GeneralInformation

Country	China
City	Nanjing
Organization	CHINANET jiangsu province network
ISP	CHINANET-BACKBONE
ASN	AS4134
Operating System	MikroTik RouterOS 6.43.8

OpenPorts

22 53 135 554 1701 1723 2000 2121 5900 8888

-861972944 | 2024-04-26T04:51:55.576098

22 / tcp

RFB 004.001

VNC:
  Protocol Version: 4.1
  Security Types:
    5: RA2
    13: RealVNC
    129: Tight Unix Login Authentication
    133: RealVNC

-553166942 | 2024-05-04T19:52:31.423332

53 / udp

Recursion: enabled

1363213966 | 2024-04-19T10:13:31.466285

135 / tcp

Microsoft RPC Endpoint Mapper

d95afe70-a6d5-4259-822e-2c84da1ddb0d
  version: v1.0
  protocol: [MS-RSP]: Remote Shutdown Protocol
  provider: wininit.exe
  ncacn_ip_tcp: 222.95.237.218:49152
  ncalrpc: WindowsShutdown
  ncacn_np: \\PC-20160404DFDU\PIPE\InitShutdown
  ncalrpc: WMsgKRpc04E4A0

76f226c3-ec14-4325-8a99-6a46348418af
  version: v1.0
  provider: winlogon.exe
  ncalrpc: WindowsShutdown
  ncacn_np: \\PC-20160404DFDU\PIPE\InitShutdown
  ncalrpc: WMsgKRpc04E4A0
  ncalrpc: WMsgKRpc051A11
  ncalrpc: WMsgKRpc01E86F2

c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
  version: v1.0
  annotation: Impl friendly name
  provider: sysntfy.dll
  ncalrpc: LRPC-31628b1a2d658e5ce9
  ncacn_np: \\PC-20160404DFDU\PIPE\srvsvc
  ncacn_ip_tcp: 222.95.237.218:49154
  ncacn_np: \\PC-20160404DFDU\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2
  ncalrpc: IUserProfile2
  ncalrpc: LRPC-dfcaace8a5e4721df9
  ncalrpc: LRPC-26bbc07fd24787bc5b

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
  version: v1.0
  annotation: DHCPv6 Client LRPC Endpoint
  provider: dhcpcsvc6.dll
  ncalrpc: dhcpcsvc6
  ncalrpc: dhcpcsvc
  ncalrpc: Audiosrv
  ncalrpc: AudioClientRpc
  ncacn_ip_tcp: 222.95.237.218:49153
  ncacn_np: \\PC-20160404DFDU\pipe\eventlog
  ncalrpc: eventlog

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc
  ncalrpc: Audiosrv
  ncalrpc: AudioClientRpc
  ncacn_ip_tcp: 222.95.237.218:49153
  ncacn_np: \\PC-20160404DFDU\pipe\eventlog
  ncalrpc: eventlog

30adc50c-5cbc-46ce-9a0e-91914789e23c
  version: v1.0
  annotation: NRP server endpoint
  provider: nrpsrv.dll
  ncalrpc: Audiosrv
  ncalrpc: AudioClientRpc
  ncacn_ip_tcp: 222.95.237.218:49153
  ncacn_np: \\PC-20160404DFDU\pipe\eventlog
  ncalrpc: eventlog

f6beaff7-1e19-4fbb-9f8f-b89e2018337c
  version: v1.0
  annotation: Event log TCPIP
  protocol: [MS-EVEN6]: EventLog Remoting Protocol
  provider: wevtsvc.dll
  ncacn_ip_tcp: 222.95.237.218:49153
  ncacn_np: \\PC-20160404DFDU\pipe\eventlog
  ncalrpc: eventlog

24019106-a203-4642-b88d-82dae9158929
  version: v1.0
  provider: authui.dll
  ncalrpc: LRPC-398f4c49d5fb000cce

30b044a5-a225-43f0-b3a4-e060df91f9c1
  version: v1.0
  provider: certprop.dll
  ncacn_np: \\PC-20160404DFDU\PIPE\srvsvc
  ncacn_ip_tcp: 222.95.237.218:49154
  ncacn_np: \\PC-20160404DFDU\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2

98716d03-89ac-44c7-bb8c-285824e51c4a
  version: v1.0
  annotation: XactSrv service
  provider: srvsvc.dll
  ncacn_ip_tcp: 222.95.237.218:49154
  ncacn_np: \\PC-20160404DFDU\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2

552d076a-cb29-4e44-8b6a-d15e59e2c0af
  version: v1.0
  annotation: IP Transition Configuration endpoint
  provider: iphlpsvc.dll
  ncacn_ip_tcp: 222.95.237.218:49154
  ncacn_np: \\PC-20160404DFDU\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2

a398e520-d59a-4bdd-aa7a-3c1e0303a511
  version: v1.0
  annotation: IKE/Authip API
  provider: IKEEXT.DLL
  ncacn_ip_tcp: 222.95.237.218:49154
  ncacn_np: \\PC-20160404DFDU\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2

