GeneralInformation

Hostnames	dex168.net dexmt5.com fx168app.com gjqhmt5.com pobo.cc pobo168.com pobomt5.com qihuoruanjian.com wenhua.app xinguanjia.app
Domains	dex168.net dexmt5.com fx168app.com gjqhmt5.com pobo.cc pobo168.com pobomt5.com qihuoruanjian.com wenhua.app xinguanjia.app
Cloud Provider	Alibaba Cloud
Country	Singapore
City	Singapore
Organization	Alibaba Cloud (Singapore) Private Limited
ISP	Alibaba (US) Technology Co., Ltd.
ASN	AS45102

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(1)

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2020(1)

CVE-2020-0796

10A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.

OpenPorts

80 139 443 445 3306 33060

80 / tcp

772258679 | 2025-03-11T11:58:12.740758

Hashes

hash

-2029621228

http.dom_hash

1239617585

http.html_hash

772258679

http.server_hash

1830366617

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Tue, 11 Mar 2025 11:58:11 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://qihuoruanjian.com/

Vulnerabilities

139 / tcp

-757264002 | 2025-03-29T07:17:46.563145

\x83\x00\x00\x01\x8f

443 / tcp

44274858 | 2025-03-09T22:10:21.618058

Hashes

hash

-1963804378

http.dom_hash

-723686037

http.favicon.hash

542693306

http.html_hash

44274858

http.server_hash

1830366617

专业软件开发

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 09 Mar 2025 22:10:21 GMT
Content-Type: text/html
Content-Length: 437
Last-Modified: Thu, 07 Nov 2024 06:19:12 GMT
Connection: keep-alive
ETag: "672c5be0-1b5"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:99:2f:7c:96:0f:df:63:b8:3c:fd:ce:2e:ba:98:2d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Oct 28 23:59:59 2025 GMT
        Subject: CN=qihuoruanjian.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:76:59:08:0a:be:d0:b6:c4:31:e8:b6:03:
                    59:ba:ac:82:ca:54:8f:71:4a:03:d8:75:6d:24:b3:
                    ea:02:20:9c:7d:aa:a7:2d:1c:78:5d:d2:ce:7d:ca:
                    21:3f:7f:ac:1b:ea:e4:61:cf:57:56:77:52:5a:be:
                    eb:06:4c:9c:5c:88:d8:b6:28:85:27:d8:e9:33:7f:
                    9c:d8:b8:ee:93:32:f8:5d:e3:2d:3a:7e:b2:84:a0:
                    dd:3c:a1:5d:50:bd:91:c4:30:54:8e:07:f5:e4:34:
                    bb:93:44:a3:b6:43:77:62:9f:b1:21:43:33:f5:07:
                    4b:ed:38:6e:c5:a1:1f:f6:78:75:b8:7c:ff:ef:46:
                    8f:75:90:d4:66:eb:9e:f0:da:74:bf:80:b3:08:b4:
                    a0:ff:81:76:a3:d3:ae:50:68:e8:4e:35:e1:dc:5f:
                    a5:00:7f:f1:50:5f:63:9e:97:03:5a:2e:53:82:f8:
                    59:62:3f:a4:a3:53:06:cf:4a:28:b2:77:83:d0:dc:
                    58:e1:c0:03:94:08:fa:d4:9f:82:b8:4c:bf:d0:4c:
                    b6:99:30:59:1b:0f:23:04:d1:f3:b9:18:83:c6:22:
                    06:2a:8d:9a:4f:30:31:4a:62:a8:b1:35:1c:df:fa:
                    f3:9f:cf:16:78:96:9f:1f:67:10:5f:81:43:ee:2a:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                73:4D:5F:6A:FE:4B:D6:F2:45:FF:E0:AE:2F:62:20:D5:FC:F3:38:D9
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Oct 28 09:52:04.676 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:93:7C:A3:EE:16:9C:C2:30:3B:DA:3C:
                                4A:3D:B6:A7:9D:40:62:D1:4B:16:4D:A2:2D:9A:87:ED:
                                1D:76:8F:93:82:02:21:00:C4:1B:41:52:13:78:B7:49:
                                AD:32:76:CD:5A:03:8A:3B:4E:BE:93:DF:7F:61:58:7A:
                                B7:53:BB:38:7D:C9:A1:19
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Oct 28 09:52:04.622 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:1B:0A:D9:73:9C:6C:3B:1B:E3:7C:A6:63:
                                1C:93:12:FB:3D:4F:E9:58:DF:99:62:9E:A0:5A:D7:58:
                                07:BC:90:31:02:20:3A:23:B1:FD:06:49:6D:C5:DB:13:
                                CA:62:2C:71:7D:22:AB:06:40:A5:B8:CB:41:CE:D4:0D:
                                D8:6F:01:EF:CA:61
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Oct 28 09:52:04.572 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:3A:1E:7F:66:F3:1F:64:7B:6D:0A:17:2F:
                                6B:A7:F0:11:FC:EA:B4:F7:08:61:26:DD:B0:09:D2:3E:
                                44:B2:F0:A1:02:21:00:AB:5B:11:28:C7:3A:66:03:6B:
                                15:07:46:B4:69:14:11:37:B1:7A:41:92:40:CA:08:E2:
                                A1:55:7C:DA:EB:F1:FC
            X509v3 Subject Alternative Name: 
                DNS:qihuoruanjian.com, DNS:dex168.net, DNS:dexmt5.com, DNS:fx168app.com, DNS:gjqhmt5.com, DNS:pobo.cc, DNS:pobo168.com, DNS:pobomt5.com, DNS:wenhua.app, DNS:xinguanjia.app
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        cf:6f:4d:68:69:f3:18:a8:4a:19:06:c8:c1:1a:e3:2c:4e:c0:
        f6:17:bd:5f:b7:e5:9b:b0:ac:5a:20:10:27:33:34:40:eb:15:
        c0:42:2a:07:02:0f:92:4a:42:6b:34:3f:ad:fc:63:e2:9a:cb:
        3b:52:d6:c5:34:ae:16:44:68:aa:5c:ae:d1:55:98:49:04:09:
        88:6e:44:00:de:6a:70:7d:dd:40:35:e5:28:41:53:2e:13:a2:
        a1:37:bd:ec:d2:5b:53:ba:71:3a:da:95:d1:20:46:b1:c6:de:
        24:ec:c3:52:d6:c3:57:df:f1:fb:c9:48:fc:5c:46:98:fe:9b:
        76:6a:ee:e1:3b:da:43:a2:2e:8c:1a:0a:07:97:e5:1f:c8:ca:
        bb:a0:cd:24:70:e6:2f:37:ee:35:32:13:37:0e:5c:05:77:c6:
        23:2b:81:46:96:ac:c9:30:a6:3d:19:7a:bf:5c:cb:52:ef:31:
        b0:ec:42:fc:a5:08:af:7f:6d:84:0e:18:56:cc:24:45:07:7c:
        43:4c:ea:e8:be:34:8d:f7:f2:2b:65:11:79:6a:9a:61:c2:99:
        9a:2f:3b:37:d3:c8:b6:84:9e:fc:91:02:fe:df:10:63:2a:09:
        93:2e:84:29:73:60:a8:50:b8:4c:c1:e8:e3:31:ab:ef:c6:1c:
        d0:a2:3c:b2

