GeneralInformation

Hostnames	gitlab.qiawei.com
Domains	qiawei.com
Country	China
City	Beijing
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

WebTechnologies

Development

GitLab

Issue trackers

GitLab

JavaScript frameworks

Vue.js

Programming languages

Ruby

Web frameworks

Ruby on Rails

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 3306 8060 8888

22 / tcp

-436049496 | 2025-02-04T10:40:35.098014

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDFUgHMkLCApCrgiuW6UYriHFx80xamgvN8PAwjLis7O25f
cOWmTMf5iagnMINrt5o/fImoYEarbxBAwgVhlAekxE0sXGbhTACGWaxtDSdHIkCcs5Xl10+CbErh
w+U2roT/g5d4WoLcq+ph4t+nbeKaoclmasJKErElXcPPpljoeqkRuwm87jjdDofHpyPel2ZoitNd
/KdprOmroCX67fMJKkCwDOExdIq7yaK9mEOCFTaXX9SNVdKsVA3WnlRtmWsMY9xkg8gea0uJHuUA
eS1YoDCI6lL+Ck+axW3eC2zrLRHi5cITCnugW1JgcGQ90vJ8fAZ5daqxpWswp6ZWL5kl
Fingerprint: 42:f6:d2:8f:6f:52:be:62:0c:cb:b6:8f:dd:e7:38:d7

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	aes192-cbc
	aes256-cbc
	blowfish-cbc
	cast128-cbc
	3des-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

80 / tcp

-2100514759 | 2025-01-13T19:32:05.939063

Hashes

hash

-1630848008

http.dom_hash

1239617585

http.html_hash

-2100514759

http.server_hash

-1340961475

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 13 Jan 2025 19:32:05 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://gitlab.qiawei.com:443/

443 / tcp

2104318805 | 2025-01-30T22:30:54.897803

Hashes

hash

-2081986596

http.dom_hash

1669594031

http.favicon.hash

1278323681

http.html_hash

2104318805

http.robots_hash

2140114242

http.server_hash

-1340961475

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Jan 2025 22:30:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=0, private, must-revalidate
Etag: W/"2885615c3df53c2dd1d2c5de074699a0"
Permissions-Policy: interest-cohort=()
Set-Cookie: _gitlab_session=67882ec939e20947985e01810e4694f1; path=/; expires=Fri, 31 Jan 2025 00:30:54 GMT; secure; HttpOnly; SameSite=None
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: DENY
X-Gitlab-Feature-Category: authentication_and_authorization
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01JJWNDCEXWATSQXGXQPZXFJSB
X-Runtime: 0.074271
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
Referrer-Policy: strict-origin-when-cross-origin

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:44:cd:a3:d2:53:ce:05:8f:dc:48:00:3a:39:15:2f:83:a2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  1 05:30:27 2024 GMT
            Not After : Jun 30 05:30:26 2024 GMT
        Subject: CN=gitlab.qiawei.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:ae:84:d1:1d:f4:00:b3:cb:67:d6:7c:66:
                    4b:b5:7f:d8:d0:13:dd:0f:a7:bf:05:69:0a:a2:5e:
                    fd:6c:ff:79:d1:75:ef:4a:b3:06:16:73:5b:b4:34:
                    53:c4:f1:41:93:fd:d4:57:fd:48:c3:c8:d0:1d:8c:
                    1f:cf:a7:6a:22:75:69:ea:95:4c:06:c4:a1:0c:3b:
                    8c:0e:59:d6:be:15:b9:e2:73:06:92:9c:8a:97:19:
                    f6:0a:ce:e3:f6:80:8d:d6:14:04:63:6c:b3:4a:26:
                    03:db:d3:b6:26:58:a2:49:09:ec:72:78:6b:e3:91:
                    65:38:48:0c:e9:8a:49:76:1c:15:48:f2:68:fa:01:
                    41:f3:ac:7d:a4:74:25:2d:87:cc:5b:db:39:c8:2d:
                    07:ac:a8:9a:fd:7a:f4:ec:dd:0a:00:81:55:b2:ee:
                    3b:b1:37:7c:27:c9:af:79:59:37:6a:58:8e:bf:c2:
                    df:05:bc:de:7a:de:5a:29:ca:50:a0:34:fb:dc:cf:
                    df:58:30:9b:d8:ea:1f:a5:11:b5:cd:8e:bc:e6:24:
                    0e:52:90:f7:08:21:0b:61:3b:79:14:cc:81:6c:4c:
                    22:aa:5a:4b:06:27:39:39:64:d5:fb:0c:79:e9:f6:
                    18:fa:32:d7:f4:f6:1f:43:48:44:a5:15:5d:f1:fa:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                3B:7C:BE:5A:39:40:23:60:9A:99:80:90:8F:00:47:1C:49:C5:57:C1
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:gitlab.qiawei.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr  1 06:30:27.233 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E0:84:C6:80:CF:E8:1B:BB:F7:7E:F2:
                                71:3F:F3:AE:63:2E:45:45:2B:86:C7:A6:42:DD:93:E4:
                                04:67:DE:8C:D3:02:21:00:A0:69:B5:18:46:BD:A5:FE:
                                2A:C3:D2:2E:7F:D5:EC:63:09:9E:7F:F2:95:BE:38:A5:
                                F9:1F:EA:7F:C1:FB:DC:68
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
                                65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
                    Timestamp : Apr  1 06:30:27.285 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:38:7A:BF:90:3A:DE:FF:B8:A6:14:16:90:
                                60:E7:1B:07:B3:D6:21:88:B3:B5:C7:45:C0:91:90:8B:
                                1D:94:BD:33:02:21:00:D1:DC:57:2F:4B:DF:DD:6A:8F:
                                E4:2B:D2:58:C4:58:66:C8:9D:25:D6:C9:78:0F:A6:CF:
                                DE:72:8D:95:EB:18:7F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5e:ec:96:d6:14:44:c4:25:c8:df:c7:8e:52:27:7f:48:fb:4a:
        74:84:48:bd:ee:77:ab:1f:d6:7c:da:cb:4d:00:97:64:7d:cc:
        3a:76:04:09:bc:f0:b9:5f:1a:43:f5:73:56:ed:79:f4:47:ba:
        a0:60:ba:9c:58:8c:b8:dc:0a:70:52:d6:d1:fd:13:6c:ea:e0:
        7c:0f:bb:e0:91:6a:03:23:57:96:b1:d1:a8:83:8b:91:f8:3f:
        ae:03:56:8d:84:42:26:56:6a:80:c6:68:8e:32:fd:58:c7:6b:
        9a:4b:75:70:12:8f:2a:88:6e:00:7b:d1:48:ff:90:75:28:78:
        af:6c:3a:23:75:23:b2:b8:37:5c:9c:a7:56:75:08:3d:0e:d4:
        e8:e4:8f:b4:23:eb:87:61:56:42:05:66:ab:bf:d5:ac:fc:2c:
        71:5b:6f:a7:1f:7d:d2:75:3f:a8:a4:9e:71:8a:82:55:9a:69:
        00:fb:da:d2:21:40:0d:d1:45:5d:b7:cf:c5:2e:d5:64:a5:1d:
        63:0e:c3:4c:f9:56:40:35:70:ec:bf:36:30:70:bd:50:f0:de:
        5d:30:ec:ec:88:74:cb:19:07:c5:d8:74:78:83:6e:0f:ec:41:
        00:bc:1b:2d:20:3b:70:ea:80:4a:6e:6d:e1:a6:e9:61:f7:24:
        6b:58:5e:50

