GeneralInformation

Hostnames	yunhaiweb.com www.yunhaiweb.com
Domains	yunhaiweb.com
Cloud Provider	Tencent Cloud
Country	China
City	Shanghai
Organization	Tencent Cloud Computing (Beijing) Co., Ltd
ISP	Shenzhen Tencent Computer Systems Company Limited
ASN	AS45090
Operating System	Windows

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2014-4078

The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."

OpenPorts

80 443 3389

704525813 | 2024-04-16T17:36:26.135430

80 / tcp

HTTP/1.1 200 OK
Cache-Control: private
Transfer-Encoding: chunked
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 16 Apr 2024 17:36:25 GMT

704525813 | 2024-04-18T23:17:33.298316

443 / tcp

HTTP/1.1 200 OK
Cache-Control: private
Transfer-Encoding: chunked
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 23:17:32 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            88:42:17:13:61:84:b2:11:8f:84:a7:08:8e:c2:c7:df
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia RSA DV TLS CA G2
        Validity
            Not Before: May 23 00:00:00 2023 GMT
            Not After : May 22 23:59:59 2024 GMT
        Subject: CN=yunhaiweb.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:50:1d:73:06:66:59:9f:5f:ce:9f:ce:da:33:
                    20:75:9a:05:7a:71:93:2b:50:04:fc:a0:31:85:6a:
                    d9:63:c2:42:89:ef:f9:68:fa:54:7e:9e:19:8d:14:
                    93:d3:f1:eb:ca:7a:23:2e:c5:b6:98:7f:d1:a7:55:
                    4b:46:7c:d0:0f:f7:f3:31:8f:eb:cc:7c:4c:a1:ee:
                    22:f0:5f:d0:02:e8:e2:63:11:79:b9:93:b0:99:eb:
                    45:02:ba:b6:2e:b7:8b:45:cc:69:40:63:d0:1f:d2:
                    8f:07:c0:bf:eb:4c:15:9c:35:f3:e5:78:30:24:b2:
                    ae:19:b1:c2:9d:6b:d9:b7:7d:ad:6d:aa:19:a1:1a:
                    dc:34:27:eb:70:8b:97:55:0e:5c:c7:96:54:b9:2d:
                    45:66:0f:60:71:09:80:1c:f0:3b:af:8a:c1:59:e8:
                    1e:21:f1:e6:66:e6:7a:fb:7f:22:94:a1:03:ec:f5:
                    f0:8c:28:d5:ed:68:48:e6:4b:72:5c:c8:7b:50:e3:
                    d7:0b:2f:53:fe:f0:3f:aa:21:db:1e:25:83:82:3e:
                    81:15:3d:10:08:21:5f:9a:a1:90:70:18:af:f0:c5:
                    57:b5:67:60:58:a1:32:c4:ab:0c:78:37:be:9a:cf:
                    e9:4b:19:63:fb:8e:c1:ab:f1:64:9f:23:4b:cf:3e:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                5F:3A:7C:11:10:7E:0C:67:71:61:DC:8B:A3:B5:00:03:67:F5:57:1C
            X509v3 Subject Key Identifier: 
                37:6F:41:7C:87:1C:85:B6:2F:95:CE:A6:97:67:44:A3:72:5D:E9:19
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.49
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.trust-provider.cn/TrustAsiaRSADVTLSCAG2.crt
                OCSP - URI:http://ocsp.trust-provider.cn
            X509v3 Subject Alternative Name: 
