GeneralInformation

Hostnames	foison.cloud
Domains	foison.cloud
Country	China
City	Xiamen
Organization	Fuzhou city, fujian provincial network of CNCGROUP
ISP	CHINA UNICOM China169 Backbone
ASN	AS4837

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 111 443 4369 9000 19000 20000 33060

-1797552914 | 2024-06-14T15:50:17.291117

22 / tcp

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQCzQYdT+POFFK+pijNmnVvv/OWhf3WCMqZyUBx9KQoM/UFB
krUNP0R/eqX5VMKfo0og+B8cL85ivl9+2yzES8RS/8NqHE4LF9UXP2tDfhOece3aSsyXU8TjXSBY
azctmhJn6g/c5VlKlEmyKFI5f2RYCbJSQwzr1AZlngFaBoTepV/aVWJLWHHIsPQdmPG6HUkEI8gS
Vt3+ZD2m82+YIKiFNR1pB9zoB00e4WRfFsS51ncfYwoFBFmxEJywaoABB0GgrsL5ElLJJfm9GzsF
FP9vG/sITDhnJT386qfp63hB9fUVe1nxwUm55kD9UN2PQr7d9ambgw7hw8fAjE1R6nMh
Fingerprint: 14:d8:39:b5:0a:3f:63:8b:a6:16:cf:8f:c7:52:98:78

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	aes192-cbc
	aes256-cbc
	blowfish-cbc
	cast128-cbc
	3des-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-6111 13 moreCVE-2019-6110 CVE-2019-6109 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

-1242433994 | 2024-05-26T01:51:39.016442

111 / tcp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111
mountd	1	udp	20048
mountd	1	tcp	20048
mountd	2	udp	20048
mountd	2	tcp	20048
mountd	3	udp	20048
mountd	3	tcp	20048
status	1	udp	50270
status	1	tcp	46948
nfs	3	tcp	2049
nfs	4	tcp	2049
100227	3	tcp	2049
nfs	3	udp	2049
nfs	4	udp	2049
100227	3	udp	2049
nlockmgr	1	udp	44271
nlockmgr	3	udp	44271
nlockmgr	4	udp	44271
nlockmgr	1	tcp	40077
nlockmgr	3	tcp	40077
nlockmgr	4	tcp	40077

-1242433994 | 2024-05-27T20:11:11.310434

111 / udp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111
mountd	1	udp	20048
mountd	1	tcp	20048
mountd	2	udp	20048
mountd	2	tcp	20048
mountd	3	udp	20048
mountd	3	tcp	20048
status	1	udp	50270
status	1	tcp	46948
nfs	3	tcp	2049
nfs	4	tcp	2049
100227	3	tcp	2049
nfs	3	udp	2049
nfs	4	udp	2049
100227	3	udp	2049
nlockmgr	1	udp	44271
nlockmgr	3	udp	44271
nlockmgr	4	udp	44271
nlockmgr	1	tcp	40077
nlockmgr	3	tcp	40077
nlockmgr	4	tcp	40077

