GeneralInformation

Country	China
City	Shenzhen
Organization	A LIFE TIME ELECTRONICS LIMITED COMPANY
ISP	CHINANET-BACKBONE
ASN	AS4134

WebTechnologies

JavaScript libraries

jQuery

Bootstrap Table

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-1938

7.5When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible.

OpenPorts

3389 5985 6003 6379 7003 8009 8085 8086 8089

-1640895123 | 2024-05-15T06:38:12.702972

3389 / tcp

Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x0f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
  OS: Windows 8.1/Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: WIN-VTMSS6J7I1B
  NetBIOS Domain Name: WIN-VTMSS6J7I1B
  NetBIOS Computer Name: WIN-VTMSS6J7I1B
  DNS Domain Name: WIN-VTMSS6J7I1B
  FQDN: WIN-VTMSS6J7I1B

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:72:17:23:56:bb:e5:a0:4b:9a:f1:88:02:6d:f1:2e
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=WIN-VTMSS6J7I1B
        Validity
            Not Before: Feb  7 01:39:54 2024 GMT
            Not After : Aug  8 01:39:54 2024 GMT
        Subject: CN=WIN-VTMSS6J7I1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e8:da:c5:7e:f9:c4:bc:5a:5b:8b:7e:2d:00:5a:
                    43:2c:23:25:a3:49:6e:46:f1:25:3f:61:9a:f9:e1:
                    07:27:f9:9f:9f:43:31:4d:ff:d5:ee:e9:24:eb:38:
                    c6:27:48:6a:96:4f:49:1d:ee:c1:d5:df:47:7b:8f:
                    13:18:8b:58:1f:7c:bf:b2:4f:00:69:6e:a2:01:2c:
                    83:e2:0b:c6:22:58:07:1d:5d:44:1a:ea:53:75:5c:
                    1d:e5:0c:b3:5e:b3:7b:92:81:1d:be:1f:22:5f:3f:
                    3a:fd:f7:54:f0:4e:86:91:f7:bc:e5:64:cf:87:9d:
                    20:22:47:01:6a:36:e3:d1:b7:37:d6:62:36:dd:2a:
                    f9:70:d1:f8:61:e0:df:aa:5a:89:71:2b:fc:01:16:
                    12:17:a7:32:1f:e7:91:23:53:52:81:ff:a2:59:9f:
                    53:e2:7d:1a:57:7d:cf:3e:cd:e7:7e:fd:7d:33:cd:
                    50:8e:27:ff:7e:f2:83:e2:f0:68:6a:1e:dc:3d:a0:
                    f6:a8:2c:0f:d5:0d:64:e3:bc:96:03:63:97:6c:7d:
                    12:42:e6:43:90:b0:54:5c:d1:ff:ba:1e:7b:94:62:
                    74:50:cd:41:ea:30:c5:c1:0c:f1:68:a0:93:61:85:
                    b4:c7:d1:4c:a1:b2:b4:f8:1b:c2:6f:49:1a:ff:45:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Key Usage: 
                Key Encipherment, Data Encipherment
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        66:56:e1:86:31:07:da:b2:95:a9:17:b4:c1:f1:65:70:02:38:
        7b:22:05:de:cc:f3:cf:e4:ff:3e:99:86:dd:73:71:57:0d:26:
        45:3e:91:35:73:03:70:ef:02:e5:19:0f:dc:86:f9:31:0f:11:
        b5:61:be:15:bc:9b:53:30:98:5f:e3:b0:ea:3f:6c:38:34:38:
        19:71:3e:70:4c:a8:50:78:45:da:11:61:25:ac:22:56:01:e7:
        a5:ad:7e:55:5d:af:d3:d0:ba:18:65:d0:bf:4f:6a:28:85:d3:
        f0:03:ee:5f:d4:a3:c4:a9:9f:e8:81:05:ae:1d:94:d2:a0:e8:
        22:31:9a:ec:c3:23:d4:28:e2:ea:c6:2e:47:0b:2e:02:45:72:
        71:08:42:65:c6:f3:67:43:d9:54:bf:81:38:e1:ae:69:3a:2d:
        69:2a:55:0f:6e:04:cb:cd:21:38:b7:ba:71:b4:a8:88:12:ca:
        8d:80:51:26:67:52:10:3f:d0:aa:e8:78:e1:2f:24:62:a4:58:
        60:3b:4d:1f:73:f7:7f:57:4a:9e:e8:ba:e4:f4:7a:8a:06:c3:
        0e:36:93:54:76:17:f1:19:6d:cf:82:ec:78:68:54:d7:73:2b:
        c7:b3:bb:cb:0e:bd:f3:0e:45:a0:df:64:06:17:69:8e:4a:6c:
        76:7d:07:01

1489525118 | 2024-05-12T00:36:16.010895

5985 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sun, 12 May 2024 00:36:16 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: WIN-VTMSS6J7I1B
  NetBIOS Domain Name: WIN-VTMSS6J7I1B
  NetBIOS Computer Name: WIN-VTMSS6J7I1B
  DNS Domain Name: WIN-VTMSS6J7I1B
  FQDN: WIN-VTMSS6J7I1B

-674769028 | 2024-04-30T22:53:34.909917

6003 / tcp

HTTP/1.1 400 Bad Request

-1927723706 | 2024-05-16T06:07:18.305885

6379 / tcp

-NOAUTH Authentication required.

