GeneralInformation

Country	China
City	Zhengzhou
Organization	Zhengzhou GIANT Computer Network Technology Co., Ltd
ISP	CHINA UNICOM China169 Backbone
ASN	AS4837
Operating System	Windows

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2014(1)

CVE-2014-4078

5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."

OpenPorts

888 1801 3306 5985 8888

888 / tcp

-221988694 | 2025-03-25T13:44:38.952896

Hashes

hash

-1274504567

http.dom_hash

-69016709

http.html_hash

-221988694

http.server_hash

-945770239

403 - 禁止访问: 访问被拒绝。

HTTP/1.1 403 Forbidden
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 25 Mar 2025 13:44:38 GMT
Content-Length: 1157

Vulnerabilities

1801 / tcp

2124638623 | 2025-03-16T03:05:10.366129

\x10Z\x0b\x00LIOR<\x02\x00\x00\xff\xff\xff\xff\x00\x00\x12\x00\x06U=Q6\xdf\xc7@\x96C\x17\\<\xe7l\xaa\x88\x87\x1e(\xe1\x12\x84H\xb0\xfe!t\xacy\xef{\x00\x00\x00\x00\x10\x02\x00\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

3306 / tcp

-96294589 | 2025-03-10T11:08:35.116390

MySQL:
  Error Message: Host '224.93.5.136' is not allowed to connect to this MySQL server
  Error Code: 1130

5985 / tcp

1489525118 | 2025-03-07T00:57:44.988200

Hashes

hash

1048451206

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 07 Mar 2025 00:57:44 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2019 (version 1809)
  OS Build: 10.0.17763
  Target Name: KDp9qpSmvZ07
  NetBIOS Domain Name: KDp9qpSmvZ07
  NetBIOS Computer Name: KDp9qpSmvZ07
  DNS Domain Name: KDp9qpSmvZ07
  FQDN: KDp9qpSmvZ07

8888 / tcp

-1472077919 | 2025-03-17T12:40:08.585916

Hashes

hash

1268711218

http.dom_hash

-795644488

http.html_hash

-1472077919

http.server_hash

-1340961475

拒绝访问

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 547
Server: nginx
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Set-Cookie: 53e1ec93e227a7c2156adc85152b8e64=72c2e620-abd0-4bb6-9549-49965c6abfef.Zynzl2x15bcwZsycqS00_IcJ_Zw; Expires=Tue, 18-Mar-2025 12:40:07 GMT; HttpOnly; Path=/
Date: Mon, 17 Mar 2025 12:40:07 GMT

122.114.14.43

Last Seen: 2025-03-25

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

888 / tcp

-221988694 | 2025-03-25T13:44:38.952896

Hashes

Microsoft IIS httpd8.5

1801 / tcp

2124638623 | 2025-03-16T03:05:10.366129

Microsoft Message Queuing

3306 / tcp

-96294589 | 2025-03-10T11:08:35.116390

MySQL

5985 / tcp

1489525118 | 2025-03-07T00:57:44.988200

Hashes

WinRM

8888 / tcp

-1472077919 | 2025-03-17T12:40:08.585916

Hashes

nginx

Products

Pricing

Contact Us

122.114.14.43

Last Seen: 2025-03-25

Tags:

GeneralInformation

Vulnerabilities All ports Port 888 Latest CVSS

OpenPorts

888 / tcp -221988694 | 2025-03-25T13:44:38.952896

Hashes

Microsoft IIS httpd8.5

1801 / tcp 2124638623 | 2025-03-16T03:05:10.366129

Microsoft Message Queuing

3306 / tcp -96294589 | 2025-03-10T11:08:35.116390

MySQL

5985 / tcp 1489525118 | 2025-03-07T00:57:44.988200

Hashes

WinRM

8888 / tcp -1472077919 | 2025-03-17T12:40:08.585916

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

888 / tcp

-221988694 | 2025-03-25T13:44:38.952896

1801 / tcp

2124638623 | 2025-03-16T03:05:10.366129

3306 / tcp

-96294589 | 2025-03-10T11:08:35.116390

5985 / tcp

1489525118 | 2025-03-07T00:57:44.988200

8888 / tcp

-1472077919 | 2025-03-17T12:40:08.585916