GeneralInformation

Hostnames	Exch.tethys-shipping.com autodiscover.tethys-shipping.com mail.tethys-shipping.com
Domains	tethys-shipping.com
Country	Germany
City	Falkenstein
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940
Operating System	Windows Server 2016 (version 1607) (build 10.0.14393)

WebTechnologies

Web frameworks

Microsoft ASP.NET

Webmail

Outlook Web App15.1.2507

OpenPorts

25 135 443 5985

25 / tcp

-1350459732 | 2025-03-21T05:53:42.829823

220 Exch.tethys-shipping.com Microsoft ESMTP MAIL Service ready at Fri, 21 Mar 2025 09:22:13 +0330
250-Exch.tethys-shipping.com Hello [224.166.101.145]
250-SIZE 37748736
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-X-ANONYMOUSTLS
250-AUTH NTLM
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250 XRDST

SMTP NTLM Info:
  OS: Windows 10 (version 1607)/Windows Server 2016 (version 1607)
  OS Build: 10.0.14393
  Target Name: TETHYS-SHIPPING
  NetBIOS Domain Name: TETHYS-SHIPPING
  NetBIOS Computer Name: EXCH
  DNS Domain Name: tethys-shipping.com
  DNS Tree Name: tethys-shipping.com
  FQDN: Exch.tethys-shipping.com

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:60:af:f7:1b:33:a0:87:45:46:e8:29:51:d4:28:6a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Exch
        Validity
            Not Before: Jul 19 09:02:05 2024 GMT
            Not After : Jul 19 09:02:05 2029 GMT
        Subject: CN=Exch
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:c0:e6:ff:32:26:da:a2:84:66:07:e7:2e:
                    5b:22:0a:39:3d:10:d1:ac:c0:72:9f:dd:7a:46:06:
                    43:b8:c4:65:67:f3:a5:f0:16:80:ee:ed:96:bf:b1:
                    f3:25:3e:b0:d9:45:0f:f3:ba:3d:df:66:d0:c4:44:
                    e2:7d:8c:13:4b:df:dc:2d:52:25:7d:e1:35:e2:f4:
                    e1:45:39:fe:f2:f6:3a:fc:0d:5a:92:bc:f4:d6:8d:
                    3c:6d:b5:31:6b:2f:bc:79:4f:17:6a:dd:c8:23:27:
                    dc:f5:93:b9:0e:5c:86:81:5a:36:7c:e7:0c:19:fa:
                    dc:11:4d:bb:53:fb:8c:24:43:d5:79:08:75:10:25:
                    71:de:57:89:b3:a8:9c:aa:0c:dd:16:fa:59:f7:61:
                    b1:9c:78:b1:df:d3:88:0a:d0:c8:82:77:2c:a4:f4:
                    24:a8:27:30:fe:df:a9:3c:a4:44:b1:0a:fe:7a:ce:
                    0a:62:8d:e1:6e:91:54:59:ba:e6:ce:37:c6:95:72:
                    70:19:f2:b9:80:5e:83:88:4f:91:ee:37:34:3f:7d:
                    ea:e3:a7:35:c7:02:98:34:8f:7b:d5:be:f6:2d:6a:
                    be:77:90:d4:e4:8c:97:69:86:7d:55:03:b8:9a:7d:
                    a9:f8:17:32:30:28:20:2a:88:41:e6:12:f1:21:de:
                    ac:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:Exch, DNS:Exch.tethys-shipping.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        76:e0:32:dd:54:47:65:7c:8f:69:d3:6a:d0:db:06:ab:8f:a7:
        4a:e0:3b:fc:48:28:7a:aa:7d:73:79:02:ec:0b:b8:eb:4b:60:
        36:f7:8f:fb:4e:e7:2b:da:db:4e:43:b9:25:c0:e5:77:47:57:
        62:d1:7a:8e:6c:66:c2:ca:77:f5:b1:1c:d9:47:48:95:9f:36:
        f8:af:40:9c:b3:c3:44:51:70:56:b0:1e:a0:e8:23:b0:a2:37:
        2d:08:08:cb:7b:e2:b5:85:38:bf:59:ea:fa:16:19:ca:d3:1f:
        71:e4:4a:19:04:0c:03:53:d6:0d:3e:14:e2:7b:ba:be:d7:6c:
        02:09:6d:2f:22:bf:80:e0:3f:38:dc:e8:f4:17:39:0c:96:5c:
        e6:c9:bd:72:1b:47:55:23:96:45:12:aa:74:04:e5:d4:b6:ce:
        c5:1c:6c:e2:ac:bd:42:8b:02:6e:ba:67:d8:ab:69:ad:dd:33:
        7f:c1:2b:f1:88:eb:e1:42:75:a1:88:1f:60:e6:11:ad:45:88:
        d1:63:45:ba:6d:2a:0f:1b:42:73:98:b7:2a:8c:c1:5b:7a:4d:
        fa:f2:c0:c3:b9:b0:7f:c3:97:dd:53:9f:d0:f7:4a:01:8d:14:
        cb:27:72:ec:b8:86:59:f8:0a:43:ed:95:42:5e:b9:a3:26:00:
        71:98:7b:80

