Host

120.27.2.82

Tags: Hosting Remote access Self-signed certificate

As of our latest check on 2026-09-23, 120.27.2.82 (Hangzhou Alibaba Advertising Co.,Ltd., AS37963, China) had 2 open ports (80, 3389) and 1 known CVE.

Known CVEs on this host

2open ports
0names pointing here
1known CVE
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-09-23.

CVEs by severity: MEDIUM 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
Hangzhou Alibaba Advertising Co.,Ltd. AS37963
Open ports
80, 3389 · at our latest check, 2026-09-23
Location
China CN
Route
120.27.0.0/18 · announced by Hangzhou Alibaba Advertising Co.,Ltd. AS37963 RPKI valid
Organisation
Alibaba Group · Content / hosting
Registry network
ALISOFT · 120.24.0.0 - 120.27.255.255 · APNIC
Abuse contact
[email protected] · for ALISOFT
First seen
2026-09-23 14:35 UTC
Last seen alive
2026-09-23 14:39 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (2)

80/tcp HTTP nginx/1.26.1 1 CVE first 2026-09-23 · last 2026-09-23
Status
200 OK
Title
IIS Windows Server
Server
nginx/1.26.1
Powered by
ASP.NET
Raw response
HTTP/1.1 200 OK
Server: nginx/1.26.1
Date: Wed, 23 Sep 2026 14:35:44 GMT
Content-Type: text/html
Content-Length: 703
Connection: keep-alive
Last-Modified: Thu, 16 May 2019 06:22:38 GMT
Accept-Ranges: bytes
ETag: "8b3262c2afbd51:0"
X-Powered-By: ASP.NET

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IIS Windows Server</title>
<style type="text/css">
<!--
body {
	color:#000000;
	background-color:#0072C6;
	margin:0;
}

#container {
	margin-left:auto;
	margin-right:auto;
	text-align:center;
	}

a img {
	border:none;
}

-->
</style>
</head>
<body>
<div id="container">
<a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iisstart.png" alt="IIS" width="960" height="600" /></a>
</div>
</body>
</html>
3389/tcp TLS first 2026-09-23 · last 2026-09-23
TLS
TLSv1.2
Certificate for
iZgimbkw3wqkhiZ
Issued by
iZgimbkw3wqkhiZ
Valid
2026-05-26 → 2026-11-25
Note
self-signed certificate
Raw response
�Mj���P����
��޽|���L]��a�j���h0h �"��$=�[4��d8�y�+Lv������p�/����0��0�ʠ#�W�2���H"�ܨ��0
	*�H��
010UiZgimbkw3wqkhiZ0
260526155943Z
261125155943Z010UiZgimbkw3wqkhiZ0�"0
	*�H��
�0�
����8�:k���F�
LV�a��H�׎���K���`�r,g��M�����.�=ʤ�?��0�7w�Bt�q�S�P�S�T���o������	��"ʞ�j��' eE�hb����0A{֗��o��P��U�yb��/���C��wI?X�`�-���.����gV��OR4�~�����qJ�J�񗟌=�]����u�w&�GN�)9�������84y�୘��x
	������P���@1����=��Ln7���$0"0U%0
+0U00
	*�H��
�d���G,-�2R%b?Z��7�����](]��IH����ٓn!���b����Njv��������������F�.�E:���v�I��]SI�����:�~���U�e�F��3...<truncated>

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.