GeneralInformation

Country	China
City	Shanghai
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

751496153 | 2024-10-11T19:16:58.696192

19 / tcp

* OK TeamXchange IMAP4rev1 server (otyUg) ready.

-414819019 | 2024-10-11T12:13:17.234654

113 / tcp

HTTP/1.1 200 OK
Content-type: text/html
Connection: close

-1547821026 | 2024-10-12T08:09:29.514663

264 / tcp

CheckPoint\nFirewall Host: CPFWVSX1A_Audi_ODP_S2S_vsfw\nSmartCenter Host: admin..afx8nn\\x00\n

897328069 | 2024-10-12T03:48:53.194755

465 / tcp

220 mail.scott000.com ESMTP

-1399940268 | 2024-10-12T01:32:48.817391

1153 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1730858130 | 2024-10-10T11:34:30.655229

1414 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

419886129 | 2024-10-12T01:21:43.633325

1433 / tcp

MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XTZJ-20210317RG\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XTZJ-20210317RG\nNetBIOS_Computer_Name: XTZJ-20210317RG\nDNS_Domain_Name: XTZJ-20210317RG\nDNS_Computer_Name: XTZJ-20210317RG\nSystem_Time: 2024-01-22 04:01:04 +0000 UTC\n\n

1692069329 | 2024-10-12T09:34:37.014496

1801 / tcp

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xe14\\xf0\\xb6\\xb85\x0bB\\x86\\x99B\\xa5\\x07\\xb0\\xf6V92d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1850902677 | 2024-10-11T16:42:06.133659

1883 / tcp

W!

-1810987450 | 2024-10-10T12:18:41.943122

1911 / tcp

\xc3\xbf

546151771 | 2024-10-11T20:37:08.898847

2002 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

141730637 | 2024-10-11T15:09:29.306382

2121 / tcp

HTTP/1.0 200 OK
Server: Proxy

1662205251 | 2024-10-12T09:46:22.782559

2323 / tcp

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

2087396567 | 2024-10-12T12:20:19.775563

2376 / tcp

kjnkjabhbanc283ubcsbhdc72

-1888448627 | 2024-10-11T05:05:22.406321

2404 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1642969125 | 2024-11-03T18:48:49.833884

3001 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 03 Nov 2024 18:48:49 GMT
Content-Type: text/html
Content-Length: 649
Last-Modified: Mon, 11 Mar 2024 08:20:50 GMT
Connection: keep-alive
ETag: "65eebee2-289"
Accept-Ranges: bytes

<!DOCTYPE html><html><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"><meta name=renderer content=webkit><meta http-equiv=X-UA-Compatible content="ie=edge"><title>管理中心</title><link href=/static/css/app.7fbdd658995f227f09ee62614053e996.css rel=stylesheet></head><body><div id=app></div><script type=text/javascript src=/static/js/manifest.e64992b8f6c06580c6bc.js></script><script type=text/javascript src=/static/js/vendor.2544c5e59eb4b5305142.js></script><script type=text/javascript src=/static/js/app.b0e658df5a21535d553d.js></script></body></html>

CVE-2021-3618 CVE-2023-44487

51259122 | 2024-10-12T06:15:19.366937

3310 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

198844676 | 2024-10-11T12:05:43.310677

3551 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

1911457608 | 2024-10-12T18:16:49.679457

3791 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1392039491 | 2024-10-12T07:59:12.335581

4434 / tcp

"Broadband Router"

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

-1810987450 | 2024-10-11T05:40:09.319237

4500 / tcp

\xc3\xbf

2087396567 | 2024-10-12T13:05:31.375219

5006 / tcp

kjnkjabhbanc283ubcsbhdc72

-2096652808 | 2024-10-10T21:17:23.242042

5567 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1399940268 | 2024-10-12T20:22:15.104371

6633 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

117101543 | 2024-10-12T14:19:33.081379

7415 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

-1807712300 | 2024-10-26T14:53:51.760230

8000 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Sat, 26 Oct 2024 14:53:51 GMT
Content-Length: 0
Connection: keep-alive

CVE-2021-3618 CVE-2023-44487

-95678519 | 2024-11-03T14:46:18.710558

8001 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Sun, 03 Nov 2024 14:46:18 GMT
Content-Length: 0
Connection: keep-alive

CVE-2021-3618 CVE-2023-44487

-460996128 | 2024-10-24T05:50:51.470305

8002 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Thu, 24 Oct 2024 05:50:51 GMT
Content-Length: 0
Connection: keep-alive

