| Country | Hong Kong |
| City | Hong Kong |
| Organization | Asia Pacific Network Information Center, Pty. Ltd. |
| ISP | Tencent Building, Kejizhongyi Avenue |
| ASN | AS132203 |
Microsoft RPC Endpoint Mapper d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 10.0.4.9:49152 ncalrpc: WindowsShutdown ncacn_np: \\ADMINISTRATOR\PIPE\InitShutdown ncalrpc: WMsgKRpc040550 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\ADMINISTRATOR\PIPE\InitShutdown ncalrpc: WMsgKRpc040550 ncalrpc: WMsgKRpc042271 ncalrpc: WMsgKRpc03B4A32 c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-e1f7eec9cec9baa3c4 ncacn_np: \\ADMINISTRATOR\PIPE\srvsvc ncacn_ip_tcp: 10.0.4.9:49154 ncacn_np: \\ADMINISTRATOR\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 ncalrpc: IUserProfile2 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 ncalrpc: dhcpcsvc ncacn_ip_tcp: 10.0.4.9:49153 ncacn_np: \\ADMINISTRATOR\pipe\eventlog ncalrpc: eventlog 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncacn_ip_tcp: 10.0.4.9:49153 ncacn_np: \\ADMINISTRATOR\pipe\eventlog ncalrpc: eventlog 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncacn_ip_tcp: 10.0.4.9:49153 ncacn_np: \\ADMINISTRATOR\pipe\eventlog ncalrpc: eventlog f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 10.0.4.9:49153 ncacn_np: \\ADMINISTRATOR\pipe\eventlog ncalrpc: eventlog 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncacn_np: \\ADMINISTRATOR\PIPE\srvsvc ncacn_ip_tcp: 10.0.4.9:49154 ncacn_np: \\ADMINISTRATOR\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncacn_ip_tcp: 10.0.4.9:49154 ncacn_np: \\ADMINISTRATOR\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncacn_ip_tcp: 10.0.4.9:49154 ncacn_np: \\ADMINISTRATOR\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncacn_ip_tcp: 10.0.4.9:49154 ncacn_np: \\ADMINISTRATOR\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 10.0.4.9:49154 ncacn_np: \\ADMINISTRATOR\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\ADMINISTRATOR\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\ADMINISTRATOR\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: senssvc ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 provider: gpsvc.dll ncalrpc: OLE23B24DC930814233A42FEA5380A5 ncalrpc: IUserProfile2 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncalrpc: LRPC-7dc00810b2ddc1c3e7 ncalrpc: OLE01ACBD1C397A4E2EA88A26472FF2 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-7dc00810b2ddc1c3e7 ncalrpc: OLE01ACBD1C397A4E2EA88A26472FF2 24019106-a203-4642-b88d-82dae9158929 version: v1.0 provider: authui.dll ncalrpc: LRPC-4eefb54e765ff7c7c7 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-0e7adea65642bbe38b 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-0e7adea65642bbe38b dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-0e7adea65642bbe38b 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\ADMINISTRATOR\PIPE\wkssvc ncalrpc: DNSResolver 12345678-1234-abcd-ef00-0123456789ab version: v1.0 annotation: IPSec Policy agent endpoint protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncalrpc: LRPC-1b0b2ad23eb21f7e93 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 10.0.4.9:49155 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 10.0.4.9:49165 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\ADMINISTRATOR\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-96127f14bcf259d10a ncacn_np: \\ADMINISTRATOR\pipe\lsass 12e65dd8-887f-41ef-91bf-8d816c42c2e7 version: v1.0 annotation: Secure Desktop LRPC interface provider: winlogon.exe ncalrpc: WMsgKRpc03B4A32 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-226ba00d9fe86b3b40 ncalrpc: LRPC-226ba00d9fe86b3b40 ncalrpc: LRPC-226ba00d9fe86b3b40 ncalrpc: LRPC-226ba00d9fe86b3b40
