GeneralInformation

Hostnames	shop.henglisu.cn
Domains	henglisu.cn
Cloud Provider	Tencent Cloud
Country	China
City	Chengdu
Organization	Tencent Cloud Computing (Beijing) Co., Ltd
ISP	Shenzhen Tencent Computer Systems Company Limited
ASN	AS45090

WebTechnologies

JavaScript libraries

jQuery2.1.4

UI frameworks

Bootstrap3.3.7

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

80 111 443 2022 3306 8000 8080 8081 8888 9091 9191

-554746519 | 2024-11-30T12:21:39.410342

80 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Sat, 30 Nov 2024 12:21:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34

CVE-2017-8923 CVE-2013-2220 CVE-2021-3618 CVE-2007-3205 CVE-2024-4577 5 moreCVE-2023-44487 CVE-2022-37454 CVE-2022-31629 CVE-2022-31628 CVE-2022-4900

-1345205424 | 2024-12-22T21:36:57.096561

111 / tcp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-1345205424 | 2024-11-26T18:30:50.098235

111 / udp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-73903301 | 2024-12-19T10:28:33.677578

443 / tcp

恒立素商城

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Thu, 19 Dec 2024 10:28:33 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b5:bc:44:d5:cb:19:5a:3b:45:83:bc:b2:e7:1e:40
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia RSA DV TLS CA G2
        Validity
            Not Before: Mar 12 00:00:00 2024 GMT
            Not After : Mar 12 23:59:59 2025 GMT
        Subject: CN=shop.henglisu.cn
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:5d:56:19:2f:d0:69:2b:35:48:08:39:8d:
                    19:2e:c2:58:b4:88:f8:1a:47:f9:7c:d4:d4:b7:89:
                    a8:7b:d7:04:b8:ab:83:22:98:ca:2b:b5:64:ca:7a:
                    c1:f9:10:a0:3f:51:53:a3:21:b3:cb:2c:e0:75:99:
                    14:12:20:a1:4c:10:5e:2e:a0:02:39:ce:59:32:27:
                    c4:2c:6b:d9:72:bf:41:8c:3f:bb:8b:c0:76:c8:a2:
                    44:de:24:20:1d:56:a1:df:c8:e0:78:ad:68:70:f7:
                    dc:f9:cd:23:25:4c:0e:4a:06:65:88:f3:19:61:cb:
                    b9:c7:69:8e:80:dd:99:7e:c6:c8:d1:e6:25:6b:1d:
                    09:c1:3c:15:83:14:44:bf:c0:ad:4d:27:b1:c3:88:
                    31:6b:c2:e1:7a:a2:1a:c4:c4:ce:a7:4f:d4:b0:9e:
                    8a:c5:01:39:e6:d5:07:37:05:c0:30:2b:05:ef:99:
                    fb:4b:1b:83:ec:07:b0:74:bd:9b:1c:df:c6:03:46:
                    d3:42:a1:b1:64:86:9e:b4:05:f4:d0:71:fa:4c:5b:
                    3e:06:4f:72:34:54:ca:0d:0a:43:04:fe:43:1e:53:
                    05:8e:04:d4:2e:22:be:c1:22:34:df:49:6a:a3:65:
                    7d:b1:68:17:b5:64:c3:e1:e2:38:b7:d2:5b:62:d9:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                5F:3A:7C:11:10:7E:0C:67:71:61:DC:8B:A3:B5:00:03:67:F5:57:1C
            X509v3 Subject Key Identifier: 
                D1:02:6F:3A:6B:FE:9B:B7:1F:D5:95:E1:30:E1:CB:7E:BE:30:A6:EC
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.49
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.trust-provider.cn/TrustAsiaRSADVTLSCAG2.crt
                OCSP - URI:http://ocsp.trust-provider.cn
            X509v3 Subject Alternative Name: 
                DNS:shop.henglisu.cn
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Mar 12 14:20:00.609 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:18:FA:4B:B6:07:75:FC:7D:DD:D0:2E:D3:
                                4B:9B:EE:1C:CE:34:27:C8:7A:F1:E0:54:02:C8:D1:AE:
                                B7:FC:99:98:02:21:00:96:67:BE:A5:FE:B1:81:6F:4A:
                                0D:15:90:0E:D9:F6:5B:D4:AA:5D:4A:3D:59:44:ED:4C:
                                A2:7B:A0:DC:D8:08:ED
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Mar 12 14:20:00.515 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:8C:A5:8B:E8:67:24:7D:E6:E7:2B:59:
                                2E:66:AA:23:3C:A6:BA:43:F8:EA:B0:2D:E5:43:9C:50:
                                24:82:9A:39:3F:02:21:00:C3:82:5F:2C:BD:DB:1C:D2:
                                42:50:D7:22:77:49:BC:0C:1D:34:3F:F7:E4:9B:CC:FB:
                                96:30:8F:6C:24:52:4A:55
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 12 14:20:00.516 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:63:50:E3:00:E4:23:94:37:85:C4:02:3A:
                                F4:8D:47:A2:AE:F0:ED:25:C0:8D:95:DF:E7:CF:EF:41:
                                C9:6B:60:C2:02:20:10:B7:F0:66:92:C9:6A:B1:46:0C:
                                41:A6:94:75:33:C3:BB:EA:BF:77:4C:C4:83:28:AC:63:
                                FF:CB:C0:68:30:8B
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        a2:87:97:93:ec:d8:b5:84:ce:f8:72:82:2b:1a:d4:eb:14:76:
        bb:20:39:5b:33:d3:c9:a2:f1:a5:95:d6:f0:0c:0f:fe:3e:7b:
        27:ea:1b:4b:e8:c9:16:8e:66:5c:bd:c1:03:f0:db:d1:06:9a:
        c5:39:77:85:fd:87:67:28:1e:ca:50:38:6c:9c:92:fd:01:2c:
        cc:8f:3c:ca:90:b7:25:cb:6e:70:de:55:66:aa:d7:ca:9a:15:
        47:80:e4:85:4c:b8:87:03:66:76:50:66:f7:5b:7e:f6:28:dc:
        6a:bf:2c:7d:24:cb:f6:37:16:fe:c6:6c:e6:e4:fd:29:37:55:
        2d:1f:cb:8a:60:5a:a7:15:8e:03:fb:bc:19:9a:92:99:28:b5:
        6d:c2:71:65:1d:85:bc:a3:b2:32:1d:52:2b:e4:9c:6f:ff:e4:
        6f:7a:5a:44:e9:87:d4:d1:73:c9:b0:cf:41:c1:75:25:bb:f4:
        fe:12:1b:60:9c:c9:3e:ff:c0:b6:66:52:5d:a0:78:d3:18:b1:
        86:17:31:77:fd:77:e9:06:21:ef:2b:0f:4f:24:81:d1:54:ce:
        59:0a:04:56:b2:52:85:86:6f:d0:60:49:c8:d6:c7:89:7e:4a:
        16:e3:79:55:85:8c:87:7e:fc:86:74:aa:02:7e:21:88:9e:ed:
        0a:7b:89:26:6d:6a:2a:19:ba:90:3c:88:df:0c:4d:56:0a:9f:
        46:59:ff:bc:74:6b:4a:31:2e:49:97:d3:ad:2f:7e:bb:28:5b:
        98:31:97:e3:18:52:5f:a0:ae:e3:5d:ab:ca:ff:51:28:a7:1c:
        61:ac:f8:9f:39:01:f3:e9:b7:62:0d:73:61:9e:2e:bf:06:09:
        5a:57:e2:71:84:ab:28:ed:2c:b5:38:65:85:1e:86:fd:36:ce:
        93:ef:91:cd:e3:b7:d7:9f:1e:cd:1c:1b:f3:8b:97:c3:92:a7:
        41:5e:12:36:e7:bb:69:f7:08:d5:e3:77:ea:c4:dc:b6:2d:55:
        f4:21:bd:1a:be:fe

