OSN

Host

120.26.231.38

Tags: Hosting Database Expired certificate End-of-life software

As of our latest check on 2026-09-23, 120.26.231.38 (Hangzhou Alibaba Advertising Co.,Ltd., AS37963, China) had 4 open ports (22, 80, 443, 3306) and 4 known CVEs, 1 known to be exploited.

Known CVEs on this host

4open ports
0names pointing here
4known CVEs
1known exploited

Open ports and CVEs as of our latest check of this host, 2026-09-23.

CVEs by severity: CRITICAL 1 HIGH 3

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 346 on a distribution build — the fix may be backported (mysql 5.6.33, openssh 6.6.1p1). See them

Not counted: 1 fixed by the distribution (mysql 5.6.33). See them

Network
Hangzhou Alibaba Advertising Co.,Ltd. AS37963
Open ports
22, 80, 443, 3306 · at our latest check, 2026-09-23
Location
China CN
Route
120.26.0.0/16 · announced by Hangzhou Alibaba Advertising Co.,Ltd. AS37963 RPKI valid
Organisation
Alibaba Group · Content / hosting
Registry network
ALISOFT · 120.24.0.0 - 120.27.255.255 · APNIC
Abuse contact
[email protected] · for ALISOFT
First seen
2026-09-23 14:34 UTC
Last seen alive
2026-09-23 14:38 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (4)

22/tcp SSH OpenSSH_6.6.1p1 first 2026-09-23 · last 2026-09-23
Server
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2
Host key
ssh-ed25519 8114148ba8ee5f04…
Raw response 
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2
80/tcp HTTP openresty/1.11.2.2 4 CVEs first 2026-09-23 · last 2026-09-23
Status
301 Moved Permanently
Title
301 Moved Permanently
Server
openresty/1.11.2.2
Raw response 
HTTP/1.1 301 Moved Permanently
Server: openresty/1.11.2.2
Date: Wed, 23 Sep 2026 14:34:51 GMT
Content-Type: text/html
Content-Length: 191
Connection: keep-alive
Location: https://120.26.231.38/

<html>
<head><title>301 Moved Permanently</title></head>
<body bgcolor="white">
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty/1.11.2.2</center>
</body>
</html>
443/tcp TLS first 2026-09-23 · last 2026-09-23
TLS
TLSv1.2
Certificate for
www.fangquant.com, fangquant.com
Issued by
Encryption Everywhere DV TLS CA - G2
Valid
2026-06-21 → 2026-09-18
Raw response 
HTTP/1.1 400 Bad Request
Server: openresty/1.11.2.2
Date: Wed, 23 Sep 2026 14:34:47 GMT
Content-Type: text/html
Content-Length: 679
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body bgcolor="white">
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty/1.11.2.2</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
3306/tcp MYSQL first 2026-09-23 · last 2026-09-23
Protocol
5.6.33-0ubuntu0.14.04.1
Raw response 
[
5.6.33-0ubuntu0.14.04.12{X&RIX`W���uf}d^,ZejfCXmysql_native_password

Vulnerabilities

Distribution build — the fix may be backported (346)

These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.