SMB Status: Authentication: enabled SMB Version: 1 OS: Windows Server 2008 R2 Datacenter 7601 Service Pack 1 Software: Windows Server 2008 R2 Datacenter 6.1 Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode
Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\t\x08\x00\x02\x00\x00\x00 Remote Desktop Protocol NTLM Info: OS: Windows 7/Windows Server 2008 R2 OS Build: 6.1.7601 Target Name: ADMINISTRATOR NetBIOS Domain Name: ADMINISTRATOR NetBIOS Computer Name: ADMINISTRATOR DNS Domain Name: Administrator FQDN: Administrator
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4e:df:dd:50:43:cf:b7:4f:91:aa:98:19:c2:58:29
Signature Algorithm: sha1WithRSAEncryption
Issuer: CN=Administrator
Validity
Not Before: Jan 28 13:17:23 2025 GMT
Not After : Jul 30 13:17:23 2025 GMT
Subject: CN=Administrator
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:df:44:f4:58:47:48:3d:d0:af:3d:79:3d:95:4b:
cc:dc:fb:6d:c1:58:8c:cc:62:fb:73:c0:71:14:6d:
2e:cd:d7:3c:53:3e:cd:cb:56:8c:51:c5:f6:08:3f:
73:28:e2:61:f6:4e:a8:24:7c:d2:93:c4:9b:65:1e:
9c:ea:2e:da:9d:b1:c7:d7:2b:06:d5:5e:a0:1a:df:
8d:55:47:73:99:f7:a1:3f:2c:da:7f:aa:c1:de:c0:
50:b3:c0:c1:ee:6c:a4:09:e8:8a:e4:fb:2e:07:ca:
79:bd:8c:a5:70:d4:68:6c:67:ef:3e:7e:09:6c:ef:
70:d0:99:b6:40:6b:da:00:fa:bc:04:3d:17:1b:c0:
a6:b0:37:f8:2e:ea:f0:01:9f:8f:3f:32:ac:03:b4:
bb:c7:0a:df:20:ce:26:92:2c:fa:a7:58:32:17:bc:
77:7e:2a:5e:f3:59:30:ba:1c:5e:67:ae:c4:7a:5e:
4e:a8:bc:26:dc:85:c2:31:56:c9:67:62:b8:92:ec:
1f:37:2c:b1:5a:06:b6:c8:df:23:b0:37:0d:43:0e:
c4:35:4d:5a:b7:18:4c:f0:ac:3a:65:a7:4f:67:82:
34:05:13:32:13:1e:11:93:b7:9b:94:21:18:6c:d3:
76:78:bb:14:b5:85:ab:23:1e:02:80:76:fa:ba:c9:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
b2:ee:89:bb:52:bf:9f:b6:b4:ee:7b:33:f8:c5:9e:8a:3f:a3:
be:2e:25:45:97:14:89:93:9b:b0:33:67:bc:2d:2b:30:8f:e1:
73:d4:ba:4b:3b:63:0e:e7:85:b3:d5:55:2b:ef:3f:c4:72:82:
a8:9f:20:bd:17:80:9a:d8:df:42:fb:90:e1:d0:4d:77:9c:e4:
7d:aa:b5:2d:03:26:18:27:66:65:f3:54:08:6d:36:80:d8:b9:
86:47:4f:13:af:af:a2:80:9a:08:a9:d2:64:70:f3:e0:8c:29:
70:71:82:84:69:4f:8d:fc:ae:eb:81:6d:fb:77:1c:f7:28:45:
19:71:64:3b:3f:f2:6f:45:e8:e0:86:2f:ec:cf:eb:d0:54:11:
08:f2:ff:8d:81:33:a2:c2:68:2e:69:2c:80:9e:e0:9b:76:b0:
af:69:e5:cb:3d:8e:c1:ad:f0:74:39:6e:a0:ea:22:17:ce:65:
a4:cf:98:0a:6b:1b:8a:3f:7d:00:84:d0:3e:bb:2e:72:ef:0c:
0c:ac:a5:8e:d6:28:ae:6b:b6:de:df:ca:d6:fd:fe:4c:31:f9:
fd:bc:f1:19:ed:8d:b8:3d:dc:1d:e7:5a:d0:72:b2:41:43:23:
33:e9:cb:eb:92:99:d0:85:ec:ae:53:60:0b:a3:f7:97:0f:1e:
ee:56:02:11
HTTP/1.1 404 NOT FOUND Content-Type: text/html Content-Length: 138 Server: nginx Connection: keep-alive X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: 1e38d30348c4c2ba7cd7d75b82182c72=434854fd-fdcc-41a7-a0ca-06d9c26372c6.nkVaICueVGz9gL1fJKV1kL4UAHc; Expires=Fri, 07-Mar-2025 08:26:37 GMT; HttpOnly; Path=/ Date: Thu, 06 Mar 2025 08:26:37 GMT