135 / tcp

-1672299101 | 2025-03-31T21:51:06.823676

Microsoft RPC Endpoint Mapper

d95afe70-a6d5-4259-822e-2c84da1ddb0d
  version: v1.0
  protocol: [MS-RSP]: Remote Shutdown Protocol
  provider: wininit.exe
  ncacn_ip_tcp: 116.202.156.49:6400
  ncalrpc: WindowsShutdown
  ncacn_np: \\EXCH\PIPE\InitShutdown
  ncalrpc: WMsgKRpc0A2F50

76f226c3-ec14-4325-8a99-6a46348418af
  version: v1.0
  provider: winlogon.exe
  ncalrpc: WindowsShutdown
  ncacn_np: \\EXCH\PIPE\InitShutdown
  ncalrpc: WMsgKRpc0A2F50
  ncalrpc: WMsgKRpc06C6347D83

fc48cd89-98d6-4628-9839-86f7a3e4161a
  version: v1.0
  ncalrpc: OLE6E35F297EB6A92B37A3BBBE14884
  ncalrpc: LRPC-f2c01491034f721dd7
  ncalrpc: dabrpc
  ncalrpc: csebpub
  ncalrpc: LRPC-5c222241c68e3ade8c
  ncalrpc: LRPC-9ff54d54deadc96837
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

9b008953-f195-4bf9-bde0-4471971e58ed
  version: v1.0
  ncalrpc: LRPC-f2c01491034f721dd7
  ncalrpc: dabrpc
  ncalrpc: csebpub
  ncalrpc: LRPC-5c222241c68e3ade8c
  ncalrpc: LRPC-9ff54d54deadc96837
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

d09bdeb5-6171-4a34-bfe2-06fa82652568
  version: v1.0
  ncalrpc: csebpub
  ncalrpc: LRPC-5c222241c68e3ade8c
  ncalrpc: LRPC-9ff54d54deadc96837
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-9ff54d54deadc96837
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-9bf1a9ffedc2b29a56
  ncalrpc: LRPC-edb69560c576edfd69
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_ip_tcp: 116.202.156.49:6401
  ncacn_np: \\EXCH\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-84ace9ae03fe81c929
  ncalrpc: LRPC-3510e1c702ba960360
  ncalrpc: LRPC-da863cda35c3cb78f6
  ncalrpc: DeviceSetupManager
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

697dcda9-3ba9-4eb2-9247-e11f1901b0d2
  version: v1.0
  ncalrpc: LRPC-5c222241c68e3ade8c
  ncalrpc: LRPC-9ff54d54deadc96837
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

857fb1be-084f-4fb5-b59c-4b2c4be5f0cf
  version: v1.0
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

b8cadbaf-e84b-46b9-84f2-6f71c03f9e55
  version: v1.0
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

