Host

120.27.9.76

Tags: Hosting Remote access Self-signed certificate

As of our latest check on 2026-09-23, 120.27.9.76 (Hangzhou Alibaba Advertising Co.,Ltd., AS37963, China) had 2 open ports (80, 3389) and 1 known CVE.

Known CVEs on this host

2open ports
0names pointing here
1known CVE
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-09-23.

CVEs by severity: MEDIUM 1

A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version. See the list

Network
Hangzhou Alibaba Advertising Co.,Ltd. AS37963
Open ports
80, 3389 · at our latest check, 2026-09-23
Location
China CN
Route
120.27.0.0/18 · announced by Hangzhou Alibaba Advertising Co.,Ltd. AS37963 RPKI valid
Organisation
Alibaba Group · Content / hosting
Registry network
ALISOFT · 120.24.0.0 - 120.27.255.255 · APNIC
Abuse contact
[email protected] · for ALISOFT
First seen
2026-09-23 14:38 UTC
Last seen alive
2026-09-23 14:42 UTC
Hosted domains
No host name points here

Reputation

Not a Tor relay, not a VPN or privacy relay address, and not on a current public blocklist.

Services (2)

80/tcp HTTP Microsoft-IIS/8.5 1 CVE first 2026-09-23 · last 2026-09-23
Status
200 OK
Title
IIS Windows Server
Server
Microsoft-IIS/8.5
Raw response
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Thu, 04 May 2023 07:32:43 GMT
Accept-Ranges: bytes
ETag: "1dd0449d5a7ed91:0"
Server: Microsoft-IIS/8.5
Date: Wed, 23 Sep 2026 14:39:11 GMT
Content-Length: 701

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IIS Windows Server</title>
<style type="text/css">
<!--
body {
	color:#000000;
	background-color:#0072C6;
	margin:0;
}

#container {
	margin-left:auto;
	margin-right:auto;
	text-align:center;
	}

a img {
	border:none;
}

-->
</style>
</head>
<body>
<div id="container">
<a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iis-85.png" alt="IIS" width="960" height="600" /></a>
</div>
</body>
</html>
3389/tcp TLS first 2026-09-23 · last 2026-09-23
TLS
TLSv1.2
Certificate for
iZnadbgv1135ccZ
Issued by
iZnadbgv1135ccZ
Valid
2026-07-08 → 2027-01-07
Note
self-signed certificate
Raw response
�Mj����Y�пoJ$&v]>�i�����;~� �A>IȤzf��8��N*U~�
�kZ&x�������0��0�ʠM�D�.��C)bM�B?�0
	*�H��
010UiZnadbgv1135ccZ0
260708151118Z
270107151118Z010UiZnadbgv1135ccZ0�"0
	*�H��
�0�
��߀X�2ܫ9��=�p�k��*<"8��,,�V_�a����:��L��kYo>R�%O�,�����lȩ���a���l�0�?g���55�Q�v���� *⩃�*D��X
�����j) (��
1{@�����ea������!p�_H�t);S����a�����c�g��Oc�XבC�>$�����s�,�w�¿����#�u�M+*�~9�cEeTT#2���ude�ѽ�MeM"ݬ�����F<l�.������뗵�$0"0U%0
+0U00
	*�H��
�|�#��>e��€�3�6�6�7T�����,���6�1 �z�mRw>�u�'6׵F�
�3E�\����-�q�	�����-9�??���ɗ�����/�:q�z�?.SȞ.|3���~�	𴠷\o�@ۄ�r��Uf<#��)	��H����...<truncated>

Vulnerabilities

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.