CVEs by severity: CRITICAL 8 HIGH 43 MEDIUM 262 LOW 33

CVESoftware
CVE-2016-1908 CRITICAL 9.8 openssh 6.6.1p1 · port 22
CVE-2016-9841 CRITICAL 9.8 mysql 5.6.33 · port 3306
CVE-2016-9843 CRITICAL 9.8 mysql 5.6.33 · port 3306
CVE-2019-3822 CRITICAL 9.8 mysql 5.6.33 · port 3306
CVE-2019-5482 CRITICAL 9.8 mysql 5.6.33 · port 3306
CVE-2021-21344 CRITICAL 9.8 mysql 5.6.33 · port 3306
CVE-2023-38408 CRITICAL 9.8 openssh 6.6.1p1 · port 22
CVE-2021-21351 CRITICAL 9.1 mysql 5.6.33 · port 3306
CVE-2016-9840 HIGH 8.8 mysql 5.6.33 · port 3306
CVE-2016-9842 HIGH 8.8 mysql 5.6.33 · port 3306
CVE-2022-21824 HIGH 8.2 mysql 5.6.33 · port 3306
CVE-2015-5600 HIGH 8.1 openssh 6.6.1p1 · port 22
CVE-2021-22901 HIGH 8.1 mysql 5.6.33 · port 3306
CVE-2022-27778 HIGH 8.1 mysql 5.6.33 · port 3306
CVE-2026-35385 HIGH 8.1 openssh 6.6.1p1 · port 22
CVE-2026-35414 HIGH 8.1 openssh 6.6.1p1 · port 22
CVE-2015-8325 HIGH 7.8 openssh 6.6.1p1 · port 22
CVE-2016-10012 HIGH 7.8 openssh 6.6.1p1 · port 22
CVE-2017-15945 HIGH 7.8 mysql 5.6.33 · port 3306
CVE-2019-5436 HIGH 7.8 mysql 5.6.33 · port 3306
CVE-2019-5443 HIGH 7.8 mysql 5.6.33 · port 3306
CVE-2021-21348 HIGH 7.8 mysql 5.6.33 · port 3306
CVE-2016-3440 HIGH 7.7 mysql 5.6.33 · port 3306
CVE-2017-3308 HIGH 7.7 mysql 5.6.33 · port 3306
CVE-2017-3309 HIGH 7.7 mysql 5.6.33 · port 3306
CVE-2018-2755 HIGH 7.7 mysql 5.6.33 · port 3306
CVE-2026-60002 HIGH 7.7 openssh 6.6.1p1 · port 22
CVE-2016-10708 HIGH 7.5 openssh 6.6.1p1 · port 22
CVE-2016-6515 HIGH 7.5 openssh 6.6.1p1 · port 22
CVE-2017-10155 HIGH 7.5 mysql 5.6.33 · port 3306
CVE-2017-3329 HIGH 7.5 mysql 5.6.33 · port 3306
CVE-2017-3450 HIGH 7.5 mysql 5.6.33 · port 3306
CVE-2017-3599 HIGH 7.5 mysql 5.6.33 · port 3306
CVE-2018-2696 HIGH 7.5 mysql 5.6.33 · port 3306
CVE-2020-1967 HIGH 7.5 mysql 5.6.33 · port 3306
CVE-2020-28196 HIGH 7.5 mysql 5.6.33 · port 3306
CVE-2021-23840 HIGH 7.5 mysql 5.6.33 · port 3306
CVE-2026-60000 HIGH 7.5 openssh 6.6.1p1 · port 22
CVE-2020-15778 HIGH 7.4 openssh 6.6.1p1 · port 22
CVE-2021-3450 HIGH 7.4 mysql 5.6.33 · port 3306
CVE-2021-44531 HIGH 7.4 mysql 5.6.33 · port 3306
CVE-2016-10009 HIGH 7.3 openssh 6.6.1p1 · port 22
CVE-2022-1292 HIGH 7.3 mysql 5.6.33 · port 3306
CVE-2018-2562 HIGH 7.1 mysql 5.6.33 · port 3306
CVE-2018-3064 HIGH 7.1 mysql 5.6.33 · port 3306
CVE-2019-2534 HIGH 7.1 mysql 5.6.33 · port 3306
CVE-2023-21980 HIGH 7.1 mysql 5.6.33 · port 3306
CVE-2015-6564 HIGH 7.0 openssh 6.6.1p1 · port 22
CVE-2016-10010 HIGH 7.0 openssh 6.6.1p1 · port 22
CVE-2016-6663 HIGH 7.0 mysql 5.6.33 · port 3306
CVE-2021-41617 HIGH 7.0 openssh 6.6.1p1 · port 22
CVE-2016-8318 MEDIUM 6.8 mysql 5.6.33 · port 3306
CVE-2018-2583 MEDIUM 6.8 mysql 5.6.33 · port 3306
CVE-2019-6109 MEDIUM 6.8 openssh 6.6.1p1 · port 22
CVE-2019-6110 MEDIUM 6.8 openssh 6.6.1p1 · port 22
CVE-2017-3312 MEDIUM 6.7 mysql 5.6.33 · port 3306
CVE-2017-3600 MEDIUM 6.6 mysql 5.6.33 · port 3306
CVE-2016-3518 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-10167 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-10276 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-10378 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-10379 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-10384 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3238 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3244 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3256 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3257 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3258 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3273 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3452 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3453 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3633 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2017-3634 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2573 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2612 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2622 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2640 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2665 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2668 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2703 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2758 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2782 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2784 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2805 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2817 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-2819 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-3070 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-3133 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-3143 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-3156 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2018-3251 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2019-2455 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2019-2482 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2019-2529 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2019-2740 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2019-2805 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2019-2974 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2020-14539 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2020-14765 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2020-14769 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2020-14830 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2020-14846 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2020-2579 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2020-2780 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2023-51385 MEDIUM 6.5 openssh 6.6.1p1 · port 22
CVE-2024-21177 MEDIUM 6.5 mysql 5.6.33 · port 3306
CVE-2026-106585 MEDIUM 6.5 openssh 6.6.1p1 · port 22
