Host

120.27.4.196

Tags: Hosting Database Remote access

As of our latest check on 2026-10-06, 120.27.4.196 (Hangzhou Alibaba Advertising Co.,Ltd., AS37963, China) had 5 open ports (22, 80, 443, 3306, 3389) and 701 known CVEs.

Known CVEs on this host

5open ports
0names pointing here
701known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-10-06.

CVEs by severity: CRITICAL 7 HIGH 29 MEDIUM 607 LOW 58

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
Hangzhou Alibaba Advertising Co.,Ltd. AS37963
Open ports
22, 80, 443, 3306, 3389 · at our latest check, 2026-10-06
Location
China CN
Route
120.27.0.0/18 · announced by Hangzhou Alibaba Advertising Co.,Ltd. AS37963 RPKI valid
Organisation
Alibaba Group · Content / hosting
Registry network
ALISOFT · 120.24.0.0 - 120.27.255.255 · APNIC
Abuse contact
[email protected] · for ALISOFT
First seen
2026-10-02 02:06 UTC
Last seen alive
2026-10-06 20:23 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (5)

22/tcp SSH 9.42 first 2026-10-02 · last 2026-10-06
Server
SSH-2.0-9.42 FlowSsh: Bitvise SSH Server (WinSSHD) 9.42: free only for personal non-commercial use
Host key
ecdsa-sha2-nistp384 411e84c8d94cc9c9…
Raw response
SSH-2.0-9.42 FlowSsh: Bitvise SSH Server (WinSSHD) 9.42: free only for personal non-commercial use
80/tcp HTTP Microsoft-IIS/8.5 1 CVE first 2026-10-02 · last 2026-10-06
Status
200 OK
Title
IIS Windows Server
Server
Microsoft-IIS/8.5
Powered by
ASP.NET
Raw response
HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Tue, 02 Jun 2020 13:11:27 GMT
Accept-Ranges: bytes
ETag: "7f21b152df38d61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 06 Oct 2026 20:22:54 GMT
Content-Length: 608

���`I�%&/m�{J�J��t��`$ؐ@�������iG#)�*��eVe]f@�흼��{����{����;�N'���?\fdl��J�ɞ!���?~|?"��O�<y���<M���L_~����I���ݻ߽wr���7O����o�x���w��m]LۻwO_|�~4o�գ�w����W��U}q�ͫ��e����
�3�����~��1>L�-�e�Y��Ç�Ei�g3�\�mF���������>:��m�l��\���ҩ���Gm�������<�����h�탃��w?J�V[�e~tv�:�n��UWM�:�/���]���4�u��-�V�Ӧa|~����8�T�����ɏM�����?���$������r�m�{�w�)�[d�E�|�...<truncated>
443/tcp TLS first 2026-10-02 · last 2026-10-06
TLS
TLSv1.2
Certificate for
ohonor.xyz, www.ohonor.xyz
Issued by
Encryption Everywhere DV TLS CA - G2
Valid
2026-07-31 → 2026-10-28
Raw response
HTTP/1.1 400 Bad Request
Server: nginx/1.28.0
Date: Tue, 06 Oct 2026 20:22:54 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 657
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.28.0</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
3306/tcp MYSQL mysql 8.0.20 700 CVEs first 2026-10-02 · last 2026-10-06
Protocol
8.0.20
Raw response
J
8.0.20��qD:w#Q*(�����3_;p:>0m36caching_sha2_password
3389/tcp TLS first 2026-10-02 · last 2026-10-06
TLS
TLSv1.2
Certificate for
iZ2872y2xryZ
Issued by
iZ2872y2xryZ
Valid
2026-08-12 → 2027-02-11
Note
self-signed certificate
Raw response
�Mj�X�V 岾��)JbVH��Ɋ����^!vx� �5V(,fV���c�	a��f
�5���F�����0��0�Ġ1"�Vӷ��K�
C����0
	*�H��
010UiZ2872y2xryZ0
260812160116Z
270211160116Z010UiZ2872y2xryZ0�"0
	*�H��
�0�
���o_]�	��1�i�x'��r` �9q��ĸ�(��tM|� �U��0��
�K���˨��
�Fj�g}�r�������->��雬�<���3���A9q>J���^jjW@WK
9��d�7���Yx#փ�E��d�x��ގ�+i36e�].g�"
������Zf'hv/��7=��v*��E��Y��ޯ�����q�N$ି
`��Fc�=�
����~��3&#`��D�ȝ�E؟���s����o��q��>]@W�Rڼ�i�i�$0"0U%0
+0U00
	*�H��
�ed�i�"�ZU�gu�y�V���j7��@ȡ;�B���UYq�������*|��2�
o����&}�,*z_	�P"���&�A9	7�
�y��3c�8�k.શR�Mh$anB21�K���B�>&.�JK8�����Iuc*o��H�Y��WB��...<truncated>

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.