GeneralInformation

Hostnames	zhugen.tech
Domains	zhugen.tech
Country	China
City	Shanghai
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

80 443 3306 5672 6379 8081 9080 9090 9530

1402667696 | 2024-06-12T00:54:58.789956

80 / tcp

HTTP/1.1 404 
Server: nginx/1.18.0
Date: Wed, 12 Jun 2024 00:54:58 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 275
Connection: keep-alive
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Language: en-US

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

-870874164 | 2024-06-05T16:31:44.292000

443 / tcp

HTTP/1.1 404 
Server: nginx/1.18.0
Date: Wed, 05 Jun 2024 16:31:44 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 286
Connection: keep-alive
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Language: en-US

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:dd:74:84:e1:91:9a:84:12:30:76:90:1a:f2:ae:98
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, O=Beijing Xinchacha Credit Management Co., Ltd., CN=Xcc Trust DV SSL CA
        Validity
            Not Before: Jul 11 07:22:24 2023 GMT
            Not After : Jul 10 07:22:23 2024 GMT
        Subject: CN=*.zhugen.tech
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:fe:03:15:c4:11:fa:10:52:16:96:b6:15:
                    84:c5:5c:06:ec:b0:37:58:df:1c:0f:f9:b8:13:21:
                    2e:e5:01:d0:32:cc:44:83:71:33:94:30:4d:d3:0b:
                    c9:40:af:a4:fa:d6:31:3a:2d:a3:38:77:ac:92:b1:
                    16:40:f9:19:1c:d9:22:a0:68:55:ee:e4:b6:ef:7e:
                    d3:1e:61:37:a7:62:80:69:ac:82:4f:3c:4e:f5:d9:
                    59:d7:e8:85:f7:8f:ff:fa:37:5b:72:49:1e:17:09:
                    71:9d:c9:97:8d:44:6c:37:28:31:d6:d7:8d:43:1f:
                    07:22:c8:96:1b:9e:27:5f:b7:26:e2:50:37:8e:5a:
                    47:3b:68:72:75:a2:04:b5:b9:b9:ef:56:21:53:2b:
                    ec:60:67:7e:11:35:35:0c:1e:d7:fc:5e:41:d5:ef:
                    37:79:16:9f:43:f6:4c:04:be:02:8d:d2:64:13:46:
                    8b:0e:aa:07:25:f9:d1:bf:0d:9b:36:12:19:ca:dc:
                    74:87:a4:ca:44:1e:40:12:3a:47:74:6a:7b:d9:9e:
                    cb:0e:39:67:ca:d3:ac:8e:eb:f6:d0:7f:c7:5c:31:
                    cc:60:0a:8b:1f:9f:fd:9c:59:5b:04:81:0a:d2:07:
                    21:5f:64:60:9c:2e:04:7e:f0:33:27:b7:f7:ab:dc:
                    e4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://xinchacha2dv.crl.certum.pl/xinchacha2dv.crl
            Authority Information Access: 
                OCSP - URI:http://xinchacha2dv.ocsp-certum.com
                CA Issuers - URI:http://repository.certum.pl/xinchacha2dv.cer
            X509v3 Authority Key Identifier: 
                A1:43:8E:00:34:09:E5:7B:35:33:AE:75:89:04:F2:32:61:0F:A8:E7
            X509v3 Subject Key Identifier: 
                18:E2:E7:FC:AD:29:AC:2A:DC:06:99:0C:55:E9:F0:07:96:76:52:15
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.2.616.1.113527.2.5.1.21.3
                  CPS: https://www.certum.pl/CPS
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:*.zhugen.tech, DNS:zhugen.tech
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jul 11 07:22:24.582 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:BE:73:31:FA:46:EA:85:0A:70:CD:F3:
                                12:D4:1A:50:AA:97:99:C2:8E:D6:35:0F:9F:6C:26:4C:
                                52:1C:7B:8C:4B:02:20:05:7B:E0:BD:EF:9F:0A:50:5D:
                                86:D7:F3:F2:25:7D:EC:BF:94:65:E2:F3:C9:3F:D3:A5:
                                A7:90:68:8B:91:B5:03
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Jul 11 07:22:24.551 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:39:8C:32:F6:8A:D8:29:E5:A2:4B:8C:A6:
                                85:6C:5D:8D:FF:3E:C0:54:5D:47:F6:4D:4C:A4:0C:06:
                                13:2D:26:87:02:20:10:78:BD:0C:37:F0:C3:C4:8B:0F:
                                14:42:A9:9E:7E:49:86:51:8C:B4:0C:44:DA:5B:6C:A0:
                                0C:77:BD:58:C0:36
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Jul 11 07:22:24.604 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D4:07:B6:65:EA:31:24:7A:B0:10:80:
                                41:EE:35:62:35:8E:0F:9F:DB:34:FE:02:1B:6B:B0:9C:
                                77:C7:50:9A:08:02:21:00:FC:A0:48:F7:58:41:43:88:
                                D9:81:61:E7:9F:23:69:6A:E4:10:F1:04:FD:C4:41:ED:
                                2F:CA:55:8F:A6:B9:99:0F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9f:6a:eb:86:fc:35:3b:56:86:b0:0c:40:da:60:d5:47:96:60:
        b4:aa:05:ee:bb:89:e3:9c:7f:27:9e:66:29:4d:90:ca:1c:01:
        ac:06:54:0f:4b:6b:d1:7a:a5:d8:9e:b1:28:d4:9a:77:ab:1d:
        9d:fd:ad:b7:c8:7f:69:65:cc:dd:7d:1d:4f:36:4d:fb:e2:25:
        98:52:6f:90:40:0c:40:40:3c:db:c9:63:5f:ce:29:7c:5d:18:
        33:8e:4c:23:97:8c:fc:b7:f7:6e:02:16:26:ad:9d:6c:bd:4d:
        c9:98:5a:03:4f:57:e8:7f:ce:82:18:29:0d:43:8f:20:6c:ed:
        be:44:b2:dd:2b:2f:2f:dd:d2:9d:44:79:fa:87:37:dc:72:01:
        5c:1a:33:0f:00:c1:53:26:18:d4:ca:0d:c2:59:ce:b2:9f:3f:
        16:a0:0c:86:20:f7:66:23:09:79:a6:ac:04:7e:a9:4f:91:04:
        75:ba:b7:a1:09:a9:14:d9:70:22:39:0e:cd:cd:e1:77:98:4a:
        bd:09:5b:9e:ba:c5:14:88:9e:41:91:fe:fc:36:94:ad:e6:f3:
        f4:a2:8e:95:4d:f9:3f:42:ff:3d:ed:f6:b3:c7:d6:68:8c:53:
        32:c0:85:90:9d:8b:0a:20:4c:10:b5:d7:98:6f:5a:a0:71:b3:
        c2:51:a1:b7