                DNS:yunhaiweb.com, DNS:www.yunhaiweb.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : May 23 02:37:56.380 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B4:89:FA:30:77:49:3E:02:F2:C9:76:
                                9B:90:98:01:34:CE:F9:7C:84:89:F5:F6:E2:6C:AB:38:
                                E9:4A:AB:74:31:02:21:00:D7:05:34:A8:A1:74:60:A1:
                                EA:13:C9:0F:23:12:8C:ED:A5:F6:52:29:CA:01:6E:16:
                                0A:1E:BD:1C:29:89:F1:13
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : May 23 02:37:56.464 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E7:09:16:E3:99:A1:43:B8:B4:C7:91:
                                CD:94:18:89:62:24:9F:48:82:84:BB:71:71:AE:DC:28:
                                1C:32:15:96:BD:02:20:5B:A9:C9:1B:D4:41:32:2F:25:
                                43:CE:16:ED:7D:64:B5:F3:E0:9C:E2:F8:C0:7F:C5:C3:
                                CF:C7:AB:58:29:93:74
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : May 23 02:37:56.420 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F9:4E:2A:68:B9:CA:2C:38:7B:AE:B7:
                                66:6B:A5:3B:66:19:9D:8B:CC:B8:87:90:7D:E7:7F:38:
                                4D:DC:A7:28:C4:02:21:00:FC:92:FE:D2:C9:69:A6:28:
                                A2:2A:88:6F:B8:68:4C:15:B5:65:C1:4B:98:AE:16:0F:
                                CA:46:7E:84:FD:52:B4:AE
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        40:d5:98:76:51:4d:45:90:91:7e:98:4a:57:19:c4:15:03:6c:
        7a:67:a1:dc:f9:9f:26:c6:ba:d9:ea:c9:17:29:cf:63:85:79:
        c7:d7:2d:23:ec:38:b2:58:b8:1f:0a:a9:c6:93:bc:79:40:ef:
        13:d6:be:73:4a:6e:3f:1a:3f:51:e6:ef:f9:56:d6:bc:b5:4b:
        e0:90:74:59:08:8f:80:cd:13:8c:03:3c:57:c7:f5:ec:95:22:
        b7:7c:a6:bf:c5:74:c7:b6:fb:4e:c7:31:cb:ee:39:db:6b:ba:
        81:e1:6f:fb:3d:2b:a2:7c:71:c7:1c:c2:79:c4:3f:08:27:93:
        d7:46:95:23:8d:ca:b8:ed:a8:4c:df:0e:ff:24:aa:58:4a:f8:
        84:8f:43:c9:0b:d5:b9:3b:8b:8a:bb:eb:42:19:9a:f7:e2:0d:
        3f:73:2d:6f:f8:39:bb:ca:9b:76:f2:d4:b1:0f:79:fd:e0:4a:
        95:9d:33:50:97:9f:99:97:36:5d:8e:f9:2d:98:63:db:5a:68:
        ad:7e:2e:a6:c3:94:e5:06:58:c8:de:d3:fa:2e:04:fa:94:0d:
        f8:5f:d0:87:e4:ec:b6:43:2e:fe:ba:f7:47:a1:6a:96:dc:44:
        07:5a:8e:ab:4e:5e:e9:0a:b5:d9:39:51:9d:d5:9a:b5:ed:37:
        de:3a:30:9b:d0:46:a1:c7:57:41:8b:7a:3f:15:87:63:91:1c:
        31:2e:48:c6:e6:82:a6:47:62:a7:c5:1b:2b:34:eb:e0:a7:69:
        5e:d9:f8:09:0d:a2:6b:4b:ff:d8:d0:eb:ab:9d:6d:ec:3f:84:
        51:3b:0e:17:33:3d:b5:5b:4e:a1:d3:2c:08:aa:e3:d1:8d:48:
        ce:2e:65:b0:f1:33:85:8e:53:67:d4:72:b6:c1:45:f0:e5:84:
        3b:1b:1e:bd:23:b0:50:7e:78:03:85:a1:33:44:02:aa:ff:3e:
        09:c4:e3:49:17:3f:5c:14:ab:3c:34:69:3e:48:b6:2f:47:b6:
        d8:5c:79:8c:7b:e8

