36.26.70.203

As of: Jan 19, 2025 1:06pm UTC | Latest

Host

Attribute	Value
ip	36.26.70.203
location.continent	Asia
location.country	China
location.country_code	CN
location.city	Ningbo
location.postal_code	315000
location.timezone	Asia/Shanghai
location.province	Zhejiang
location.coordinates.latitude	29.87819
location.coordinates.longitude	121.54945
location_updated_at	2025-01-05T23:08:24.048689369Z
autonomous_system.asn	58461
autonomous_system.description	CT-HANGZHOU-IDC No.288,Fu-chun Road
autonomous_system.bgp_prefix	36.26.64.0/19
autonomous_system.name	CT-HANGZHOU-IDC No.288,Fu-chun Road
autonomous_system.country_code	CN
autonomous_system_updated_at	2025-01-05T23:08:24.048745395Z
whois.network.handle	CHINANET-ZJ
whois.network.name	CHINANET-ZJ network
whois.network.cidrs	36.26.64.0/19
whois.network.updated	2021-06-24T00:00:00Z
operating_system.uniform_resource_identifier	cpe:2.3:o:microsoft:windows::::::::
operating_system.part	o
operating_system.vendor	Microsoft
operating_system.product	Windows
operating_system.other.family	Windows
last_updated_at	2025-01-19T13:06:19.813Z
labels	network-administration
labels	proxy
labels	remote-access

135/DCERPC TCP View Definition

Attribute

Value

services.banner

services.banner_hashes

sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

services.discovery_method

PREDICTIVE_METHOD_16

services.extended_service_name

DCERPC

services.observed_at

2025-01-19T06:56:04.929512043Z

services.parsed.dcerpc.could_bind

true

services.parsed.dcerpc.could_query_epm

true

services.parsed.dcerpc.endpoints.protocol	[MS-SAMR]: Security Account Manager (SAM) Remote Protocol
services.parsed.dcerpc.endpoints.executable	samsrv.dll
services.parsed.dcerpc.endpoints.explained_uuid	12345778-1234-abcd-ef00-0123456789ac v1.0
services.parsed.dcerpc.endpoints.bindings	ncacn_ip_tcp:192.168.0.19[49165]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[samss lpc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[dsrole]
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\PIPE\protected_storage]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[protected_storage]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[lsasspirpc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[lsapolicylookup]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LSARPC_ENDPOINT]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[securityevent]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[audit]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-865d0c7863d5b6174c]
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\pipe\lsass]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	srvsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid	98716d03-89ac-44c7-bb8c-285824e51c4a v1.0 XactSrv service
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEF626962F0C21413D9D720371CC8E]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[IUserProfile2]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	authui.dll
services.parsed.dcerpc.endpoints.explained_uuid	24019106-a203-4642-b88d-82dae9158929 v1.0
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-6fc9bb4630b4ce7c2a]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	MPSSVC.dll
services.parsed.dcerpc.endpoints.explained_uuid	2fb92682-6599-42dc-ae13-bd2ca89bd11c v1.0 Fw APIs
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-da99f4e19730bb6524]

services.parsed.dcerpc.endpoints.protocol	[MS-PAN]: Print System Asynchronous Notification Protocol
services.parsed.dcerpc.endpoints.executable	spoolsv.exe
services.parsed.dcerpc.endpoints.explained_uuid	ae33069b-a2a8-46ee-a235-ddfd339be281 v1.0 Spooler base remote object endpoint
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[spoolss]

services.parsed.dcerpc.endpoints.protocol	[MS-RPRN]: Print System Remote Protocol
services.parsed.dcerpc.endpoints.executable	spoolsv.exe
services.parsed.dcerpc.endpoints.explained_uuid	12345678-1234-abcd-ef00-0123456789ab v1.0 IPSec Policy agent endpoint
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-3fc0237889bdfae9da]
services.parsed.dcerpc.endpoints.bindings	ncacn_ip_tcp:192.168.0.19[49154]

services.parsed.dcerpc.endpoints.protocol	[MS-SCMR]: Service Control Manager Remote Protocol
services.parsed.dcerpc.endpoints.executable	services.exe
services.parsed.dcerpc.endpoints.explained_uuid	367abb81-9844-35f1-ad32-98f038001003 v2.0
services.parsed.dcerpc.endpoints.bindings	ncacn_ip_tcp:192.168.0.19[49156]

services.parsed.dcerpc.endpoints.protocol	[MS-RSP]: Remote Shutdown Protocol
services.parsed.dcerpc.endpoints.executable	wininit.exe
services.parsed.dcerpc.endpoints.explained_uuid	d95afe70-a6d5-4259-822e-2c84da1ddb0d v1.0
services.parsed.dcerpc.endpoints.bindings	ncacn_ip_tcp:192.168.0.19[49152]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[WindowsShutdown]
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\PIPE\InitShutdown]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[WMsgKRpc04EF20]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	spoolsv.exe
services.parsed.dcerpc.endpoints.explained_uuid	4a452661-8290-4b36-8fbe-7f4093a94978 v1.0 Spooler function endpoint
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[spoolss]