-1829118760 | 2024-05-13T04:20:02.581113

8009 / tcp

<!doctype html><html lang="en"><head><title>HTTP Status 404 – Not Found</title><style type="text/css">h1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} h2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;} h3 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;} body {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} b {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} p {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;} a {color:black;} a.name {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 – Not Found</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> /asdadadas</p><p><b>Description</b> The origin server did not find a current representation for the target resource or is not willing to disclose that one exists.</p><hr class="line" /><h3>Apache Tomcat/8.5.16</h3></body></html>

1948507337 | 2024-05-12T17:17:00.563086

8085 / tcp

HTTP/1.1 200 
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Date: Sun, 12 May 2024 17:17:00 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441284505 (0x55e84199)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=zhang, ST=zhang, L=zhang, O=zhang, OU=zhang, CN=zhang
        Validity
            Not Before: Feb  1 10:24:45 2023 GMT
            Not After : May  2 10:24:45 2023 GMT
        Subject: C=zhang, ST=zhang, L=zhang, O=zhang, OU=zhang, CN=zhang
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:80:40:45:69:18:d6:da:80:58:3a:90:20:32:59:
                    16:a2:7b:9f:b0:74:b2:5c:1e:cd:97:21:bf:7a:7f:
                    bd:08:d6:b3:f5:4e:f3:ad:ac:19:b3:ae:09:8d:09:
                    a4:02:1c:ee:3f:a8:1a:4c:67:21:98:97:3e:0f:ac:
                    2d:5c:a9:ce:55:d5:b1:9a:a7:b6:5d:bc:a8:80:79:
                    50:3a:6a:c6:06:ae:98:ef:c2:26:14:72:aa:f0:40:
                    08:8b:00:e2:bd:a8:74:28:14:8c:71:6e:fa:c3:69:
                    3f:05:80:6d:d9:75:1e:c6:5b:a5:96:a9:b6:01:24:
                    fe:d9:b0:05:79:64:f9:f2:7c:7a:b0:8d:f5:36:73:
                    a5:a2:c9:17:e9:f1:de:0e:b0:1b:b6:88:5c:a9:0c:
                    78:f4:40:11:fd:63:93:78:ca:d9:04:1f:0d:03:66:
                    25:3c:ac:16:99:28:f5:9f:ff:cc:7a:4f:9f:0d:6b:
                    6a:e2:1a:c5:25:5d:14:35:0d:fe:14:cc:58:6e:59:
                    50:ec:47:a1:93:cf:40:13:eb:21:f6:42:52:1a:f7:
                    93:5c:c0:34:3a:9b:ad:4c:d8:f3:e7:9b:ba:e5:ee:
                    ef:fe:d1:95:b2:91:a7:9e:98:93:7b:10:31:33:a3:
                    fb:9f:90:4f:87:d2:a9:0e:ad:f9:41:f4:4a:8b:8b:
                    31:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D1:33:25:A2:04:E1:90:53:4E:B0:88:54:B1:46:FD:CC:AF:BE:2D:1C
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2f:33:84:a0:32:a8:b2:ef:12:78:8f:b7:90:16:ad:19:53:d5:
        db:a7:4b:79:93:a5:e4:99:cd:c0:ae:a7:6c:f0:0f:f3:42:69:
        c9:0c:0f:cf:6f:6f:6c:6d:68:86:67:e7:e0:0e:51:a4:d7:1b:
        6b:d8:89:92:ca:26:96:73:f7:19:ce:fe:ed:0e:6b:68:57:c2:
        5b:78:4d:67:79:bd:4f:bd:75:b2:3f:79:96:65:21:70:bf:4b:
        e2:e5:cd:9f:83:4f:a5:66:84:2e:27:df:71:e3:cd:90:5a:f1:
        1e:8b:49:23:2e:6b:c2:42:22:a1:93:80:82:31:b8:19:07:25:
        95:86:84:eb:af:79:38:fb:9a:02:68:b9:c7:f1:ff:af:98:a6:
        2d:a9:23:03:01:49:0e:18:3a:6f:0b:4a:33:a3:e7:6b:35:c4:
        52:45:f1:0d:27:9f:5c:f2:f7:08:39:6d:a4:32:e0:06:6b:8c:
        db:c4:8f:ef:a6:b8:2c:8c:b1:29:0a:b6:ac:0b:b9:2c:c5:5e:
        ce:0a:c1:bc:29:7f:18:7e:5f:7f:bd:5f:e8:84:96:25:bd:0a:
        80:95:df:d4:13:fb:dd:7b:98:6f:72:6a:a2:af:3b:2e:16:af:
        3c:f4:6b:bf:ea:e0:60:dd:6f:c7:f9:13:a7:0b:4f:99:2c:5d:
        ec:b6:7c:03

