GeneralInformation

Hostnames	api.wangnian.cc
Domains	wangnian.cc
Country	China
City	Shanghai
Organization	CHINANET jiangsu province network
ISP	CHINATELECOM Jiangsu province Changzhou 5G network
ASN	AS140293

WebTechnologies

JavaScript libraries

jQuery1.12.4

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(1)

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019(1)

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

2015(1)

CVE-2015-9251

6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

443 3306 6379 8060 8081 8085 9000 9100 9191 9200 15672

443 / tcp

448628184 | 2025-03-09T05:48:40.543611

Hashes

hash

1816897218

http.dom_hash

1087203621

http.html_hash

448628184

http.server_hash

1830366617

HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Sun, 09 Mar 2025 05:48:40 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 275
Connection: keep-alive
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Language: en-US

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b4:41:d3:48:37:05:91:e3:71:ed:07:62:9b:67:61
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, O=TrustAsia Technologies, Inc., OU=Domain Validated SSL, CN=TrustAsia TLS RSA CA
        Validity
            Not Before: Jan 22 00:00:00 2025 GMT
            Not After : Apr 22 23:59:59 2025 GMT
        Subject: CN=api.wangnian.cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:09:42:87:dc:e8:17:f4:1f:26:25:1e:a6:
                    fa:9f:79:53:28:49:f7:41:36:fe:a4:84:d2:76:7d:
                    c3:7d:19:bc:4a:ce:ab:a7:cf:42:40:23:4d:5c:63:
                    e2:4e:81:7d:be:b9:36:14:91:50:af:e0:71:8b:71:
                    b1:2b:c1:19:c5:1d:d5:ed:70:36:4f:16:a8:e1:2f:
                    3b:79:09:1f:a8:63:ee:84:6e:dc:d4:09:f4:43:9c:
                    6b:d1:63:2e:c5:ec:5d:aa:07:8a:15:d0:07:64:df:
                    99:de:b6:3a:a0:85:31:bb:52:79:52:13:d5:bf:bf:
                    fc:26:91:0f:a0:51:00:2d:17:b7:5b:c6:81:fa:50:
                    1c:82:3c:ac:15:ba:a4:6e:72:34:9b:4c:da:ee:29:
                    e2:c6:89:6c:eb:88:87:5d:6a:55:c2:6e:bd:c5:2f:
                    8b:88:d2:6c:41:1d:5e:f6:cc:a4:aa:3e:d8:3b:e4:
                    75:67:f7:9a:0f:05:af:cc:54:f0:07:40:a8:f4:9b:
                    26:b5:72:98:f1:3f:80:d9:e0:21:d8:df:d1:7c:0b:
                    7d:5a:cf:96:4c:32:d3:4c:71:70:cc:4b:1a:db:28:
                    84:96:dc:1f:ac:41:18:03:af:1a:12:8e:b6:fd:f7:
                    1d:0a:ec:ff:f5:cb:70:94:1d:25:1b:f6:03:57:d5:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                7F:D3:99:F3:A0:47:0E:31:00:56:56:22:8E:B7:CC:9E:DD:CA:01:8A
            X509v3 Subject Key Identifier: 
                BD:1A:51:39:70:9E:E1:C9:A3:5B:F7:93:44:92:92:97:4E:76:8D:D6
            X509v3 Subject Alternative Name: 
                DNS:api.wangnian.cc
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            Authority Information Access: 
                OCSP - URI:http://statuse.digitalcertvalidation.com
                CA Issuers - URI:http://cacerts.digitalcertvalidation.com/TrustAsiaTLSRSACA.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jan 22 06:00:41.707 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:2E:4A:20:13:5F:30:C7:17:10:C3:6E:E8:
                                9D:3B:91:5D:26:63:11:9F:1C:4F:87:54:18:C1:7D:1C:
                                A7:F1:DD:7B:02:21:00:BA:4C:10:63:CE:63:23:A9:AD:
                                74:AF:22:02:95:A3:80:55:6F:57:5B:0A:2E:AA:82:26:
                                A9:A4:7E:B2:D8:1F:6C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 73:20:22:0F:08:16:8A:F9:F3:C4:A6:8B:0A:B2:6A:9A:
                                4A:00:EE:F5:77:85:8A:08:4D:05:00:D4:A5:42:44:59
                    Timestamp : Jan 22 06:00:41.769 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:8C:80:50:DB:CD:A3:16:C0:BE:40:B7:
                                9C:6C:03:41:F0:AD:15:1E:D9:E8:FA:25:A0:CA:D3:5D:
                                29:6A:CE:70:EE:02:20:2F:5F:AE:E4:7E:21:1C:B6:C0:
                                3B:FE:D9:11:07:0D:47:96:B9:78:1F:5A:7E:CD:4C:72:
                                9C:A6:44:76:9E:BC:73
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jan 22 06:00:41.787 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:6A:6E:CE:52:DC:62:96:A4:A3:59:21:86:
                                C6:B7:30:F9:29:20:48:8B:8C:55:E3:40:FE:76:05:13:
                                94:D7:B1:43:02:21:00:A6:3B:4A:9E:BD:2D:D1:1A:19:
                                BD:9A:B0:5E:F0:72:66:3F:83:8B:C5:F2:65:12:12:07:
                                59:9D:A7:C1:D0:85:38
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4c:55:83:15:19:1f:ee:05:ff:d9:a5:46:3b:77:7c:0b:eb:17:
        5d:d8:b7:42:ba:1e:18:97:b7:e3:a5:82:69:fd:ee:3e:7c:93:
        a0:f4:28:49:a4:a2:1e:13:78:3e:72:81:3e:ad:fb:90:3f:9a:
        e8:27:1d:7b:96:67:94:27:49:8e:1b:72:30:a8:d2:97:7b:66:
        47:e8:be:20:95:90:77:b0:f2:1f:31:a6:d6:48:b1:11:1f:e7:
        ad:b9:54:ce:05:b9:3f:49:9a:52:15:b8:2e:55:02:d1:de:50:
        35:8c:e9:6a:82:bb:40:96:d2:ea:57:f5:08:34:00:37:5c:5f:
        fc:b8:f5:43:f8:f3:2d:ba:ff:5b:76:ef:6b:a6:65:7d:68:04:
        aa:d3:ea:0f:63:93:85:a9:ae:d8:2c:52:4c:e5:2d:e0:07:d3:
        ef:b8:d0:da:7d:a5:44:c0:87:9a:73:35:b1:03:41:fc:90:85:
        c3:91:20:d4:20:17:93:73:12:09:65:57:92:71:19:c5:90:9f:
        5f:ed:0e:4e:bd:29:d7:84:30:60:aa:1e:86:79:e0:87:59:d7:
        3d:8f:a5:f4:a4:5f:af:4b:e7:4c:1c:4f:e4:d1:3b:aa:b4:fe:
        15:d5:eb:25:c8:75:c5:0c:8f:91:14:79:67:ee:64:a4:36:b6:
        1f:76:1c:14