20c40295-8dba-48e6-aebf-3e78ef3bb144
  version: v1.0
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

2513bcbe-6cd4-4348-855e-7efb3c336dd3
  version: v1.0
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

88abcbc3-34ea-76ae-8215-767520655a23
  version: v0.0
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

76c217bc-c8b4-4201-a745-373ad9032b1a
  version: v1.0
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

55e6b932-1979-45d6-90c5-7f6270724112
  version: v1.0
  ncalrpc: LRPC-b74eaf771e33300916
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

4dace966-a243-4450-ae3f-9b7bcb5315b8
  version: v1.0
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

1832bcf6-cab8-41d4-85d2-c9410764f75a
  version: v1.0
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

c521facf-09a9-42c5-b155-72388595cbf0
  version: v0.0
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

2c7fd9ce-e706-4b40-b412-953107ef9bb0
  version: v0.0
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
  version: v1.0
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
  version: v1.0
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
  version: v1.0
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
  version: v1.0
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

2d98a740-581d-41b9-aa0d-a88b9d5ce938
  version: v1.0
  ncacn_np: \\EXCH\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo

c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
  version: v1.0
  annotation: Impl friendly name
  provider: sysntfy.dll
  ncalrpc: LRPC-5dcda89270d2c7e796
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

5824833b-3c1a-4ad2-bdfd-c31d19e23ed2
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

3b338d89-6cfa-44b8-847e-531531bc9992
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

8782d3b9-ebbd-4644-a3d8-e8725381919b
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

085b0334-e454-4d91-9b8c-4134f9e793f3
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

bf4dc912-e52f-4904-8ebe-9317c1bdd497
  version: v1.0
  ncalrpc: LRPC-ab1b87913187f43357
  ncalrpc: trkwks
  ncacn_np: \\EXCH\pipe\trkwks
  ncalrpc: LRPC-becb2434acb01ec8aa
  ncalrpc: OLEA191A2B9A94AFC807DA315B8DAD7
  ncalrpc: LRPC-943319e2c41e56b050
  ncalrpc: LRPC-9bf1a9ffedc2b29a56

0767a036-0d22-48aa-ba69-b619480f38cb
  version: v1.0
  annotation: PcaSvc
  provider: pcasvc.dll
  ncalrpc: LRPC-becb2434acb01ec8aa
  ncalrpc: OLEA191A2B9A94AFC807DA315B8DAD7
  ncalrpc: LRPC-943319e2c41e56b050
  ncalrpc: LRPC-9bf1a9ffedc2b29a56

e40f7b57-7a25-4cd3-a135-7f7d3df9d16b
  version: v1.0
  annotation: Network Connection Broker server endpoint
  ncalrpc: LRPC-becb2434acb01ec8aa
  ncalrpc: OLEA191A2B9A94AFC807DA315B8DAD7
  ncalrpc: LRPC-943319e2c41e56b050
  ncalrpc: LRPC-9bf1a9ffedc2b29a56

880fd55e-43b9-11e0-b1a8-cf4edfd72085
  version: v1.0
  annotation: KAPI Service endpoint
  ncalrpc: LRPC-becb2434acb01ec8aa
  ncalrpc: OLEA191A2B9A94AFC807DA315B8DAD7
  ncalrpc: LRPC-943319e2c41e56b050
  ncalrpc: LRPC-9bf1a9ffedc2b29a56

5222821f-d5e2-4885-84f1-5f6185a0ec41
  version: v1.0
  annotation: Network Connection Broker server endpoint for NCB Reset module
  ncalrpc: LRPC-943319e2c41e56b050
  ncalrpc: LRPC-9bf1a9ffedc2b29a56

a500d4c6-0dd1-4543-bc0c-d5f93486eaf8
  version: v1.0
  ncalrpc: LRPC-b5481d66550b98e676
  ncalrpc: LRPC-edb69560c576edfd69
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_ip_tcp: 116.202.156.49:6401
  ncacn_np: \\EXCH\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-84ace9ae03fe81c929

