GeneralInformation

Country	China
City	Shenzhen
Organization	CHINANET Guangdong province network
ISP	CHINANET-BACKBONE
ASN	AS4134
Operating System	Windows

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

3306 5800 5900 5985 8002 8014 8019 8106 8107 8181 9090 9091 9099 9990 9999 47001

3306 / tcp

59361669 | 2025-04-02T12:12:40.647764

MariaDB:
  Error Message: Host '224.166.101.145' is not allowed to connect to this MariaDB server
  Error Code: 1130

5800 / tcp

1982639300 | 2025-04-02T04:17:03.804499

Hashes

hash

1462398832

http.dom_hash

-1672851305

http.html_hash

1982639300

http.server_hash

1991205105

http.title_hash

-1484491893

VNC Viewer for Java

HTTP/1.1 200 OK
Server: RealVNC/E4
Date: Wed, 02 Apr 2025 04:17:03 GMT
Cache-Control: no-cache
Content-Type: text/html
Connection: close

5900 / tcp

-861972944 | 2025-03-25T23:59:17.893330

RFB 004.001

VNC:
  Protocol Version: 4.1
  Security Types:
    5: RA2
    13: RealVNC
    129: Tight Unix Login Authentication
    133: RealVNC

5985 / tcp

1489525118 | 2025-04-04T23:56:23.496412

Hashes

hash

-1727205974

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 04 Apr 2025 23:56:18 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2012 R2
  OS Build: 6.3.9600
  Target Name: LENOVO-LA0X1473
  NetBIOS Domain Name: LENOVO-LA0X1473
  NetBIOS Computer Name: LENOVO-LA0X1473
  DNS Domain Name: LENOVO-LA0X1473
  FQDN: LENOVO-LA0X1473

8002 / tcp

-378555142 | 2025-04-08T10:53:32.989496

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 08 Apr 2025 10:53:22 GMT
Connection: close
Content-Length: 315

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Not Found</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Not Found</h2>
<hr><p>HTTP Error 404. The requested resource is not found.</p>
</BODY></HTML>

8014 / tcp

1489525118 | 2025-03-15T09:51:01.459851

Hashes

hash

-164459913

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sat, 15 Mar 2025 09:50:55 GMT
Connection: close
Content-Length: 315

8019 / tcp

1831682531 | 2025-03-28T19:22:14.814334

.NETSystem.Runtime.Remoting.RemotingException: TCP 信道协议冲突: 应为报头。
   在 System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadAndMatchPreamble()
   在 System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadVersionAndOperation(UInt16& operation)
   在 System.Runtime.Remoting.Channels.Tcp.TcpServerSocketHandler.ReadHeaders()
   在 System.Runtime.Remoting.Channels.Tcp.TcpServerTransportSink.ServiceRequest(Object state)
   在 System.Runtime.Remoting.Channels.SocketHandler.ProcessRequestNow()

8106 / tcp

1489525118 | 2025-03-31T16:01:11.810842

Hashes

hash

-331953531

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Mon, 31 Mar 2025 16:01:03 GMT
Connection: close
Content-Length: 315

8107 / tcp

1489525118 | 2025-04-08T04:28:44.743264

Hashes

hash

-1572667573

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 08 Apr 2025 04:28:33 GMT
Connection: close
Content-Length: 315

8181 / tcp

-1873684464 | 2025-03-27T10:01:08.559533

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Thu, 12 Dec 2019 09:00:09 GMT
Accept-Ranges: bytes
ETag: "5f74798ecab0d51:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 27 Mar 2025 10:01:05 GMT
Content-Length: 701

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IIS Windows Server</title>
<style type="text/css">
<!--
body {
	color:#000000;
	background-color:#0072C6;
	margin:0;
}

#container {
	margin-left:auto;
	margin-right:auto;
	text-align:center;
	}

a img {
	border:none;
}

-->
</style>
</head>
<body>
<div id="container">
<a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iis-85.png" alt="IIS" width="960" height="600" /></a>
</div>
</body>
</html>

Vulnerabilities

9090 / tcp

1831682531 | 2025-04-04T23:37:42.128813

.NETSystem.Runtime.Remoting.RemotingException: TCP 信道协议冲突: 应为报头。
   在 System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadAndMatchPreamble()
   在 System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadVersionAndOperation(UInt16& operation)
   在 System.Runtime.Remoting.Channels.Tcp.TcpServerSocketHandler.ReadHeaders()
   在 System.Runtime.Remoting.Channels.Tcp.TcpServerTransportSink.ServiceRequest(Object state)
   在 System.Runtime.Remoting.Channels.SocketHandler.ProcessRequestNow()

9091 / tcp

-1981702506 | 2025-03-18T13:35:33.402249

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 18 Mar 2025 13:35:21 GMT
Content-Length: 623