Vulnerabilities

3306 / tcp

493370898 | 2025-03-11T04:45:22.966588

MySQL:
  Protocol Version: 10
  Version: 8.0.40
  Capabilities: 65535
  Server Language: 224
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: caching_sha2_password

6379 / tcp

-1927723706 | 2025-03-09T21:22:15.984413

-NOAUTH Authentication required.

8060 / tcp

-1500110387 | 2025-03-11T09:03:06.815539

Hashes

hash

-297205304

http.dom_hash

1632087534

http.favicon.hash

-1440302855

http.html_hash

-1500110387

http.server_hash

-793477239

http.title_hash

HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 11 Mar 2025 09:03:06 GMT
Content-Type: text/html
Content-Length: 5780
Last-Modified: Thu, 27 Feb 2025 06:58:05 GMT
Connection: keep-alive
ETag: "67c00cfd-1694"
Accept-Ranges: bytes

Vulnerabilities

8081 / tcp

-1492244242 | 2025-03-05T18:05:37.695873

HTTP/1.1 404 
Content-Type: text/html;charset=utf-8
Content-Language: en
Content-Length: 431
Date: Wed, 05 Mar 2025 18:05:37 GMT

<!doctype html><html lang="en"><head><title>HTTP Status 404 – Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 – Not Found</h1></body></html>

8085 / tcp

1913094852 | 2025-03-12T15:12:55.542749

HTTP/1.1 302 
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Location: http://61.160.210.8/login
Content-Language: en-US
Content-Length: 0
Date: Wed, 12 Mar 2025 15:12:46 GMT

9000 / tcp

1303420644 | 2025-02-28T09:27:59.235828

HTTP/1.1 404 Not Found
Connection: keep-alive
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Transfer-Encoding: chunked
Content-Type: application/json
Date: Fri, 28 Feb 2025 09:27:59 GMT

4f
{"timestamp":"2025-02-28 17:27:59","status":404,"error":"Not Found","path":"/"}
0

9100 / tcp

-1391197597 | 2025-03-07T12:53:46.529123

HTTP/1.1 400 Bad Request
Server: nginx/1.20.1
Date: Fri, 07 Mar 2025 12:53:46 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.20.1</center>
</body>
</html>

