Via-Secure.org."
      }
    },
    "cipher": {
      "version": "TLSv1.3",
      "bits": 256,
      "name": "TLS_AES_256_GCM_SHA384"
    },
    "trust": {
      "revoked": false,
      "browser": null
    },
    "handshake_states": [
      "before SSL initialization",
      "SSLv3/TLS write client hello",
      "SSLv3/TLS read server hello",
      "TLSv1.3 read encrypted extensions",
      "SSLv3/TLS read server certificate",
      "TLSv1.3 read server certificate verify",
      "SSLv3/TLS read finished",
      "SSLv3/TLS write change cipher spec",
      "SSLv3/TLS write finished",
      "SSL negotiation finished successfully"
    ],
    "ja3s": "f03a69cfa3944d6d51bc52febd87a1a8",
    "ocsp": {}
  },
  "hostnames": [
    "ec2-44-249-249-89.us-west-2.compute.amazonaws.com"
  ],
  "org": "Amazon.com, Inc.",
  "data": "HTTP/1.1 404 Not Found\r\nDate: Thu, 10 Sep 2026 14:23:37 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\n\r\n",
  "asn": "AS16509",
  "cpe23": [
    "cpe:2.3:a:helpsystems:cobalt_strike"
  ],
  "isp": "Amazon.com, Inc.",
  "cpe": [
    "cpe:/a:helpsystems:cobalt_strike"
  ],
  "domains": [
    "amazonaws.com"
  ],
  "ip_str": "44.249.249.89",
  "os": null,
  "_shodan": {
    "region": "na",
    "module": "https",
    "ptr": true,
    "options": {},
    "id": "8556a521-a658-4976-8d14-ea2661edf098",
    "crawler": "3b30ded3f602a16b2b9b09425b50a05614063bc0"
  }
}