<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width" />
    <title></title>
</head>
<body>
<ul class="nav navbar-nav">
    <li><a href="index.html">Margin-Desktop</a></li>
    <li><a href="mobile.html">Margin-Mobile</a></li>
    <li><a href="/">Home</a></li>
    <li><a href="/Help">API</a></li>
</ul>
    <div class="container body-content">
        
<div class="jumbotron">
    <h1>HELLO WORLD!</h1>
    
</div>

        <hr />
        <footer>
            <p>&copy; 2025 - Margin</p>
        </footer>
    </div>

</body>
</html>

Vulnerabilities

9099 / tcp

2083883179 | 2025-03-14T19:13:19.162371

Hashes

hash

1900751909

http.dom_hash

-2006505642

http.favicon.hash

766268546

http.html_hash

2083883179

http.server_hash

-761617706

HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: text/html
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 14 Mar 2025 19:13:31 GMT

9990 / tcp

-212222671 | 2025-04-01T05:39:24.655714

Hashes

hash

1753864436

http.dom_hash

188727239

http.html_hash

-212222671

http.server_hash

-43448623

http.title_hash

-165070432

Welcome to CROSS EAI Middleware

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
X-Powered-By: Servlet 2.4; JBoss-4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181417)/JBossWeb-2.0
ETag: W/"558-1349164999000"
Last-Modified: Tue, 02 Oct 2012 08:03:19 GMT
Content-Type: text/html
Content-Length: 558
Date: Tue, 01 Apr 2025 05:39:15 GMT

9999 / tcp

1062839091 | 2025-03-31T11:06:20.080752

Hashes

hash

1044774962

http.dom_hash

-2006505642

http.html_hash

1062839091

HTTP/1.1 404 Not Found
Content-Type: text/plain
Content-Length: 92
Connection: close

47001 / tcp

1489525118 | 2025-03-16T21:49:43.104393

Hashes

hash

-1581879245

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sun, 16 Mar 2025 21:48:45 GMT
Connection: close
Content-Length: 315

218.16.99.165

Last Seen: 2025-04-08

Tags:

GeneralInformation

Vulnerabilities All ports Port 8181 Port 9091 Latest CVSS

OpenPorts

3306 / tcp 59361669 | 2025-04-02T12:12:40.647764

MariaDB

5800 / tcp 1982639300 | 2025-04-02T04:17:03.804499

Hashes

RealVNCE4

5900 / tcp -861972944 | 2025-03-25T23:59:17.893330

RealVNC Enterprise

5985 / tcp 1489525118 | 2025-04-04T23:56:23.496412

Hashes

WinRM

8002 / tcp -378555142 | 2025-04-08T10:53:32.989496

Microsoft HTTPAPI httpd2.0

8014 / tcp 1489525118 | 2025-03-15T09:51:01.459851

Hashes

8019 / tcp 1831682531 | 2025-03-28T19:22:14.814334

8106 / tcp 1489525118 | 2025-03-31T16:01:11.810842

Hashes

8107 / tcp 1489525118 | 2025-04-08T04:28:44.743264

Hashes

8181 / tcp -1873684464 | 2025-03-27T10:01:08.559533

Microsoft IIS httpd8.5

9090 / tcp 1831682531 | 2025-04-04T23:37:42.128813

9091 / tcp -1981702506 | 2025-03-18T13:35:33.402249

Microsoft IIS httpd8.5

9099 / tcp 2083883179 | 2025-03-14T19:13:19.162371

Hashes

9990 / tcp -212222671 | 2025-04-01T05:39:24.655714

Hashes

9999 / tcp 1062839091 | 2025-03-31T11:06:20.080752

Hashes

47001 / tcp 1489525118 | 2025-03-16T21:49:43.104393

Hashes

Products

Pricing

Contact Us

Vulnerabilities

3306 / tcp

59361669 | 2025-04-02T12:12:40.647764

5800 / tcp

1982639300 | 2025-04-02T04:17:03.804499

5900 / tcp

-861972944 | 2025-03-25T23:59:17.893330

5985 / tcp

1489525118 | 2025-04-04T23:56:23.496412

8002 / tcp

-378555142 | 2025-04-08T10:53:32.989496

8014 / tcp

1489525118 | 2025-03-15T09:51:01.459851

8019 / tcp

1831682531 | 2025-03-28T19:22:14.814334

8106 / tcp

1489525118 | 2025-03-31T16:01:11.810842

8107 / tcp

1489525118 | 2025-04-08T04:28:44.743264

8181 / tcp

-1873684464 | 2025-03-27T10:01:08.559533

9090 / tcp

1831682531 | 2025-04-04T23:37:42.128813

9091 / tcp

-1981702506 | 2025-03-18T13:35:33.402249

9099 / tcp

2083883179 | 2025-03-14T19:13:19.162371

9990 / tcp

-212222671 | 2025-04-01T05:39:24.655714

9999 / tcp

1062839091 | 2025-03-31T11:06:20.080752

47001 / tcp

1489525118 | 2025-03-16T21:49:43.104393