GeneralInformation

Cloud Provider	Tencent Cloud
Country	China
City	Shanghai
Organization	Tencent Cloud Computing (Beijing) Co., Ltd
ISP	Shenzhen Tencent Computer Systems Company Limited
ASN	AS45090

WebTechnologies

JavaScript libraries

Zepto

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 443 5432 6379 7000 8080

22 / tcp

-444924703 | 2025-03-24T21:19:50.065323

SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u1
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDBJneLc0aZrtRuIAkEeWzqZj+On4TBTO3ZCRnPjv/Oe3SJ
OXvrUbRdejhYnqrZf6rCBRHNQMBKPonG8M+VHrCtCfWdSlLmy6/UsQvJiDwgn/gqt7qU4We2SHRp
PMWR8726gyNsvTV6ENITcomrTLvbOXxK1c2OATOVBd9V1qT6JLPoHJf0sQtkhpKGA8ZqJS66gAkt
hx/s1T7ts7KkUghh/kUzZd7g58t8g6VoY0UDi13YmcfGWZpQV7SG5ILMxZEmdhPzou8nUExBLtlw
KGBi0vhcCn5f0YG6MIdH+Mv3Q7LNq6OzfCdInkMOv7hl4N039CxrKFhWp+ww5z8oJJsBbZbq1fUe
Y5fKQD+TLQa2N6p2eIsBdZoN3MrTrgasOrCUAFoU+i0jDCVGba0u4gu4aHIjXdzesJTPYJPuzOWm
zTuk72lf0qfSQCd+0sIv8wqClb4CKJbUdcTullhDXRB9hnPj7GREq5XrHJeJVnnydpLWwjmICtYX
2gZKYRViMxk=
Fingerprint: fb:80:3f:f6:7e:a7:13:dc:dc:9e:1a:43:40:f7:2e:cd

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

443 / tcp

161667781 | 2025-03-25T09:17:23.498223

Hashes

hash

1528411703

http.dom_hash

1207635172

http.html_hash

161667781

http.server_hash

-1786963686

http.title_hash

65875839

Some keys for testing - jetbra.in

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 25 Mar 2025 09:17:20 GMT
Content-Type: text/html
Content-Length: 1034262
Last-Modified: Wed, 11 Sep 2024 01:38:42 GMT
Connection: keep-alive
ETag: "66e0f4a2-fc816"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3b:e2:c3:e5:b7:f6:9e:01:83:54:49:96:3a:6f:72:3d:1f
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Feb  4 13:23:37 2025 GMT
            Not After : May  5 13:23:36 2025 GMT
        Subject: CN=*.kituin.fun
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:5d:68:a7:eb:b7:79:dc:97:aa:34:35:8a:4d:01:
                    97:ae:04:1d:ee:56:53:09:94:c9:e5:af:6c:8e:98:
                    65:83:06:05:b7:b0:8b:e9:f8:4e:c1:74:e0:12:a9:
                    2b:48:71:53:d3:6f:f2:65:6c:47:ec:59:04:e5:e9:
                    46:05:bc:54:c6
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                AD:69:D8:ED:92:A2:62:5B:7C:CD:94:13:63:EE:7B:6E:19:50:65:14
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.kituin.fun
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb  4 14:22:07.343 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:08:C4:5D:D9:CA:39:42:1E:CA:68:BC:80:
                                FE:B6:3F:5F:2A:5A:7D:57:50:9E:B1:A6:0C:BF:28:41:
                                3C:29:65:14:02:21:00:8C:44:21:16:4B:34:09:34:0F:
                                15:64:7D:5B:DF:B8:9E:D8:42:4F:7D:CC:0C:A9:3C:07:
                                07:00:D1:61:6A:89:71
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb  4 14:22:07.330 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:92:E5:82:DF:CE:B9:59:D2:43:7C:3A:
                                AE:06:06:4C:6A:71:DC:CC:DE:1F:E1:68:79:59:F0:C7:
                                4A:3D:81:FC:32:02:21:00:F7:62:74:74:91:2A:49:42:
                                56:68:EC:41:9D:60:41:41:B8:03:A6:CA:FB:69:E8:55:
                                C5:6A:A7:40:F1:74:F2:A7
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:64:02:30:45:47:d7:f9:51:7c:28:9b:4d:8a:a6:c1:0d:c2:
        0c:06:e1:a7:e6:a8:df:ca:cd:45:05:e5:0d:03:21:bb:fb:f6:
        cf:8e:e8:0b:7c:95:3a:00:c0:04:61:da:7c:7c:26:e1:02:30:
        6f:69:d1:0c:2c:f1:f9:e1:1e:f7:a8:76:4e:24:20:be:8b:1f:
        bf:28:09:75:89:60:93:0e:35:11:7b:0b:5c:05:a6:49:af:26:
        83:c5:ab:22:34:d4:2c:76:1b:c8:77:21