523368271 | 2024-04-18T14:51:37.127848

3389 / tcp

Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x0f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
  OS: Windows 8.1/Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: 172_17_0_11
  NetBIOS Domain Name: 172_17_0_11
  NetBIOS Computer Name: 172_17_0_11
  DNS Domain Name: 172_17_0_11
  FQDN: 172_17_0_11

Administrator
am Windows Server 2012R2

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0c:a8:cf:ce:cc:e0:82:41:86:b0:10:aa:ce:40:41
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=\x001\x007\x002\x00_\x001\x007\x00_\x000\x00_\x001\x001
        Validity
            Not Before: Dec 27 06:50:00 2023 GMT
            Not After : Jun 27 06:50:00 2024 GMT
        Subject: CN=\x001\x007\x002\x00_\x001\x007\x00_\x000\x00_\x001\x001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:47:52:36:ee:79:6e:6f:01:15:49:f0:e1:
                    c0:79:ca:b5:75:51:c3:7c:62:0c:6e:3d:ee:76:b6:
                    26:0a:af:e3:3b:55:89:02:37:37:cc:ac:bf:b6:a5:
                    84:1a:6f:1e:81:69:1c:f5:51:07:68:91:0e:53:43:
                    a5:df:5a:0a:dc:06:8f:83:de:3c:7b:58:64:ad:ec:
                    2b:ec:59:33:f4:d7:2d:f9:4c:42:24:e5:0c:f0:21:
                    59:66:61:8e:25:28:e6:70:95:90:a8:ae:37:03:81:
                    c2:b1:28:06:5b:90:80:5f:cd:ea:a0:61:da:9c:89:
                    a0:ae:35:fe:2e:63:ba:f0:f7:99:c3:70:7f:d5:3b:
                    9c:86:57:98:cb:15:d2:84:e7:e5:53:4a:04:36:3f:
                    2d:b3:f4:98:c1:31:51:39:d9:b2:63:56:71:bf:89:
                    ae:fa:a4:d0:a1:84:cc:ec:63:21:ee:b3:be:2a:b0:
                    91:34:3b:84:3c:97:14:69:fa:e4:5b:b8:70:52:d5:
                    02:77:c7:dc:66:34:47:62:bc:1e:0c:c0:2c:e1:55:
                    36:2a:fd:fa:e7:86:6d:72:9a:47:c6:09:23:f4:b8:
                    28:e9:2b:b3:b2:f0:f8:f9:92:ee:3a:57:b0:3b:f5:
                    70:f8:83:97:5e:c9:77:e9:6f:e2:48:c4:f5:b2:4f:
                    25:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Key Usage: 
                Key Encipherment, Data Encipherment
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        62:5a:46:06:d3:28:95:0e:3f:d4:e3:0e:e2:18:c9:cd:bb:19:
        57:b4:7a:64:82:33:83:94:ae:75:8d:0b:6c:de:44:e7:5e:8d:
        90:79:8f:06:fd:ae:a6:14:8c:aa:e8:ca:a3:cd:03:64:0a:22:
        50:34:ce:09:ce:39:cf:c7:26:60:6e:d1:cf:0f:40:3a:60:97:
        03:b3:32:7a:39:21:e4:62:2d:9b:bd:43:11:46:42:7c:ef:78:
        d0:28:53:41:e7:b9:9e:cc:ba:7b:55:71:f1:16:ae:4d:8e:34:
        97:be:33:c7:7c:66:50:61:4d:e5:20:88:e2:c9:91:1d:c5:49:
        54:63:c6:40:2e:74:4b:da:b6:df:4d:98:5d:6a:ab:f0:d4:1e:
        32:9d:0d:96:5a:8d:74:0b:41:ff:65:27:0d:0e:8d:3d:3e:f0:
        45:4e:6f:3b:7a:0c:ab:38:41:4f:3f:bd:ea:20:36:93:39:bb:
        01:37:a8:f5:4b:1e:ce:98:40:d1:ec:7d:ee:88:ce:8c:b1:a1:
        22:fc:6b:29:f6:95:45:27:9e:a2:c4:2e:a7:af:7b:96:f1:d0:
        e9:c0:20:86:42:69:24:b2:62:bb:2e:92:6f:0e:1e:c3:8c:86:
        6c:e7:75:32:88:ae:30:3b:ea:1d:56:12:93:ff:bd:77:4d:b1:
        65:25:08:d2

212.64.34.131

Last Seen: 2024-04-18

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

704525813 | 2024-04-16T17:36:26.135430
80 / tcp

Microsoft IIS httpd8.5

704525813 | 2024-04-18T23:17:33.298316
443 / tcp

Microsoft IIS httpd8.5

523368271 | 2024-04-18T14:51:37.127848
3389 / tcp

Remote Desktop Protocol

Products

Pricing

Contact Us

212.64.34.131

Last Seen: 2024-04-18

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

704525813 | 2024-04-16T17:36:26.135430 80 / tcp

Microsoft IIS httpd8.5

704525813 | 2024-04-18T23:17:33.298316 443 / tcp

Microsoft IIS httpd8.5

523368271 | 2024-04-18T14:51:37.127848 3389 / tcp

Remote Desktop Protocol

Products

Pricing

Contact Us

704525813 | 2024-04-16T17:36:26.135430
80 / tcp

704525813 | 2024-04-18T23:17:33.298316
443 / tcp

523368271 | 2024-04-18T14:51:37.127848
3389 / tcp