Last Seen: 2026-10-02

Tags:

database eol-product

GeneralInformation

Hostnames

mt-mt.top

Domains

mt-mt.top

Country

Hong Kong

City

Tseung Kwan O

Organization

cognetcloud INC

ISP

cognetcloud INC

ASN

AS401701

WebTechnologies

Programming languages

Python3.11.2

Reverse proxies

Nginx1.22.1

Web frameworks

Flask3.1.8

Web servers

Nginx1.22.1

Flask3.1.8

OpenPorts

23 80 443 3000 3306 4433 5000 5001 6379 7000 7878 8000 8080 8081 8085 8090 9000 9100 9200 9201

23 / tcp

-931697787 | 2026-10-02T00:51:55

login:

80 / tcp

1637199859 | 2026-09-22T00:52:58

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 22 Sep 2026 00:52:57 GMT
Content-Type: text/html
Content-Length: 615
Last-Modified: Thu, 16 Jul 2026 10:53:54 GMT
Connection: keep-alive
ETag: "6a58b842-267"
Accept-Ranges: bytes

Vulnerabilities

443 / tcp

1827144056 | 2026-09-27T21:17:09

文件快递柜 - FileCodeBox

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sun, 27 Sep 2026 21:17:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 878
Connection: keep-alive
cache-control: no-cache

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            82:82:c6:1b:1d:97:4a:ae:5e:b6:bd:19:54:7e:c6:87
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=AT, O=ZeroSSL GmbH, CN=ZeroSSL ECC DV SSL CA 2
        Validity
            Not Before: Jul 16 00:00:00 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: CN=mt-mt.top
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit field, 128 bit security level)
                pub:
                    04:c6:5f:d1:4b:2f:77:da:d4:0c:c3:ae:c0:7b:8f:53:
                    0c:a1:92:20:00:fe:63:cb:52:8d:58:69:9d:de:f7:44:
                    60:19:34:0e:4c:77:9e:00:a1:49:80:c6:a4:77:ff:49:
                    6c:22:71:7f:19:73:5f:d9:a4:55:65:75:76:5e:02:64:
                    9e
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
            X509v3 Subject Key Identifier: 
                46:F6:91:0F:57:F6:A3:9A:69:56:C2:0B:EB:27:1D:0F:A5:59:58:28
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/ZeroSSLECCDVSSLCA2.crt
                OCSP - URI:http://ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
                                82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
                    Timestamp : Jul 16 16:17:56.539 2026 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:EA:95:E7:E4:97:0D:1D:4E:34:B0:4D:
                                FA:10:E3:90:9F:D5:59:54:33:13:0B:8A:93:26:CF:87:
                                0B:68:2D:FF:3E:02:21:00:CC:95:0E:66:05:17:F3:35:
                                CA:DE:C1:34:4F:CE:35:6A:50:F1:82:E4:67:82:3C:DD:
                                83:E7:E0:D7:EC:10:55:00
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:
                                E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A
                    Timestamp : Jul 16 16:17:56.487 2026 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D2:42:1E:D7:4C:11:19:41:83:B4:88:
                                9A:9C:6F:4C:C3:DC:6A:CF:06:6E:CB:72:22:DF:0A:80:
                                8D:CB:79:76:84:02:21:00:FF:DD:90:DB:3C:6E:3E:D1:
                                DB:0F:BF:7F:74:B4:FE:96:9F:01:14:D0:ED:C9:5A:36:
                                A0:CE:35:97:8F:0D:F1:00
            X509v3 Subject Alternative Name: 
                DNS:mt-mt.top, DNS:*.mt-mt.top
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:20:2d:a4:24:c4:12:f4:1b:33:48:ef:6d:09:05:25:7d:a9:77:3b:5f:fa:
        8b:05:2e:64:95:52:12:54:c4:83:82:1e:02:21:00:a8:af:5c:49:6e:e9:8b:5c:34:
        e5:74:0a:e7:e1:b9:13:92:d5:ae:1f:36:e0:e4:c9:0e:c8:04:d8:80:5c:d0:94

Vulnerabilities

3000 / tcp

2799677 | 2026-09-21T08:22:55

MoonTV

HTTP/1.1 200 OK
Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
link: </_next/static/media/e4af272ccee01ff0-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
X-Powered-By: Next.js
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Content-Type: text/html; charset=utf-8
Date: Mon, 21 Sep 2026 08:22:55 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked

3306 / tcp

-37930431 | 2026-09-10T22:42:26

MySQL:
  Protocol Version: 10
  Version: 5.5.53
  Capabilities: 63487
  Server Language: 33
  Server Status: 2
  Extended Server Capabilities: 32783
  Authentication Plugin: mysql_native_password

Vulnerabilities

4433 / tcp

-1255326477 | 2026-09-23T13:28:44

HTTP/1.1 404 Not Found
Content-Type: text/plain
Date: Wed, 23 Sep 2026 13:28:44 GMT
Content-Length: 18

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            82:82:c6:1b:1d:97:4a:ae:5e:b6:bd:19:54:7e:c6:87
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=AT, O=ZeroSSL GmbH, CN=ZeroSSL ECC DV SSL CA 2
        Validity
            Not Before: Jul 16 00:00:00 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: CN=mt-mt.top
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit field, 128 bit security level)
                pub:
                    04:c6:5f:d1:4b:2f:77:da:d4:0c:c3:ae:c0:7b:8f:53:
                    0c:a1:92:20:00:fe:63:cb:52:8d:58:69:9d:de:f7:44:
                    60:19:34:0e:4c:77:9e:00:a1:49:80:c6:a4:77:ff:49:
                    6c:22:71:7f:19:73:5f:d9:a4:55:65:75:76:5e:02:64:
                    9e
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
            X509v3 Subject Key Identifier: 
                46:F6:91:0F:57:F6:A3:9A:69:56:C2:0B:EB:27:1D:0F:A5:59:58:28
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/ZeroSSLECCDVSSLCA2.crt
                OCSP - URI:http://ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
                                82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
                    Timestamp : Jul 16 16:17:56.539 2026 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:EA:95:E7:E4:97:0D:1D:4E:34:B0:4D:
                                FA:10:E3:90:9F:D5:59:54:33:13:0B:8A:93:26:CF:87:
                                0B:68:2D:FF:3E:02:21:00:CC:95:0E:66:05:17:F3:35:
                                CA:DE:C1:34:4F:CE:35:6A:50:F1:82:E4:67:82:3C:DD:
                                83:E7:E0:D7:EC:10:55:00
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:
                                E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A
                    Timestamp : Jul 16 16:17:56.487 2026 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D2:42:1E:D7:4C:11:19:41:83:B4:88:
                                9A:9C:6F:4C:C3:DC:6A:CF:06:6E:CB:72:22:DF:0A:80:
                                8D:CB:79:76:84:02:21:00:FF:DD:90:DB:3C:6E:3E:D1:
                                DB:0F:BF:7F:74:B4:FE:96:9F:01:14:D0:ED:C9:5A:36:
                                A0:CE:35:97:8F:0D:F1:00
            X509v3 Subject Alternative Name: 
                DNS:mt-mt.top, DNS:*.mt-mt.top
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:20:2d:a4:24:c4:12:f4:1b:33:48:ef:6d:09:05:25:7d:a9:77:3b:5f:fa:
        8b:05:2e:64:95:52:12:54:c4:83:82:1e:02:21:00:a8:af:5c:49:6e:e9:8b:5c:34:
        e5:74:0a:e7:e1:b9:13:92:d5:ae:1f:36:e0:e4:c9:0e:c8:04:d8:80:5c:d0:94

5000 / tcp

0 | 2026-09-30T19:18:17

HTTP/1.1 200 OK
Cache-Control: no-cache
Date: Wed, 30 Sep 2026 19:18:17 GMT
Content-Length: 0


Docker Registry HTTP API:
  Repositories:
    axmedhosny/sms-dashboard
    capcom6/sms-gateway
    casbin/casdoor
    deluan/navidrome
    halohub/halo-pro
    lanol/filecodebox
    library/alpine
    library/golang
    library/mysql
    library/node
    library/postgres
    library/redis
    linuxserver/qbittorrent
    openlistteam/openlist
    ossrs/srs
    rustdesk/rustdesk-server-s6
    snowdreamtech/frpc
    zlmediakit/zlmediakit

