GeneralInformation

Hostnames	m.yzxrmyy.com
Domains	yzxrmyy.com
Country	China
City	Chenzhou
Organization	CHINANET-HN Chenzhou node network
ISP	CHINANET-BACKBONE
ASN	AS4134
Operating System	Windows

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2021-3618

5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443 8086

2132879492 | 2024-05-14T11:57:08.765367

80 / tcp

HTTP/1.1 404 
Content-Type: text/html;charset=utf-8
Content-Language: en
Content-Length: 1074
Date: Tue, 14 May 2024 11:56:47 GMT

1896488151 | 2024-05-09T23:24:13.533112

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 09 May 2024 23:23:56 GMT
Content-Type: text/html
Content-Length: 830
Last-Modified: Tue, 16 Jan 2024 02:59:38 GMT
Connection: keep-alive
ETag: "65a5f11a-33e"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a5:f5:a0:dd:e2:61:3c:51:f2:66:2e:c3:b3:c5:ce:5f
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia RSA DV TLS CA G2
        Validity
            Not Before: Apr 20 00:00:00 2023 GMT
            Not After : May 19 23:59:59 2024 GMT
        Subject: CN=m.yzxrmyy.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:23:29:09:ae:c8:66:86:16:82:f7:4d:db:
                    58:1c:94:72:62:91:9c:53:25:28:17:47:15:ad:bc:
                    76:0a:d9:e5:5f:7f:00:79:b6:c7:69:67:b5:79:71:
                    28:1d:4d:bd:5c:27:48:73:6d:c6:a7:17:03:20:91:
                    69:38:b1:a6:ab:19:b3:a3:7e:1a:86:09:df:64:28:
                    42:32:b5:4c:c9:63:17:28:e2:b1:fa:81:c9:66:99:
                    7d:a2:0b:a1:75:0c:f7:3c:55:25:30:e7:d7:ae:58:
                    7a:97:0e:d9:43:f1:db:66:b9:8f:d7:5d:15:13:3f:
                    4b:0b:3d:87:21:03:ad:95:65:38:1c:f8:b5:ad:99:
                    b0:51:08:db:a5:8b:58:18:e6:00:f2:8c:2e:e1:2c:
                    ff:d8:ff:c6:66:76:b4:09:c8:b9:34:30:93:28:8b:
                    b4:0f:a4:1f:a9:53:34:c8:64:83:2c:2e:d7:e3:60:
                    ee:61:dd:09:33:60:57:02:2c:af:ed:a8:17:0a:1a:
                    2b:5c:86:72:07:00:24:42:9b:fb:9e:6c:a3:2d:b0:
                    93:d2:d2:cd:0c:61:34:42:c2:66:71:0d:62:3a:5e:
                    6b:d0:4f:cc:d9:d8:32:02:3f:3a:0e:45:0a:97:fe:
                    ea:12:ce:81:2c:0f:d7:0e:3d:e4:53:01:ef:69:5e:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                5F:3A:7C:11:10:7E:0C:67:71:61:DC:8B:A3:B5:00:03:67:F5:57:1C
            X509v3 Subject Key Identifier: 
                B1:A5:59:03:26:98:59:20:87:11:2B:A1:13:7F:EC:C7:1A:07:DA:BA
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.49
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.trust-provider.cn/TrustAsiaRSADVTLSCAG2.crt
                OCSP - URI:http://ocsp.trust-provider.cn
            X509v3 Subject Alternative Name: 
                DNS:m.yzxrmyy.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Apr 20 02:07:21.125 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:A9:09:93:F5:33:DE:29:CC:B5:C1:85:
                                0F:03:2F:2F:D4:F5:C6:8C:54:24:E7:80:29:8F:2E:DF:
                                BB:AC:1E:B7:59:02:21:00:EF:2A:B2:A0:8C:DB:31:82:
                                A4:9E:04:4B:B6:F7:E8:A7:6D:3B:C6:67:7A:21:0B:4F:
