GeneralInformation

Hostnames	doc.itopcms.com
Domains	itopcms.com
Cloud Provider	Alibaba Cloud
Country	Singapore
City	Singapore
Organization	Alibaba Cloud (Singapore) Private Limited
ISP	Alibaba (US) Technology Co., Ltd.
ASN	AS45102

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 992 1701 3306 4500 5555 8001 9000 9090

22 / tcp

686792162 | 2025-01-21T06:05:13.319398

SSH-2.0-OpenSSH_8.0
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDMk7fXX2+6UUGyQh7rfxOhhUzOkiC/2WFQeDK4UtsdYnp3
ctzdN5el59gX2r4SYrgMXCziFdlDZPWDWoFPl4xvyJgeMTASS/JLUSEsl5w5b63uaWxXP0pnXe+y
ulXBPb2EOY/OsTgVHYhg4iyXQqorjCbhT0gHIzeo4rwNFtbwNV3lUrcnfmEKoEMYvW4FFbS/6eh7
G5xn+AeQgG8ZH+I4DYBOmwg78fTjvU/wPccE/0zVXiQhVLgrmgFkMZLqWWtmLuFAKREAyVgmS9Dl
Ndw8RjhvN20VW1uvnBZDHO0e6osCL96OLELwoNZTOnQk98MycUAaACLsbJPew4VcKFXhb/KfnGnm
MWK7ks3J/FYjLiB6e9LpK46F2KIfgSW4yy6G+JidOstuNXCJ7hYzcKy3xkBPenBrMBFFN2jE7YK3
EmInGeWhfWpvFpToy9Etrh5s1pErZO/KksiByuGGlEZBfOb00S1pxayP0EcD20f4q08OI6cwWW47
HGz6J1wt5nM=
Fingerprint: 21:cf:a3:66:29:48:77:38:0d:b7:87:28:38:fb:c5:ec

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group14-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	aes256-gcm@openssh.com
	chacha20-poly1305@openssh.com
	aes256-ctr
	aes256-cbc
	aes128-gcm@openssh.com
	aes128-ctr
	aes128-cbc

MAC Algorithms:
	hmac-sha2-256-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha2-256
	hmac-sha1
	umac-128@openssh.com
	hmac-sha2-512