3306 / tcp

315117846 | 2025-02-04T22:07:46.452791

MySQL:
  Protocol Version: 10
  Version: 5.7.39-log
  Capabilities: 65535
  Server Language: 45
  Server Status: 2
  Extended Server Capabilities: 49663
  Authentication Plugin: mysql_native_password

8060 / tcp

-158149353 | 2025-02-04T19:35:16.858876

Hashes

hash

1172586330

http.dom_hash

1239617585

http.html_hash

-158149353

http.server_hash

-1786963686

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.18.0
Date: Tue, 04 Feb 2025 19:35:16 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

8888 / tcp

1737914932 | 2025-02-03T06:56:44.904162

Hashes

hash

124648587

http.dom_hash

-1301471963

http.html_hash

1737914932

http.server_hash

-1340961475

安全入口校验失败

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 725
Server: nginx
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Date: Mon, 03 Feb 2025 06:56:44 GMT

101.201.123.161

Last Seen: 2025-02-04

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

22 / tcp

-436049496 | 2025-02-04T10:40:35.098014

OpenSSH7.4

80 / tcp

-2100514759 | 2025-01-13T19:32:05.939063

Hashes

nginx

443 / tcp

2104318805 | 2025-01-30T22:30:54.897803

Hashes

GitLab Self-Managed

3306 / tcp

315117846 | 2025-02-04T22:07:46.452791

MySQL5.7.39-log

8060 / tcp

-158149353 | 2025-02-04T19:35:16.858876

Hashes

nginx1.18.0

8888 / tcp

1737914932 | 2025-02-03T06:56:44.904162

Hashes

nginx

Products

Pricing

Contact Us

101.201.123.161

Last Seen: 2025-02-04

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 22 Port 8060 Latest CVSS

OpenPorts

22 / tcp -436049496 | 2025-02-04T10:40:35.098014

OpenSSH7.4

80 / tcp -2100514759 | 2025-01-13T19:32:05.939063

Hashes

nginx

443 / tcp 2104318805 | 2025-01-30T22:30:54.897803

Hashes

GitLab Self-Managed

3306 / tcp 315117846 | 2025-02-04T22:07:46.452791

MySQL5.7.39-log

8060 / tcp -158149353 | 2025-02-04T19:35:16.858876

Hashes

nginx1.18.0

8888 / tcp 1737914932 | 2025-02-03T06:56:44.904162

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

-436049496 | 2025-02-04T10:40:35.098014

80 / tcp

-2100514759 | 2025-01-13T19:32:05.939063

443 / tcp

2104318805 | 2025-01-30T22:30:54.897803

3306 / tcp

315117846 | 2025-02-04T22:07:46.452791

8060 / tcp

-158149353 | 2025-02-04T19:35:16.858876

8888 / tcp

1737914932 | 2025-02-03T06:56:44.904162