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_ip_tcp: 116.202.156.49:6401
  ncacn_np: \\EXCH\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-84ace9ae03fe81c929

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
  version: v1.0
  annotation: DHCPv6 Client LRPC Endpoint
  provider: dhcpcsvc6.dll
  ncalrpc: dhcpcsvc6
  ncacn_ip_tcp: 116.202.156.49:6401
  ncacn_np: \\EXCH\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-84ace9ae03fe81c929

f6beaff7-1e19-4fbb-9f8f-b89e2018337c
  version: v1.0
  annotation: Event log TCPIP
  protocol: [MS-EVEN6]: EventLog Remoting Protocol
  provider: wevtsvc.dll
  ncacn_ip_tcp: 116.202.156.49:6401
  ncacn_np: \\EXCH\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-84ace9ae03fe81c929

30adc50c-5cbc-46ce-9a0e-91914789e23c
  version: v1.0
  annotation: NRP server endpoint
  provider: nrpsrv.dll
  ncalrpc: LRPC-84ace9ae03fe81c929

3473dd4d-2e88-4006-9cba-22570909dd10
  version: v5.256
  annotation: WinHttp Auto-Proxy Service
  ncacn_np: \\EXCH\PIPE\W32TIME_ALT
  ncalrpc: W32TIME_ALT
  ncalrpc: LRPC-0fa1f916485fc15dbe
  ncalrpc: OLE591904E0042CFDC60F14E27D29A5

7ea70bcf-48af-4f6a-8968-6a440754d5fa
  version: v1.0
  annotation: NSI server endpoint
  provider: nsisvc.dll
  ncalrpc: LRPC-0fa1f916485fc15dbe
  ncalrpc: OLE591904E0042CFDC60F14E27D29A5

c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
  version: v1.0
  annotation: Adh APIs
  ncalrpc: LRPC-da863cda35c3cb78f6
  ncalrpc: DeviceSetupManager
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

c36be077-e14b-4fe9-8abc-e856ef4f048b
  version: v1.0
  annotation: Proxy Manager client server endpoint
  ncalrpc: LRPC-da863cda35c3cb78f6
  ncalrpc: DeviceSetupManager
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

2e6035b2-e8f1-41a7-a044-656b439c4c34
  version: v1.0
  annotation: Proxy Manager provider server endpoint
  ncalrpc: LRPC-da863cda35c3cb78f6
  ncalrpc: DeviceSetupManager
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

552d076a-cb29-4e44-8b6a-d15e59e2c0af
  version: v1.0
  annotation: IP Transition Configuration endpoint
  provider: iphlpsvc.dll
  ncalrpc: LRPC-da863cda35c3cb78f6
  ncalrpc: DeviceSetupManager
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

a398e520-d59a-4bdd-aa7a-3c1e0303a511
  version: v1.0
  annotation: IKE/Authip API
  provider: IKEEXT.DLL
  ncalrpc: LRPC-da863cda35c3cb78f6
  ncalrpc: DeviceSetupManager
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

0d3c7f20-1c8d-4654-a1b3-51563b298bda
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-da863cda35c3cb78f6
  ncalrpc: DeviceSetupManager
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

b18fbab6-56f8-4702-84e0-41053293a869
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-da863cda35c3cb78f6
  ncalrpc: DeviceSetupManager
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

3a9ef155-691d-4449-8d05-09ad57031823
  version: v1.0
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

86d35949-83c9-4044-b424-db363231fd0c
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: schedsvc.dll
  ncacn_ip_tcp: 116.202.156.49:6402
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

33d84484-3626-47ee-8c6f-e7e98b113be1
  version: v2.0
  ncalrpc: LRPC-dfbae7f433a4f06678
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\EXCH\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: OLE0770833696E13D23C26F1E5ABABE

2eb08e3e-639f-4fba-97b1-14f878961076
  version: v1.0
  annotation: Group Policy RPC Interface
  provider: gpsvc.dll
  ncalrpc: LRPC-cc2915b6d0a67fa11b