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

443 / tcp

0 | 2025-02-06T03:25:57.213425

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:23:1d:aa:ac:99:8d:ea:12:0d:de:38:64:42:1c:af
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA
        Validity
            Not Before: Dec 31 00:00:00 2024 GMT
            Not After : Mar 31 23:59:59 2025 GMT
        Subject: CN=doc.itopcms.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ef:f7:d1:8e:b8:ca:64:f7:d0:7f:2e:50:d0:41:
                    8a:87:34:f4:cc:7f:0a:6e:6b:32:ed:91:cf:66:d6:
                    2c:6d:40:3d:7c:9d:a6:0d:4f:00:c9:d3:0a:14:e9:
                    f2:ed:94:c2:ae:6e:36:1a:f0:19:99:4c:ae:47:f0:
                    1e:4e:41:ad:bc:ae:19:f4:ff:1d:c4:e8:0d:56:fa:
                    90:e1:72:d2:c9:c4:f7:5c:41:8a:22:e7:fb:40:11:
                    d8:28:e7:b7:ad:e8:a1:ca:83:df:7a:12:b9:0f:ab:
                    5a:e4:65:5d:bf:12:d5:14:58:c0:80:ae:02:72:65:
                    0d:45:01:09:3f:19:64:57:87:59:8f:47:0d:9a:5c:
                    f9:be:95:b4:31:15:a6:ce:e4:47:49:32:80:66:77:
                    b4:5a:29:e8:6a:97:09:6b:3a:c6:43:bf:ad:58:50:
                    c3:e8:b8:97:bd:dc:74:2c:2e:4b:4d:85:5a:80:2e:
                    b3:c6:52:10:c2:4c:cd:5f:0d:b5:5b:3d:86:af:b0:
                    ce:af:02:ca:02:5e:9a:1c:b3:76:7f:28:97:aa:19:
                    30:e7:7c:2c:23:cf:de:20:ac:96:51:c3:2d:6a:24:
                    9d:07:55:1c:18:4c:39:ff:5d:4d:8e:ea:24:20:04:
                    21:7e:84:b9:e7:6b:8b:5c:b4:73:66:a5:91:f7:de:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C8:D9:78:68:A2:D9:19:68:D5:3D:72:DE:5F:0A:3E:DC:B5:86:86:A6
            X509v3 Subject Key Identifier: 
                87:AD:20:5B:BF:86:19:B5:CB:49:88:F6:D4:46:E4:64:24:EB:C1:9F
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.78
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
                OCSP - URI:http://zerossl.ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Dec 31 16:11:57.934 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:43:02:1F:25:D3:D0:16:69:92:33:27:05:5F:34:F3:
                                A8:96:21:70:CB:A9:3F:5E:2D:CB:F2:DA:D8:79:BF:73:
                                4C:16:EC:02:20:17:04:37:F9:D3:01:FC:14:6C:F9:56:
                                D9:04:89:08:7E:F6:C5:B2:3B:93:F7:A5:82:BF:89:69:
                                F3:77:41:5E:AC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Dec 31 16:11:57.875 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F4:02:87:21:AE:A2:15:CC:56:84:19:
                                A1:4C:AF:78:D3:D5:98:AA:B8:F1:CE:25:FF:19:30:BE:
                                E6:FE:FC:4B:8C:02:20:7C:5E:13:35:CE:4D:D8:00:92:
                                3A:CD:FF:8A:B3:04:93:69:D9:C4:D2:EA:82:C7:FF:49:
                                C2:8F:08:1A:6A:0B:19
            X509v3 Subject Alternative Name: 
                DNS:doc.itopcms.com
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        04:00:e3:3e:59:41:3c:22:ca:52:39:5e:3e:e6:bc:e4:cd:ad:
        b1:c9:b2:90:2d:21:a5:96:b3:9c:5d:5b:5d:47:e8:05:d5:44:
        78:46:19:e9:ef:d2:b6:f4:fb:79:ea:e5:cd:35:bc:14:16:92:
        b7:4b:a1:9b:d0:1d:76:cf:cc:08:96:95:f2:70:66:a1:45:63:
        2c:84:37:8a:1e:ba:02:b7:35:f2:a7:57:22:c9:06:a9:ab:80:
        9c:58:97:13:65:3d:ee:47:be:2d:8a:12:76:05:fa:25:80:f6:
        7c:ef:a7:10:38:be:79:e1:55:f2:c0:dd:6f:ef:56:c9:91:9b:
        8c:15:be:5d:93:2a:76:a6:6a:c0:d7:af:10:32:b0:e4:01:0e:
        e3:f4:f1:80:5a:1e:20:75:c8:99:2c:2f:cb:6e:41:87:2f:0f:
        6d:cd:a4:3d:1d:91:bb:aa:27:4c:46:c9:cb:4a:b2:2e:c9:fd:
        7f:64:d8:73:3d:c6:83:28:90:85:17:51:78:58:e6:aa:dc:c2:
        0b:71:2b:00:b7:ba:76:57:52:e8:63:34:85:1b:07:d1:c9:ed:
        d2:f6:55:c5:e9:6a:32:c4:84:ca:eb:1f:a5:1b:72:46:67:2a:
        95:e7:9e:9d:18:1b:b3:17:56:74:ae:9c:9a:8f:35:e7:68:a3:
        15:d1:e1:b4:3a:1b:77:0a:f2:a4:14:56:c9:a7:45:b9:a0:34:
        cb:13:77:80:4e:3b:c6:cf:2c:7a:33:28:59:09:ef:fb:51:40:
        8f:34:d0:70:b8:85:c4:4c:f9:58:e8:11:df:71:bb:e6:55:20:
        6e:c4:19:c6:2f:1b:d8:37:08:74:c2:74:f8:a4:eb:35:ea:c0:
        9f:7b:e2:f4:b3:eb:57:5a:7e:13:db:ef:fa:2e:9e:55:b0:2d:
        1e:e4:c5:5c:59:54:a0:a0:59:07:2e:de:4e:69:92:4c:1b:08:
        7c:9d:16:fc:89:d5:e4:92:c6:4f:9c:5b:b6:97:91:07:b3:8c:
        1d:37:aa:9d:ad:71:4f:53:a9:da:e9:21:83:8f:07:95:28:8a:
        87:f9:7f:3c:38:6d:8d:1f:61:62:4c:76:fd:51:9d:e9:1e:48:
        f2:54:99:77:75:a6:e2:44:6c:85:46:9b:12:0c:03:ec:33:88:
        54:3f:d1:df:a3:0f:e0:92:a5:eb:49:8a:85:b1:53:88:62:ad:
        7f:b2:e0:37:24:e4:1a:ad:57:94:dc:dd:d2:af:81:cf:7b:52:
        de:46:9b:3d:7b:77:70:5c:bf:2b:ce:6a:f6:ae:57:d9:dc:5f:
        12:ec:17:1a:c9:c3:f0:5f:d8:5b:9a:73:75:de:e1:c7:fd:8a:
        4a:5c:29:23:ed:45:ff:6d