-1988936244 | 2024-06-11T20:43:54.329438

443 / tcp

<empty>

HTTP/1.1 200 OK
Date: Tue, 11 Jun 2024 20:43:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 3529
Connection: keep-alive
Last-Modified: Tue, 11 Jun 2024 13:10:37 GMT
ETag: "66684ccd-dc9"
Cache-Control: no-store
Accept-Ranges: bytes
Cache-Control: no-store
Access-Control-Allow-Headers: X-CSRFToken,Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,X-Requested-With,X-File-Name,i18n,token,appkey,userName,password,sw8,eteamsid,traceid,langType,timezoneoffset,authtoken,signature,enableTrans,routePath,tranceid,currentUrl,ebbusinessid,ebBusinessId
Access-Control-Max-Age: 86400
X-XSS-Protection: 1
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9d:dc:fe:b1:2e:42:33:a8:7e:d7:a0:14:f5:fd:54
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, O=UniTrust, CN=SHECA OV Server CA G5
        Validity
            Not Before: Jun 15 08:41:10 2023 GMT
            Not After : Jun 15 15:59:59 2024 GMT
        Subject: C=CN, ST=\xE7\xA6\x8F\xE5\xBB\xBA, L=\xE7\xA6\x8F\xE5\xB7\x9E, O=\xE7\xA6\x8F\xE5\xB7\x9E\xE6\x85\xA7\xE7\xBE\x8E\xE4\xB8\xB0\xE7\xA7\x91\xE6\x8A\x80\xE6\x9C\x89\xE9\x99\x90\xE5\x85\xAC\xE5\x8F\xB8, CN=*.foison.cloud
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:1c:d6:cc:6d:c2:b9:ae:69:f6:73:0b:35:
                    09:97:8c:c0:c8:1d:06:7b:ff:a9:0a:dd:d6:cf:4c:
                    aa:a9:43:e9:93:ae:d2:5b:05:e6:06:02:cf:fc:34:
                    6c:13:b8:57:ca:1d:eb:5b:d6:38:a7:58:81:2c:af:
                    b3:01:14:43:b8:aa:07:38:e0:54:e9:62:bc:71:9f:
                    dc:03:56:a5:4a:06:3d:dd:eb:59:1c:ed:50:c6:5e:
                    77:ae:73:69:c4:f2:88:2d:aa:a2:07:ec:23:d2:a5:
                    2b:64:ba:47:0d:0e:a9:c7:a2:b3:48:d0:07:8d:3a:
                    7e:04:0e:13:60:9b:02:43:1f:08:bc:f2:3e:ba:52:
                    3f:cb:5d:ec:1f:cd:20:68:51:0c:55:46:5e:67:f5:
                    4c:08:bd:cd:cf:aa:63:25:cf:c3:d7:fb:cb:e4:9d:
                    7e:24:94:08:79:e9:68:fd:e2:9d:59:74:69:42:dd:
                    d4:65:5a:fb:b9:05:d6:b2:7d:8f:73:f5:f4:dd:79:
                    6e:2e:60:7e:7f:da:42:1e:59:70:10:e6:68:e6:02:
                    4e:67:4a:2b:94:84:58:59:37:d5:8d:1a:77:19:c0:
                    22:20:30:3c:36:87:1f:5f:73:f0:ac:79:54:55:6c:
                    83:2b:3e:7f:7a:27:b1:62:e7:d8:60:da:be:a4:11:
                    fd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            Authority Information Access: 
                OCSP - URI:http://ocsp.global.sheca.com/ovscag5
                CA Issuers - URI:http://certs.global.sheca.com/ovscag5.cer
            X509v3 Authority Key Identifier: 
                03:79:A3:8D:52:5F:D4:E9:88:92:1F:43:58:54:25:02:F4:87:8B:7E
            X509v3 Subject Alternative Name: 
                DNS:*.foison.cloud, DNS:foison.cloud
            X509v3 Subject Key Identifier: 
                31:8C:F4:08:A6:2C:D0:1E:28:43:53:5A:B3:8A:A1:2A:9E:38:F4:82
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Jun 15 08:41:11.137 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5E:50:42:33:06:62:6B:8E:F7:08:D7:D0:
                                77:7A:69:6E:30:53:5F:26:77:63:76:C6:E9:5C:A4:EF:
                                00:EA:F7:0F:02:20:4D:BE:22:17:58:5D:28:CC:30:5A:
                                23:83:EB:B2:FD:34:2E:28:48:0B:8B:46:83:A2:A4:BB:
                                F3:BD:32:CF:DB:50
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Jun 15 08:41:11.889 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0F:AB:83:A4:CE:50:D6:65:06:33:45:6B:
                                CF:B1:D5:9A:CF:1F:65:7D:F7:44:60:34:00:4B:6A:3A:
                                7A:D4:D4:FE:02:20:71:29:DD:AF:94:A0:BB:53:F4:33:
                                33:BF:50:3D:25:6D:C7:1E:A0:E9:FF:DA:83:8F:55:56:
                                BA:AC:65:9A:95:15
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Jun 15 08:41:12.733 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:05:2A:62:F0:78:85:C6:B9:F7:CE:F6:B0:
                                AA:FC:76:C5:8F:79:4D:9B:83:1C:34:51:E2:56:3B:4F:
                                E3:69:35:E3:02:20:0E:7B:E4:07:C4:0F:92:A6:B5:C3:
                                FA:15:90:72:C8:F6:49:CC:8A:B7:40:38:9A:0A:FF:48:
                                20:41:9C:B7:C5:EF
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Certificate Policies: 
                Policy: 1.2.156.112570.1.1.2
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.global.sheca.com/ovscag5.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3b:8e:6c:21:76:bd:82:7a:98:c2:e6:bc:a9:76:f1:e3:32:22:
        3d:90:3c:24:44:47:a4:d7:92:51:8b:53:16:94:a9:f4:03:24:
        64:48:9e:db:07:2d:fc:e6:1a:4d:5b:de:f5:b2:b8:10:2b:0e:
        00:28:52:53:ab:15:03:33:a3:7e:f2:d0:50:60:8a:5f:78:dd:
        c4:23:f4:a9:11:d3:1b:5b:74:cf:d8:aa:93:27:82:33:02:4c:
        84:76:39:79:e0:74:6d:f7:23:01:75:e6:35:8f:6f:47:c0:3b:
        bb:39:2a:3a:ac:bf:4a:f6:a4:95:54:4b:93:0b:ea:20:29:f9:
        47:aa:78:23:d0:0a:7c:96:4b:c7:39:3e:3c:fa:3d:03:a3:68:
        27:79:75:eb:e2:3d:44:d0:41:a8:26:3f:cd:f2:47:c6:1d:c2:
        22:b7:12:e9:24:31:16:77:4c:c3:d2:68:fd:46:06:b1:2b:31:
        0d:3f:ed:89:f9:88:00:9d:10:6a:ec:52:d1:d5:42:90:e4:d3:
        e5:06:c2:34:96:fd:93:ed:e0:4a:85:a0:76:47:4c:92:05:3e:
        0c:29:f7:f7:d5:45:9b:d2:4a:cb:1d:33:53:cf:3f:05:58:09:
        2b:b8:48:a4:59:b7:83:d3:b8:94:f7:c2:fd:50:36:fb:5f:ed:
        80:ef:e2:54