                                F8:7B:B5:7D:07:B2:BA:CB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Apr 20 02:07:21.221 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3A:36:77:58:29:DE:98:57:B3:1D:E5:80:
                                6E:54:83:36:24:F3:36:F3:C0:8F:CC:4B:78:72:9E:42:
                                C4:88:E6:50:02:20:76:30:DE:D9:D0:FD:5B:C3:FF:C7:
                                E7:6D:53:AF:DE:8E:20:E1:8E:9C:B5:00:8D:6D:84:AD:
                                A5:57:83:70:48:FE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Apr 20 02:07:21.249 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:85:40:A3:9C:A7:C1:6D:E7:2B:7B:01:
                                C1:07:AC:37:41:2F:CA:64:E2:5A:45:55:85:83:49:F3:
                                91:EF:0D:6B:60:02:21:00:AC:79:96:03:6D:11:3B:10:
                                92:27:F8:75:18:A1:6C:F7:82:2A:39:99:9C:42:31:54:
                                D0:90:99:D4:4B:D2:8F:FD
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        a2:52:73:83:f0:aa:1b:20:9d:bd:72:8c:45:25:cc:f7:3d:23:
        4c:78:cb:97:06:20:e3:2f:ab:7b:d1:51:b6:6e:9e:dc:ff:1a:
        01:b5:02:5e:ce:5a:93:3a:91:c0:59:1e:49:e2:70:a7:cf:2a:
        ca:b4:df:4f:77:6d:de:3f:2a:d8:46:df:5e:a7:33:0c:42:78:
        42:c8:be:18:ea:26:57:a3:de:16:d6:05:8a:77:fb:05:c2:9d:
        d5:05:f0:50:1d:9a:d4:64:66:92:13:69:2e:2a:3a:e8:21:63:
        54:73:24:73:73:cf:ce:53:7c:e2:b0:43:22:7f:ea:0a:d1:07:
        6f:0e:53:55:45:21:ce:6e:f7:88:f5:3e:a3:80:7e:ca:42:f4:
        05:00:bb:7c:24:51:37:92:66:76:4b:e0:18:44:82:39:e3:9e:
        4a:be:e9:2d:95:d3:dc:25:2e:bd:fa:76:45:77:8c:cb:82:ac:
        90:16:ef:ea:66:02:02:8c:f1:77:d5:54:94:a5:0f:98:72:c4:
        b3:39:f5:74:31:97:6a:d4:3a:38:30:5e:10:5d:ab:3c:ac:61:
        73:cb:1e:aa:6c:47:0a:da:ea:2f:a4:8e:0c:4e:17:ac:ed:b6:
        94:44:89:1f:4a:d6:dd:ff:a4:dd:80:32:18:7e:94:ed:3f:5c:
        04:87:71:e7:20:30:a7:b2:b8:1d:34:ef:4c:51:8f:cc:78:8b:
        ad:c1:0d:fb:59:e4:cd:e6:39:6c:9f:52:9e:08:0c:5b:ee:1e:
        86:78:66:ba:32:e1:59:53:4b:2e:87:7e:f1:26:b4:bf:af:50:
        1e:38:18:29:cb:d6:07:59:cc:fc:6e:21:b2:a5:a4:c1:e8:f5:
        ae:17:ee:06:8c:4c:b4:51:28:63:20:2e:5f:c9:9e:6b:b8:bb:
        70:ec:1d:02:de:30:42:07:02:76:20:1c:a5:5d:5b:66:a6:5f:
        3e:92:8c:ac:99:bc:f9:00:50:2e:d4:5a:34:4c:2b:ed:83:4f:
        f4:38:fe:3d:c6:88

-1104512441 | 2024-05-17T04:31:09.874388

8086 / tcp

HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Fri, 17 May 2024 04:31:09 GMT

218.76.149.232

Last Seen: 2024-05-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

2132879492 | 2024-05-14T11:57:08.765367
80 / tcp

1896488151 | 2024-05-09T23:24:13.533112
443 / tcp

nginx1.20.2

-1104512441 | 2024-05-17T04:31:09.874388
8086 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

218.76.149.232

Last Seen: 2024-05-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

2132879492 | 2024-05-14T11:57:08.765367 80 / tcp

1896488151 | 2024-05-09T23:24:13.533112 443 / tcp

nginx1.20.2

-1104512441 | 2024-05-17T04:31:09.874388 8086 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

2132879492 | 2024-05-14T11:57:08.765367
80 / tcp

1896488151 | 2024-05-09T23:24:13.533112
443 / tcp

-1104512441 | 2024-05-17T04:31:09.874388
8086 / tcp