1489525118 | 2024-05-14T05:12:51.985954
80 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 14 May 2024 05:12:45 GMT
Connection: close
Content-Length: 315
-213460657 | 2024-04-17T15:44:31.695350
135 /
tcp
Microsoft RPC Endpoint Mapper
d95afe70-a6d5-4259-822e-2c84da1ddb0d
version: v1.0
protocol: [MS-RSP]: Remote Shutdown Protocol
provider: wininit.exe
ncacn_ip_tcp: 111.225.222.37:49152
ncalrpc: WindowsShutdown
ncacn_np: \\WIN-EL2L040N89U\PIPE\InitShutdown
ncalrpc: WMsgKRpc09DA00
76f226c3-ec14-4325-8a99-6a46348418af
version: v1.0
provider: winlogon.exe
ncalrpc: WindowsShutdown
ncacn_np: \\WIN-EL2L040N89U\PIPE\InitShutdown
ncalrpc: WMsgKRpc09DA00
ncalrpc: WMsgKRpc09DC21
ncalrpc: WMsgKRpc015EB1B2
ncalrpc: WMsgKRpc017F314866
ncalrpc: WMsgKRpc02912F0FE7
ncalrpc: WMsgKRpc02A99BA969
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
version: v1.0
annotation: Impl friendly name
provider: sysntfy.dll
ncalrpc: LRPC-cec69925a5906bbea4
ncacn_np: \\WIN-EL2L040N89U\PIPE\srvsvc
ncacn_ip_tcp: 111.225.222.37:49154
ncacn_np: \\WIN-EL2L040N89U\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
ncalrpc: IUserProfile2
ncalrpc: IUserProfile2
30adc50c-5cbc-46ce-9a0e-91914789e23c
version: v1.0
annotation: NRP server endpoint
provider: nrpsrv.dll
ncalrpc: OLEFA065AAAEA7A4333A479A839D15B
ncalrpc: Audiosrv
ncalrpc: AudioClientRpc
ncalrpc: dhcpcsvc
ncalrpc: dhcpcsvc6
ncacn_ip_tcp: 111.225.222.37:49153
ncacn_np: \\WIN-EL2L040N89U\pipe\eventlog
ncalrpc: eventlog
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: dhcpcsvc6
ncacn_ip_tcp: 111.225.222.37:49153
ncacn_np: \\WIN-EL2L040N89U\pipe\eventlog
ncalrpc: eventlog
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
version: v1.0
annotation: DHCPv6 Client LRPC Endpoint
provider: dhcpcsvc6.dll
ncalrpc: dhcpcsvc6
ncacn_ip_tcp: 111.225.222.37:49153
ncacn_np: \\WIN-EL2L040N89U\pipe\eventlog
ncalrpc: eventlog
f6beaff7-1e19-4fbb-9f8f-b89e2018337c
version: v1.0
annotation: Event log TCPIP
protocol: [MS-EVEN6]: EventLog Remoting Protocol
provider: wevtsvc.dll
ncacn_ip_tcp: 111.225.222.37:49153
ncacn_np: \\WIN-EL2L040N89U\pipe\eventlog
ncalrpc: eventlog
30b044a5-a225-43f0-b3a4-e060df91f9c1
version: v1.0
provider: certprop.dll
ncacn_np: \\WIN-EL2L040N89U\PIPE\srvsvc
ncacn_ip_tcp: 111.225.222.37:49154
ncacn_np: \\WIN-EL2L040N89U\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
98716d03-89ac-44c7-bb8c-285824e51c4a
version: v1.0
annotation: XactSrv service
provider: srvsvc.dll
ncacn_ip_tcp: 111.225.222.37:49154
ncacn_np: \\WIN-EL2L040N89U\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
552d076a-cb29-4e44-8b6a-d15e59e2c0af
version: v1.0
annotation: IP Transition Configuration endpoint
provider: iphlpsvc.dll
ncacn_ip_tcp: 111.225.222.37:49154
ncacn_np: \\WIN-EL2L040N89U\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
a398e520-d59a-4bdd-aa7a-3c1e0303a511
version: v1.0
annotation: IKE/Authip API
