GeneralInformation

Country	China
City	Beijing
Organization	Shanghai UCloud Information Technology Company Limited
ISP	China Unicom Beijing Province Network
ASN	AS4808

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 2181 3306 5672 8080 8123 9000 9092

79443063 | 2024-06-06T10:32:09.235039

22 / tcp

SSH-2.0-OpenSSH_8.0
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCvQO+pAMTV44dWfJzqaTBtF7rYQTjCEQuXLObg5W5rPGsO
/H+zdAixsBcrxJJCtbGKNxztOs+O1EQRbSuI55K0DIHWfQM+ocElm9m4IeRhR9iasUJIVCLKqKlq
LPxr24GX8jBOgL9a5ucxnr2FY0pEyQXW/l6cJBqrevIilYqfTJkk3j3ZO4jPrTcWzUZte73FMdLr
n6q9zWtkC166OdQ3jCHg7eE//su5OMVhmFdx/vu3axmKluYCJcpeNZ3P+mNitijHoN17OXa6TRRW
Fe30qQpmbzU7zSeDJxj6nl0Y2Za5I54Ma2UynQ6hnRRbj4+b/8lo4eJkWSTcDIkCrFohx/OtSVzE
5ANX2CJ1N1p4FHIY1DtK0RlE2HlJdb3Z5p3mnz/s3tSFEAwjT3dwcHyQtviK8QutlFAPQYIezMj0
eYMvgigWbOnlyVQ9J67TaGo4GoWTmX+dSbOREG7pRGXVRKgx29dJ58MA6Vn74dGj0NRGUWF+MqwK
UMwqUlH7joc=
Fingerprint: 9b:95:df:7a:18:be:fe:f9:89:9e:91:1c:d4:b9:be:70

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group14-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	aes256-gcm@openssh.com
	chacha20-poly1305@openssh.com
	aes256-ctr
	aes256-cbc
	aes128-gcm@openssh.com
	aes128-ctr
	aes128-cbc

MAC Algorithms:
	hmac-sha2-256-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha2-256
	hmac-sha1
	umac-128@openssh.com
	hmac-sha2-512

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-16905 7 moreCVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368

-2139564636 | 2024-05-31T07:03:06.061346

2181 / tcp

Zookeeper version: 3.4.13-2d71af4dbe22557fda74f9a9b4309b15a7487f03, built on 06/29/2018 04:05 GMT
Clients:
 /172.104.210.105:38619[1](queued=0,recved=0,sent=0)
 /45.79.168.172:34284[1](queued=0,recved=0,sent=0)
 /172.104.210.105:54935[1](queued=0,recved=0,sent=0)
 /172.104.210.105:60415[1](queued=0,recved=0,sent=0)
 /224.237.239.253:48374[0](queued=0,recved=1,sent=0)
 /104.152.52.230:44919[1](queued=0,recved=0,sent=0)
 /172.104.210.105:49160[1](queued=0,recved=0,sent=0)
 /104.152.52.162:52977[1](queued=0,recved=0,sent=0)
 /172.104.210.105:53813[1](queued=0,recved=0,sent=0)
 /192.155.88.231:42217[1](queued=0,recved=0,sent=0)
 /192.155.88.231:42216[1](queued=0,recved=0,sent=0)
 /192.155.88.231:60071[1](queued=0,recved=0,sent=0)
 /192.155.88.231:60068[1](queued=0,recved=0,sent=0)
 /198.74.56.46:35608[1](queued=0,recved=0,sent=0)
 /69.164.217.74:40877[1](queued=0,recved=0,sent=0)
 /104.152.52.160:40619[1](queued=0,recved=0,sent=0)
 /198.74.56.46:44365[1](queued=0,recved=0,sent=0)
 /69.164.217.74:40875[1](queued=0,recved=0,sent=0)
 /104.152.52.120:52030[1](queued=0,recved=0,sent=0)
 /45.79.168.172:36579[1](queued=0,recved=0,sent=0)
 /172.232.47.102:60000[1](queued=0,recved=0,sent=0)
 /104.152.52.149:59158[1](queued=0,recved=0,sent=0)
 /198.74.56.46:42385[1](queued=0,recved=0,sent=0)
 /172.104.210.105:53811[1](queued=0,recved=0,sent=0)
 /69.164.217.74:46749[1](queued=0,recved=0,sent=0)
 /192.155.88.231:60063[1](queued=0,recved=0,sent=0)
 /104.152.52.114:50922[1](queued=0,recved=0,sent=0)
 /198.74.56.46:42380[1](queued=0,recved=0,sent=0)
 /192.155.88.231:60066[1](queued=0,recved=0,sent=0)
 /172.104.210.105:38623[1](queued=0,recved=0,sent=0)
 /198.74.56.46:44368[1](queued=0,recved=0,sent=0)
 /172.105.251.199:60000[1](queued=0,recved=0,sent=0)
 /172.104.210.105:49163[1](queued=0,recved=0,sent=0)
 /69.164.217.74:35667[1](queued=0,recved=0,sent=0)
 /45.79.168.172:34282[1](queued=0,recved=0,sent=0)
 /104.152.52.120:44458[1](queued=0,recved=0,sent=0)
 /104.152.52.107:51088[1](queued=0,recved=0,sent=0)
 /104.152.52.244:41332[1](queued=0,recved=0,sent=0)
 /69.164.217.245:35565[1](queued=0,recved=0,sent=0)
 /69.164.217.74:35665[1](queued=0,recved=0,sent=0)
 /198.74.56.46:43135[1](queued=0,recved=0,sent=0)
 /104.152.52.99:41133[1](queued=0,recved=0,sent=0)
 /104.152.52.121:53627[1](queued=0,recved=0,sent=0)
 /69.164.217.74:35664[1](queued=0,recved=0,sent=0)
 /45.79.163.53:57627[1](queued=0,recved=0,sent=0)
 /104.152.52.177:45076[1](queued=0,recved=0,sent=0)
 /69.164.217.74:46747[1](queued=0,recved=0,sent=0)
 /69.164.217.245:35571[1](queued=0,recved=0,sent=0)
 /198.74.56.46:43130[1](queued=0,recved=0,sent=0)
 /45.79.168.172:44857[1](queued=0,recved=0,sent=0)
 /104.152.52.176:49598[1](queued=0,recved=0,sent=0)
 /198.74.56.46:49376[1](queued=0,recved=0,sent=0)
 /69.164.217.74:46742[1](queued=0,recved=0,sent=0)
 /69.164.217.245:35570[1](queued=0,recved=0,sent=0)
 /172.17.0.1:42408[1](queued=0,recved=1508373,sent=1508374)
 /45.79.168.172:44859[1](queued=0,recved=0,sent=0)
 /45.79.163.53:57632[1](queued=0,recved=0,sent=0)