5001 / tcp

0 | 2026-09-21T04:24:18

HTTP/1.1 200 OK
Cache-Control: no-cache
Date: Mon, 21 Sep 2026 04:24:18 GMT
Content-Length: 0


Docker Registry HTTP API:
  Repositories:
    snowdreamtech/frpc

6379 / tcp

41341329 | 2026-09-23T21:52:14

ok
# Keys

# Connected Clients
ok

7878 / tcp

-1255326477 | 2026-09-27T13:37:46

HTTP/1.1 404 Not Found
Content-Type: text/plain
Date: Sun, 27 Sep 2026 13:37:46 GMT
Content-Length: 18

8000 / tcp

-1116242651 | 2026-10-02T10:57:53

Casdoor

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 3915
Content-Type: text/html; charset=utf-8
Last-Modified: Tue, 29 Sep 2026 17:31:48 GMT
Server: beegoServer:2.0.0
Set-Cookie: casdoor_session_id=cdc11c2e3f9ce94f56aafafd72bec110; Path=/; Expires=Sun, 01 Nov 2026 10:57:52 GMT; Max-Age=2592000; HttpOnly
Set-Cookie: jsonWebConfig={"showGithubCorner":false,"forceLanguage":"","defaultLanguage":"en","isDemoMode":false,"staticBaseUrl":"https://cdn.casbin.org","defaultApplication":"app-built-in","maxItemsForFlatMenu":7}; Path=/
Date: Fri, 02 Oct 2026 10:57:52 GMT

8080 / tcp

1385665762 | 2026-09-10T04:22:06

HTTP/1.1 200 OK
Content-Md5: JqgTCBWhosvNHQiGKogf
Content-Type: text/html; charset=utf-8
Ohc-Cache-Hit: yIcus
Server: JSP3/2.0.14
Set-Cookie: session=21cb162c30c749cfafcd2513ff0ad631; Expires=Fri, 11 Sep 2026 04:22:05 GMT; HttpOnly
Timing-Allow-Origin: *
Date: Thu, 10 Sep 2026 04:22:05 GMT
Transfer-Encoding: chunked

8081 / tcp

798751045 | 2026-09-15T18:21:20

HTTP/1.1 200 OK
Content-Md5: ZQObOBEGeuLYFpZePaLe
Content-Type: text/html; charset=utf-8
Ohc-Cache-Hit: nmXZv
Server: JSP3/2.0.14
Set-Cookie: session=d4fd4482b3c149af954da0563faae739; Expires=Wed, 16 Sep 2026 18:21:19 GMT; HttpOnly
Timing-Allow-Origin: *
Date: Tue, 15 Sep 2026 18:21:19 GMT
Transfer-Encoding: chunked

8085 / tcp

335330650 | 2026-09-30T08:09:12

404 Not Found

HTTP/1.1 404 NOT FOUND
Server: Werkzeug/3.1.8 Python/3.11.2
Date: Wed, 30 Sep 2026 08:09:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 207
Connection: close

Vulnerabilities

8090 / tcp

-1326156617 | 2026-09-16T09:08:01

梦天mt~

HTTP/1.1 200 OK
transfer-encoding: chunked
Content-Type: text/html
Content-Language: zh-CN
Last-Modified: Wed, 16 Sep 2026 09:08:00 GMT
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
Cache-Control: max-age=3, s-maxage=120, must-revalidate
X-Halo-Cache-At: Wed, 16 Sep 2026 09:08:00 GMT
set-cookie: language=zh-CN; Path=/; SameSite=Lax
set-cookie: XSRF-TOKEN=4a3c5334-21d4-4f1f-bd6a-e00f202ae4f6; Path=/; HTTPOnly

9000 / tcp

-887001659 | 2026-10-02T13:15:19

Nginx UI

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 1566
Content-Type: text/html; charset=utf-8
Request-Id: 0ee27041-05c3-44b2-8db6-2835db8f2641
Set-Cookie: _nginx_ui_secure_session=6aad0a6dbf751a81e27c70e8e9b80dd3; Path=/; HttpOnly; SameSite=Lax
Date: Fri, 02 Oct 2026 13:15:19 GMT

9100 / tcp

-653476923 | 2026-09-20T05:37:12

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Sun, 20 Sep 2026 05:37:12 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

