whois.handle: ALIBABA CLOUD - US
whois.name: Alibaba Cloud - US
whois.cidrs: 47.89.192.0/18
whois.created: 2018-04-20T00:00:00.000000
whois.updated: 2024-09-02T00:00:00.000000
whois.allocation_type: REASSIGNMENT
whois.handle: C06961494
whois.name: Alibaba Cloud - US
whois.street: 525 Almanor Ave, 4th Floor, Sunnyvale, California, 94085, USA
whois.city: San Mateo
whois.state: CA
whois.postal_code: 94402
whois.country: US
services.protocol: FTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T16:35:57.739248
services.banner: 220 Serv-U FTP Server v7.2 ready...
  
services.version_selected: TLSv1_0
services.cipher_selected: TLS_RSA_WITH_AES_256_CBC_SHA
services.ja4s: t100000_0035_e3b0c44298fc
services.names: ftp.Serv-U.com
services.issuer_dn: CN=ftp.Serv-U.com, L=Helenville, ST=WI, O=Rhino Software\, Inc., C=US, emailAddress=service@rhinosoft.com, OU=Software Development
services.common_name: ftp.Serv-U.com
services.country: US
services.locality: Helenville
services.province: WI
services.organization: Rhino Software, Inc.
services.organizational_unit: Software Development
services.email_address: service@rhinosoft.com
services.subject_dn: CN=ftp.Serv-U.com, L=Helenville, ST=WI, O=Rhino Software\, Inc., C=US, emailAddress=service@rhinosoft.com, OU=Software Development
services.common_name: ftp.Serv-U.com
services.country: US
services.locality: Helenville
services.province: WI
services.organization: Rhino Software, Inc.
services.organizational_unit: Software Development
services.email_address: service@rhinosoft.com
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Serv-U
services.product: Serv-U FTP Server
services.version: 7.2
services.cpe: cpe:2.3:a:solarwinds:serv\-u_ftp_server:7.2:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.vendor: microsoft
services.product: windows
services.cpe: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.value: file-sharing
services.banner: 220 Serv-U FTP Server v7.2 ready...
  
services.auth_tls_response: 234 AUTH command OK. Initializing SSL connection.
  
services.status_meaning: Service ready for new user.
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T15:52:55.944263
services.banner: HTTP/1.1 404 
  Transfer-Encoding: chunked
  Date:  <REDACTED>
  
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T15:52:55.944263
services.uri: http://47.89.250.37/
services.protocol: HTTP/1.1
services.key: Transfer-Encoding
services.headers: chunked
services.key: Date
services.headers: <REDACTED>
services.supported_versions: HTTP/1.1
services.protocol: DCERPC
services.transport_protocol: TCP
services.scan_time: 2025-07-28T07:17:18.211572
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.vendor: microsoft
services.product: windows
services.cpe: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.protocol: N/A
services.executable: authui.dll
services.explained_uuid: 24019106-a203-4642-b88d-82dae9158929 v1.0
services.bindings: ncalrpc:[LRPC-5822d8b97985fe92b5]
services.protocol: N/A
services.executable: MPSSVC.dll
services.explained_uuid: 2fb92682-6599-42dc-ae13-bd2ca89bd11c v1.0 Fw APIs
services.bindings: ncalrpc:[LRPC-d1149b27dcf21f80e6]
services.protocol: [MS-FASP]: Firewall and Advanced Security Protocol
services.executable: FwRemoteSvr.dll
services.explained_uuid: 6b5bdd1e-528c-422c-af8c-a4079be4fe48 v1.0 Remote Fw APIs
services.bindings: ncacn_ip_tcp:172.16.13.222[49171]
services.protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
services.executable: samsrv.dll
services.explained_uuid: 12345778-1234-abcd-ef00-0123456789ac v1.0
services.bindings: ncacn_ip_tcp:172.16.13.222[49177] ncalrpc:[samss lpc] ncalrpc:[dsrole] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\protected_storage] ncalrpc:[protected_storage] ncalrpc:[lsasspirpc] ncalrpc:[lsapolicylookup] ncalrpc:[LSARPC_ENDPOINT] ncalrpc:[securityevent] ncalrpc:[audit] ncalrpc:[LRPC-643944ced818ca4ee9] ncacn_np:\\iZlwfr8b432cghZ[\pipe\lsass]
services.protocol: [MS-CMPO]: MSDTC Connection Manager:
services.executable: msdtcprx.dll
services.explained_uuid: 906b0ce0-c70b-1067-b317-00dd010662da v1.0