2fb92682-6599-42dc-ae13-bd2ca89bd11c
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-c08b632c87bf076fd9
  ncalrpc: LRPC-ca40e71a1bfbd4cbbf
  ncalrpc: LRPC-3775f1c0595544c6ec

f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
  version: v1.0
  annotation: Fw APIs
  ncalrpc: LRPC-c08b632c87bf076fd9
  ncalrpc: LRPC-ca40e71a1bfbd4cbbf
  ncalrpc: LRPC-3775f1c0595544c6ec

7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-c08b632c87bf076fd9
  ncalrpc: LRPC-ca40e71a1bfbd4cbbf
  ncalrpc: LRPC-3775f1c0595544c6ec

dd490425-5325-4565-b774-7e27d6c09c24
  version: v1.0
  annotation: Base Firewall Engine API
  provider: BFE.DLL
  ncalrpc: LRPC-ca40e71a1bfbd4cbbf
  ncalrpc: LRPC-3775f1c0595544c6ec

df4df73a-c52d-4e3a-8003-8437fdf8302a
  version: v0.0
  annotation: WM_WindowManagerRPC\Server
  ncalrpc: LRPC-3775f1c0595544c6ec

7aeb6705-3ae6-471a-882d-f39c109edc12
  version: v1.0
  ncalrpc: LRPC-200c33945392809d75

e7f76134-9ef5-4949-a2d6-3368cc0988f3
  version: v1.0
  ncalrpc: LRPC-200c33945392809d75

b3781086-6a54-489b-91c8-51d067172ab7
  version: v1.0
  ncalrpc: LRPC-200c33945392809d75

b37f900a-eae4-4304-a2ab-12bb668c0188
  version: v1.0
  ncalrpc: LRPC-200c33945392809d75

abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
  version: v1.0
  ncalrpc: LRPC-200c33945392809d75

7f1343fe-50a9-4927-a778-0c5859517bac
  version: v1.0
  annotation: DfsDs service
  ncacn_np: \\EXCH\PIPE\wkssvc
  ncalrpc: DNSResolver
  ncalrpc: nlaapi
  ncalrpc: nlaplg

eb081a0d-10ee-478a-a1dd-50995283e7a8
  version: v3.0
  annotation: Witness Client Test Interface
  ncalrpc: DNSResolver
  ncalrpc: nlaapi
  ncalrpc: nlaplg

f2c9b409-c1c9-4100-8639-d8ab1486694a
  version: v1.0
  annotation: Witness Client Upcall Server
  ncalrpc: DNSResolver
  ncalrpc: nlaapi
  ncalrpc: nlaplg

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_tcp: 116.202.156.49:6406
  ncacn_ip_tcp: 116.202.156.49:6403
  ncalrpc: NETLOGON_LRPC
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: LSA_IDPEXT_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\EXCH\pipe\lsass

51a227ae-825b-41f2-b4a9-1ac9557a1018
  version: v1.0
  annotation: Ngc Pop Key Service
  ncacn_ip_tcp: 116.202.156.49:6403
  ncalrpc: NETLOGON_LRPC
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: LSA_IDPEXT_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\EXCH\pipe\lsass

8fb74744-b2ff-4c00-be0d-9ef9a191fe1b
  version: v1.0
  annotation: Ngc Pop Key Service
  ncacn_ip_tcp: 116.202.156.49:6403
  ncalrpc: NETLOGON_LRPC
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: LSA_IDPEXT_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\EXCH\pipe\lsass

b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
  version: v2.0
  annotation: KeyIso
  ncacn_ip_tcp: 116.202.156.49:6403
  ncalrpc: NETLOGON_LRPC
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: LSA_IDPEXT_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\EXCH\pipe\lsass

