GeneralInformation

Country	China
City	Beijing
Organization	Beijing Baidu Netcom Science and Technology Co., Ltd.
ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
ASN	AS38365
Operating System	Windows Server 2008 R2 Datacenter

WebTechnologies

JavaScript libraries

jQuery

Web frameworks

Microsoft ASP.NET

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2010(3)

CVE-2010-3972

10Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.

CVE-2010-2730

9.3Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."

CVE-2010-1899

4.3Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."

OpenPorts

22 80 139 801 1433 3389 5985 8000 9191 49222

22 / tcp

45176930 | 2025-02-25T16:37:09.859275

SSH-2.0-OpenSSH_for_Windows_7.7
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC0nzWuDIDgcmuEgZMEfluu/xpfC+Xk8+Bnw0V/9DtiCkuf
aoZDRHkEVeTp0FzHNMWwpNzIX5IU4IdLAjDANGuM2Yv8xv9iaCvHIp9lw+42gv1p1JSEBs7jtcGE
7Rc0yx48gWX/CoKD7JpnHNT3HjHds77VyJuMFH5ICSp6GwTO2Fkdprrr+72iGEZpavBmPVruEZyJ
z8Eo0QUdjSg6eRjEN9O6coCLQABBPZ6GyrJplEPjSrQFVTFe1R5J+AKvuRYggWg1SYhTi92PNDdb
yDWqJVL6w+Olu99Y+fbdrhfooyqrVBOe64sgQ5K9UIn+geEuP4MFWbyQ3rA3QW5Ej3AX
Fingerprint: 06:b6:ed:41:e4:d7:a1:e3:69:fe:1e:b7:b6:55:0f:50

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none

80 / tcp

-119375469 | 2025-03-16T20:52:16.458306

Hashes

hash

1568236572

http.dom_hash

-1389411298

http.html_hash

-119375469

http.server_hash

-1390970405

http.title_hash

-444403470

IIS7

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Tue, 02 Jul 2019 07:56:47 GMT
Accept-Ranges: bytes
ETag: "d24aefb2ab30d51:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sun, 16 Mar 2025 20:50:53 GMT
Content-Length: 689

Vulnerabilities

139 / tcp

-757264002 | 2025-02-25T17:00:44.343897

\x83\x00\x00\x01\x8f

801 / tcp

-1038892728 | 2025-02-20T04:59:43.292636

Hashes

hash

880502825

http.dom_hash

-1113041868

http.html_hash

-1038892728

http.server_hash

-1390970405

CRM系统(E4标准版)登录 - 协同管理赢在执行

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=napt1nr3cwhqppqou433xbga; path=/; HttpOnly
X-Powered-By: ASP.NET
Date: Thu, 20 Feb 2025 04:58:42 GMT
Content-Length: 9071

Vulnerabilities

1433 / tcp

-802109107 | 2025-03-16T21:54:25.919679

MS-SQL NTLM Info:
  OS: Windows 7/Windows Server 2008 R2
  OS Build: 6.1.7601
  Target Name: PENGWEI
  NetBIOS Domain Name: PENGWEI
  NetBIOS Computer Name: PENGWEI
  DNS Domain Name: pengwei
  FQDN: pengwei

3389 / tcp

-106945750 | 2025-03-17T05:26:43.648694

Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x03\x00\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
  OS: Windows 7/Windows Server 2008 R2
  OS Build: 6.1.7601
  Target Name: PENGWEI
  NetBIOS Domain Name: PENGWEI
  NetBIOS Computer Name: PENGWEI
  DNS Domain Name: pengwei
  FQDN: pengwei