31162376 | 2024-05-12T06:42:05.503925

8086 / tcp

HTTP/1.1 200 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: text/html;charset=UTF-8
Content-Language: zh-CN
Transfer-Encoding: chunked
Date: Sun, 12 May 2024 06:42:04 GMT

11950924 | 2024-05-12T00:10:45.719135

8089 / tcp

HTTP/1.1 200 
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Date: Sun, 12 May 2024 00:10:45 GMT

2000



<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="UTF-8" />
        <title>Apache Tomcat/9.0.68</title>
        <link href="favicon.ico" rel="icon" type="image/x-icon" />
        <link href="tomcat.css" rel="stylesheet" type="text/css" />
    </head>

    <body>
        <div id="wrapper">
            <div id="navigation" class="curved container">
                <span id="nav-home"><a href="https://tomcat.apache.org/">Home</a></span>
                <span id="nav-hosts"><a href="/docs/">Documentation</a></span>
                <span id="nav-config"><a href="/docs/config/">Configuration</a></span>
                <span id="nav-examples"><a href="/examples/">Examples</a></span>
                <span id="nav-wiki"><a href="https://cwiki.apache.org/confluence/display/TOMCAT/">Wiki</a></span>
                <span id="nav-lists"><a href="https://tomcat.apache.org/lists.html">Mailing Lists</a></span>
                <span id="nav-help"><a href="https://tomcat.apache.org/findhelp.html">Find Help</a></span>
                <br class="separator" />
            </div>
            <div id="asf-box">
                <h1>Apache Tomcat/9.0.68</h1>
            </div>
            <div id="upper" class="curved container">
                <div id="congrats" class="curved

219.134.190.133

Last Seen: 2024-05-16

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1640895123 | 2024-05-15T06:38:12.702972
3389 / tcp

Remote Desktop Protocol

1489525118 | 2024-05-12T00:36:16.010895
5985 / tcp

WinRM

-674769028 | 2024-04-30T22:53:34.909917
6003 / tcp

-1927723706 | 2024-05-16T06:07:18.305885
6379 / tcp

Redis key-value store

-1829118760 | 2024-05-13T04:20:02.581113
8009 / tcp

Apache Tomcat8.5.16

1948507337 | 2024-05-12T17:17:00.563086
8085 / tcp

Apache Tomcat

31162376 | 2024-05-12T06:42:05.503925
8086 / tcp

11950924 | 2024-05-12T00:10:45.719135
8089 / tcp

Products

Pricing

Contact Us

219.134.190.133

Last Seen: 2024-05-16

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1640895123 | 2024-05-15T06:38:12.702972 3389 / tcp

Remote Desktop Protocol

1489525118 | 2024-05-12T00:36:16.010895 5985 / tcp

WinRM

-674769028 | 2024-04-30T22:53:34.909917 6003 / tcp

-1927723706 | 2024-05-16T06:07:18.305885 6379 / tcp

Redis key-value store

-1829118760 | 2024-05-13T04:20:02.581113 8009 / tcp

Apache Tomcat8.5.16

1948507337 | 2024-05-12T17:17:00.563086 8085 / tcp

Apache Tomcat

31162376 | 2024-05-12T06:42:05.503925 8086 / tcp

11950924 | 2024-05-12T00:10:45.719135 8089 / tcp

Products

Pricing

Contact Us

-1640895123 | 2024-05-15T06:38:12.702972
3389 / tcp

1489525118 | 2024-05-12T00:36:16.010895
5985 / tcp

-674769028 | 2024-04-30T22:53:34.909917
6003 / tcp

-1927723706 | 2024-05-16T06:07:18.305885
6379 / tcp

-1829118760 | 2024-05-13T04:20:02.581113
8009 / tcp

1948507337 | 2024-05-12T17:17:00.563086
8085 / tcp

31162376 | 2024-05-12T06:42:05.503925
8086 / tcp

11950924 | 2024-05-12T00:10:45.719135
8089 / tcp