0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7
  version: v0.0
  annotation: RemoteAccessCheck
  protocol: [MS-RAA]: Remote Authorization API Protocol
  ncacn_ip_tcp: 116.202.156.49:6403
  ncalrpc: NETLOGON_LRPC
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: LSA_IDPEXT_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\EXCH\pipe\lsass
  ncacn_ip_tcp: 116.202.156.49:6403
  ncalrpc: NETLOGON_LRPC
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: LSA_IDPEXT_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\EXCH\pipe\lsass

76f03f96-cdfd-44fc-a22c-64950a001209
  version: v1.0
  protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 116.202.156.49:6404
  ncalrpc: LRPC-36365c27dc0e674ab7

4a452661-8290-4b36-8fbe-7f4093a94978
  version: v1.0
  provider: spoolsv.exe
  ncacn_ip_tcp: 116.202.156.49:6404
  ncalrpc: LRPC-36365c27dc0e674ab7

ae33069b-a2a8-46ee-a235-ddfd339be281
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 116.202.156.49:6404
  ncalrpc: LRPC-36365c27dc0e674ab7

0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 116.202.156.49:6404
  ncalrpc: LRPC-36365c27dc0e674ab7

12345678-1234-abcd-ef00-0123456789ab
  version: v1.0
  protocol: [MS-RPRN]: Print System Remote Protocol
  provider: spoolsv.exe
  ncacn_ip_tcp: 116.202.156.49:6404
  ncalrpc: LRPC-36365c27dc0e674ab7

6b5bdd1e-528c-422c-af8c-a4079be4fe48
  version: v1.0
  annotation: Remote Fw APIs
  protocol: [MS-FASP]: Firewall and Advanced Security Protocol
  provider: FwRemoteSvr.dll
  ncacn_ip_tcp: 116.202.156.49:6405
  ncalrpc: ipsec

1a0d010f-1c33-432c-b0f5-8cf4e8053099
  version: v1.0
  annotation: IdSegSrv service
  ncalrpc: LRPC-37228d506748506eb9

98716d03-89ac-44c7-bb8c-285824e51c4a
  version: v1.0
  annotation: XactSrv service
  provider: srvsvc.dll
  ncalrpc: LRPC-37228d506748506eb9

e38f5360-8572-473e-b696-1b46873beeab
  version: v1.0
  ncalrpc: LRPC-376348db17a4c3829f

4c9dbf19-d39e-4bb9-90ee-8f7179b20283
  version: v1.0
  ncalrpc: LRPC-376348db17a4c3829f

d1c2c07a-d989-48cc-a423-b73ecd518d40
  version: v1.0
  annotation: Veeam Invoker
  ncacn_ip_tcp: 116.202.156.49:6162
  ncacn_ip_tcp: 116.202.156.49:11731
  ncacn_ip_tcp: 116.202.156.49:6160
  ncacn_ip_tcp: 116.202.156.49:6190
  ncacn_ip_tcp: 116.202.156.49:6183
  ncalrpc: OLEECBBD8EC1B83CF163C6DBE33CD49

d107c6e0-fc35-49ba-ba03-3e192de6797d
  version: v1.0
  annotation: Veeam Deployer
  ncacn_ip_tcp: 116.202.156.49:11731
  ncacn_ip_tcp: 116.202.156.49:6160
  ncacn_ip_tcp: 116.202.156.49:6183
  ncalrpc: OLEECBBD8EC1B83CF163C6DBE33CD49

1a9134dd-7b39-45ba-ad88-44d01ca47f28
  version: v1.0
  annotation: Message Queuing - RemoteRead V1
  protocol: [MS-MQRR]: Message Queuing (MSMQ):
  provider: mqqm.dll
  ncacn_ip_tcp: 116.202.156.49:2105
  ncacn_ip_tcp: 116.202.156.49:2103
  ncacn_ip_tcp: 116.202.156.49:2107
  ncacn_ip_tcp: 116.202.156.49:6407
  ncalrpc: QMMgmtFacility$exch
  ncalrpc: QMsvc$exch