86d35949-83c9-4044-b424-db363231fd0c
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: schedsvc.dll
  ncacn_ip_tcp: 222.95.237.218:49154
  ncacn_np: \\PC-20160404DFDU\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\PC-20160404DFDU\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\PC-20160404DFDU\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncalrpc: senssvc
  ncalrpc: OLE8543482A27EB4DFE8637451DBFD4
  ncalrpc: IUserProfile2

2eb08e3e-639f-4fba-97b1-14f878961076
  version: v1.0
  provider: gpsvc.dll
  ncalrpc: LRPC-dfcaace8a5e4721df9

3473dd4d-2e88-4006-9cba-22570909dd10
  version: v5.256
  annotation: WinHttp Auto-Proxy Service
  ncalrpc: LRPC-67f45e65438f26be77
  ncalrpc: OLEEE2F690BB1964C14B1B2FA49E6CD

7ea70bcf-48af-4f6a-8968-6a440754d5fa
  version: v1.0
  annotation: NSI server endpoint
  provider: nsisvc.dll
  ncalrpc: LRPC-67f45e65438f26be77
  ncalrpc: OLEEE2F690BB1964C14B1B2FA49E6CD

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_tcp: 222.95.237.218:49156
  ncalrpc: samss lpc
  ncacn_np: \\PC-20160404DFDU\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncalrpc: LRPC-0fd5f7974eca40ae98
  ncacn_np: \\PC-20160404DFDU\pipe\lsass

b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
  version: v1.0
  annotation: KeyIso
  provider: keyiso.dll
  ncalrpc: samss lpc
  ncacn_np: \\PC-20160404DFDU\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncalrpc: LRPC-0fd5f7974eca40ae98
  ncacn_np: \\PC-20160404DFDU\pipe\lsass

b58aa02e-2884-4e97-8176-4ee06d794184
  version: v1.0
  provider: sysmain.dll
  ncalrpc: TSUMRPD_PRINT_DRV_LPC_API
  ncalrpc: RemoteDevicesLPC_API
  ncalrpc: trkwks
  ncacn_np: \\PC-20160404DFDU\pipe\trkwks
  ncalrpc: OLE40F445F9B34243499CB584EDB973
  ncalrpc: LRPC-26bbc07fd24787bc5b

0767a036-0d22-48aa-ba69-b619480f38cb
  version: v1.0
  annotation: PcaSvc
  provider: pcasvc.dll
  ncalrpc: OLE40F445F9B34243499CB584EDB973
  ncalrpc: LRPC-26bbc07fd24787bc5b

266f33b4-c7c1-4bd1-8f52-ddb8f2214ea9
  version: v1.0
  annotation: Wlan Service
  provider: wlansvc.dll
  ncalrpc: LRPC-26bbc07fd24787bc5b

25952c5d-7976-4aa1-a3cb-c35f7ae79d1b
  version: v1.256
  annotation: Wireless Diagnostics
  ncalrpc: LRPC-26bbc07fd24787bc5b

4a452661-8290-4b36-8fbe-7f4093a94978
  version: v1.0
  annotation: Spooler function endpoint
  provider: spoolsv.exe
  ncalrpc: spoolss

ae33069b-a2a8-46ee-a235-ddfd339be281
  version: v1.0
  annotation: Spooler base remote object endpoint
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: spoolss

0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
  version: v1.0
  annotation: Spooler function endpoint
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: spoolss

dd490425-5325-4565-b774-7e27d6c09c24
  version: v1.0
  annotation: Base Firewall Engine API
  provider: BFE.DLL
  ncalrpc: LRPC-91c2457b9a840beb81

367abb81-9844-35f1-ad32-98f038001003
  version: v2.0
  protocol: [MS-SCMR]: Service Control Manager Remote Protocol
  provider: services.exe
  ncacn_ip_tcp: 222.95.237.218:49155

12e65dd8-887f-41ef-91bf-8d816c42c2e7
  version: v1.0
  annotation: Secure Desktop LRPC interface
  provider: winlogon.exe
  ncalrpc: WMsgKRpc01E86F2

2f5f6521-cb55-1059-b446-00df0bce31db
  version: v1.0
  annotation: Unimodem LRPC Endpoint
  ncalrpc: unimdmsvc
  ncalrpc: tapsrvlpc
  ncacn_np: \\PC-20160404DFDU\pipe\tapsrv
  ncacn_np: \\PC-20160404DFDU\pipe\TermSrv_API_service
  ncalrpc: TermSrvApi
  ncalrpc: LcRpc
  ncalrpc: OLE3A192551E0A245559414244DB201
  ncalrpc: nlaapi
  ncalrpc: keysvc2
  ncalrpc: keysvc
  ncacn_np: \\PC-20160404DFDU\pipe\keysvc
  ncalrpc: nlaplg
  ncacn_np: \\PC-20160404DFDU\PIPE\wkssvc
  ncalrpc: DNSResolver