CVE-2026-35387 MEDIUM 6.5 openssh 6.6.1p1 · port 22
CVE-2026-59998 MEDIUM 6.5 openssh 6.6.1p1 · port 22
CVE-2026-60001 MEDIUM 6.5 openssh 6.6.1p1 · port 22
CVE-2015-6563 MEDIUM 6.4 openssh 6.6.1p1 · port 22
CVE-2016-3115 MEDIUM 6.4 openssh 6.6.1p1 · port 22
CVE-2019-2503 MEDIUM 6.4 mysql 5.6.33 · port 3306
CVE-2019-2897 MEDIUM 6.4 mysql 5.6.33 · port 3306
CVE-2017-3291 MEDIUM 6.3 mysql 5.6.33 · port 3306
CVE-2016-10011 MEDIUM 6.2 openssh 6.6.1p1 · port 22
CVE-2019-2969 MEDIUM 6.2 mysql 5.6.33 · port 3306
CVE-2019-10219 MEDIUM 6.1 mysql 5.6.33 · port 3306
CVE-2015-3152 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2016-3588 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2016-6210 MEDIUM 5.9 openssh 6.6.1p1 · port 22
CVE-2018-0735 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2018-2761 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2018-3123 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2019-1559 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2019-6111 MEDIUM 5.9 openssh 6.6.1p1 · port 22
CVE-2020-14145 MEDIUM 5.9 openssh 6.6.1p1 · port 22
CVE-2020-1971 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2020-2574 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2020-2804 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2021-2356 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2021-23841 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2021-3449 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2023-22053 MEDIUM 5.9 mysql 5.6.33 · port 3306
CVE-2023-48795 MEDIUM 5.9 openssh 6.6.1p1 · port 22
CVE-2026-59999 MEDIUM 5.9 openssh 6.6.1p1 · port 22
CVE-2017-3265 MEDIUM 5.6 mysql 5.6.33 · port 3306
CVE-2016-0652 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2016-0653 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2016-0654 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2016-0656 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2016-0657 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2016-0658 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2016-0659 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2016-0662 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2016-7440 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2017-3454 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2018-2647 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2018-2787 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2018-3247 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2019-2819 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2020-14760 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2020-15358 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2021-22570 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2022-21509 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2022-21527 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2022-21528 MEDIUM 5.5 mysql 5.6.33 · port 3306
CVE-2017-3455 MEDIUM 5.4 mysql 5.6.33 · port 3306
CVE-2019-2731 MEDIUM 5.4 mysql 5.6.33 · port 3306
CVE-2026-59995 MEDIUM 5.4 openssh 6.6.1p1 · port 22
CVE-2026-59996 MEDIUM 5.4 openssh 6.6.1p1 · port 22
CVE-2026-59997 MEDIUM 5.4 openssh 6.6.1p1 · port 22
CVE-2016-20012 MEDIUM 5.3 openssh 6.6.1p1 · port 22
CVE-2017-10283 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2017-15906 MEDIUM 5.3 openssh 6.6.1p1 · port 22
CVE-2017-3305 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2017-3529 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2017-3635 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2017-3636 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2017-3637 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2018-15473 MEDIUM 5.3 openssh 6.6.1p1 · port 22
CVE-2018-15919 MEDIUM 5.3 openssh 6.6.1p1 · port 22
CVE-2018-20685 MEDIUM 5.3 openssh 6.6.1p1 · port 22
CVE-2018-3062 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2018-3174 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2019-2741 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2019-2922 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2019-2923 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2019-2924 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2019-7317 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2020-14550 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2020-2752 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2021-22897 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2021-44532 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2021-44533 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2024-21176 MEDIUM 5.3 mysql 5.6.33 · port 3306
CVE-2019-2739 MEDIUM 5.1 mysql 5.6.33 · port 3306
CVE-2018-3081 MEDIUM 5.0 mysql 5.6.33 · port 3306
CVE-2022-21539 MEDIUM 5.0 mysql 5.6.33 · port 3306
CVE-2016-3424 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5436 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5437 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5441 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5442 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5628 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5631 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5632 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5633 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5634 MEDIUM 4.9 mysql 5.6.33 · port 3306
CVE-2016-5635 MEDIUM 4.9 mysql 5.6.33 · port 3306

Showing the first 200 of 346.

Fixed by the distribution (1)

The distribution's security data says the package revision this service shows already has the fix for these CVEs, or that its build is not affected. They are not counted.

CVEs by severity: CRITICAL 1

CVESoftware
CVE-2016-6662 CRITICAL 9.8 mysql 5.6.33 · port 3306

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Report an issue with this page