Vulnerabilities

5432 / tcp

-726790289 | 2025-03-26T03:05:18.866190

PostgreSQL
fe_sendauth: no password supplied

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:80:d0:ad:17:36:ab:44:9e:9c:5b:41:75:fb:0d:f9:d5:0d:43:b0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=localhost.localdomain
        Validity
            Not Before: Nov 24 14:40:04 2022 GMT
            Not After : Nov 21 14:40:04 2032 GMT
        Subject: CN=localhost.localdomain
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:47:02:03:fa:82:70:f2:23:fb:14:78:0a:
                    3c:5e:88:09:60:79:ae:b7:25:b8:91:af:f2:5d:2a:
                    13:f3:c5:f4:e6:ba:a3:17:df:fe:12:73:17:22:0d:
                    b0:56:0f:a9:89:6f:56:a4:95:cf:83:73:70:ee:eb:
                    cd:76:d4:2c:c6:02:e1:31:d0:25:f0:b7:5e:d3:f8:
                    e0:86:22:bb:39:aa:f2:24:4d:c8:37:3e:bf:18:9c:
                    2a:70:7a:4d:28:c4:26:28:58:08:9d:52:27:98:39:
                    9b:ba:30:90:69:de:6f:60:57:7d:77:88:a9:bb:f5:
                    e9:d7:34:46:aa:f7:bb:27:46:7a:33:e1:7c:da:95:
                    a1:fa:09:d4:25:1f:95:a5:65:1b:f9:4e:e3:c0:f6:
                    bb:a7:42:be:c6:9f:b6:17:7f:34:a5:84:4a:78:b4:
                    1d:bf:37:3a:cd:b1:2a:0b:90:fa:3c:6b:c8:d0:96:
                    0a:64:03:da:23:22:e0:8a:c4:f1:eb:a5:6f:4b:e9:
                    1c:c9:30:94:47:42:5c:1e:d2:f1:2f:ec:66:4e:b1:
                    95:71:5a:04:18:08:c3:23:25:33:ce:dc:5a:44:16:
                    4d:d2:a2:ee:e0:73:84:94:b3:24:74:b2:90:3f:c2:
                    aa:b8:be:4f:70:ce:dc:e3:f1:4d:1d:5f:ca:5d:b9:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:localhost.localdomain
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        72:03:7f:fb:2c:14:82:b9:3a:c9:98:c0:c4:90:75:4e:4c:39:
        a8:9b:0f:41:3f:04:2c:35:68:e0:01:0f:11:20:d4:d8:f6:ee:
        69:8f:a5:b4:c2:90:75:83:fd:5e:f0:b5:89:d3:48:06:bc:1a:
        77:72:53:66:d5:05:d7:29:2b:bf:7e:64:7c:ae:c6:b3:3a:ad:
        cc:42:8b:b9:78:b7:21:69:25:7c:f9:98:a2:4a:01:20:63:96:
        fc:e6:0f:b0:0c:10:39:91:da:28:ef:c2:31:09:49:a2:e3:9e:
        e7:15:d0:ab:42:88:48:b4:f5:48:65:de:e8:e1:a8:a0:3c:97:
        62:97:2d:70:f2:62:8c:0f:7b:e8:d0:bb:e3:47:1b:b5:ca:53:
        04:95:52:a1:27:09:7e:39:02:77:97:08:15:2a:cd:5c:07:fd:
        0b:46:2e:4a:8f:a6:34:56:1a:a2:29:16:82:e3:85:8d:c4:c6:
        1a:9e:be:cd:3b:97:73:0b:5f:5e:13:a5:ce:9c:c4:78:2d:76:
        c3:1b:d4:40:3d:1b:53:fb:b2:ba:fc:a9:d3:d3:ef:d1:15:8e:
        fa:70:61:99:0e:4f:39:3b:42:0a:d5:28:1e:47:80:13:b8:3b:
        6d:35:67:3c:26:3a:d3:5d:9f:6f:f4:90:ac:a0:fe:84:e3:72:
        e2:59:b8:06

6379 / tcp

-1927723706 | 2025-03-29T07:33:45.504125

-NOAUTH Authentication required.

8080 / tcp

0 | 2025-03-18T03:44:36.118269

Hashes

hash

1493935396

http.dom_hash

http.html_hash

http.server_hash

482313215

HTTP/1.1 307 Temporary Redirect
date: Tue, 18 Mar 2025 03:44:35 GMT
server: uvicorn
content-length: 0
location: https://github.com/cscs181/QQ-GitHub-Bot

101.35.139.136

Last Seen: 2025-03-29

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

22 / tcp

-444924703 | 2025-03-24T21:19:50.065323

OpenSSH8.4p1 Debian 5+deb11u1

443 / tcp

161667781 | 2025-03-25T09:17:23.498223

Hashes

nginx1.18.0

5432 / tcp

-726790289 | 2025-03-26T03:05:18.866190

PostgreSQL13.10 - 13.12

6379 / tcp

-1927723706 | 2025-03-29T07:33:45.504125

Redis key-value store

8080 / tcp

0 | 2025-03-18T03:44:36.118269

Hashes

Products

Pricing

Contact Us

101.35.139.136

Last Seen: 2025-03-29

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

22 / tcp -444924703 | 2025-03-24T21:19:50.065323

OpenSSH8.4p1 Debian 5+deb11u1

443 / tcp 161667781 | 2025-03-25T09:17:23.498223

Hashes

nginx1.18.0

5432 / tcp -726790289 | 2025-03-26T03:05:18.866190

PostgreSQL13.10 - 13.12

6379 / tcp -1927723706 | 2025-03-29T07:33:45.504125

Redis key-value store

8080 / tcp 0 | 2025-03-18T03:44:36.118269

Hashes

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

-444924703 | 2025-03-24T21:19:50.065323

443 / tcp

161667781 | 2025-03-25T09:17:23.498223

5432 / tcp

-726790289 | 2025-03-26T03:05:18.866190

6379 / tcp

-1927723706 | 2025-03-29T07:33:45.504125

8080 / tcp

0 | 2025-03-18T03:44:36.118269