1701 / udp

-340822955 | 2025-01-27T07:05:58.213475

\xc8\x02\x00g\x00\x00\x00\x00\x00\x00\x00\x01\x80\x08\x00\x00\x00\x00\x00\x02\x80\x08\x00\x00\x00\x02\x01\x00\x00\n\x00\x00\x00\x03\x00\x00\x00\x03\x00\n\x00\x00\x00\x04\x00\x00\x00\x03\x80\x1d\x00\x00\x00\x07iZt4nag5qcfmhm2959gse1Z\x00\n\x00\x00\x00\x08L2TP\x80\x08\x00\x00\x00\t\x00\x01\x00\x08\x00\x00\x00\n\x00\x10

3306 / tcp

-740155298 | 2025-02-06T15:04:17.028296

MySQL:
  Protocol Version: 10
  Version: 8.0.32
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: mysql_native_password

CVE-2024-21090 CVE-2023-21980 CVE-2024-21241 CVE-2024-21239 CVE-2024-21238 86 moreCVE-2024-21236 CVE-2024-21230 CVE-2024-21219 CVE-2024-21218 CVE-2024-21213 CVE-2024-21212 CVE-2024-21207 CVE-2024-21203 CVE-2024-21201 CVE-2024-21200 CVE-2024-21199 CVE-2024-21198 CVE-2024-21197 CVE-2024-21196 CVE-2024-21194 CVE-2024-21193 CVE-2024-21173 CVE-2024-21171 CVE-2024-21166 CVE-2024-21165 CVE-2024-21163 CVE-2024-21162 CVE-2024-21160 CVE-2024-21159 CVE-2024-21157 CVE-2024-21142 CVE-2024-21137 CVE-2024-21135 CVE-2024-21134 CVE-2024-21130 CVE-2024-21129 CVE-2024-21127 CVE-2024-21125 CVE-2024-21102 CVE-2024-21096 CVE-2024-21087 CVE-2024-21069 CVE-2024-21062 CVE-2024-21061 CVE-2024-21056 CVE-2024-21055 CVE-2024-21051 CVE-2024-21050 CVE-2024-21049 CVE-2024-21047 CVE-2024-20996 CVE-2024-20985 CVE-2024-20983 CVE-2024-20981 CVE-2024-20977 CVE-2024-20973 CVE-2024-20971 CVE-2024-20969 CVE-2024-20967 CVE-2024-20965 CVE-2024-20963 CVE-2024-20961 CVE-2023-22115 CVE-2023-22114 CVE-2023-22112 CVE-2023-22111 CVE-2023-22110 CVE-2023-22104 CVE-2023-22103 CVE-2023-22097 CVE-2023-22092 CVE-2023-22084 CVE-2023-22079 CVE-2023-22078 CVE-2023-22070 CVE-2023-22068 CVE-2023-22066 CVE-2023-22065 CVE-2023-22064 CVE-2023-22059 CVE-2023-22032 CVE-2023-22007 CVE-2023-21982 CVE-2023-21977 CVE-2023-21976 CVE-2023-21972 CVE-2024-21247 CVE-2024-21237 CVE-2024-21231 CVE-2024-21101 CVE-2023-22113

