GeneralInformation

Country	China
City	Shanghai
Organization	CHINANET HUBEI PROVINCE NETWORK
ISP	China Telecom
ASN	AS148981

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 81 111 3001 3306 4369 5353 5901 5985 6000 6001 7171

-689709536 | 2024-12-17T19:32:30.591246

22 / tcp

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDW5hmR6pADXqbhluxarPqWVIaXB3z5KZbscKdH0TRoUznn
L5O2l3CEsAP7XwD/x4EyfyrjwoEIekgRsCLBBm4I/9qaV+HGcaUY1YhV7CnS/FbjgEhiI8vyWBF4
IWVajmadPEC3XRYc7F95Gpbob70vU0WmsFL63MlGvLUk7q3G2zd+PNPEonaAJI6fqxPdiUMoSnOr
QFbFITv5eHYRiIpyl2aqSKTwcA1Ww4GuqWv2VeQjOSCTeSQAGS2LlmHQ+FBMp/mhwKBddyUU4KQ3
Lew7novhFGHsC3sku1ei/f8tWMe10iYmSs1D1n60gE63qrnBwzlKzGMNZWeIY6Vd8kOB
Fingerprint: 9f:7c:ad:29:6d:72:2c:05:b7:39:65:ea:31:f1:6a:e6

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	aes192-cbc
	aes256-cbc
	blowfish-cbc
	cast128-cbc
	3des-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

2130982981 | 2024-12-15T13:03:08.664539

81 / tcp

恭喜，站点创建成功！

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 15 Dec 2024 13:03:08 GMT
Content-Type: text/html
Content-Length: 917
Last-Modified: Mon, 09 Dec 2024 12:54:46 GMT
Connection: keep-alive
ETag: "6756e896-395"
Accept-Ranges: bytes

-1345205424 | 2024-12-19T19:29:22.559875

111 / tcp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-1345205424 | 2024-12-19T16:47:27.878108

111 / udp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-1697161118 | 2024-12-21T13:02:40.574769

3001 / tcp

MZ\x00\x00\x00\x00\x00\x00\x00\x06\x10\xb2\x0f@.\xc9

1096641654 | 2024-12-22T16:51:21.553047

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 5.6.50-log
  Capabilities: 63487
  Server Language: 45
  Server Status: 2
  Extended Server Capabilities: 32895
  Authentication Plugin: mysql_native_password

1077479848 | 2024-12-11T20:43:36.699357

4369 / tcp

3333\x00\x00\x00\x00\x00\x00\x00#\x01\x00\x00\x04\x00\x00\x02\x00\x01\x00\x00\x04\x00\x00\x00\x01\x02\x00\x00\x0fRPC server 2.0\x00

2086384645 | 2024-12-21T09:44:22.169288

5353 / udp

mDNS:
  services:
    9/tcp workstation:
      Name=lzetljnohjzocob [ac:1f:6b:0e:e9:aa]
      Address=10.173.89.43 111.173.89.43 fe80::ae1f:6bff:fe0e:e9aa
  answers:
    PTR:
      _workstation._tcp.local

547647208 | 2024-12-22T21:29:20.897068

5901 / tcp

RFB 003.008

VNC:
  Protocol Version: 3.8
  Security Types:
    2: VNC Authentication
    19: VeNCrypt

1489525118 | 2024-11-24T00:48:19.744582

5985 / tcp

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sun, 24 Nov 2024 00:48:23 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: HDPFKNZSDCQJZDR
  NetBIOS Domain Name: HDPFKNZSDCQJZDR
  NetBIOS Computer Name: HDPFKNZSDCQJZDR
  DNS Domain Name: hdpfknzsdcqjzdr
  FQDN: hdpfknzsdcqjzdr

120534451 | 2024-12-22T21:31:16.833201

6001 / tcp

X11 access denied

1077479848 | 2024-12-12T00:47:18.267417

7171 / tcp

3333\x00\x00\x00\x00\x00\x00\x00#\x01\x00\x00\x04\x00\x00\x02\x00\x01\x00\x00\x04\x00\x00\x00\x01\x02\x00\x00\x0fRPC server 2.0\x00

111.173.89.43

Last Seen: 2024-12-22

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-689709536 | 2024-12-17T19:32:30.591246
22 / tcp

OpenSSH7.4

2130982981 | 2024-12-15T13:03:08.664539
81 / tcp

nginx

-1345205424 | 2024-12-19T19:29:22.559875
111 / tcp

-1345205424 | 2024-12-19T16:47:27.878108
111 / udp

-1697161118 | 2024-12-21T13:02:40.574769
3001 / tcp

1096641654 | 2024-12-22T16:51:21.553047
3306 / tcp

MySQL5.6.50-log

1077479848 | 2024-12-11T20:43:36.699357
4369 / tcp

2086384645 | 2024-12-21T09:44:22.169288
5353 / udp

mDNS

547647208 | 2024-12-22T21:29:20.897068
5901 / tcp

VNC

1489525118 | 2024-11-24T00:48:19.744582
5985 / tcp

WinRM

120534451 | 2024-12-22T21:31:16.833201
6001 / tcp

1077479848 | 2024-12-12T00:47:18.267417
7171 / tcp

Products

Pricing

Contact Us

111.173.89.43

Last Seen: 2024-12-22

Tags:

GeneralInformation

Vulnerabilities All ports Port 22 Latest CVSS

OpenPorts

-689709536 | 2024-12-17T19:32:30.591246 22 / tcp

OpenSSH7.4

2130982981 | 2024-12-15T13:03:08.664539 81 / tcp

nginx

-1345205424 | 2024-12-19T19:29:22.559875 111 / tcp

-1345205424 | 2024-12-19T16:47:27.878108 111 / udp

-1697161118 | 2024-12-21T13:02:40.574769 3001 / tcp

1096641654 | 2024-12-22T16:51:21.553047 3306 / tcp

MySQL5.6.50-log

1077479848 | 2024-12-11T20:43:36.699357 4369 / tcp

2086384645 | 2024-12-21T09:44:22.169288 5353 / udp

mDNS

547647208 | 2024-12-22T21:29:20.897068 5901 / tcp

VNC

1489525118 | 2024-11-24T00:48:19.744582 5985 / tcp

WinRM

120534451 | 2024-12-22T21:31:16.833201 6001 / tcp

1077479848 | 2024-12-12T00:47:18.267417 7171 / tcp

Products

Pricing

Contact Us

Vulnerabilities

-689709536 | 2024-12-17T19:32:30.591246
22 / tcp

2130982981 | 2024-12-15T13:03:08.664539
81 / tcp

-1345205424 | 2024-12-19T19:29:22.559875
111 / tcp

-1345205424 | 2024-12-19T16:47:27.878108
111 / udp

-1697161118 | 2024-12-21T13:02:40.574769
3001 / tcp

1096641654 | 2024-12-22T16:51:21.553047
3306 / tcp

1077479848 | 2024-12-11T20:43:36.699357
4369 / tcp

2086384645 | 2024-12-21T09:44:22.169288
5353 / udp

547647208 | 2024-12-22T21:29:20.897068
5901 / tcp

1489525118 | 2024-11-24T00:48:19.744582
5985 / tcp

120534451 | 2024-12-22T21:31:16.833201
6001 / tcp

1077479848 | 2024-12-12T00:47:18.267417
7171 / tcp