258216985 | 2024-04-21T17:17:32.407423

554 / tcp

RTSP/1.0 200 OK
CSeq: 1
Public: OPTIONS, DESCRIBE, PLAY, PAUSE, SETUP, TEARDOWN, SET_PARAMETER, GET_PARAMETER
Date:  Mon, Apr 22 2024 01:17:31 GMT

545884119 | 2024-05-03T02:22:15.099537

1701 / udp

\xc8\x02\x00^\x00\x00\x00\x00\x00\x00\x00\x01\x80\x08\x00\x00\x00\x00\x00\x02\x80\x08\x00\x00\x00\x02\x01\x00\x80\n\x00\x00\x00\x03\x00\x00\x00\x01\x80\n\x00\x00\x00\x04\x00\x00\x00\x00\x00\x08\x00\x00\x00\x06\x00\x01\x80\x08\x00\x00\x00\x0772\x00\x0e\x00\x00\x00\x08MikroTik\x80\x08\x00\x00\x00\t\x03\xd6\x80\x08\x00\x00\x00\n\x00\x04

-880989205 | 2024-04-17T03:50:00.156960

1723 / tcp

PPTP:
  Firmware: 1
  Hostname: 72
  Vendor: MikroTik

-1538260461 | 2024-05-01T19:02:11.334808

2000 / tcp

\x01\x00\x00\x00

1160548050 | 2024-05-13T17:14:20.093334

2121 / tcp

220 72 FTP server (MikroTik 6.43.8) ready
530 Login incorrect
500 'HELP': command not understood
500 'FEAT': command not understood

1666487282 | 2024-04-29T15:24:13.074829

5900 / tcp

RFB 004.000

VNC:
  Protocol Version: 4.0
  Security Types:
    5: RA2
    7: RealVNC

-1009387643 | 2024-05-14T10:27:54.447329

8888 / tcp

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 7065
Content-Type: text/html
Date: Tue, 14 May 2024 10:27:53 GMT
Expires: 0


MikroTik RouterOS:
  Version: 6.43.8

222.95.237.218

Last Seen: 2024-05-14

Tags:

GeneralInformation

OpenPorts

-861972944 | 2024-04-26T04:51:55.576098
22 / tcp

RealVNC Enterprise

-553166942 | 2024-05-04T19:52:31.423332
53 / udp

1363213966 | 2024-04-19T10:13:31.466285
135 / tcp

Microsoft RPC Endpoint Mapper

258216985 | 2024-04-21T17:17:32.407423
554 / tcp

545884119 | 2024-05-03T02:22:15.099537
1701 / udp

-880989205 | 2024-04-17T03:50:00.156960
1723 / tcp

PPTP

-1538260461 | 2024-05-01T19:02:11.334808
2000 / tcp

MikroTik bandwidth-test server

1160548050 | 2024-05-13T17:14:20.093334
2121 / tcp

MikroTik router ftpd6.43.8

1666487282 | 2024-04-29T15:24:13.074829
5900 / tcp

RealVNC Personal

-1009387643 | 2024-05-14T10:27:54.447329
8888 / tcp

Products

Pricing

Contact Us

222.95.237.218

Last Seen: 2024-05-14

Tags:

GeneralInformation

OpenPorts

-861972944 | 2024-04-26T04:51:55.576098 22 / tcp

RealVNC Enterprise

-553166942 | 2024-05-04T19:52:31.423332 53 / udp

1363213966 | 2024-04-19T10:13:31.466285 135 / tcp

Microsoft RPC Endpoint Mapper

258216985 | 2024-04-21T17:17:32.407423 554 / tcp

545884119 | 2024-05-03T02:22:15.099537 1701 / udp

-880989205 | 2024-04-17T03:50:00.156960 1723 / tcp

PPTP

-1538260461 | 2024-05-01T19:02:11.334808 2000 / tcp

MikroTik bandwidth-test server

1160548050 | 2024-05-13T17:14:20.093334 2121 / tcp

MikroTik router ftpd6.43.8

1666487282 | 2024-04-29T15:24:13.074829 5900 / tcp

RealVNC Personal

-1009387643 | 2024-05-14T10:27:54.447329 8888 / tcp

Products

Pricing

Contact Us

-861972944 | 2024-04-26T04:51:55.576098
22 / tcp

-553166942 | 2024-05-04T19:52:31.423332
53 / udp

1363213966 | 2024-04-19T10:13:31.466285
135 / tcp

258216985 | 2024-04-21T17:17:32.407423
554 / tcp

545884119 | 2024-05-03T02:22:15.099537
1701 / udp

-880989205 | 2024-04-17T03:50:00.156960
1723 / tcp

-1538260461 | 2024-05-01T19:02:11.334808
2000 / tcp

1160548050 | 2024-05-13T17:14:20.093334
2121 / tcp

1666487282 | 2024-04-29T15:24:13.074829
5900 / tcp

-1009387643 | 2024-05-14T10:27:54.447329
8888 / tcp