Administrator
GBR
Fo
4 Windows Server-2008rz
Datacenter

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5a:70:00:d6:f1:8b:8e:4c:f3:4d:f2:9f:83:53:84
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=pengwei
        Validity
            Not Before: Nov 14 11:26:49 2024 GMT
            Not After : May 16 11:26:49 2025 GMT
        Subject: CN=pengwei
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:29:30:6e:d1:ff:3a:f4:6a:02:b8:47:1d:
                    db:ce:a1:47:88:31:5c:a4:6a:b0:3a:01:62:84:d7:
                    67:47:b8:fd:49:32:a4:55:68:1d:29:a4:f4:79:89:
                    f6:1a:4a:59:07:79:75:6b:af:f4:3c:06:78:40:de:
                    a0:de:10:3e:b8:dd:09:88:33:ff:70:62:85:58:23:
                    42:8c:83:54:67:eb:07:f6:d9:e8:b1:db:86:5d:ad:
                    3b:5d:60:3b:91:72:6d:0c:cf:08:fd:dd:c2:ce:12:
                    f4:be:a7:1f:3e:0f:9c:f7:04:90:64:3f:b6:d9:f7:
                    16:fb:50:c9:71:56:85:02:fe:15:3a:5b:76:88:34:
                    f0:b9:97:37:8e:50:84:4f:16:64:3b:35:27:4b:6a:
                    5e:3b:2f:b9:f9:05:16:f2:74:37:7c:5e:e5:d2:1e:
                    0a:c0:9f:6a:df:7e:86:6b:d5:87:7f:c0:6d:96:38:
                    08:d2:e2:4f:7a:d3:6a:42:44:c6:6f:95:d0:e6:cf:
                    d2:3a:51:3c:77:5e:f4:db:c9:2b:c7:41:b7:9f:21:
                    7e:e2:76:ab:fc:8e:a1:fc:43:77:d5:9e:c7:35:cc:
                    0e:d9:81:66:21:d9:b5:af:1a:20:09:15:8b:12:22:
                    c1:29:12:2d:17:00:88:24:89:b9:4e:a2:ff:a4:ba:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Key Usage: 
                Key Encipherment, Data Encipherment
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        44:4b:6a:07:bc:db:69:34:3a:7c:66:35:f4:57:f4:1e:f5:15:
        d8:79:af:9f:0b:32:d4:bc:0c:93:00:3b:78:ea:ca:2c:ac:a4:
        f1:d4:d6:c6:54:6b:e0:de:07:5b:5b:ec:7c:0e:42:82:29:22:
        f1:e7:ce:51:6c:13:5a:fb:de:f0:d8:34:6d:cb:26:be:a6:0a:
        40:de:d0:33:c7:e8:2c:88:14:2b:84:c5:ba:65:3c:c0:c6:68:
        b2:bb:f9:2f:cf:64:2a:0f:cd:33:e6:16:36:4f:5f:56:35:d8:
        68:bf:cc:e4:9b:34:5a:7f:b2:3b:94:be:9c:ed:13:bd:6d:c8:
        1b:6a:32:61:ca:8d:ae:f4:8b:ae:cd:c7:80:1a:0d:94:ff:c6:
        22:27:d4:ea:d6:ff:0c:17:0b:7b:5c:14:44:d1:8c:06:15:cd:
        1c:0b:cd:5f:54:8c:82:48:32:19:47:4a:62:e8:97:21:9a:3d:
        8b:48:0c:e8:08:b0:d2:c3:1a:91:f7:b8:33:ed:4d:a5:da:c3:
        b7:19:a8:f7:0d:8a:91:0d:eb:b2:bb:ca:95:c8:16:b8:77:cf:
        bf:f2:02:58:68:06:7a:7d:d5:a2:c1:9d:eb:7f:1b:bb:0f:b7:
        ab:b6:6c:4c:d8:75:a7:54:0d:a2:4f:f4:48:68:12:00:59:4a:
        a7:c3:35:8c

5985 / tcp

1489525118 | 2025-02-27T08:02:58.069988

Hashes

hash

1173729347

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Thu, 27 Feb 2025 08:01:51 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2008 R2
  OS Build: 6.1.7601
  Target Name: PENGWEI
  NetBIOS Domain Name: PENGWEI
  NetBIOS Computer Name: PENGWEI
  DNS Domain Name: pengwei
  FQDN: pengwei

