GeneralInformation

Hostnames

20a.top

Domains

20a.top

Country

China

City

Nanjing

Organization

Tencent cloud computing (Beijing) Co., Ltd.

ISP

Shenzhen Tencent Computer Systems Company Limited

ASN

AS45090

OpenPorts

80 443 5432 6379 27017

80 / tcp

-85749389 | 2025-04-12T21:35:48.071989

Hashes

hash

-57279499

http.dom_hash

1239617585

http.html_hash

-85749389

http.server_hash

-1340961475

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 12 Apr 2025 21:35:47 GMT
Content-Type: text/html
Content-Length: 138
Last-Modified: Thu, 12 Oct 2023 12:37:50 GMT
Connection: keep-alive
ETag: "6527e89e-8a"
Accept-Ranges: bytes

443 / tcp

-514999009 | 2025-04-05T00:54:55.017414

Hashes

hash

294420000

http.dom_hash

-1523515301

http.favicon.hash

74170179

http.html_hash

-514999009

http.server_hash

-1340961475

http.title_hash

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Apr 2025 00:54:54 GMT
Content-Type: text/html
Content-Length: 85792
Last-Modified: Thu, 12 Oct 2023 13:26:55 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "6527f41f-14f20"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a1:ac:35:69:34:de:fa:5f:83:d5:95
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G4
        Validity
            Not Before: Oct 11 03:14:00 2023 GMT
            Not After : Nov 11 03:13:59 2024 GMT
        Subject: CN=*.20a.top
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:9b:f3:6f:7d:69:13:2a:4a:ad:59:6d:46:
                    db:16:a4:21:8c:50:13:e5:25:fe:22:72:91:3b:46:
                    a8:2d:59:9d:1e:d2:a3:f0:11:78:14:74:19:32:ab:
                    6e:a6:b8:e8:fc:79:67:42:1e:b1:b7:01:09:be:89:
                    d8:67:04:5e:b3:21:ac:f6:7f:cb:e3:82:a4:38:a0:
                    16:52:90:3e:42:4c:ad:54:50:0a:84:41:0d:18:b9:
                    25:cb:e9:4f:86:e6:80:ee:94:64:0a:bc:d8:4d:01:
                    15:39:f9:32:6a:c4:3d:89:3e:60:73:f3:3c:3c:1f:
                    12:1b:93:f8:db:a9:63:f2:f4:1a:95:35:da:fe:88:
                    c3:9d:55:37:63:57:a1:b4:91:30:b9:07:a6:b7:8d:
                    82:e3:bc:12:86:4e:13:3c:96:60:83:6e:b0:88:66:
                    cc:b0:2e:e4:7d:fe:96:63:26:ce:a4:e7:64:e1:96:
                    9d:75:61:27:d4:e0:af:ef:79:1c:b3:8f:61:f8:25:
                    81:50:9f:3b:c5:1c:e8:12:4b:78:42:b9:b1:cf:de:
                    87:f8:41:5e:d7:9f:22:25:2e:e8:36:99:b7:c5:36:
                    7a:3d:c4:55:16:64:50:b7:a9:34:68:f3:fb:61:17:
                    9c:03:a8:c8:1f:7c:8c:36:d7:24:70:b0:ca:8c:3f:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/alphasslcasha256g4.crt
                OCSP - URI:http://ocsp.globalsign.com/alphasslcasha256g4
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.4146.10.1.3