services.parsed.dcerpc.endpoints.protocol	[MS-CMPO]: MSDTC Connection Manager:
services.parsed.dcerpc.endpoints.executable	msdtcprx.dll
services.parsed.dcerpc.endpoints.explained_uuid	906b0ce0-c70b-1067-b317-00dd010662da v1.0
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-5c00d44ffe86157a7a]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEBFD81EE7720045CD922E71985B9F]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-3884e6dabb64549e03]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-3884e6dabb64549e03]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-3884e6dabb64549e03]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-3884e6dabb64549e03]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	sysntfy.dll
services.parsed.dcerpc.endpoints.explained_uuid	c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 v1.0 Impl friendly name
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-ae4077dfa1f0f4e212]
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\PIPE\srvsvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEF626962F0C21413D9D720371CC8E]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEF626962F0C21413D9D720371CC8E]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEF626962F0C21413D9D720371CC8E]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[IUserProfile2]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	dhcpcsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid	3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 v1.0 DHCP Client LRPC Endpoint
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[dhcpcsvc]
services.parsed.dcerpc.endpoints.bindings	ncacn_ip_tcp:192.168.0.19[49153]
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\pipe\eventlog]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[eventlog]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	N/A
services.parsed.dcerpc.endpoints.explained_uuid	7f1343fe-50a9-4927-a778-0c5859517bac v1.0 DfsDs service
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\PIPE\wkssvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[DNSResolver]

services.parsed.dcerpc.endpoints.protocol	[MS-PAN]: Print System Asynchronous Notification Protocol
services.parsed.dcerpc.endpoints.executable	spoolsv.exe
services.parsed.dcerpc.endpoints.explained_uuid	0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 v1.0 Spooler function endpoint
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[spoolss]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	IKEEXT.DLL
services.parsed.dcerpc.endpoints.explained_uuid	a398e520-d59a-4bdd-aa7a-3c1e0303a511 v1.0 IKE/Authip API
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEF626962F0C21413D9D720371CC8E]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[IUserProfile2]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	BFE.DLL
services.parsed.dcerpc.endpoints.explained_uuid	dd490425-5325-4565-b774-7e27d6c09c24 v1.0 Base Firewall Engine API
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-da99f4e19730bb6524]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	nrpsrv.dll
services.parsed.dcerpc.endpoints.explained_uuid	30adc50c-5cbc-46ce-9a0e-91914789e23c v1.0 NRP server endpoint
services.parsed.dcerpc.endpoints.bindings	ncacn_ip_tcp:192.168.0.19[49153]
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\pipe\eventlog]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[eventlog]

services.parsed.dcerpc.endpoints.protocol	[MS-EVEN6]: EventLog Remoting Protocol
services.parsed.dcerpc.endpoints.executable	wevtsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid	f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0 Event log TCPIP
services.parsed.dcerpc.endpoints.bindings	ncacn_ip_tcp:192.168.0.19[49153]
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\pipe\eventlog]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[eventlog]

services.parsed.dcerpc.endpoints.protocol	[MS-FASP]: Firewall and Advanced Security Protocol
services.parsed.dcerpc.endpoints.executable	FwRemoteSvr.dll
services.parsed.dcerpc.endpoints.explained_uuid	6b5bdd1e-528c-422c-af8c-a4079be4fe48 v1.0 Remote Fw APIs
services.parsed.dcerpc.endpoints.bindings	ncacn_ip_tcp:192.168.0.19[49154]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	winlogon.exe
services.parsed.dcerpc.endpoints.explained_uuid	12e65dd8-887f-41ef-91bf-8d816c42c2e7 v1.0 Secure Desktop LRPC interface
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[WMsgKRpc02D8E02]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	N/A
services.parsed.dcerpc.endpoints.explained_uuid	3473dd4d-2e88-4006-9cba-22570909dd10 v5.1 WinHttp Auto-Proxy Service
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\PIPE\W32TIME_ALT]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[W32TIME_ALT]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-a0462a5962ceeb70ee]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEDA7E3439717B481B97DC21E6AFFF]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	winlogon.exe
services.parsed.dcerpc.endpoints.explained_uuid	76f226c3-ec14-4325-8a99-6a46348418af v1.0
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[WindowsShutdown]
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\PIPE\InitShutdown]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[WMsgKRpc04EF20]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[WMsgKRpc04F151]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[WMsgKRpc02D8E02]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	dhcpcsvc6.dll
services.parsed.dcerpc.endpoints.explained_uuid	3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 v1.0 DHCPv6 Client LRPC Endpoint
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[dhcpcsvc6]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[dhcpcsvc]
services.parsed.dcerpc.endpoints.bindings	ncacn_ip_tcp:192.168.0.19[49153]
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\pipe\eventlog]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[eventlog]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	iphlpsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid	552d076a-cb29-4e44-8b6a-d15e59e2c0af v1.0 IP Transition Configuration endpoint
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\PIPE\srvsvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEF626962F0C21413D9D720371CC8E]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[IUserProfile2]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	MPSSVC.dll
services.parsed.dcerpc.endpoints.explained_uuid	7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 v1.0 Fw APIs
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-da99f4e19730bb6524]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	certprop.dll
services.parsed.dcerpc.endpoints.explained_uuid	30b044a5-a225-43f0-b3a4-e060df91f9c1 v1.0
services.parsed.dcerpc.endpoints.bindings	ncacn_np:\\ECS-6FDB-100875[\PIPE\srvsvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEF626962F0C21413D9D720371CC8E]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[IUserProfile2]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	gpsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid	2eb08e3e-639f-4fba-97b1-14f878961076 v1.0
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEF626962F0C21413D9D720371CC8E]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[IUserProfile2]