CVE-2021-3618 CVE-2023-44487

1416263274 | 2024-11-03T17:02:48.247368

8008 / tcp

404 Not Found

HTTP/1.1 404 NOT FOUND
Server: nginx/1.20.1
Date: Sun, 03 Nov 2024 17:02:48 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 232
Connection: keep-alive

CVE-2021-3618 CVE-2023-44487

140234738 | 2024-10-28T11:46:10.600643

8009 / tcp

HTTP/1.1 404 Not Found
Date: Mon, 28 Oct 2024 11:46:10 GMT
Server: Kestrel
Content-Length: 0

-2089734047 | 2024-10-10T15:57:04.168127

8107 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

104385780 | 2024-10-11T20:10:00.728157

8140 / tcp

ceph v2

321971019 | 2024-10-11T05:57:18.061165

8252 / tcp

-ERR client ip is not in whitelist\r

1261582754 | 2024-10-12T00:22:27.021352

8554 / tcp

unknown command 
unknown command

842535728 | 2024-10-12T02:57:53.265430

8649 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

165188539 | 2024-10-10T20:32:39.640794

8875 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2087396567 | 2024-10-11T22:14:07.741240

8880 / tcp

kjnkjabhbanc283ubcsbhdc72

1363464823 | 2024-10-12T23:52:57.015366

9019 / tcp

\x00[|ox\x7f\x00\x00

-2096652808 | 2024-10-12T16:03:15.315972

9095 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1093576587 | 2024-10-11T14:09:47.356642

9151 / tcp

¥A,LConnectx57222

-303199180 | 2024-10-12T03:37:17.391969

9160 / tcp

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

1726594447 | 2024-10-10T19:30:40.185553

9861 / tcp

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

-1056270173 | 2024-10-10T18:20:02.633809

9898 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

1161309183 | 2024-10-11T15:34:17.964924

9999 / tcp

ProxyServer is ready

1504401647 | 2024-10-12T06:12:44.887160

10134 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

1050952155 | 2024-10-11T16:07:55.405019

10443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 11 Oct 2024 16:07:55 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.100.210.250:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

-345718689 | 2024-10-10T06:27:08.892176

11300 / tcp

Vty password is not set.

-653033013 | 2024-10-10T09:42:14.077139

14147 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-1810987450 | 2024-10-12T04:41:45.931169

17000 / tcp

\xc3\xbf

-2089734047 | 2024-10-12T18:12:07.594031

18081 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

819727972 | 2024-10-10T19:40:28.438997

19000 / tcp

SSH-2.0-OpenSSH_7.4

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-6111 13 moreCVE-2019-6110 CVE-2019-6109 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

1900503736 | 2024-10-12T04:08:31.518545

20000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

1370263973 | 2024-10-11T07:25:26.776551

20880 / tcp

dubbo>

671605376 | 2024-10-11T04:52:20.712702

23023 / tcp

SSH-2.0-OpenSSH_X.X

2063598737 | 2024-10-12T22:42:09.576279

25001 / tcp

/0 0 L\r\n/0 0 HUH\r\n

-1375131644 | 2024-10-11T19:47:49.978243

25565 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

-441419608 | 2024-10-12T16:29:16.335656

47990 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

-2118655245 | 2024-10-10T12:55:11.496666

60030 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

1690634669 | 2024-10-10T05:35:11.738991

60129 / tcp

2087396567 | 2024-10-11T06:50:54.462012

61616 / tcp

kjnkjabhbanc283ubcsbhdc72

47.100.210.250

Last Seen: 2024-11-03

Tags:

GeneralInformation

Vulnerabilities All ports Port 3001 Port 8000 Port 8001 Port 8002 Port 8008 Port 19000 Latest CVSS