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

2030546660 | 2024-06-14T22:31:07.878665

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 8.0.26
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 53247
  Authentication Plugin: caching_sha2_password

2142910858 | 2024-06-14T02:11:07.444887

5672 / tcp

AMQP:
  Protocol Version: 0-9
  Product: RabbitMQ
  Product Version: 3.9.8
  Platform: Erlang/OTP 24.1.4
  Capabilities:
    Exchange Exchange Bindings: True
    Connection.blocked: True
    Authentication Failure Close: True
    Direct Reply To: True
    Basic.nack: True
    Per Consumer Qos: True
    Consumer Priorities: True
    Consumer Cancel Notify: True
    Publisher Confirms: True

CVE-2023-46118 CVE-2022-31008

-1927723706 | 2024-06-06T14:36:03.765941

6379 / tcp

-NOAUTH Authentication required.

-1733702087 | 2024-06-13T02:53:15.375229

8081 / tcp

HTTP/1.1 404 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/json
Transfer-Encoding: chunked
Date: Thu, 13 Jun 2024 02:53:15 GMT

66
{"timestamp":"2024-06-13T02:53:15.167+00:00","status":404,"error":"Not Found","message":"","path":"/"}
0

1783255109 | 2024-06-02T00:12:25.086349

9080 / tcp

HTTP/1.1 404 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Content-Length: 286
Date: Sun, 02 Jun 2024 00:12:24 GMT

-52364358 | 2024-05-28T19:42:08.047308

9090 / tcp

HTTP/1.1 404 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Content-Length: 286
Date: Tue, 28 May 2024 19:42:07 GMT

1614012608 | 2024-05-25T12:00:58.941186

9530 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Date: Sat, 25 May 2024 12:00:58 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.18.0</center>
</body>
</html>

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

101.132.78.148

Last Seen: 2024-06-14

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1402667696 | 2024-06-12T00:54:58.789956
80 / tcp

nginx1.18.0

-870874164 | 2024-06-05T16:31:44.292000
443 / tcp

nginx1.18.0

2030546660 | 2024-06-14T22:31:07.878665
3306 / tcp

MySQL8.0.26

2142910858 | 2024-06-14T02:11:07.444887
5672 / tcp

RabbitMQ3.9.8

-1927723706 | 2024-06-06T14:36:03.765941
6379 / tcp

Redis key-value store

-1733702087 | 2024-06-13T02:53:15.375229
8081 / tcp

1783255109 | 2024-06-02T00:12:25.086349
9080 / tcp

-52364358 | 2024-05-28T19:42:08.047308
9090 / tcp

1614012608 | 2024-05-25T12:00:58.941186
9530 / tcp

nginx1.18.0

Products

Pricing

Contact Us

101.132.78.148

Last Seen: 2024-06-14

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Port 5672 Port 9530 Latest CVSS

OpenPorts

1402667696 | 2024-06-12T00:54:58.789956 80 / tcp

nginx1.18.0

-870874164 | 2024-06-05T16:31:44.292000 443 / tcp

nginx1.18.0

2030546660 | 2024-06-14T22:31:07.878665 3306 / tcp

MySQL8.0.26

2142910858 | 2024-06-14T02:11:07.444887 5672 / tcp

RabbitMQ3.9.8

-1927723706 | 2024-06-06T14:36:03.765941 6379 / tcp

Redis key-value store

-1733702087 | 2024-06-13T02:53:15.375229 8081 / tcp

1783255109 | 2024-06-02T00:12:25.086349 9080 / tcp

-52364358 | 2024-05-28T19:42:08.047308 9090 / tcp

1614012608 | 2024-05-25T12:00:58.941186 9530 / tcp

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

1402667696 | 2024-06-12T00:54:58.789956
80 / tcp

-870874164 | 2024-06-05T16:31:44.292000
443 / tcp

2030546660 | 2024-06-14T22:31:07.878665
3306 / tcp

2142910858 | 2024-06-14T02:11:07.444887
5672 / tcp

-1927723706 | 2024-06-06T14:36:03.765941
6379 / tcp

-1733702087 | 2024-06-13T02:53:15.375229
8081 / tcp

1783255109 | 2024-06-02T00:12:25.086349
9080 / tcp

-52364358 | 2024-05-28T19:42:08.047308
9090 / tcp

1614012608 | 2024-05-25T12:00:58.941186
9530 / tcp