GeneralInformation

Country	China
City	Beijing
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 49 111 119 593 636 1099 1414 2455 2762 3301 4157 4911 5010 5432 6002 6543 6668 7218 8009 8055 8080 8834 8848 10909 50000 54138

1090862264 | 2024-08-29T13:48:50.964940

22 / tcp

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQCvmcqWened5caOUuBXcJ9Mk+u3euZkieqGXbuTjW5++piF
opApvlCTAbtb45T8/T3kE7TAIibQqaRQPe4O0RW05DcsIGVx7rkESNVgAfDEeqApO0zhjLnSi8rD
MFKHHAA3sylD85pBDUoiviD8niB2E3cI0Dxm/Cfg2Y59uSrc/MfqyUmaaupKVXMwtRTgyF6KeGrR
MWB6JGBqk82T3zC2V85/2CA8AsZnxFty3PX/9d0zj7gEosl6SW39/rQkUlAn+WEId2K39QkXHqta
SiV/bCKHKM/8tnLBhdSMEUGeIOY2a77IRmyBCPfM2u9RkdJZoo1X2Lgeo3SMc1DeP7/D
Fingerprint: ec:bf:23:c4:68:a4:1f:ed:c8:ef:42:33:71:26:af:3a

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	aes192-cbc
	aes256-cbc
	blowfish-cbc
	cast128-cbc
	3des-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-6111 13 moreCVE-2019-6110 CVE-2019-6109 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

-359657882 | 2024-09-17T01:15:11.966352

49 / tcp

GBPK\xc3\xbb\xc3\xb7n\\xc2\\x93W\xc2\xaf\\xc2\\x86\\xc2\\x93x@\xc2\xa9\\x0e\xc3\x8a*\\xc2\\x9bS

-1345205424 | 2024-08-29T14:09:54.578017

111 / tcp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

141730637 | 2024-09-16T20:17:56.113551

119 / tcp

HTTP/1.0 200 OK
Server: Proxy

1308377066 | 2024-09-16T03:10:59.486883

593 / tcp

ncacn_http/1.0

1239199743 | 2024-09-16T21:48:13.150403

636 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 9-24676686-0 0NNN RT(1705910221170 116) q(-1 -1 -1 -1) r(0 -1) b1

-303199180 | 2024-09-16T05:48:28.017433

1099 / tcp

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

921225407 | 2024-09-16T21:40:44.395561

1414 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-971970408 | 2024-09-16T03:12:29.517414

2455 / tcp

1282941221 | 2024-09-16T22:28:02.277118

2762 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

320677201 | 2024-09-16T02:46:32.033728

3301 / tcp

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

1261582754 | 2024-09-16T12:46:14.545974

4157 / tcp

unknown command 
unknown command

1975288991 | 2024-09-16T03:18:12.641983

4911 / tcp

OPTI

-1399940268 | 2024-09-16T03:34:34.619682

5010 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2024-09-16T23:31:23.037433

5432 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1887224352 | 2024-09-16T09:27:20.455199

6002 / tcp

590585971 | 2024-09-16T11:55:26.682143

6543 / tcp

\\xba\\xdc\xcd\xab\\x01#\\x19\\x10C\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xab\\x18\\x00\\x00\\x00\\x00\\x00\\x00[153][15:47:34.500]\\xc1\\xac\\xbd\xd3\xb3\xc9\xb9\\xa6\\xa3\\xac\\xb1\\xbe\xc4\xa3\\xbf\\xe9 PID \xce\xaa 0x23=35\\x00\\xba\\xdc\xcd\xab\\x01#\\x19\\x10_\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xab\\x18\\x00\\x00\\x00\\x00\\x00\\x00[154][15:4

819727972 | 2024-09-16T23:57:32.255649

6668 / tcp

SSH-2.0-OpenSSH_7.4

1632932802 | 2024-09-16T18:24:36.914828

7218 / tcp

-1626979812 | 2024-09-17T01:12:55.575097

8009 / tcp

220 Service ready for new user.

-1399940268 | 2024-09-16T20:31:44.016029

8055 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1124660876 | 2024-08-21T11:44:35.970902

8080 / tcp

HTTP/1.1 200 OK
Content-Type: application/json
content-length: 34

808560482 | 2024-09-16T18:27:11.264245

8834 / tcp

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP
 : USERID : UNIX : Cr8

1410193794 | 2024-08-29T14:35:06.926244

8848 / tcp

HTTP Status 404 â€“ Not Found

HTTP/1.1 404 
Content-Type: text/html;charset=utf-8
Content-Language: en
Content-Length: 431
Date: Thu, 29 Aug 2024 14:35:06 GMT