Latency min/avg/max: 0/0/20
Received: 1508813
Sent: 1508750
Connections: 57
Outstanding: 0
Zxid: 0x5a
Mode: standalone
Node count: 36

2019184402 | 2024-06-09T10:52:27.116269

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 8.0.27
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: caching_sha2_password

-1211910529 | 2024-06-13T06:38:36.222805

5672 / tcp

AMQP:
  Protocol Version: 0-9
  Product: RabbitMQ
  Product Version: 3.8.15
  Platform: Erlang/OTP 23.3.2
  Capabilities:
    Exchange Exchange Bindings: True
    Connection.blocked: True
    Authentication Failure Close: True
    Direct Reply To: True
    Basic.nack: True
    Per Consumer Qos: True
    Consumer Priorities: True
    Consumer Cancel Notify: True
    Publisher Confirms: True

CVE-2021-22117 CVE-2021-22116 CVE-2023-46118 CVE-2022-31008 CVE-2021-32719 CVE-2021-32718

1410193794 | 2024-05-27T16:06:16.658754

8080 / tcp

HTTP Status 404 â€“ Not Found

HTTP/1.1 404 
Content-Type: text/html;charset=utf-8
Content-Language: en
Content-Length: 431
Date: Mon, 27 May 2024 16:05:45 GMT

-253192803 | 2024-06-01T15:27:20.766176

8123 / tcp

HTTP/1.1 200 OK
Date: Sat, 01 Jun 2024 15:27:20 GMT
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Keep-Alive: timeout=3
X-ClickHouse-Summary: {"read_rows":"0","read_bytes":"0","written_rows":"0","written_bytes":"0","total_rows_to_read":"0"}


ClickHouse:
  Required Login: True
  Server Name: 10-60-42-236
  Primary Status: Ok.
  Replicas Status: Ok.

158842467 | 2024-05-28T16:52:16.299763

9000 / tcp

HTTP/1.0 400 Bad Request

Port 9000 is for clickhouse-client program
You must use port 8123 for HTTP.

ClickHouse:
  Required Login: True

-1825624635 | 2024-05-28T03:03:09.818503

9092 / tcp

Kafka Broker

Topics:
    ods_link_visit_topic
    mykafka

Hosts:
    117.50.194.227:9092

117.50.194.227

Last Seen: 2024-06-13

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

79443063 | 2024-06-06T10:32:09.235039
22 / tcp

OpenSSH8.0

-2139564636 | 2024-05-31T07:03:06.061346
2181 / tcp

2019184402 | 2024-06-09T10:52:27.116269
3306 / tcp

MySQL8.0.27

-1211910529 | 2024-06-13T06:38:36.222805
5672 / tcp

RabbitMQ3.8.15

1410193794 | 2024-05-27T16:06:16.658754
8080 / tcp

-253192803 | 2024-06-01T15:27:20.766176
8123 / tcp

ClickHouse

158842467 | 2024-05-28T16:52:16.299763
9000 / tcp

ClickHouse

-1825624635 | 2024-05-28T03:03:09.818503
9092 / tcp

Kafka

Products

Pricing

Contact Us

117.50.194.227

Last Seen: 2024-06-13

Tags:

GeneralInformation

Vulnerabilities All ports Port 22 Port 5672 Latest CVSS

OpenPorts

79443063 | 2024-06-06T10:32:09.235039 22 / tcp

OpenSSH8.0

-2139564636 | 2024-05-31T07:03:06.061346 2181 / tcp

2019184402 | 2024-06-09T10:52:27.116269 3306 / tcp

MySQL8.0.27

-1211910529 | 2024-06-13T06:38:36.222805 5672 / tcp

RabbitMQ3.8.15

1410193794 | 2024-05-27T16:06:16.658754 8080 / tcp

-253192803 | 2024-06-01T15:27:20.766176 8123 / tcp

ClickHouse

158842467 | 2024-05-28T16:52:16.299763 9000 / tcp

ClickHouse

-1825624635 | 2024-05-28T03:03:09.818503 9092 / tcp

Kafka

Products

Pricing

Contact Us

Vulnerabilities

79443063 | 2024-06-06T10:32:09.235039
22 / tcp

-2139564636 | 2024-05-31T07:03:06.061346
2181 / tcp

2019184402 | 2024-06-09T10:52:27.116269
3306 / tcp

-1211910529 | 2024-06-13T06:38:36.222805
5672 / tcp

1410193794 | 2024-05-27T16:06:16.658754
8080 / tcp

-253192803 | 2024-06-01T15:27:20.766176
8123 / tcp

158842467 | 2024-05-28T16:52:16.299763
9000 / tcp

-1825624635 | 2024-05-28T03:03:09.818503
9092 / tcp