4500 / udp

-645019394 | 2025-01-28T19:34:54.825571

VPN (IKE NAT-T)

Initiator SPI: 55d27b22cfa6598c
Responder SPI: 0000000000000000
Next Payload: Notification (N)
Version: 1.0
Exchange Type: Informational
Flags:
    Encryption:     False
    Commit:         False
    Authentication: False
Message ID: 581f45cf
Length: 48

9000 / tcp

-1444425651 | 2025-02-08T01:07:11.441540

HTTP/1.1 403 Forbidden
Accept-Ranges: bytes
Content-Length: 254
Content-Security-Policy: block-all-mixed-content
Content-Type: application/xml
Server: MinIO
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Vary: Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 18221636EFA54CF7
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Date: Sat, 08 Feb 2025 01:07:11 GMT

<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>AccessDenied</Code><Message>Access Denied.</Message><Resource>/</Resource><RequestId>18221636EFA54CF7</RequestId><HostId>e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855</HostId></Error>

9090 / tcp

99621715 | 2025-02-02T12:38:41.209085

Hashes

hash

-169080304

http.dom_hash

1157663880

http.favicon.hash

-114774331

http.html_hash

99621715

http.server_hash

784350709

http.title_hash

784350709

MinIO Console

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 1310
Content-Type: text/html
Last-Modified: Sun, 02 Feb 2025 12:38:41 GMT
Server: MinIO Console
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Date: Sun, 02 Feb 2025 12:38:41 GMT
Connection: close

8.219.0.148

Last Seen: 2025-02-08

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

686792162 | 2025-01-21T06:05:13.319398

OpenSSH8.0

443 / tcp

0 | 2025-02-06T03:25:57.213425

1701 / udp

-340822955 | 2025-01-27T07:05:58.213475

3306 / tcp

-740155298 | 2025-02-06T15:04:17.028296

MySQL8.0.32

4500 / udp

-645019394 | 2025-01-28T19:34:54.825571

9000 / tcp

-1444425651 | 2025-02-08T01:07:11.441540

MinIO Server

9090 / tcp

99621715 | 2025-02-02T12:38:41.209085

Hashes

MinIO Server

Products

Pricing

Contact Us

8.219.0.148

Last Seen: 2025-02-08

Tags:

GeneralInformation

Vulnerabilities All ports Port 22 Port 3306 Latest CVSS

OpenPorts

22 / tcp 686792162 | 2025-01-21T06:05:13.319398

OpenSSH8.0

443 / tcp 0 | 2025-02-06T03:25:57.213425

1701 / udp -340822955 | 2025-01-27T07:05:58.213475

3306 / tcp -740155298 | 2025-02-06T15:04:17.028296

MySQL8.0.32

4500 / udp -645019394 | 2025-01-28T19:34:54.825571

9000 / tcp -1444425651 | 2025-02-08T01:07:11.441540

MinIO Server

9090 / tcp 99621715 | 2025-02-02T12:38:41.209085

Hashes

MinIO Server

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

686792162 | 2025-01-21T06:05:13.319398

443 / tcp

0 | 2025-02-06T03:25:57.213425

1701 / udp

-340822955 | 2025-01-27T07:05:58.213475

3306 / tcp

-740155298 | 2025-02-06T15:04:17.028296

4500 / udp

-645019394 | 2025-01-28T19:34:54.825571

9000 / tcp

-1444425651 | 2025-02-08T01:07:11.441540

9090 / tcp

99621715 | 2025-02-02T12:38:41.209085