provider: IKEEXT.DLL
ncacn_ip_tcp: 111.225.222.37:49154
ncacn_np: \\WIN-EL2L040N89U\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
86d35949-83c9-4044-b424-db363231fd0c
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: schedsvc.dll
ncacn_ip_tcp: 111.225.222.37:49154
ncacn_np: \\WIN-EL2L040N89U\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\WIN-EL2L040N89U\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\WIN-EL2L040N89U\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncalrpc: senssvc
ncalrpc: OLEF6C8F7D4A1DB405C8F6E17E99031
ncalrpc: IUserProfile2
2eb08e3e-639f-4fba-97b1-14f878961076
version: v1.0
provider: gpsvc.dll
ncalrpc: IUserProfile2
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncacn_np: \\WIN-EL2L040N89U\PIPE\W32TIME_ALT
ncalrpc: W32TIME_ALT
ncalrpc: LRPC-86605dd651b1166491
ncalrpc: OLED01967000CDB4DDE8D5648EC266C
7ea70bcf-48af-4f6a-8968-6a440754d5fa
version: v1.0
annotation: NSI server endpoint
provider: nsisvc.dll
ncalrpc: LRPC-86605dd651b1166491
ncalrpc: OLED01967000CDB4DDE8D5648EC266C
24019106-a203-4642-b88d-82dae9158929
version: v1.0
provider: authui.dll
ncalrpc: LRPC-e4413d83da57896ca7
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 111.225.222.37:49155
ncalrpc: samss lpc
ncalrpc: dsrole
ncacn_np: \\WIN-EL2L040N89U\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncalrpc: LRPC-7f5ebe4e396d1c0a74
ncacn_np: \\WIN-EL2L040N89U\pipe\lsass
2fb92682-6599-42dc-ae13-bd2ca89bd11c
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-9725342826c1f7c256
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-9725342826c1f7c256
dd490425-5325-4565-b774-7e27d6c09c24
version: v1.0
annotation: Base Firewall Engine API
provider: BFE.DLL
ncalrpc: LRPC-9725342826c1f7c256
4a452661-8290-4b36-8fbe-7f4093a94978
version: v1.0
annotation: Spooler function endpoint
provider: spoolsv.exe
ncalrpc: spoolss
ncacn_ip_tcp: 111.225.222.37:49156
ncacn_np: \\WIN-EL2L040N89U\pipe\spoolss
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
version: v1.0
annotation: Spooler function endpoint
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncalrpc: spoolss
ncacn_ip_tcp: 111.225.222.37:49156
ncacn_np: \\WIN-EL2L040N89U\pipe\spoolss
ae33069b-a2a8-46ee-a235-ddfd339be281
version: v1.0
annotation: Spooler base remote object endpoint
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncalrpc: spoolss
ncacn_ip_tcp: 111.225.222.37:49156
ncacn_np: \\WIN-EL2L040N89U\pipe\spoolss
76f03f96-cdfd-44fc-a22c-64950a001209
version: v1.0
annotation: Spooler function endpoint
protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 111.225.222.37:49156
ncacn_np: \\WIN-EL2L040N89U\pipe\spoolss
367abb81-9844-35f1-ad32-98f038001003
version: v2.0
protocol: [MS-SCMR]: Service Control Manager Remote Protocol
provider: services.exe
ncacn_ip_tcp: 111.225.222.37:49166
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
annotation: IPSec Policy agent endpoint