services.parsed.dcerpc.endpoints.protocol	N/A
services.parsed.dcerpc.endpoints.executable	nsisvc.dll
services.parsed.dcerpc.endpoints.explained_uuid	7ea70bcf-48af-4f6a-8968-6a440754d5fa v1.0 NSI server endpoint
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[LRPC-a0462a5962ceeb70ee]
services.parsed.dcerpc.endpoints.bindings	ncalrpc:[OLEDA7E3439717B481B97DC21E6AFFF]

services.perspective_id

PERSPECTIVE_UNKNOWN

services.port

135

services.service_name

DCERPC

services.source_ip

167.94.145.100

services.transport_protocol

TCP

services.truncated

false

808/HTTP TCP View Definition

Attribute	Value
services.banner	HTTP/1.1 407 Proxy Authentication Required\r\nServer: Proxy\r\nProxy-Authenticate: Basic realm="CCProxy Authorization"\r\nConnection: Close\r\nProxy-Connection: Close\r\nContent-Length: 267\r\n
services.banner_hashes	sha256:e8e8e06461037e53bfa703e0593ad4d1e36fd45b4610ebdcf582c0be0d20ce2e
services.banner_hex	485454502f312e31203430372050726f78792041757468656e7469636174696f6e2052657175697265640d0a5365727665723a2050726f78790d0a50726f78792d41757468656e7469636174653a204261736963207265616c6d3d22434350726f787920417574686f72697a6174696f6e220d0a436f6e6e656374696f6e3a20436c6f73650d0a50726f78792d436f6e6e656374696f6e3a20436c6f73650d0a436f6e74656e742d4c656e6774683a203236370d0a
services.discovery_method	PREDICTIVE_METHOD_7
services.extended_service_name	HTTP
services.http.request.method	GET
services.http.request.uri	http://36.26.70.203:808/
services.http.request.headers.User_Agent	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept	/
services.http.response.protocol	HTTP/1.1
services.http.response.status_code	407
services.http.response.status_reason	Proxy Authentication Required
services.http.response.headers.Server	Proxy
services.http.response.headers.Proxy_Authenticate	Basic realm="CCProxy Authorization"
services.http.response.headers.Proxy_Connection	Close
services.http.response.headers.Content_Length	267
services.http.response.headers.Connection	Close
services.http.response.html_tags	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
services.http.response.body_size	267
services.http.response.body	<html>\r\n<head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /></head>\r\n<body>\r\n<h1>Unauthorized ...</h1>\r\n<h2>\r\nIP Address: 162.142.125.119:39822<br>\r\nMAC Address: <br>\r\nServer Time: 2025-01-19 01:30:26<br>\r\nAuth Result: \r\n</h2>\r\n</body>\r\n</html>
services.http.response.body_hashes	sha256:04cba5a78619d2e3e95b1a69e0fbe054c64b7f9b400437026d1a42fa66889910
services.http.response.body_hashes	sha1:e22c45cb4a3b9e511fcc4abb0b8913ab4aa96815
services.http.response.body_hash	sha1:e22c45cb4a3b9e511fcc4abb0b8913ab4aa96815
services.http.supports_http2	false
services.labels	proxy
services.observed_at	2025-01-18T17:30:24.627015494Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	808
services.service_name	HTTP
services.source_ip	162.142.125.119
services.transport_protocol	TCP
services.truncated	false

