-1222588186 | 2024-05-31T12:44:05.261381
135 /
tcp
Microsoft RPC Endpoint Mapper
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: DNSResolver
d674a233-5829-49dd-90f0-60cf9ceb7129
version: v1.0
annotation: ICF+ FW API
provider: ipnathlp.dll
ncalrpc: trkwks
ncacn_np: \\IDC-\pipe\trkwks
ncalrpc: senssvc
ncalrpc: SECLOGON
ncalrpc: keysvc
ncacn_np: \\IDC-\pipe\keysvc
ncacn_np: \\IDC-\PIPE\wkssvc
ncalrpc: AudioSrv
ncacn_np: \\IDC-\PIPE\atsvc
ncalrpc: OLE32F67074D839450993915A51B7BB
ncalrpc: wzcsvc
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncacn_np: \\IDC-\PIPE\atsvc
ncalrpc: OLE32F67074D839450993915A51B7BB
ncalrpc: wzcsvc
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\IDC-\PIPE\atsvc
ncalrpc: OLE32F67074D839450993915A51B7BB
ncalrpc: wzcsvc
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\IDC-\PIPE\atsvc
ncalrpc: OLE32F67074D839450993915A51B7BB
ncalrpc: wzcsvc
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC000006bc.00000001
ncalrpc: LRPC000006bc.00000001
ncalrpc: LRPC000006bc.00000001
ncalrpc: LRPC000006bc.00000001
ncalrpc: LRPC000008b4.00000001
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 43.248.117.159:1051
ncalrpc: dsrole
ncacn_np: \\IDC-\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\IDC-\PIPE\lsass
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
annotation: IPSec Policy agent endpoint
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncalrpc: dsrole
ncacn_np: \\IDC-\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\IDC-\PIPE\lsass
-881101236 | 2024-05-28T12:05:22.251148
3306 /
tcp
MySQL:
Error Message: Host '224.80.209.22' is not allowed to connect to this MySQL server
Error Code: 1130
-1359583095 | 2024-05-23T20:46:06.544230
28080 /
tcp