CVE-2024-4577 CVE-2022-37454 CVE-2017-8923 CVE-2023-44487 CVE-2021-3618 5 moreCVE-2013-2220 CVE-2022-31629 CVE-2022-4900 CVE-2007-3205 CVE-2022-31628

146524224 | 2024-12-23T13:38:56.405300

2022 / tcp

SSH-2.0-SFTPGo_2.4.4
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAOTbznIkB5qkX1ByBXbHLyK
lRKOYQ8j9o/A5xwGiOoTOvW9B/syt+rjy/yUeyB2xtBn12IqKT6fRl2sbDVCOKg=
Fingerprint: 0b:30:ff:15:88:35:e2:db:52:34:44:52:db:61:34:43

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group14-sha256

Server Host Key Algorithms:
	rsa-sha2-256
	rsa-sha2-512
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr

MAC Algorithms:
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-256

Compression Algorithms:
	none

1091585500 | 2024-12-25T16:38:44.054795

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 5.7.36-log
  Capabilities: 65535
  Server Language: 8
  Server Status: 2
  Extended Server Capabilities: 49663
  Authentication Plugin: mysql_native_password

-512435338 | 2024-12-21T07:11:23.621702

8000 / tcp

SFTPGo WebClient - Login

HTTP/1.1 200 OK
Date: Sat, 21 Dec 2024 07:11:21 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked

-554746519 | 2024-12-21T06:51:24.809634

8080 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Sat, 21 Dec 2024 06:51:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34

CVE-2024-4577 CVE-2022-37454 CVE-2017-8923 CVE-2023-44487 CVE-2021-3618 5 moreCVE-2013-2220 CVE-2022-31629 CVE-2022-4900 CVE-2007-3205 CVE-2022-31628

-1364496927 | 2024-12-23T17:17:24.752180

8081 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.20.1
Date: Mon, 23 Dec 2024 17:17:24 GMT
Content-Type: text/html
Content-Length: 145
Location: http://132.232.77.71:8081/web/official/index.html
Connection: keep-alive

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.20.1</center>
</body>
</html>

CVE-2023-44487 CVE-2021-3618

1067011630 | 2024-12-25T10:00:51.235053

8888 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Wed, 25 Dec 2024 10:00:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34

CVE-2022-37454 CVE-2017-8923 CVE-2023-44487 CVE-2021-3618 CVE-2013-2220 4 moreCVE-2022-31629 CVE-2022-4900 CVE-2007-3205 CVE-2022-31628

-617618899 | 2024-12-05T00:11:37.950138

9091 / tcp

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx/1.20.1
Date: Thu, 05 Dec 2024 00:11:37 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

CVE-2023-44487 CVE-2021-3618

1301286071 | 2024-12-23T11:08:13.382301

9191 / tcp

我的网站

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 23 Dec 2024 11:08:13 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *

132.232.77.71

Last Seen: 2024-12-25

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-554746519 | 2024-11-30T12:21:39.410342
80 / tcp

nginx1.20.1

-1345205424 | 2024-12-22T21:36:57.096561
111 / tcp

-1345205424 | 2024-11-26T18:30:50.098235
111 / udp

-73903301 | 2024-12-19T10:28:33.677578
443 / tcp

nginx1.20.1

146524224 | 2024-12-23T13:38:56.405300
2022 / tcp

1091585500 | 2024-12-25T16:38:44.054795
3306 / tcp

MySQL5.7.36-log

-512435338 | 2024-12-21T07:11:23.621702
8000 / tcp

-554746519 | 2024-12-21T06:51:24.809634
8080 / tcp

nginx1.20.1

-1364496927 | 2024-12-23T17:17:24.752180
8081 / tcp

nginx1.20.1

1067011630 | 2024-12-25T10:00:51.235053
8888 / tcp

nginx1.20.1

-617618899 | 2024-12-05T00:11:37.950138
9091 / tcp

nginx1.20.1

1301286071 | 2024-12-23T11:08:13.382301
9191 / tcp

nginx1.20.1

Products

Pricing

Contact Us

132.232.77.71

Last Seen: 2024-12-25

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Port 8080 Port 8081 Port 8888 Port 9091 Port 9191 Latest CVSS

OpenPorts

-554746519 | 2024-11-30T12:21:39.410342 80 / tcp

-1345205424 | 2024-12-22T21:36:57.096561 111 / tcp

-1345205424 | 2024-11-26T18:30:50.098235 111 / udp

-73903301 | 2024-12-19T10:28:33.677578 443 / tcp

146524224 | 2024-12-23T13:38:56.405300 2022 / tcp

1091585500 | 2024-12-25T16:38:44.054795 3306 / tcp

-512435338 | 2024-12-21T07:11:23.621702 8000 / tcp

-554746519 | 2024-12-21T06:51:24.809634 8080 / tcp

-1364496927 | 2024-12-23T17:17:24.752180 8081 / tcp

1067011630 | 2024-12-25T10:00:51.235053 8888 / tcp

-617618899 | 2024-12-05T00:11:37.950138 9091 / tcp

1301286071 | 2024-12-23T11:08:13.382301 9191 / tcp

Products

Pricing

Contact Us

Vulnerabilities

-554746519 | 2024-11-30T12:21:39.410342
80 / tcp

-1345205424 | 2024-12-22T21:36:57.096561
111 / tcp

-1345205424 | 2024-11-26T18:30:50.098235
111 / udp

-73903301 | 2024-12-19T10:28:33.677578
443 / tcp

146524224 | 2024-12-23T13:38:56.405300
2022 / tcp

1091585500 | 2024-12-25T16:38:44.054795
3306 / tcp

-512435338 | 2024-12-21T07:11:23.621702
8000 / tcp

-554746519 | 2024-12-21T06:51:24.809634
8080 / tcp

-1364496927 | 2024-12-23T17:17:24.752180
8081 / tcp

1067011630 | 2024-12-25T10:00:51.235053
8888 / tcp

-617618899 | 2024-12-05T00:11:37.950138
9091 / tcp

1301286071 | 2024-12-23T11:08:13.382301
9191 / tcp