GeneralInformation

Hostnames	45.92.158.98.static.xtom.com blog.yangwangshijie.xyz
Domains	xtom.com yangwangshijie.xyz
Country	Hong Kong
City	Hong Kong
Organization	xTom GmbH
ISP	Cloudie Limited
ASN	AS55933

WebTechnologies

JavaScript libraries

jQuery2.2.4

Swiper

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 22 80 443 888 8889

21 / tcp

-100529008 | 2025-01-24T20:47:51.091264

220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 04:47. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
421 Unable to read the indexed puredb file (or old format detected) - Try pure-pw mkdb
211-Extensions supported:
 UTF8
 EPRT
 IDLE
 MDTM
 SIZE
 MFMT
 REST STREAM
 MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
 MLSD
 PRET
 AUTH TLS
 PBSZ
 PROT
 TVFS
 ESTA
 PASV
 EPSV
 SPSV
 ESTP
211 End.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a7:1a:ce:2a:d9:4d:27:ca
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, ST=Guangdong, L=Dongguan, O=BT-PANEL, OU=BT, CN=45.92.158.98/emailAddress=admin@bt.cn
        Validity
            Not Before: Sep  8 05:39:13 2023 GMT
            Not After : Jun  7 05:39:13 2033 GMT
        Subject: C=CN, ST=Guangdong, L=Dongguan, O=BT-PANEL, OU=BT, CN=45.92.158.98/emailAddress=admin@bt.cn
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:3e:ff:87:e6:6b:bd:6a:9e:34:9e:f5:a0:
                    59:ca:43:67:b0:39:6c:65:ff:a3:e5:a3:6d:93:fb:
                    fe:35:dc:8d:ed:20:1b:91:06:9d:92:dd:f9:d8:7e:
                    fb:64:72:41:16:39:dc:b3:a0:b4:49:3b:58:14:f5:
                    37:b5:00:a7:f6:a4:e7:7e:9a:7e:0d:4f:75:f0:ab:
                    b1:09:49:f1:49:cb:d3:65:09:d9:84:eb:13:69:01:
                    21:10:b8:85:15:8e:51:f0:f3:76:64:65:87:cc:57:
                    22:8e:51:36:72:ba:6d:6e:fb:94:43:90:a5:df:2c:
                    a6:1e:a4:2d:2b:e6:0c:d6:b2:03:51:0a:b3:ae:f3:
                    ba:1b:d2:1b:4b:a0:b2:31:c5:36:87:08:71:56:85:
                    91:01:8a:5f:f4:a9:78:78:fc:2a:c6:1d:f8:27:39:
                    89:09:33:98:3e:e3:15:60:1c:dc:8d:df:b4:e3:0c:
                    7a:ea:f7:dd:27:b9:56:1a:59:fc:11:f7:7e:cd:7f:
                    f1:68:3e:c7:a6:a0:d7:5a:e9:fb:02:76:02:16:17:
                    41:b8:aa:84:3f:73:43:22:b1:6e:c5:47:e3:b2:5c:
                    40:cf:51:69:8a:b1:53:f0:29:c2:ca:ac:0b:1f:eb:
                    1e:00:45:e4:b8:dd:3c:51:62:6f:b5:22:42:62:1b:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                56:43:9E:8F:C6:37:2F:01:7D:FB:39:F3:04:1E:AE:56:48:F7:AA:46
            X509v3 Authority Key Identifier: 
                56:43:9E:8F:C6:37:2F:01:7D:FB:39:F3:04:1E:AE:56:48:F7:AA:46
            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5c:63:c0:5d:4f:f9:9d:ad:6e:37:cd:02:24:93:de:cd:55:9b:
        0d:93:88:7a:1e:94:79:63:5f:99:f0:43:81:ca:de:3d:67:1a:
        07:a1:b2:3c:6d:2a:7b:c7:b0:24:99:f0:ab:de:97:0f:db:65:
        a3:79:10:0d:8f:0e:45:33:4d:98:e1:ea:ae:ad:56:f4:8f:86:
        da:4e:9e:bf:9e:18:3d:52:a3:f5:c2:db:47:d7:c6:3c:f7:44:
        3a:3a:bb:f2:c2:f6:f5:e7:95:7e:a5:15:cc:0c:d7:74:32:02:
        33:5d:36:33:d1:64:98:4b:e1:7f:d3:0a:4a:ca:2e:3a:37:f5:
        f2:dd:fd:d9:35:e6:bc:79:b2:13:f7:80:ed:6f:47:49:18:f6:
        1d:33:dd:cf:75:ea:e1:ae:b5:dc:14:bc:e4:a8:90:80:b2:17:
        72:44:c4:bc:fc:dd:fd:73:84:3c:36:3b:98:82:07:7b:b0:58:
        5c:01:04:8e:95:f1:ba:4b:09:49:7a:4f:17:63:7b:6e:fc:16:
        3f:43:f1:bf:8f:6e:92:a6:1e:61:7b:5f:48:14:de:c4:71:d0:
        9e:3f:95:26:df:f2:d1:bf:69:b9:76:af:2a:17:0f:14:a4:71:
        db:e3:fe:39:81:6f:db:5c:fc:18:f6:a0:a6:e5:9f:30:36:0b:
        9c:f8:d0:31