services.bindings: ncalrpc:[LRPC-24862d564340c588c0] ncalrpc:[LRPC-24862d564340c588c0] ncalrpc:[LRPC-24862d564340c588c0] ncalrpc:[LRPC-24862d564340c588c0]
services.protocol: N/A
services.executable: dhcpcsvc.dll
services.explained_uuid: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 v1.0 DHCP Client LRPC Endpoint
services.bindings: ncalrpc:[dhcpcsvc] ncacn_ip_tcp:172.16.13.222[49153] ncacn_np:\\iZlwfr8b432cghZ[\pipe\eventlog] ncalrpc:[eventlog]
services.protocol: N/A
services.executable: nsisvc.dll
services.explained_uuid: 7ea70bcf-48af-4f6a-8968-6a440754d5fa v1.0 NSI server endpoint
services.bindings: ncalrpc:[LRPC-aec50969efab521470] ncalrpc:[OLE81D4F82CB81C4270AD4C93D0E7C3]
services.protocol: N/A
services.executable: winlogon.exe
services.explained_uuid: 76f226c3-ec14-4325-8a99-6a46348418af v1.0
services.bindings: ncalrpc:[WindowsShutdown] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\InitShutdown] ncalrpc:[WMsgKRpc046030] ncalrpc:[WMsgKRpc046251] ncalrpc:[WMsgKRpc0266862]
services.protocol: N/A
services.executable: srvsvc.dll
services.explained_uuid: 98716d03-89ac-44c7-bb8c-285824e51c4a v1.0 XactSrv service
services.bindings: ncacn_ip_tcp:172.16.13.222[49154] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2]
services.protocol: [MS-RSP]: Remote Shutdown Protocol
services.executable: wininit.exe
services.explained_uuid: d95afe70-a6d5-4259-822e-2c84da1ddb0d v1.0
services.bindings: ncacn_ip_tcp:172.16.13.222[49152] ncalrpc:[WindowsShutdown] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\InitShutdown] ncalrpc:[WMsgKRpc046030]
services.protocol: N/A
services.executable: dhcpcsvc6.dll
services.explained_uuid: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 v1.0 DHCPv6 Client LRPC Endpoint
services.bindings: ncalrpc:[dhcpcsvc6] ncalrpc:[dhcpcsvc] ncacn_ip_tcp:172.16.13.222[49153] ncacn_np:\\iZlwfr8b432cghZ[\pipe\eventlog] ncalrpc:[eventlog]
services.protocol: N/A
services.executable: IKEEXT.DLL
services.explained_uuid: a398e520-d59a-4bdd-aa7a-3c1e0303a511 v1.0 IKE/Authip API
services.bindings: ncacn_ip_tcp:172.16.13.222[49154] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: iphlpsvc.dll
services.explained_uuid: 552d076a-cb29-4e44-8b6a-d15e59e2c0af v1.0 IP Transition Configuration endpoint
services.bindings: ncacn_ip_tcp:172.16.13.222[49154] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2]
services.protocol: [MS-RPRN]: Print System Remote Protocol
services.executable: spoolsv.exe
services.explained_uuid: 12345678-1234-abcd-ef00-0123456789ab v1.0 IPSec Policy agent endpoint
services.bindings: ncalrpc:[LRPC-7088e6e22a2b4399ae] ncacn_ip_tcp:172.16.13.222[49171]
services.protocol: N/A
services.executable: certprop.dll
services.explained_uuid: 30b044a5-a225-43f0-b3a4-e060df91f9c1 v1.0
services.bindings: ncacn_np:\\iZlwfr8b432cghZ[\PIPE\srvsvc] ncacn_ip_tcp:172.16.13.222[49154] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: schedsvc.dll
services.explained_uuid: 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 v1.0
services.bindings: ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: N/A
services.explained_uuid: 7f1343fe-50a9-4927-a778-0c5859517bac v1.0 DfsDs service
services.bindings: ncacn_np:\\iZlwfr8b432cghZ[\PIPE\wkssvc] ncalrpc:[DNSResolver]
services.protocol: N/A
services.executable: spoolsv.exe
services.explained_uuid: 4a452661-8290-4b36-8fbe-7f4093a94978 v1.0 Spooler function endpoint
services.bindings: ncalrpc:[spoolss]
services.protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
services.executable: spoolsv.exe
services.explained_uuid: ae33069b-a2a8-46ee-a235-ddfd339be281 v1.0 Spooler base remote object endpoint
services.bindings: ncalrpc:[spoolss]
services.protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
services.executable: spoolsv.exe
services.explained_uuid: 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 v1.0 Spooler function endpoint
services.bindings: ncalrpc:[spoolss]
services.protocol: [MS-SCMR]: Service Control Manager Remote Protocol
services.executable: services.exe
services.explained_uuid: 367abb81-9844-35f1-ad32-98f038001003 v2.0
services.bindings: ncacn_ip_tcp:172.16.13.222[49167]
services.protocol: N/A
services.executable: sysntfy.dll