Vulnerabilities

9191 / tcp

606626611 | 2025-03-10T17:33:56.296935

Hashes

hash

-1058993485

http.dom_hash

-52950311

http.favicon.hash

116323821

http.html_hash

606626611

项目系统

HTTP/1.1 200 
Content-Type: text/html;charset=UTF-8
Content-Language: zh-CN
Transfer-Encoding: chunked
Date: Mon, 10 Mar 2025 17:33:55 GMT

9200 / tcp

1110848602 | 2025-02-28T02:11:22.548647

Hashes

hash

-55745595

http.dom_hash

-2006505642

http.favicon.hash

1611729805

http.html_hash

1110848602

HTTP/1.1 401 Unauthorized
WWW-Authenticate: Basic realm="security" charset="UTF-8"
content-type: application/json; charset=UTF-8
content-length: 381

15672 / tcp

-1347322994 | 2025-02-15T04:40:22.007454

Hashes

hash

1804864348

http.dom_hash

1014545656

http.favicon.hash

1064742722

http.html_hash

-1347322994

http.server_hash

1217262701

http.title_hash

1651652076

RabbitMQ Management

HTTP/1.1 200 OK
content-length: 1391
content-type: text/html
date: Sat, 15 Feb 2025 04:40:21 GMT
etag: "568454922"
last-modified: Thu, 16 Jan 2025 14:41:44 GMT
server: Cowboy

Vulnerabilities

61.160.210.8

Last Seen: 2025-03-12

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

443 / tcp

448628184 | 2025-03-09T05:48:40.543611

Hashes

nginx1.20.1

3306 / tcp

493370898 | 2025-03-11T04:45:22.966588

MySQL8.0.40

6379 / tcp

-1927723706 | 2025-03-09T21:22:15.984413

Redis key-value store

8060 / tcp

-1500110387 | 2025-03-11T09:03:06.815539

Hashes

nginx1.21.3

8081 / tcp

-1492244242 | 2025-03-05T18:05:37.695873

8085 / tcp

1913094852 | 2025-03-12T15:12:55.542749

9000 / tcp

1303420644 | 2025-02-28T09:27:59.235828

9100 / tcp

-1391197597 | 2025-03-07T12:53:46.529123

nginx1.20.1

9191 / tcp

606626611 | 2025-03-10T17:33:56.296935

Hashes

9200 / tcp

1110848602 | 2025-02-28T02:11:22.548647

Hashes

Elastic

15672 / tcp

-1347322994 | 2025-02-15T04:40:22.007454

Hashes

Products

Pricing

Contact Us

61.160.210.8

Last Seen: 2025-03-12

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Port 8060 Port 9100 Port 15672 Latest CVSS

OpenPorts

443 / tcp 448628184 | 2025-03-09T05:48:40.543611

Hashes

nginx1.20.1

3306 / tcp 493370898 | 2025-03-11T04:45:22.966588

MySQL8.0.40

6379 / tcp -1927723706 | 2025-03-09T21:22:15.984413

Redis key-value store

8060 / tcp -1500110387 | 2025-03-11T09:03:06.815539

Hashes

nginx1.21.3

8081 / tcp -1492244242 | 2025-03-05T18:05:37.695873

8085 / tcp 1913094852 | 2025-03-12T15:12:55.542749

9000 / tcp 1303420644 | 2025-02-28T09:27:59.235828

9100 / tcp -1391197597 | 2025-03-07T12:53:46.529123

nginx1.20.1

9191 / tcp 606626611 | 2025-03-10T17:33:56.296935

Hashes

9200 / tcp 1110848602 | 2025-02-28T02:11:22.548647

Hashes

Elastic

15672 / tcp -1347322994 | 2025-02-15T04:40:22.007454

Hashes

Products

Pricing

Contact Us

Vulnerabilities

443 / tcp

448628184 | 2025-03-09T05:48:40.543611

3306 / tcp

493370898 | 2025-03-11T04:45:22.966588

6379 / tcp

-1927723706 | 2025-03-09T21:22:15.984413

8060 / tcp

-1500110387 | 2025-03-11T09:03:06.815539

8081 / tcp

-1492244242 | 2025-03-05T18:05:37.695873

8085 / tcp

1913094852 | 2025-03-12T15:12:55.542749

9000 / tcp

1303420644 | 2025-02-28T09:27:59.235828

9100 / tcp

-1391197597 | 2025-03-07T12:53:46.529123

9191 / tcp

606626611 | 2025-03-10T17:33:56.296935

9200 / tcp

1110848602 | 2025-02-28T02:11:22.548647

15672 / tcp

-1347322994 | 2025-02-15T04:40:22.007454