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncalrpc: LRPC-dd4f5daba7e5941f31
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC-84c69d79ca5cc963f9
ncalrpc: LRPC-84c69d79ca5cc963f9
ncalrpc: LRPC-84c69d79ca5cc963f9
ncalrpc: LRPC-84c69d79ca5cc963f9
12e65dd8-887f-41ef-91bf-8d816c42c2e7
version: v1.0
annotation: Secure Desktop LRPC interface
provider: winlogon.exe
ncalrpc: WMsgKRpc015EB1B2
ncalrpc: WMsgKRpc017F314866
ncalrpc: WMsgKRpc02912F0FE7
ncalrpc: WMsgKRpc02A99BA969
-1059651032 | 2024-04-26T14:19:57.142519
443 /
tcp
HTTP/1.1 401 Authorization Required
Date: Fri, 26 Apr 2024 14:19:37 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
WWW-Authenticate: Basic realm="VisualSVN Server"
Content-Length: 401
Content-Type: text/html; charset=iso-8859-1
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a9:32:bb:25:e8:d7:d0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=WIN-EL2L040N89U
Validity
Not Before: Jan 19 05:06:24 2016 GMT
Not After : Jan 16 05:06:24 2026 GMT
Subject: CN=WIN-EL2L040N89U
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c1:d7:07:80:da:13:a1:a4:23:b3:5f:45:71:fc:
e6:01:dd:6b:eb:ae:a4:99:ab:e4:d4:16:0d:14:e5:
97:e1:e7:fd:1b:c7:8f:34:23:3d:85:8d:28:b5:88:
7c:ea:d1:93:63:ae:97:d5:bd:9b:09:ed:d5:04:59:
f3:f4:3c:45:e8:75:a0:55:ae:de:da:0e:96:9b:ba:
1a:6a:f8:e9:0a:e2:6e:a9:bd:5c:d7:9d:5d:82:1f:
b2:2c:f9:0c:82:8e:a0:4e:cd:ab:6e:a0:97:0c:09:
20:1e:b8:e6:1d:80:9e:77:58:82:70:df:9e:04:11:
11:37:5c:df:52:98:72:80:af:a7:16:2e:06:a1:dc:
40:79:c9:11:a7:e6:6a:6b:f8:83:a5:df:96:f0:a1:
f2:f1:ee:a2:88:91:09:b2:db:4b:2a:8b:67:0f:56:
ac:c7:0c:dd:fa:f2:29:3a:fa:7b:4a:0e:ed:ce:22:
8f:9a:2d:71:4a:45:f4:05:c6:99:e8:60:9d:81:1f:
9e:64:4e:b1:35:a8:d9:27:ff:38:c5:da:ad:c3:6c:
d0:d9:8d:83:c6:ce:98:c9:44:55:5f:f8:8e:e3:85:
76:5f:7b:ab:de:d1:9e:11:93:95:ca:11:ae:76:ba:
bc:0f:61:8b:14:0f:ec:f2:2f:e0:5a:64:49:5f:6e:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage:
Key Encipherment, Data Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Subject Alternative Name:
DNS:WIN-EL2L040N89U
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
4f:09:12:f7:05:38:25:db:d4:f7:d6:04:bc:e3:d7:ed:3e:8a:
fc:ed:97:d2:93:8e:fc:b4:c9:fb:1e:47:4b:33:b7:3f:92:52:
41:e4:32:72:87:f6:55:79:1f:ac:c7:09:fa:86:b5:b0:ac:d6:
82:a7:3d:1d:b0:65:13:cf:d6:50:60:bd:a1:71:bd:fe:87:93:
a3:59:be:3e:06:c9:43:7c:a9:7e:a8:03:85:fc:a3:d7:da:e7:
a7:30:e5:cb:f1:ce:01:65:cc:2a:a8:95:8d:7c:17:4e:14:7a:
d6:cb:6f:9b:74:4d:41:f2:7a:49:da:66:e9:c3:fd:e8:67:20:
6e:2c:8e:71:7c:d8:f6:be:fe:c4:18:0c:0e:53:b0:74:f3:8e:
27:2d:99:d8:81:49:f4:b9:e1:0c:f5:5a:6d:08:4d:ee:ee:f9:
ef:87:83:29:e9:52:ca:75:61:2d:6f:d7:25:38:86:1b:49:cb:
5c:74:0a:c5:35:37:ec:97:b4:46:84:1b:de:13:2c:f3:3d:0c:
90:40:58:f8:5e:fc:78:18:5d:5d:e4:51:41:4d:cd:2c:81:27:
a4:43:a9:ca:49:9b:46:1e:45:01:ad:7a:42:67:fa:52:3e:76:
0c:26:51:c1:9c:53:ce:08:58:73:f2:ae:05:f4:db:3f:37:a9:
5e:0f:9c:e7