OpenPorts

751496153 | 2024-10-11T19:16:58.696192 19 / tcp

-414819019 | 2024-10-11T12:13:17.234654 113 / tcp

-1547821026 | 2024-10-12T08:09:29.514663 264 / tcp

897328069 | 2024-10-12T03:48:53.194755 465 / tcp

-1399940268 | 2024-10-12T01:32:48.817391 1153 / tcp

-1730858130 | 2024-10-10T11:34:30.655229 1414 / tcp

419886129 | 2024-10-12T01:21:43.633325 1433 / tcp

1692069329 | 2024-10-12T09:34:37.014496 1801 / tcp

1850902677 | 2024-10-11T16:42:06.133659 1883 / tcp

-1810987450 | 2024-10-10T12:18:41.943122 1911 / tcp

546151771 | 2024-10-11T20:37:08.898847 2002 / tcp

141730637 | 2024-10-11T15:09:29.306382 2121 / tcp

1662205251 | 2024-10-12T09:46:22.782559 2323 / tcp

2087396567 | 2024-10-12T12:20:19.775563 2376 / tcp

-1888448627 | 2024-10-11T05:05:22.406321 2404 / tcp

-1642969125 | 2024-11-03T18:48:49.833884 3001 / tcp

51259122 | 2024-10-12T06:15:19.366937 3310 / tcp

198844676 | 2024-10-11T12:05:43.310677 3551 / tcp

1911457608 | 2024-10-12T18:16:49.679457 3791 / tcp

-1392039491 | 2024-10-12T07:59:12.335581 4434 / tcp

-1810987450 | 2024-10-11T05:40:09.319237 4500 / tcp

2087396567 | 2024-10-12T13:05:31.375219 5006 / tcp

-2096652808 | 2024-10-10T21:17:23.242042 5567 / tcp

-1399940268 | 2024-10-12T20:22:15.104371 6633 / tcp

117101543 | 2024-10-12T14:19:33.081379 7415 / tcp

-1807712300 | 2024-10-26T14:53:51.760230 8000 / tcp

-95678519 | 2024-11-03T14:46:18.710558 8001 / tcp

-460996128 | 2024-10-24T05:50:51.470305 8002 / tcp

1416263274 | 2024-11-03T17:02:48.247368 8008 / tcp

140234738 | 2024-10-28T11:46:10.600643 8009 / tcp

-2089734047 | 2024-10-10T15:57:04.168127 8107 / tcp

104385780 | 2024-10-11T20:10:00.728157 8140 / tcp

321971019 | 2024-10-11T05:57:18.061165 8252 / tcp

1261582754 | 2024-10-12T00:22:27.021352 8554 / tcp

842535728 | 2024-10-12T02:57:53.265430 8649 / tcp

165188539 | 2024-10-10T20:32:39.640794 8875 / tcp

2087396567 | 2024-10-11T22:14:07.741240 8880 / tcp

1363464823 | 2024-10-12T23:52:57.015366 9019 / tcp

-2096652808 | 2024-10-12T16:03:15.315972 9095 / tcp

1093576587 | 2024-10-11T14:09:47.356642 9151 / tcp

-303199180 | 2024-10-12T03:37:17.391969 9160 / tcp

1726594447 | 2024-10-10T19:30:40.185553 9861 / tcp

-1056270173 | 2024-10-10T18:20:02.633809 9898 / tcp

1161309183 | 2024-10-11T15:34:17.964924 9999 / tcp

1504401647 | 2024-10-12T06:12:44.887160 10134 / tcp

1050952155 | 2024-10-11T16:07:55.405019 10443 / tcp

-345718689 | 2024-10-10T06:27:08.892176 11300 / tcp

-653033013 | 2024-10-10T09:42:14.077139 14147 / tcp

-1810987450 | 2024-10-12T04:41:45.931169 17000 / tcp

-2089734047 | 2024-10-12T18:12:07.594031 18081 / tcp

819727972 | 2024-10-10T19:40:28.438997 19000 / tcp

1900503736 | 2024-10-12T04:08:31.518545 20000 / tcp

1370263973 | 2024-10-11T07:25:26.776551 20880 / tcp

671605376 | 2024-10-11T04:52:20.712702 23023 / tcp

2063598737 | 2024-10-12T22:42:09.576279 25001 / tcp

-1375131644 | 2024-10-11T19:47:49.978243 25565 / tcp

-441419608 | 2024-10-12T16:29:16.335656 47990 / tcp

-2118655245 | 2024-10-10T12:55:11.496666 60030 / tcp

1690634669 | 2024-10-10T05:35:11.738991 60129 / tcp

2087396567 | 2024-10-11T06:50:54.462012 61616 / tcp

Products

Pricing