                  CPS: https://www.globalsign.com/repository/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/alphasslcasha256g4.crl
            X509v3 Subject Alternative Name: 
                DNS:*.20a.top, DNS:20a.top
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                4F:CB:AC:A8:C2:EF:AB:DD:83:6F:6B:BF:CE:98:3D:5C:58:25:76:15
            X509v3 Subject Key Identifier: 
                CF:2B:0D:43:F2:28:D2:E5:76:B2:21:88:9C:9C:4B:98:8E:1F:08:AD
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Oct 11 03:14:05.867 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A0:AD:19:F9:8C:AB:45:18:D2:4D:F8:
                                46:46:9F:FA:30:F0:EE:C8:5E:3C:0F:AF:F9:03:37:D1:
                                17:39:6A:60:BF:02:20:4F:7A:7A:4F:C8:90:A2:B8:D1:
                                FD:E2:3B:5D:02:F9:19:BB:28:E0:85:02:80:C3:BC:27:
                                7C:75:FD:EE:E3:C5:B5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Oct 11 03:14:06.124 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:14:36:11:B8:F8:05:AD:58:DB:4C:5F:E3:
                                B4:47:10:0D:C4:C6:37:9F:F6:ED:B0:EC:83:9C:8C:53:
                                50:3A:81:DA:02:21:00:B3:5A:2A:37:FA:F9:E9:32:1B:
                                84:78:D8:0E:4F:C5:33:8B:45:D9:F7:4F:BE:7E:49:2E:
                                68:E8:D2:1A:02:CA:03
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Oct 11 03:14:05.403 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D6:56:97:89:15:30:97:A3:51:6C:0E:
                                44:A8:97:41:7D:77:98:2A:A2:BF:B3:D5:51:EF:96:24:
                                AE:5F:F3:9C:8F:02:20:03:8F:5B:77:9A:9D:AA:E9:7E:
                                CB:D5:78:A2:1B:0B:E1:09:00:E7:AF:41:BB:A6:1F:38:
                                10:7E:AB:6B:6E:39:7F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        64:08:81:eb:b9:95:e2:c9:bb:88:34:c3:bd:82:90:b4:a5:9b:
        76:53:ac:75:19:6c:85:be:b6:f1:74:bb:2e:94:1a:ee:b8:e4:
        c2:e9:b4:da:2c:04:12:5f:b9:6f:a0:df:5e:73:59:de:fb:eb:
        5a:30:29:eb:92:20:9f:f1:df:cf:ef:5f:00:89:5f:e8:3a:86:
        dc:65:97:6e:39:10:79:41:42:1e:5f:8e:b7:75:23:b2:bf:3e:
        39:5f:ae:ec:0f:c9:ae:7c:d7:3a:97:be:26:fc:38:c6:15:6f:
        01:9f:5a:c8:40:9a:0f:c3:6d:a0:d1:96:b6:c1:5d:6c:1a:92:
        fd:89:3a:f0:57:df:5c:8a:fe:f4:da:93:5f:07:fd:28:70:9b:
        6e:44:80:d2:08:dc:89:e5:a3:ea:4c:91:c9:0f:f7:15:ba:9c:
        32:a3:37:95:13:29:0e:d3:e7:41:d6:87:e4:a5:f2:45:d3:cf:
        69:71:ea:c9:a9:be:6d:75:1b:c2:0c:61:3b:3c:68:be:28:1f:
        e0:da:46:64:32:73:5b:be:f9:f3:7d:2f:3c:ee:a7:87:24:dd:
        12:c5:79:09:3b:ca:ef:e6:8d:c2:63:31:2d:a1:45:d3:5d:84:
        3d:cb:4b:ae:11:ac:20:f3:12:01:b1:94:7b:25:d7:10:16:b3:
        8a:30:f5:fd

