Host
Tags: Hosting Database Expired certificate
As of our latest check on 2026-09-23, 120.26.90.92 (Hangzhou Alibaba Advertising Co.,Ltd., AS37963, China) had 4 open ports (21, 22, 443, 3306) and 164 known CVEs.
Open ports and CVEs as of our latest check of this host, 2026-09-23.
CVEs by severity: CRITICAL 5 HIGH 19 MEDIUM 121 LOW 19
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list
Not counted: 15 on a distribution build — the fix may be backported (openssh 7.4). See them
Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.
220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 22:21. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity. 500 HTTP command: [get]
SSH-2.0-OpenSSH_7.4
HTTP/1.1 400 Bad Request Date: Wed, 23 Sep 2026 14:21:41 GMT Server: Apache Content-Length: 434 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /> </p> <hr> <address>Apache Server at SSL.ceshi.huyao365.com Port 80</address> </body></html>
N 5.6.50-log��Bf[sR~G$��-�}k#g^",TE<?dmysql_native_password
These CVEs were matched on software built by an operating-system distribution whose package revision the service does not show. Distributions often fix a flaw without changing the upstream version number, so whether this build is affected cannot be told from its version. They are not counted.
CVEs by severity: CRITICAL 1 HIGH 2 MEDIUM 11 LOW 1
| CVE | Software |
|---|---|
| CVE-2023-38408 CRITICAL 9.8 | openssh 7.4 · port 22 |
| CVE-2020-15778 HIGH 7.4 | openssh 7.4 · port 22 |
| CVE-2021-41617 HIGH 7.0 | openssh 7.4 · port 22 |
| CVE-2019-6109 MEDIUM 6.8 | openssh 7.4 · port 22 |
| CVE-2019-6110 MEDIUM 6.8 | openssh 7.4 · port 22 |
| CVE-2023-51385 MEDIUM 6.5 | openssh 7.4 · port 22 |
| CVE-2019-6111 MEDIUM 5.9 | openssh 7.4 · port 22 |
| CVE-2020-14145 MEDIUM 5.9 | openssh 7.4 · port 22 |
| CVE-2023-48795 MEDIUM 5.9 | openssh 7.4 · port 22 |
| CVE-2016-20012 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2017-15906 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2018-15473 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2018-15919 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2018-20685 MEDIUM 5.3 | openssh 7.4 · port 22 |
| CVE-2021-36368 LOW 3.7 | openssh 7.4 · port 22 |
Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.
2 names · as answered by each domain's own name servers