whois.handle: UA-LANETLLC-COLO83
whois.name: Lanet LLC
whois.cidrs: 213.169.83.0/24
whois.created: 2016-11-18T00:00:00.000000
whois.updated: 2025-06-20T00:00:00.000000
whois.handle: ORG-LL520-RIPE
whois.name: Lanet LLC
whois.address: Beresteiskyi avenue, 95\n03115\nKyiv\nUKRAINE
whois.handle: AR77299-RIPE
whois.name: Abuse-C Role
whois.email: abuse@lanet.ua
whois.handle: YS2281-RIPE
whois.name: Yaroslav Stelnikovich
whois.email: y.stelnikovich@lanet.ua
services.protocol: DCERPC
services.transport_protocol: TCP
services.scan_time: 2025-07-28T00:51:32.866278
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.vendor: microsoft
services.product: windows
services.cpe: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.protocol: N/A
services.executable: schedsvc.dll
services.explained_uuid: 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 v1.0
services.bindings: ncalrpc:[senssvc] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2]
services.protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
services.executable: spoolsv.exe
services.explained_uuid: ae33069b-a2a8-46ee-a235-ddfd339be281 v1.0 Spooler base remote object endpoint
services.bindings: ncalrpc:[spoolss] ncacn_ip_tcp:213.169.83.159[49155] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\spoolss]
services.protocol: N/A
services.executable: N/A
services.explained_uuid: 2f5f6521-cb55-1059-b446-00df0bce31db v1.0 Unimodem LRPC Endpoint
services.bindings: ncalrpc:[unimdmsvc] ncalrpc:[tapsrvlpc] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\tapsrv]
services.protocol: N/A
services.executable: N/A
services.explained_uuid: 3473dd4d-2e88-4006-9cba-22570909dd10 v5.1 WinHttp Auto-Proxy Service
services.bindings: ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\W32TIME_ALT] ncalrpc:[W32TIME_ALT] ncalrpc:[LRPC-5d376d73db3fe3d870] ncalrpc:[OLEE4F0A97F54EB457D973CB2CE8F5C]
services.protocol: N/A
services.executable: N/A
services.explained_uuid: 7f1343fe-50a9-4927-a778-0c5859517bac v1.0 DfsDs service
services.bindings: ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\wkssvc] ncalrpc:[DNSResolver]
services.protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
services.executable: samsrv.dll
services.explained_uuid: 12345778-1234-abcd-ef00-0123456789ac v1.0
services.bindings: ncacn_ip_tcp:213.169.83.159[49156] ncalrpc:[efslrpc] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\efsrpc] ncalrpc:[samss lpc] ncalrpc:[dsrole] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\protected_storage] ncalrpc:[protected_storage] ncalrpc:[lsasspirpc] ncalrpc:[lsapolicylookup] ncalrpc:[LSARPC_ENDPOINT] ncalrpc:[securityevent] ncalrpc:[audit] ncalrpc:[LRPC-5a0cfbd5a4ca7c2880] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\lsass]
services.protocol: N/A
services.executable: nsisvc.dll
services.explained_uuid: 7ea70bcf-48af-4f6a-8968-6a440754d5fa v1.0 NSI server endpoint
services.bindings: ncalrpc:[LRPC-5d376d73db3fe3d870] ncalrpc:[OLEE4F0A97F54EB457D973CB2CE8F5C]
services.protocol: [MS-CMPO]: MSDTC Connection Manager:
services.executable: msdtcprx.dll
services.explained_uuid: 906b0ce0-c70b-1067-b317-00dd010662da v1.0
services.bindings: ncalrpc:[LRPC-c8f0b8a87d2f883036] ncalrpc:[LRPC-c8f0b8a87d2f883036] ncalrpc:[LRPC-c8f0b8a87d2f883036] ncalrpc:[LRPC-c8f0b8a87d2f883036]
services.protocol: N/A
services.executable: dhcpcsvc6.dll
services.explained_uuid: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 v1.0 DHCPv6 Client LRPC Endpoint
services.bindings: ncalrpc:[dhcpcsvc6] ncacn_ip_tcp:213.169.83.159[49153] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\eventlog] ncalrpc:[eventlog]
services.protocol: [MS-EVEN6]: EventLog Remoting Protocol
services.executable: wevtsvc.dll
services.explained_uuid: f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0 Event log TCPIP
services.bindings: ncacn_ip_tcp:213.169.83.159[49153] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\eventlog] ncalrpc:[eventlog]
services.protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
services.executable: taskcomp.dll
services.explained_uuid: 378e52b0-c0a9-11cf-822d-00aa0051e40f v1.0
services.bindings: ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: dhcpcsvc.dll
services.explained_uuid: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 v1.0 DHCP Client LRPC Endpoint
services.bindings: ncalrpc:[dhcpcsvc] ncalrpc:[dhcpcsvc6] ncacn_ip_tcp:213.169.83.159[49153] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\eventlog] ncalrpc:[eventlog]
services.protocol: N/A
services.executable: srvsvc.dll
services.explained_uuid: 98716d03-89ac-44c7-bb8c-285824e51c4a v1.0 XactSrv service