services.explained_uuid: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 v1.0 Impl friendly name
services.bindings: ncalrpc:[LRPC-1ee5c393fac485fed5] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\srvsvc] ncacn_ip_tcp:172.16.13.222[49154] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2] ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: N/A
services.explained_uuid: 3473dd4d-2e88-4006-9cba-22570909dd10 v5.1 WinHttp Auto-Proxy Service
services.bindings: ncacn_np:\\iZlwfr8b432cghZ[\PIPE\W32TIME_ALT] ncalrpc:[W32TIME_ALT] ncalrpc:[LRPC-aec50969efab521470] ncalrpc:[OLE81D4F82CB81C4270AD4C93D0E7C3]
services.protocol: N/A
services.executable: BFE.DLL
services.explained_uuid: dd490425-5325-4565-b774-7e27d6c09c24 v1.0 Base Firewall Engine API
services.bindings: ncalrpc:[LRPC-d1149b27dcf21f80e6]
services.protocol: N/A
services.executable: nrpsrv.dll
services.explained_uuid: 30adc50c-5cbc-46ce-9a0e-91914789e23c v1.0 NRP server endpoint
services.bindings: ncacn_ip_tcp:172.16.13.222[49153] ncacn_np:\\iZlwfr8b432cghZ[\pipe\eventlog] ncalrpc:[eventlog]
services.protocol: [MS-EVEN6]: EventLog Remoting Protocol
services.executable: wevtsvc.dll
services.explained_uuid: f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0 Event log TCPIP
services.bindings: ncacn_ip_tcp:172.16.13.222[49153] ncacn_np:\\iZlwfr8b432cghZ[\pipe\eventlog] ncalrpc:[eventlog]
services.protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
services.executable: schedsvc.dll
services.explained_uuid: 86d35949-83c9-4044-b424-db363231fd0c v1.0
services.bindings: ncacn_ip_tcp:172.16.13.222[49154] ncacn_np:\\iZlwfr8b432cghZ[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2]
services.protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
services.executable: taskcomp.dll
services.explained_uuid: 378e52b0-c0a9-11cf-822d-00aa0051e40f v1.0
services.bindings: ncacn_np:\\iZlwfr8b432cghZ[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2]
services.protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
services.executable: taskcomp.dll
services.explained_uuid: 1ff70682-0a51-30e8-076d-740be8cee98b v1.0
services.bindings: ncacn_np:\\iZlwfr8b432cghZ[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: gpsvc.dll
services.explained_uuid: 2eb08e3e-639f-4fba-97b1-14f878961076 v1.0
services.bindings: ncalrpc:[OLE598A0EC4ED8747F7B45C39E06AEC] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: MPSSVC.dll
services.explained_uuid: 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 v1.0 Fw APIs
services.bindings: ncalrpc:[LRPC-d1149b27dcf21f80e6]
services.protocol: N/A
services.executable: winlogon.exe
services.explained_uuid: 12e65dd8-887f-41ef-91bf-8d816c42c2e7 v1.0 Secure Desktop LRPC interface
services.bindings: ncalrpc:[WMsgKRpc0266862]
services.protocol: NETBIOS
services.transport_protocol: TCP
services.scan_time: 2025-07-27T12:34:12.575990
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.vendor: microsoft
services.product: windows
services.cpe: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.protocol: SMB
services.transport_protocol: TCP
services.scan_time: 2025-07-27T09:06:25.245829
services.banner: SMB SMB 2.1
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.vendor: microsoft
services.product: windows
services.cpe: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.value: file-sharing
services.version_string: SMB 2.1
services.authentication_types: 1.3.6.1.4.1.311.2.2.30 1.3.6.1.4.1.311.2.2.10
services.target_name: iZlwfr8b432cghZ
services.protocol: UNKNOWN
services.transport_protocol: TCP
services.scan_time: 2025-07-28T07:45:59.456775
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
services.ja4s: t120100_c014_bc98f8e001b5
services.version: TLSv1_2
services.ja4s: t120100_c014_bc98f8e001b5
services.version: TLSv1_1
services.ja4s: t110100_c014_bc98f8e001b5
services.version: TLSv1_0
services.ja4s: t100100_c014_bc98f8e001b5
services.issuer_dn: CN=iZlwfr8b432cghZ
services.common_name: iZlwfr8b432cghZ
services.subject_dn: CN=iZlwfr8b432cghZ
services.common_name: iZlwfr8b432cghZ
services.scan_time: 2025-07-20T02:26:54.257612
[binary data, 22 values, 515 bytes]