Vulnerabilities

445 / tcp

-1166656618 | 2025-03-24T02:59:20.852683

SMB Status:
  Authentication: enabled
  SMB Version: 2
  Capabilities: raw-mode

Vulnerabilities

3306 / tcp

815199224 | 2025-03-13T03:24:56.354154

MySQL:
  Error Message: Host '224.233.74.113' is not allowed to connect to this MySQL server
  Error Code: 1130

33060 / tcp

-795948505 | 2025-03-22T18:31:08.933637

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

8.216.129.119

Last Seen: 2025-03-29

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

772258679 | 2025-03-11T11:58:12.740758

Hashes

nginx1.20.1

139 / tcp

-757264002 | 2025-03-29T07:17:46.563145

443 / tcp

44274858 | 2025-03-09T22:10:21.618058

Hashes

nginx1.20.1

445 / tcp

-1166656618 | 2025-03-24T02:59:20.852683

3306 / tcp

815199224 | 2025-03-13T03:24:56.354154

MySQL

33060 / tcp

-795948505 | 2025-03-22T18:31:08.933637

MySQL X Protocol

Products

Pricing

Contact Us

8.216.129.119

Last Seen: 2025-03-29

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Port 445 Latest CVSS

OpenPorts

80 / tcp 772258679 | 2025-03-11T11:58:12.740758

Hashes

nginx1.20.1

139 / tcp -757264002 | 2025-03-29T07:17:46.563145

443 / tcp 44274858 | 2025-03-09T22:10:21.618058

Hashes

nginx1.20.1

445 / tcp -1166656618 | 2025-03-24T02:59:20.852683

3306 / tcp 815199224 | 2025-03-13T03:24:56.354154

MySQL

33060 / tcp -795948505 | 2025-03-22T18:31:08.933637

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

772258679 | 2025-03-11T11:58:12.740758

139 / tcp

-757264002 | 2025-03-29T07:17:46.563145

443 / tcp

44274858 | 2025-03-09T22:10:21.618058

445 / tcp

-1166656618 | 2025-03-24T02:59:20.852683

3306 / tcp

815199224 | 2025-03-13T03:24:56.354154

33060 / tcp

-795948505 | 2025-03-22T18:31:08.933637