1080/SOCKS TCP View Definition

Attribute	Value
services.banner
services.banner_hashes	sha256:7c2f2290b282a9630f38a2449df18d5595dd88a3e9c9ca138fc5d3a72266211c
services.banner_hex	0502
services.discovery_method	PREDICTIVE_METHOD_18
services.extended_service_name	SOCKS
services.observed_at	2025-01-18T07:45:48.245123469Z
services.parsed.socks.no_authentication_required	false
services.parsed.socks.preferred_authentication	Username/Password
services.parsed.socks.preferred_authentication_value	2
services.parsed.socks.socks_version	5
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	1080
services.service_name	SOCKS
services.source_ip	206.168.34.119
services.transport_protocol	TCP
services.truncated	false

3389/RDP TCP View Definition

Attribute

Value

services.discovery_method

IPV4_WALK_FULL_PRIORITY_1

services.extended_service_name

RDP

services.labels

network-administration

services.labels

remote-access

services.observed_at

2025-01-18T17:32:17.837545638Z

services.perspective_id

PERSPECTIVE_UNKNOWN

services.port

3389

services.rdp.selected_security_protocol.error

true

services.rdp.selected_security_protocol.error_hybrid_required

true

services.rdp.selected_security_protocol.raw_value

services.rdp.selected_security_protocol.standard_rdp

false

services.rdp.selected_security_protocol.tls

false

services.rdp.selected_security_protocol.credssp

false

services.rdp.selected_security_protocol.rdstls

false

services.rdp.selected_security_protocol.credssp_early_auth

false

services.rdp.selected_security_protocol.error_ssl_required

false

services.rdp.selected_security_protocol.error_ssl_forbidden

false

services.rdp.selected_security_protocol.error_ssl_cert_missing

false

services.rdp.selected_security_protocol.error_bad_flags

false

services.rdp.selected_security_protocol.error_ssl_user_auth_required

false

services.rdp.selected_security_protocol.error_unknown

false

services.rdp.x224_cc_pdu_srcref

13330

services.service_name

RDP

services.software.uniform_resource_identifier	cpe:2.3:o:microsoft:windows::::::::
services.software.part	o
services.software.vendor	microsoft
services.software.product	windows
services.software.source	OSI_TRANSPORT_LAYER

services.source_ip

162.142.125.195

services.transport_fingerprint.id

310

services.transport_fingerprint.os

Windows 2008 R2 / 2012

services.transport_fingerprint.raw

8192,128,true,MNWST,1460,false,false

services.transport_protocol

TCP

services.truncated

false

47001/HTTP TCP View Definition

Attribute

Value

services.banner

HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n

services.banner_hashes

sha256:d7de42c1e8c09cf951e3ad6248fda3ab48a60ca3eac8b25effd4b3067df8f362

services.banner_hex

485454502f312e3120343034204e6f7420466f756e640d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d75732d61736369690d0a5365727665723a204d6963726f736f66742d485454504150492f322e300d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d4c656e6774683a203331350d0a

services.discovery_method

PREDICTIVE_METHOD_15

services.extended_service_name

HTTP

services.http.request.method

GET

services.http.request.uri

http://36.26.70.203:47001/

services.http.request.headers.User_Agent

Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)

services.http.request.headers.Accept

*/*

services.http.response.protocol

HTTP/1.1

services.http.response.status_code

404

services.http.response.status_reason

Not Found

services.http.response.headers.Date

services.http.response.headers.Server

Microsoft-HTTPAPI/2.0

services.http.response.headers.Content_Length

315

services.http.response.headers.Content_Type

text/html; charset=us-ascii

services.http.response.headers.Connection

services.http.response.html_tags

<TITLE>Not Found</TITLE>

services.http.response.html_tags

services.http.response.body_size

315

services.http.response.body

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n

services.http.response.body_hashes

sha256:ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0

services.http.response.body_hashes

sha1:a66898b36c94c53766e66c1a7aaeb149447ec083

services.http.response.body_hash

sha1:a66898b36c94c53766e66c1a7aaeb149447ec083

services.http.response.html_title

Not Found

services.http.supports_http2

false

services.observed_at

2025-01-19T13:06:05.782275744Z

services.perspective_id

PERSPECTIVE_UNKNOWN

services.port

47001

services.service_name

HTTP

services.software.uniform_resource_identifier	cpe:2.3:o:microsoft:windows::::::::
services.software.part	o
services.software.vendor	Microsoft
services.software.product	Windows
services.software.other.family	Windows
services.software.source	OSI_APPLICATION_LAYER

services.software.uniform_resource_identifier	cpe:2.3:a:microsoft:http_api:2.0:::::::*
services.software.part	a
services.software.vendor	Microsoft
services.software.product	HTTP API
services.software.version	2.0
services.software.source	OSI_APPLICATION_LAYER

services.source_ip

162.142.125.218

services.transport_protocol

TCP

services.truncated

false