6379 / tcp

-1927723706 | 2025-04-16T05:56:20.970645

-NOAUTH Authentication required.

27017 / tcp

1064426816 | 2025-03-29T20:34:58.562352

MongoDB Server Information
Authentication partially enabled
{
    "storageEngines": [
        "devnull", 
        "ephemeralForTest", 
        "mmapv1", 
        "wiredTiger"
    ], 
    "buildEnvironment": {
        "distarch": "x86_64", 
        "cc": "/opt/mongodbtoolchain/v2/bin/gcc: gcc (GCC) 5.4.0", 
        "cxxflags": "-Woverloaded-virtual -Wno-maybe-uninitialized -std=c++14", 
        "linkflags": "-pthread -Wl,-z,now -rdynamic -Wl,--fatal-warnings -fstack-protector-strong -fuse-ld=gold -Wl,--build-id -Wl,--hash-style=gnu -Wl,-z,noexecstack -Wl,--warn-execstack -Wl,-z,relro", 
        "ccflags": "-fno-omit-frame-pointer -fno-strict-aliasing -ggdb -pthread -Wall -Wsign-compare -Wno-unknown-pragmas -Winvalid-pch -Werror -O2 -Wno-unused-local-typedefs -Wno-unused-function -Wno-deprecated-declarations -Wno-unused-but-set-variable -Wno-missing-braces -fstack-protector-strong -fno-builtin-memcmp", 
        "target_arch": "x86_64", 
        "distmod": "", 
        "target_os": "linux", 
        "cxx": "/opt/mongodbtoolchain/v2/bin/g++: g++ (GCC) 5.4.0"
    }, 
    "ok": 1.0, 
    "sysInfo": "deprecated", 
    "modules": [], 
    "openssl": {
        "compiled": "disabled", 
        "running": "disabled"
    }, 
    "javascriptEngine": "mozjs", 
    "version": "3.6.2", 
    "allocator": "tcmalloc", 
    "versionArray": [
        3, 
        6, 
        2, 
        0
    ], 
    "debug": false, 
    "maxBsonObjectSize": 16777216, 
    "bits": 64, 
    "gitVersion": "489d177dbd0f0420a8ca04d39fd78d0a2c539420"
}

Vulnerabilities

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2021(2)

CVE-2021-32036

5.4An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28

CVE-2021-20333

5.3Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.10.

2020(3)

CVE-2020-7929

6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20.

CVE-2020-7928

6.5A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20.

CVE-2020-7921

4.6 Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credentials to bypass IP whitelisting protection mechanisms following administrative action. This issue affects MongoDB Server v4.2 versions prior to 4.2.3; MongoDB Server v4.0 versions prior to 4.0.15; MongoDB Server v4.3 versions prior to 4.3.3and MongoDB Server v3.6 versions prior to 3.6.18.

2019(6)

CVE-2019-20925

7.5An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.

CVE-2019-2393

6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15.

CVE-2019-2392

6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20.

CVE-2019-2390

8.2 An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server to run attacker defined code as the user running the utility. This issue MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14 and MongoDB Server v3.4 prior to 3.4.22.

CVE-2019-2389

5.3Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22.

CVE-2019-2386

7.1After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones. This issue affects MongoDB Server v4.0 versions prior to 4.0.9; MongoDB Server v3.6 versions prior to 3.6.13 and MongoDB Server v3.4 versions prior to 3.4.22. Workaround: After deleting one or more users, restart any nodes which may have had active user authorization sessions. Refrain from creating user accounts with the same name as previously deleted accounts.

2018(5)

CVE-2018-25004

4.9A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.

CVE-2018-20805

6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10.

CVE-2018-20804

6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

CVE-2018-20803

6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19.

CVE-2018-20802

6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3.

2014(1)

CVE-2014-8180

5.5MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.

1.13.13.177

Last Seen: 2025-04-24

Tags:

GeneralInformation

OpenPorts

80 / tcp

-85749389 | 2025-04-12T21:35:48.071989

Hashes

nginx

443 / tcp

-514999009 | 2025-04-05T00:54:55.017414

Hashes

nginx

6379 / tcp

-1927723706 | 2025-04-16T05:56:20.970645

Redis key-value store

27017 / tcp

1064426816 | 2025-03-29T20:34:58.562352

MongoDB3.6.2

Vulnerabilities

Products

Pricing

Contact Us

1.13.13.177

Last Seen: 2025-04-24

Tags:

GeneralInformation

OpenPorts

80 / tcp -85749389 | 2025-04-12T21:35:48.071989

Hashes

nginx

443 / tcp -514999009 | 2025-04-05T00:54:55.017414

Hashes

nginx

6379 / tcp -1927723706 | 2025-04-16T05:56:20.970645

Redis key-value store

27017 / tcp 1064426816 | 2025-03-29T20:34:58.562352

MongoDB3.6.2

Vulnerabilities All ports Port 27017 Latest CVSS

Products

Pricing

Contact Us

80 / tcp

-85749389 | 2025-04-12T21:35:48.071989

443 / tcp

-514999009 | 2025-04-05T00:54:55.017414

6379 / tcp

-1927723706 | 2025-04-16T05:56:20.970645

27017 / tcp

1064426816 | 2025-03-29T20:34:58.562352

Vulnerabilities