820958131 | 2024-09-16T07:52:27.564566

10909 / tcp

kjnkjabhbanc283ubcsbhdc72\x02

233634112 | 2024-09-16T15:54:56.620959

50000 / tcp

SSH-98.60-SysaxSSH_81885..42

-1327660293 | 2024-09-16T07:31:33.989370

54138 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

39.105.158.54

Last Seen: 2024-09-17

GeneralInformation

Vulnerabilities All ports Port 22 Port 6668 Latest CVSS

OpenPorts

1090862264 | 2024-08-29T13:48:50.964940 22 / tcp

-359657882 | 2024-09-17T01:15:11.966352 49 / tcp

-1345205424 | 2024-08-29T14:09:54.578017 111 / tcp

141730637 | 2024-09-16T20:17:56.113551 119 / tcp

1308377066 | 2024-09-16T03:10:59.486883 593 / tcp

1239199743 | 2024-09-16T21:48:13.150403 636 / tcp

-303199180 | 2024-09-16T05:48:28.017433 1099 / tcp

921225407 | 2024-09-16T21:40:44.395561 1414 / tcp

-971970408 | 2024-09-16T03:12:29.517414 2455 / tcp

1282941221 | 2024-09-16T22:28:02.277118 2762 / tcp

320677201 | 2024-09-16T02:46:32.033728 3301 / tcp

1261582754 | 2024-09-16T12:46:14.545974 4157 / tcp

1975288991 | 2024-09-16T03:18:12.641983 4911 / tcp

-1399940268 | 2024-09-16T03:34:34.619682 5010 / tcp

1911457608 | 2024-09-16T23:31:23.037433 5432 / tcp

1887224352 | 2024-09-16T09:27:20.455199 6002 / tcp

590585971 | 2024-09-16T11:55:26.682143 6543 / tcp

819727972 | 2024-09-16T23:57:32.255649 6668 / tcp

1632932802 | 2024-09-16T18:24:36.914828 7218 / tcp

-1626979812 | 2024-09-17T01:12:55.575097 8009 / tcp

-1399940268 | 2024-09-16T20:31:44.016029 8055 / tcp

-1124660876 | 2024-08-21T11:44:35.970902 8080 / tcp

808560482 | 2024-09-16T18:27:11.264245 8834 / tcp

1410193794 | 2024-08-29T14:35:06.926244 8848 / tcp

820958131 | 2024-09-16T07:52:27.564566 10909 / tcp

233634112 | 2024-09-16T15:54:56.620959 50000 / tcp

-1327660293 | 2024-09-16T07:31:33.989370 54138 / tcp

Products

Pricing

Contact Us

Vulnerabilities

1090862264 | 2024-08-29T13:48:50.964940
22 / tcp

-359657882 | 2024-09-17T01:15:11.966352
49 / tcp

-1345205424 | 2024-08-29T14:09:54.578017
111 / tcp

141730637 | 2024-09-16T20:17:56.113551
119 / tcp

1308377066 | 2024-09-16T03:10:59.486883
593 / tcp

1239199743 | 2024-09-16T21:48:13.150403
636 / tcp

-303199180 | 2024-09-16T05:48:28.017433
1099 / tcp

921225407 | 2024-09-16T21:40:44.395561
1414 / tcp

-971970408 | 2024-09-16T03:12:29.517414
2455 / tcp

1282941221 | 2024-09-16T22:28:02.277118
2762 / tcp

320677201 | 2024-09-16T02:46:32.033728
3301 / tcp

1261582754 | 2024-09-16T12:46:14.545974
4157 / tcp

1975288991 | 2024-09-16T03:18:12.641983
4911 / tcp

-1399940268 | 2024-09-16T03:34:34.619682
5010 / tcp

1911457608 | 2024-09-16T23:31:23.037433
5432 / tcp

1887224352 | 2024-09-16T09:27:20.455199
6002 / tcp

590585971 | 2024-09-16T11:55:26.682143
6543 / tcp

819727972 | 2024-09-16T23:57:32.255649
6668 / tcp

1632932802 | 2024-09-16T18:24:36.914828
7218 / tcp

-1626979812 | 2024-09-17T01:12:55.575097
8009 / tcp

-1399940268 | 2024-09-16T20:31:44.016029
8055 / tcp

-1124660876 | 2024-08-21T11:44:35.970902
8080 / tcp

808560482 | 2024-09-16T18:27:11.264245
8834 / tcp

1410193794 | 2024-08-29T14:35:06.926244
8848 / tcp

820958131 | 2024-09-16T07:52:27.564566
10909 / tcp

233634112 | 2024-09-16T15:54:56.620959
50000 / tcp

-1327660293 | 2024-09-16T07:31:33.989370
54138 / tcp