Contact Us

Vulnerabilities

751496153 | 2024-10-11T19:16:58.696192
19 / tcp

-414819019 | 2024-10-11T12:13:17.234654
113 / tcp

-1547821026 | 2024-10-12T08:09:29.514663
264 / tcp

897328069 | 2024-10-12T03:48:53.194755
465 / tcp

-1399940268 | 2024-10-12T01:32:48.817391
1153 / tcp

-1730858130 | 2024-10-10T11:34:30.655229
1414 / tcp

419886129 | 2024-10-12T01:21:43.633325
1433 / tcp

1692069329 | 2024-10-12T09:34:37.014496
1801 / tcp

1850902677 | 2024-10-11T16:42:06.133659
1883 / tcp

-1810987450 | 2024-10-10T12:18:41.943122
1911 / tcp

546151771 | 2024-10-11T20:37:08.898847
2002 / tcp

141730637 | 2024-10-11T15:09:29.306382
2121 / tcp

1662205251 | 2024-10-12T09:46:22.782559
2323 / tcp

2087396567 | 2024-10-12T12:20:19.775563
2376 / tcp

-1888448627 | 2024-10-11T05:05:22.406321
2404 / tcp

-1642969125 | 2024-11-03T18:48:49.833884
3001 / tcp

51259122 | 2024-10-12T06:15:19.366937
3310 / tcp

198844676 | 2024-10-11T12:05:43.310677
3551 / tcp

1911457608 | 2024-10-12T18:16:49.679457
3791 / tcp

-1392039491 | 2024-10-12T07:59:12.335581
4434 / tcp

-1810987450 | 2024-10-11T05:40:09.319237
4500 / tcp

2087396567 | 2024-10-12T13:05:31.375219
5006 / tcp

-2096652808 | 2024-10-10T21:17:23.242042
5567 / tcp

-1399940268 | 2024-10-12T20:22:15.104371
6633 / tcp

117101543 | 2024-10-12T14:19:33.081379
7415 / tcp

-1807712300 | 2024-10-26T14:53:51.760230
8000 / tcp

-95678519 | 2024-11-03T14:46:18.710558
8001 / tcp

-460996128 | 2024-10-24T05:50:51.470305
8002 / tcp

1416263274 | 2024-11-03T17:02:48.247368
8008 / tcp

140234738 | 2024-10-28T11:46:10.600643
8009 / tcp

-2089734047 | 2024-10-10T15:57:04.168127
8107 / tcp

104385780 | 2024-10-11T20:10:00.728157
8140 / tcp

321971019 | 2024-10-11T05:57:18.061165
8252 / tcp

1261582754 | 2024-10-12T00:22:27.021352
8554 / tcp

842535728 | 2024-10-12T02:57:53.265430
8649 / tcp

165188539 | 2024-10-10T20:32:39.640794
8875 / tcp

2087396567 | 2024-10-11T22:14:07.741240
8880 / tcp

1363464823 | 2024-10-12T23:52:57.015366
9019 / tcp

-2096652808 | 2024-10-12T16:03:15.315972
9095 / tcp

1093576587 | 2024-10-11T14:09:47.356642
9151 / tcp

-303199180 | 2024-10-12T03:37:17.391969
9160 / tcp

1726594447 | 2024-10-10T19:30:40.185553
9861 / tcp

-1056270173 | 2024-10-10T18:20:02.633809
9898 / tcp

1161309183 | 2024-10-11T15:34:17.964924
9999 / tcp

1504401647 | 2024-10-12T06:12:44.887160
10134 / tcp

1050952155 | 2024-10-11T16:07:55.405019
10443 / tcp

-345718689 | 2024-10-10T06:27:08.892176
11300 / tcp

-653033013 | 2024-10-10T09:42:14.077139
14147 / tcp

-1810987450 | 2024-10-12T04:41:45.931169
17000 / tcp

-2089734047 | 2024-10-12T18:12:07.594031
18081 / tcp

819727972 | 2024-10-10T19:40:28.438997
19000 / tcp

1900503736 | 2024-10-12T04:08:31.518545
20000 / tcp

1370263973 | 2024-10-11T07:25:26.776551
20880 / tcp

671605376 | 2024-10-11T04:52:20.712702
23023 / tcp

2063598737 | 2024-10-12T22:42:09.576279
25001 / tcp

-1375131644 | 2024-10-11T19:47:49.978243
25565 / tcp

-441419608 | 2024-10-12T16:29:16.335656
47990 / tcp

-2118655245 | 2024-10-10T12:55:11.496666
60030 / tcp

1690634669 | 2024-10-10T05:35:11.738991
60129 / tcp

2087396567 | 2024-10-11T06:50:54.462012
61616 / tcp