2046314707 | 2024-06-15T05:54:14.065556

4369 / tcp

Erlang Port Mapper Daemon:
  nodes:
    rabbit: 15772

-1290785555 | 2024-06-15T02:30:05.578884

9000 / tcp

HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 15 Jun 2024 02:30:10 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 555
Last-Modified: Tue, 16 Jan 2024 11:28:57 GMT
Connection: keep-alive
ETag: "65a66879-22b"
Accept-Ranges: bytes

<!DOCTYPE html>
<html>
<head>
<title>Welcome to tengine!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to tengine!</h1>
<p>If you see this page, the tengine web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://tengine.taobao.org/">tengine.taobao.org</a>.</p>

<p><em>Thank you for using tengine.</em></p>
</body>
</html>

1526458578 | 2024-06-09T23:56:56.350149

19000 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xff\xff\xff\x00\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\x00\x00\x00\x0f\x00\x01\x00\x00v\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01HTTP/2 client preface string missing or corrupt. Hex dump for received bytes: 00000008415f4c47494e535045435400

-745881794 | 2024-06-15T09:00:55.352717

20000 / tcp

HTTP/1.1 400 
Content-Type: text/html;charset=utf-8
Content-Language: en
Content-Length: 435
Date: Sat, 15 Jun 2024 09:00:59 GMT
Connection: close

<!doctype html><html lang="en"><head><title>HTTP Status 400 – Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 – Bad Request</h1></body></html>

-795948505 | 2024-06-14T05:21:34.411167

33060 / tcp

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

112.111.28.74

Last Seen: 2024-06-15

GeneralInformation

Vulnerabilities

OpenPorts

-1797552914 | 2024-06-14T15:50:17.291117
22 / tcp

OpenSSH7.4

-1242433994 | 2024-05-26T01:51:39.016442
111 / tcp

-1242433994 | 2024-05-27T20:11:11.310434
111 / udp

-1988936244 | 2024-06-11T20:43:54.329438
443 / tcp

2046314707 | 2024-06-15T05:54:14.065556
4369 / tcp

Erlang Port Mapper Daemon

-1290785555 | 2024-06-15T02:30:05.578884
9000 / tcp

Tengine

1526458578 | 2024-06-09T23:56:56.350149
19000 / tcp

-745881794 | 2024-06-15T09:00:55.352717
20000 / tcp

-795948505 | 2024-06-14T05:21:34.411167
33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

112.111.28.74

Last Seen: 2024-06-15

GeneralInformation

Vulnerabilities All ports Port 22 Latest CVSS

OpenPorts

-1797552914 | 2024-06-14T15:50:17.291117 22 / tcp

OpenSSH7.4

-1242433994 | 2024-05-26T01:51:39.016442 111 / tcp

-1242433994 | 2024-05-27T20:11:11.310434 111 / udp

-1988936244 | 2024-06-11T20:43:54.329438 443 / tcp

2046314707 | 2024-06-15T05:54:14.065556 4369 / tcp

Erlang Port Mapper Daemon

-1290785555 | 2024-06-15T02:30:05.578884 9000 / tcp

Tengine

1526458578 | 2024-06-09T23:56:56.350149 19000 / tcp

-745881794 | 2024-06-15T09:00:55.352717 20000 / tcp

-795948505 | 2024-06-14T05:21:34.411167 33060 / tcp

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

-1797552914 | 2024-06-14T15:50:17.291117
22 / tcp

-1242433994 | 2024-05-26T01:51:39.016442
111 / tcp

-1242433994 | 2024-05-27T20:11:11.310434
111 / udp

-1988936244 | 2024-06-11T20:43:54.329438
443 / tcp

2046314707 | 2024-06-15T05:54:14.065556
4369 / tcp

-1290785555 | 2024-06-15T02:30:05.578884
9000 / tcp

1526458578 | 2024-06-09T23:56:56.350149
19000 / tcp

-745881794 | 2024-06-15T09:00:55.352717
20000 / tcp

-795948505 | 2024-06-14T05:21:34.411167
33060 / tcp