services.bindings: ncacn_ip_tcp:213.169.83.159[49154] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: iphlpsvc.dll
services.explained_uuid: 552d076a-cb29-4e44-8b6a-d15e59e2c0af v1.0 IP Transition Configuration endpoint
services.bindings: ncacn_ip_tcp:213.169.83.159[49154] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: gpsvc.dll
services.explained_uuid: 2eb08e3e-639f-4fba-97b1-14f878961076 v1.0
services.bindings: ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2]
services.protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
services.executable: spoolsv.exe
services.explained_uuid: 76f03f96-cdfd-44fc-a22c-64950a001209 v1.0 Spooler function endpoint
services.bindings: ncacn_ip_tcp:213.169.83.159[49155] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\spoolss]
services.protocol: N/A
services.executable: sysntfy.dll
services.explained_uuid: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 v1.0 Impl friendly name
services.bindings: ncalrpc:[LRPC-b06d547d0c76f94ea0] ncalrpc:[VpnikeRpc] ncalrpc:[RasmanLrpc] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\ROUTER] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\srvsvc] ncacn_ip_tcp:213.169.83.159[49154] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2] ncalrpc:[senssvc] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: winlogon.exe
services.explained_uuid: 76f226c3-ec14-4325-8a99-6a46348418af v1.0
services.bindings: ncalrpc:[WMsgKRpc05D351] ncalrpc:[WindowsShutdown] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\InitShutdown] ncalrpc:[WMsgKRpc05D110] ncalrpc:[WMsgKRpc02609A2] ncalrpc:[WMsgKRpc01D2263884]
services.protocol: [MS-RSP]: Remote Shutdown Protocol
services.executable: wininit.exe
services.explained_uuid: d95afe70-a6d5-4259-822e-2c84da1ddb0d v1.0
services.bindings: ncacn_ip_tcp:213.169.83.159[49152] ncalrpc:[WindowsShutdown] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\InitShutdown] ncalrpc:[WMsgKRpc05D110]
services.protocol: [MS-SCMR]: Service Control Manager Remote Protocol
services.executable: services.exe
services.explained_uuid: 367abb81-9844-35f1-ad32-98f038001003 v2.0
services.bindings: ncacn_ip_tcp:213.169.83.159[49158]
services.protocol: N/A
services.executable: MPSSVC.dll
services.explained_uuid: 2fb92682-6599-42dc-ae13-bd2ca89bd11c v1.0 Fw APIs
services.bindings: ncalrpc:[LRPC-b93dbf8f2cb589ae32]
services.protocol: N/A
services.executable: keyiso.dll
services.explained_uuid: b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 v1.0 KeyIso
services.bindings: ncacn_ip_tcp:213.169.83.159[49156] ncalrpc:[efslrpc] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\efsrpc] ncalrpc:[samss lpc] ncalrpc:[dsrole] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\protected_storage] ncalrpc:[protected_storage] ncalrpc:[lsasspirpc] ncalrpc:[lsapolicylookup] ncalrpc:[LSARPC_ENDPOINT] ncalrpc:[securityevent] ncalrpc:[audit] ncalrpc:[LRPC-5a0cfbd5a4ca7c2880] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\lsass]
services.protocol: N/A
services.executable: lserver.dll
services.explained_uuid: 12d4b7c8-77d5-11d1-8c24-00c04fa3080d v1.0
services.bindings: ncacn_ip_tcp:213.169.83.159[49157] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\HydraLsPipe] ncalrpc:[LRPC-30aa42be79079c2196]
services.protocol: N/A
services.executable: winlogon.exe
services.explained_uuid: 12e65dd8-887f-41ef-91bf-8d816c42c2e7 v1.0 Secure Desktop LRPC interface
services.bindings: ncalrpc:[WMsgKRpc02609A2] ncalrpc:[WMsgKRpc01D2263884]
services.protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
services.executable: spoolsv.exe
services.explained_uuid: 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 v1.0 Spooler function endpoint
services.bindings: ncalrpc:[spoolss] ncacn_ip_tcp:213.169.83.159[49155] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\spoolss]
services.protocol: N/A
services.executable: nrpsrv.dll
services.explained_uuid: 30adc50c-5cbc-46ce-9a0e-91914789e23c v1.0 NRP server endpoint
services.bindings: ncacn_ip_tcp:213.169.83.159[49153] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\eventlog] ncalrpc:[eventlog]
services.protocol: N/A
services.executable: certprop.dll
services.explained_uuid: 30b044a5-a225-43f0-b3a4-e060df91f9c1 v1.0
services.bindings: ncalrpc:[VpnikeRpc] ncalrpc:[RasmanLrpc] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\ROUTER] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\srvsvc] ncacn_ip_tcp:213.169.83.159[49154] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: MPSSVC.dll
services.explained_uuid: 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 v1.0 Fw APIs