Vulnerabilities

9200 / tcp

853372109 | 2026-09-17T17:06:27

HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
Set-Cookie: session=d618aa05a9174ab28dc2560504d9c1cb; Expires=Fri, 18 Sep 2026 17:06:27 GMT; HttpOnly
Date: Thu, 17 Sep 2026 17:06:27 GMT
Content-Length: 369

9201 / tcp

2052283517 | 2026-09-21T05:37:10

OpenWrt - LuCI

HTTP/1.1 200 OK
Content-Md5: jyjbsuWnikfTWLYOVoId
Content-Type: text/html; charset=utf-8
Ohc-Cache-Hit: gTSwb
Server: JSP3/2.0.14
Set-Cookie: session=22db1dab02fc42c087e1172164a8e424; Expires=Tue, 22 Sep 2026 05:37:10 GMT; HttpOnly
Timing-Allow-Origin: *
Date: Mon, 21 Sep 2026 05:37:10 GMT
Transfer-Encoding: chunked

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

Show all

Last Seen: 2026-10-02

Tags:

GeneralInformation

WebTechnologies

OpenPorts

23 / tcp -931697787 | 2026-10-02T00:51:55

80 / tcp 1637199859 | 2026-09-22T00:52:58

Hashes

nginx1.22.1

443 / tcp 1827144056 | 2026-09-27T21:17:09

Hashes

nginx1.22.1

3000 / tcp 2799677 | 2026-09-21T08:22:55

Hashes

3306 / tcp -37930431 | 2026-09-10T22:42:26

MySQL5.5.53

4433 / tcp -1255326477 | 2026-09-23T13:28:44

Hashes

5000 / tcp 0 | 2026-09-30T19:18:17

Hashes

Docker Registry HTTP API

5001 / tcp 0 | 2026-09-21T04:24:18

Hashes

Docker Registry HTTP API

6379 / tcp 41341329 | 2026-09-23T21:52:14

Redis key-value store

7878 / tcp -1255326477 | 2026-09-27T13:37:46

Hashes

8000 / tcp -1116242651 | 2026-10-02T10:57:53

Hashes

8080 / tcp 1385665762 | 2026-09-10T04:22:06

Hashes

8081 / tcp 798751045 | 2026-09-15T18:21:20

Hashes

8085 / tcp 335330650 | 2026-09-30T08:09:12

Hashes

8090 / tcp -1326156617 | 2026-09-16T09:08:01

Hashes

9000 / tcp -887001659 | 2026-10-02T13:15:19

Hashes

9100 / tcp -653476923 | 2026-09-20T05:37:12

nginx1.22.1

9200 / tcp 853372109 | 2026-09-17T17:06:27

Hashes

9201 / tcp 2052283517 | 2026-09-21T05:37:10

Hashes

Vulnerabilities All ports Port 80 Port 443 Port 3306 Port 8085 Port 9100 Latest CVSS

23 / tcp

-931697787 | 2026-10-02T00:51:55

80 / tcp

1637199859 | 2026-09-22T00:52:58

443 / tcp

1827144056 | 2026-09-27T21:17:09

3000 / tcp

2799677 | 2026-09-21T08:22:55

3306 / tcp

-37930431 | 2026-09-10T22:42:26

4433 / tcp

-1255326477 | 2026-09-23T13:28:44

5000 / tcp

0 | 2026-09-30T19:18:17

5001 / tcp

0 | 2026-09-21T04:24:18

6379 / tcp

41341329 | 2026-09-23T21:52:14

7878 / tcp

-1255326477 | 2026-09-27T13:37:46

8000 / tcp

-1116242651 | 2026-10-02T10:57:53

8080 / tcp

1385665762 | 2026-09-10T04:22:06

8081 / tcp

798751045 | 2026-09-15T18:21:20

8085 / tcp

335330650 | 2026-09-30T08:09:12

8090 / tcp

-1326156617 | 2026-09-16T09:08:01

9000 / tcp

-887001659 | 2026-10-02T13:15:19

9100 / tcp

-653476923 | 2026-09-20T05:37:12

9200 / tcp

853372109 | 2026-09-17T17:06:27

9201 / tcp

2052283517 | 2026-09-21T05:37:10

Vulnerabilities