120.27.201.4 — 4 open ports, 63 known CVEs, network Hangzhou Alibaba Advertising…

Known CVEs on this host

4open ports

0names pointing here

63known CVEs

1known exploited

Open ports and CVEs as of our latest check of this host, 2026-09-23.

CVEs by severity: CRITICAL 2 HIGH 17 MEDIUM 29 LOW 15

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Not counted: 1 only affects a particular platform; this host's is not known (php 7.4.33). See them

Network: Hangzhou Alibaba Advertising Co.,Ltd. AS37963
Open ports: 22, 80, 443, 8080 · at our latest check, 2026-09-23
Location: China CN
Route: 120.27.192.0/18 · announced by Hangzhou Alibaba Advertising Co.,Ltd. AS37963 RPKI valid
Organisation: Alibaba Group · Content / hosting
Registry network: ALISOFT · 120.24.0.0 - 120.27.255.255 · APNIC
Abuse contact: [email protected] · for ALISOFT
First seen: 2026-09-23 14:43 UTC
Last seen alive: 2026-09-23 14:47 UTC
Hosted domains: No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (4)

22/tcp SSH OpenSSH_6.6.1 57 CVEs first 2026-09-23 · last 2026-09-23

Server: SSH-2.0-OpenSSH_6.6.1
Host key: ecdsa-sha2-nistp256 e9b666fed61953fc…

Raw response

SSH-2.0-OpenSSH_6.6.1

80/tcp HTTP nginx first 2026-09-23 · last 2026-09-23

Status: 404 Not Found
Title: 404 Not Found
Server: nginx

Raw response

HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 23 Sep 2026 14:44:05 GMT
Content-Type: text/html
Content-Length: 548
Connection: keep-alive

<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

443/tcp TLS first 2026-09-23 · last 2026-09-23

TLS: TLSv1.2
Certificate for: csgl.xbcx.com.cn
Issued by: Encryption Everywhere DV TLS CA - G1
Valid: 2020-11-18 → 2021-11-18

Raw response

HTTP/1.1 400 Bad Request
Server: nginx
Date: Wed, 23 Sep 2026 14:44:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close

28a
<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

0

8080/tcp HTTP nginx/1.21.5 6 CVEs first 2026-09-23 · last 2026-09-23

Status: 301 Moved Permanently
Server: nginx/1.21.5
Powered by: PHP/7.4.33

Raw response

HTTP/1.1 301 Moved Permanently
Server: nginx/1.21.5
Date: Wed, 23 Sep 2026 14:44:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.33
Vary: Accept-Encoding, Cookie
Expires: Wed, 23 Sep 2026 15:44:06 GMT
Cache-Control: max-age=3600
X-Redirect-By: redirection
Location: https://www.xiaobuwq.com/

0

Vulnerabilities

Only affects certain platforms (1)

These CVEs only apply when the software runs on a particular platform (for example Windows), and this host's platform is not known. They are not counted.

CVEs by severity: CRITICAL 1

CVE	Software
CVE-2024-3566 CRITICAL 9.8	php 7.4.33 · port 8080

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.

Report an issue with this page