22 / tcp

655930678 | 2025-01-26T11:53:57.405375

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDBuRiBjZNj8XfJnVQt+PUkUsALJM6DMry04uoe5qLa1dWp
N5SWRI+SmUIl7OmyHeprjJF5QKpaMPbiWh+mhiQt6S2hMqsAoYGdCh8BzWXZLzsL0XkntQE80G0y
fZ9qEzethPrZ5iXIiShZIaihRgFguR8hTME1wCOteFlWKFXGm2mmlCZcazk2EKc6Zv8fK4f2jb6H
RBqVLAGAe4L0Gk5js6QPrLTRFO+I1QDbkCXKkiuRchBmibsL5ZAVAmAdXYzCTDuzm8mDHOhGxyKE
drCSzbuayrVktVeaCfNuBAomziL9Q8uj9yq+t5dRrwWfUwwtqb1SKz/SubX/67S0BE0V
Fingerprint: f3:cb:33:81:a1:92:f8:8a:a7:00:54:1f:82:97:4b:7b

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	aes192-cbc
	aes256-cbc
	blowfish-cbc
	cast128-cbc
	3des-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

80 / tcp

-85749389 | 2025-01-28T03:32:15.120610

Hashes

hash

2054186142

http.dom_hash

1239617585

http.html_hash

-85749389

http.server_hash

-1340961475

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Jan 2025 03:32:14 GMT
Content-Type: text/html
Content-Length: 138
Last-Modified: Wed, 06 Sep 2023 15:30:49 GMT
Connection: keep-alive
ETag: "64f89b29-8a"
Accept-Ranges: bytes

443 / tcp

-989048840 | 2025-01-28T19:32:32.167413

Hashes

hash

-1788220793

http.dom_hash

1774045396

http.favicon.hash

83731971

http.html_hash

-989048840

http.server_hash

-1340961475

http.title_hash

-1768067359

ZBLOG - Good Luck To You!

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Jan 2025 19:32:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Product: Z-BlogPHP 1.7.1
X-XSS-Protection: 1; mode=block
Upgrade-Insecure-Requests: 1
Strict-Transport-Security: max-age=31536000

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f1:e2:b9:9e:06:f2:ce:c1:40:89:7b:2c:d0:cd:af:82:bb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Jun 16 06:09:41 2024 GMT
            Not After : Sep 14 06:09:40 2024 GMT
        Subject: CN=blog.yangwangshijie.xyz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:e5:94:14:59:cd:e5:3b:11:0e:27:75:6a:
                    8e:14:b2:df:eb:8d:25:7e:8d:fe:e4:4d:1b:3b:ff:
                    fc:b4:9b:84:f3:45:e6:28:20:c6:51:cb:79:75:25:
                    fb:75:15:32:85:f8:f1:73:f6:04:dd:06:0a:19:9a:
                    ef:91:ca:f1:e3:de:65:44:68:ac:c4:0e:2a:35:5b:
                    12:ae:d5:f8:3a:d3:44:29:15:40:b4:76:27:d0:df:
                    d1:42:2d:f4:2b:96:77:59:15:5c:7e:bc:1b:fc:63:
                    58:0e:4a:7e:a4:23:f6:66:00:e8:3d:82:10:aa:28:
                    39:41:52:65:7f:69:e9:23:34:20:a2:4b:57:8d:d1:
                    3b:49:a0:b9:29:1e:59:15:9e:a5:53:4b:9e:2f:2b:
                    2c:41:02:d6:93:cd:7b:a6:02:9b:88:6f:75:0b:43:
                    74:8d:5b:5c:4b:38:56:a8:01:dc:53:62:4d:61:d8:
                    91:72:1a:e5:81:a2:4c:c9:df:99:01:7d:60:c4:94:
                    1c:1c:fa:38:00:ff:16:ca:70:bd:71:31:f3:1a:8b:
                    ce:21:39:9c:43:26:ef:4b:80:b9:d3:79:5b:fd:ef:
                    8a:a7:e9:3d:38:5b:9a:3e:7f:56:a1:0e:ea:19:68:
                    2e:10:85:32:8d:bd:f9:37:fd:f7:1e:82:d4:7a:f0:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                FD:1A:5E:DE:7B:BE:13:C2:29:FD:59:9F:46:17:81:CA:25:77:EE:FA
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:blog.yangwangshijie.xyz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jun 16 07:09:41.410 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C3:A2:BD:60:03:F7:39:96:91:B7:56:
                                BD:42:80:4E:78:65:15:F6:C4:EF:23:06:91:9C:B0:D2:
                                BC:DB:C9:FA:C6:02:20:6A:6C:62:08:74:84:1C:35:E2:
                                FA:4F:D6:2D:D5:8D:FC:ED:DA:A5:78:2F:7A:9C:A3:CE:
                                D7:CF:9D:C1:C2:49:6E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : Jun 16 07:09:41.613 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F3:A5:80:32:BF:13:DE:90:29:DF:BF:
                                04:3F:D7:D1:29:43:C2:6C:A6:F6:75:37:DC:FA:A7:02:
                                A8:11:CE:C2:B3:02:21:00:E0:72:6D:33:EF:B5:67:4B:
                                5C:03:00:BC:E4:DA:B7:3C:BE:45:FC:41:25:A4:17:56:
                                79:12:EB:DE:04:1E:8E:09
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b9:5c:4f:ca:ca:da:d4:a5:91:e3:9d:b0:7d:8c:97:01:ef:a8:
        38:21:ad:ec:f8:31:95:fd:ec:3d:1c:83:8c:36:43:11:ec:93:
        53:25:79:6e:12:90:3a:7a:fc:f5:89:5d:28:9a:5c:c2:80:6e:
        e5:5c:d3:7f:59:5b:32:82:6c:0d:c5:1b:2f:1c:6c:3f:21:31:
        e1:38:36:6b:2f:99:d2:fd:4e:76:c1:bb:14:ac:29:3f:5e:b4:
        7f:c1:f4:fb:3e:08:b2:b9:6d:07:4d:27:c8:55:12:9c:31:63:
        25:3e:db:07:91:b3:b6:0c:fb:ea:21:15:97:40:33:79:dc:3c:
        6f:f3:e4:78:eb:e1:dd:19:5d:f1:9d:2f:81:5c:24:1a:6a:21:
        80:7b:3a:8f:60:6a:eb:b5:66:09:85:f3:88:d4:be:79:2a:d5:
        5e:0a:16:ee:8f:cb:68:61:a5:8c:93:fd:23:3a:cf:52:3a:bb:
        63:89:60:67:1a:3d:f6:12:56:f9:16:10:db:24:c4:90:f2:49:
        ec:c9:f0:fc:6b:12:a9:9e:8e:2e:6d:42:4f:b2:76:b0:e8:c4:
        ea:33:2c:ad:8d:95:c2:4e:e7:17:fe:1e:00:d9:e2:fb:f2:8c:
        20:ed:a4:ea:cd:a7:14:d8:20:62:24:e0:e0:42:1c:e8:1b:27:
        8b:90:4e:b2