8000 / tcp

1755994900 | 2025-03-16T04:42:46.293660

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Date: Sun, 16 Mar 2025 04:41:23 GMT
Location: http://180.76.136.127:8000/index.html
Transfer-Encoding: chunked
Server: J2EE SDK/1.3 (HTTP/1.1 Connector)

f4
<html>
<head>
<title>Tomcat Error Report</title>
</head>
<body bgcolor="white">
<br><br>
<h1>HTTP Status 302 - Moved Temporarily</h1>
The requested resource (Moved Temporarily) has moved temporarily to a new location.
</body>
</html>

0

9191 / tcp

1938448966 | 2025-03-13T16:34:45.231404

Hashes

hash

937712753

http.dom_hash

909209141

http.html_hash

1938448966

http.server_hash

-227059538

http.title_hash

420000836

Directory Listing For /

HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
Date: Thu, 13 Mar 2025 16:33:28 GMT
Transfer-Encoding: chunked
Server: J2EE SDK/1.3 (HTTP/1.1 Connector)
Last-Modified: Fri, 06 Dec 2024 07:46:38 GMT

180.76.136.127

Last Seen: 2025-03-17

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

22 / tcp

45176930 | 2025-02-25T16:37:09.859275

OpenSSHfor_Windows_7.7

80 / tcp

-119375469 | 2025-03-16T20:52:16.458306

Hashes

Microsoft IIS httpd7.5

139 / tcp

-757264002 | 2025-02-25T17:00:44.343897

801 / tcp

-1038892728 | 2025-02-20T04:59:43.292636

Hashes

Microsoft IIS httpd7.5

1433 / tcp

-802109107 | 2025-03-16T21:54:25.919679

MS-SQL Server 2012 SP1RTW/PCU111.0.3000.0

3389 / tcp

-106945750 | 2025-03-17T05:26:43.648694

Remote Desktop Protocol

5985 / tcp

1489525118 | 2025-02-27T08:02:58.069988

Hashes

WinRM

8000 / tcp

1755994900 | 2025-03-16T04:42:46.293660

9191 / tcp

1938448966 | 2025-03-13T16:34:45.231404

Hashes

49222 / tcp

-1366274466 | 2025-02-22T23:50:01.154470

Products

Pricing

Contact Us

180.76.136.127

Last Seen: 2025-03-17

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 801 Latest CVSS

OpenPorts

22 / tcp 45176930 | 2025-02-25T16:37:09.859275

OpenSSHfor_Windows_7.7

80 / tcp -119375469 | 2025-03-16T20:52:16.458306

Hashes

Microsoft IIS httpd7.5

139 / tcp -757264002 | 2025-02-25T17:00:44.343897

801 / tcp -1038892728 | 2025-02-20T04:59:43.292636

Hashes

Microsoft IIS httpd7.5

1433 / tcp -802109107 | 2025-03-16T21:54:25.919679

MS-SQL Server 2012 SP1RTW/PCU111.0.3000.0

3389 / tcp -106945750 | 2025-03-17T05:26:43.648694

Remote Desktop Protocol

5985 / tcp 1489525118 | 2025-02-27T08:02:58.069988

Hashes

WinRM

8000 / tcp 1755994900 | 2025-03-16T04:42:46.293660

9191 / tcp 1938448966 | 2025-03-13T16:34:45.231404

Hashes

49222 / tcp -1366274466 | 2025-02-22T23:50:01.154470

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

45176930 | 2025-02-25T16:37:09.859275

80 / tcp

-119375469 | 2025-03-16T20:52:16.458306

139 / tcp

-757264002 | 2025-02-25T17:00:44.343897

801 / tcp

-1038892728 | 2025-02-20T04:59:43.292636

1433 / tcp

-802109107 | 2025-03-16T21:54:25.919679

3389 / tcp

-106945750 | 2025-03-17T05:26:43.648694

5985 / tcp

1489525118 | 2025-02-27T08:02:58.069988

8000 / tcp

1755994900 | 2025-03-16T04:42:46.293660

9191 / tcp

1938448966 | 2025-03-13T16:34:45.231404

49222 / tcp

-1366274466 | 2025-02-22T23:50:01.154470