360478453 | 2024-05-28T18:55:50.331285
80 /
tcp
HTTP/1.1 400 Bad Request
Content-Type: text/html
Date: Tue, 28 May 2024 18:55:47 GMT
Connection: close
Content-Length: 39
2146751441 | 2024-06-01T14:12:32.998603
135 /
tcp
Microsoft RPC Endpoint Mapper
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: DNSResolver
d674a233-5829-49dd-90f0-60cf9ceb7129
version: v1.0
annotation: ICF+ FW API
provider: ipnathlp.dll
ncalrpc: trkwks
ncacn_np: \\VPS\pipe\trkwks
ncalrpc: senssvc
ncalrpc: SECLOGON
ncacn_np: \\VPS\PIPE\srvsvc
ncalrpc: keysvc
ncacn_np: \\VPS\pipe\keysvc
ncacn_np: \\VPS\PIPE\wkssvc
ncacn_np: \\VPS\PIPE\atsvc
ncalrpc: OLEEEF96401C635411F88457E453A1C
ncalrpc: wzcsvc
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncacn_np: \\VPS\PIPE\atsvc
ncalrpc: OLEEEF96401C635411F88457E453A1C
ncalrpc: wzcsvc
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\VPS\PIPE\atsvc
ncalrpc: OLEEEF96401C635411F88457E453A1C
ncalrpc: wzcsvc
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\VPS\PIPE\atsvc
ncalrpc: OLEEEF96401C635411F88457E453A1C
ncalrpc: wzcsvc
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC0000042c.00000001
ncalrpc: LRPC0000042c.00000001
ncalrpc: LRPC0000042c.00000001
ncalrpc: LRPC0000042c.00000001
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 103.243.27.3:1036
ncalrpc: dsrole
ncacn_np: \\VPS\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\VPS\PIPE\lsass
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
annotation: IPSec Policy agent endpoint
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncalrpc: dsrole
ncacn_np: \\VPS\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\VPS\PIPE\lsass
82ad4280-036b-11cf-972c-00aa006887b0
version: v2.0
protocol: [MS-IRP]: Internet Information Services (IIS) Inetinfo Remote
provider: infocomm.dll
ncacn_np: \\VPS\PIPE\INETINFO
ncacn_ip_tcp: 103.243.27.3:1025
ncalrpc: INETINFO_LPC
ncalrpc: OLEA730DB3424F543C3BF232D29266A