CVE-2020-11023 CVE-2020-11022 CVE-2019-11358 CVE-2015-9251

888 / tcp

1765360226 | 2025-01-31T22:46:07.404246

Hashes

hash

-912691827

http.dom_hash

1239617585

http.html_hash

1765360226

http.server_hash

-1340961475

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx
Date: Fri, 31 Jan 2025 22:46:06 GMT
Content-Type: text/html
Content-Length: 548
Connection: keep-alive

8889 / tcp

-1123380717 | 2025-01-18T03:38:38.925836

HTTP/1.1 200 OK
Server: nginx/1.25.4
Date: Sat, 18 Jan 2025 03:38:38 GMT
Content-Type: text/html
Content-Length: 4832
Last-Modified: Wed, 03 Apr 2024 14:07:15 GMT
Connection: keep-alive
ETag: "660d6293-12e0"
Accept-Ranges: bytes

45.92.158.98

Last Seen: 2025-01-31

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

21 / tcp

-100529008 | 2025-01-24T20:47:51.091264

Pure-FTPd

22 / tcp

655930678 | 2025-01-26T11:53:57.405375

OpenSSH7.4

80 / tcp

-85749389 | 2025-01-28T03:32:15.120610

Hashes

nginx

443 / tcp

-989048840 | 2025-01-28T19:32:32.167413

Hashes

nginx

888 / tcp

1765360226 | 2025-01-31T22:46:07.404246

Hashes

nginx

8889 / tcp

-1123380717 | 2025-01-18T03:38:38.925836

nginx1.25.4

Products

Pricing

Contact Us

45.92.158.98

Last Seen: 2025-01-31

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 22 Port 443 Latest CVSS

OpenPorts

21 / tcp -100529008 | 2025-01-24T20:47:51.091264

Pure-FTPd

22 / tcp 655930678 | 2025-01-26T11:53:57.405375

OpenSSH7.4

80 / tcp -85749389 | 2025-01-28T03:32:15.120610

Hashes

nginx

443 / tcp -989048840 | 2025-01-28T19:32:32.167413

Hashes

nginx

888 / tcp 1765360226 | 2025-01-31T22:46:07.404246

Hashes

nginx

8889 / tcp -1123380717 | 2025-01-18T03:38:38.925836

nginx1.25.4

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

-100529008 | 2025-01-24T20:47:51.091264

22 / tcp

655930678 | 2025-01-26T11:53:57.405375

80 / tcp

-85749389 | 2025-01-28T03:32:15.120610

443 / tcp

-989048840 | 2025-01-28T19:32:32.167413

888 / tcp

1765360226 | 2025-01-31T22:46:07.404246

8889 / tcp

-1123380717 | 2025-01-18T03:38:38.925836