services.bindings: ncalrpc:[LRPC-b93dbf8f2cb589ae32]
services.protocol: N/A
services.executable: authui.dll
services.explained_uuid: 24019106-a203-4642-b88d-82dae9158929 v1.0
services.bindings: ncalrpc:[LRPC-2b83d4b9a4d3d3fd60]
services.protocol: N/A
services.executable: spoolsv.exe
services.explained_uuid: 4a452661-8290-4b36-8fbe-7f4093a94978 v1.0 Spooler function endpoint
services.bindings: ncalrpc:[spoolss] ncacn_ip_tcp:213.169.83.159[49155] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\spoolss]
services.protocol: N/A
services.executable: lserver.dll
services.explained_uuid: 3d267954-eeb7-11d1-b94e-00c04fa3080d v1.0
services.bindings: ncacn_ip_tcp:213.169.83.159[49157] ncacn_np:\\WIN-PR5KTSO5J35[\pipe\HydraLsPipe] ncalrpc:[LRPC-30aa42be79079c2196]
services.protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
services.executable: schedsvc.dll
services.explained_uuid: 86d35949-83c9-4044-b424-db363231fd0c v1.0
services.bindings: ncacn_ip_tcp:213.169.83.159[49154] ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2]
services.protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
services.executable: taskcomp.dll
services.explained_uuid: 1ff70682-0a51-30e8-076d-740be8cee98b v1.0
services.bindings: ncacn_np:\\WIN-PR5KTSO5J35[\PIPE\atsvc] ncalrpc:[senssvc] ncalrpc:[OLE0687ED81DC1F41F78091976DE7D8] ncalrpc:[IUserProfile2]
services.protocol: N/A
services.executable: BFE.DLL
services.explained_uuid: dd490425-5325-4565-b774-7e27d6c09c24 v1.0 Base Firewall Engine API
services.bindings: ncalrpc:[LRPC-b93dbf8f2cb589ae32]
services.protocol: NETBIOS
services.transport_protocol: TCP
services.scan_time: 2025-07-27T10:56:05.466792
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.vendor: microsoft
services.product: windows
services.cpe: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.protocol: SMB
services.transport_protocol: TCP
services.scan_time: 2025-07-28T06:33:08.019025
services.banner: SMB SMB 2.1
services.value: file-sharing
services.version_string: SMB 2.1
services.authentication_types: 1.3.6.1.4.1.311.2.2.30 1.3.6.1.4.1.311.2.2.10
services.target_name: WIN-PR5KTSO5J35
services.protocol: RDP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T19:46:16.896279
services.version_selected: TLSv1_2
services.cipher_selected: TLS_RSA_WITH_AES_128_CBC_SHA
services.ja4s: t120100_002f_bc98f8e001b5
services.version: TLSv1_2
services.ja4s: t120100_002f_bc98f8e001b5
services.version: TLSv1_1
services.ja4s: t110100_002f_bc98f8e001b5
services.version: TLSv1_0
services.ja4s: t100100_002f_bc98f8e001b5
services.issuer_dn: CN=WIN-PR5KTSO5J35
services.common_name: WIN-PR5KTSO5J35
services.subject_dn: CN=WIN-PR5KTSO5J35
services.common_name: WIN-PR5KTSO5J35
services.scan_time: 2025-07-16T00:07:08.816196
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.vendor: microsoft
services.product: windows
services.cpe: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.value: network-administration
services.value: remote-access
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T16:11:23.074043
services.banner: HTTP/1.1 403 Forbidden
  Content-Type: text/html;charset=utf-8
  X-Frame-Options: sameorigin
  X-Content-Type-Options: nosniff
  X-XSS-Protection: 1
  Content-Length: 675
  
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T16:11:23.074043
services.uri: http://213.169.83.159:9099/
services.protocol: HTTP/1.1
services.status_reason: Forbidden
services.key: X-Frame-Options
services.headers: sameorigin
services.key: X-XSS-Protection
services.headers: 1
services.key: Content-Length
services.headers: 675
services.key: X-Content-Type-Options
services.headers: nosniff
services.key: Content-Type
services.headers: text/html;charset=utf-8
services.html_tags: <title> 		Сервер СЛК 3.0.37.11710 (3.2.2, i386-Win32) 	</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
services.body: <!DOCTYPE html> <html> <head> 	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> 	<title> 		Сервер СЛК 3.0.37.11710 (3.2.2, i386-Win32) 	</title>     <style>     	* {     		font-family: Verdana,sans-serif;     		font-size: 13px;     		font-weight: normal     	}     	h1 {     		font-size: 23px;     		color: maroon;     	}     	span {     		font-style: italic;     	}     	hr1 {     		margin-top: 10px;     		margin-bottom: 10px;     	}     </style> </head> <body> 	<h1> 		Error 403 - Forbidden 	</h1>	 	<p> 		Access from IP 162.142.125.113 is forbidden 	</p> 	<hr size=1> 	<p> 		LicenceServer 3.0.37.11710 (3.2.2, i386-Win32) 	</p> </body> </html>
services.body_hash_sha1: sha1:6ad9998e890788a61cadac213c7251fb461e20a5
services.supported_versions: HTTP/1.1
[binary data, 18 values, 403 bytes]