1088a980-eae5-11d0-8d9b-00a02453c337
  version: v1.0
  annotation: Message Queuing - QM2QM V1
  protocol: [MS-MQQP]: Message Queuing (MSMQ):
  provider: mqqm.dll
  ncacn_ip_tcp: 116.202.156.49:2105
  ncacn_ip_tcp: 116.202.156.49:2103
  ncacn_ip_tcp: 116.202.156.49:2107
  ncacn_ip_tcp: 116.202.156.49:6407
  ncalrpc: QMMgmtFacility$exch
  ncalrpc: QMsvc$exch

76d12b80-3467-11d3-91ff-0090272f9ea3
  version: v1.0
  annotation: Message Queuing - QMRT V2
  protocol: [MS-MQMP]: Message Queuing (MSMQ):
  provider: mqqm.dll
  ncacn_ip_tcp: 116.202.156.49:2105
  ncacn_ip_tcp: 116.202.156.49:2103
  ncacn_ip_tcp: 116.202.156.49:2107
  ncacn_ip_tcp: 116.202.156.49:6407
  ncalrpc: QMMgmtFacility$exch
  ncalrpc: QMsvc$exch

fdb3a030-065f-11d1-bb9b-00a024ea5525
  version: v1.0
  annotation: Message Queuing - QMRT V1
  protocol: [MS-MQMP]: Message Queuing (MSMQ):
  provider: mqqm.dll
  ncacn_ip_tcp: 116.202.156.49:2105
  ncacn_ip_tcp: 116.202.156.49:2103
  ncacn_ip_tcp: 116.202.156.49:2107
  ncacn_ip_tcp: 116.202.156.49:6407
  ncalrpc: QMMgmtFacility$exch
  ncalrpc: QMsvc$exch

906b0ce0-c70b-1067-b317-00dd010662da
  version: v1.0
  protocol: [MS-CMPO]: MSDTC Connection Manager:
  provider: msdtcprx.dll
  ncalrpc: LRPC-c523001941d6415a68
  ncalrpc: LRPC-c523001941d6415a68
  ncalrpc: LRPC-c523001941d6415a68

5df3c257-334b-4e96-9efb-a0619255be09
  version: v1.0
  annotation: 4268	Microsoft.Exchange.Directory.TopologyService
  ncalrpc: LRPC-ef09eaa90f8d408ff7
  ncacn_ip_tcp: 116.202.156.49:6466
  ncalrpc: OLE8258769A8F548D3BBA60C5AE6B44
  ncalrpc: LRPC-ef09eaa90f8d408ff7
  ncacn_ip_tcp: 116.202.156.49:6466
  ncalrpc: OLE8258769A8F548D3BBA60C5AE6B44
  ncalrpc: OLE00C34AF73BF668F0D31BB3B5E77F
  ncacn_ip_tcp: 116.202.156.49:56403
  ncalrpc: LRPC-ef4ef541ab47e66bbf
  ncalrpc: {B28B1349-9A43-4102-8D94-4270FDDC9C58}
  ncalrpc: OLE00C34AF73BF668F0D31BB3B5E77F
  ncacn_ip_tcp: 116.202.156.49:56403
  ncalrpc: LRPC-ef4ef541ab47e66bbf
  ncalrpc: OLE00C34AF73BF668F0D31BB3B5E77F
  ncacn_ip_tcp: 116.202.156.49:56403
  ncalrpc: LRPC-ef4ef541ab47e66bbf
  ncalrpc: {B28B1349-9A43-4102-8D94-4270FDDC9C58}
  ncalrpc: OLEBDF920F192C929E8466548EC6CF0
  ncacn_ip_tcp: 116.202.156.49:56259
  ncalrpc: LRPC-32dea73e9ff3d862dd
  ncalrpc: {C85C6041-D59E-4D8D-BCCA-517842965D42}
  ncalrpc: OLEBDF920F192C929E8466548EC6CF0
  ncacn_ip_tcp: 116.202.156.49:56259
  ncalrpc: LRPC-32dea73e9ff3d862dd
  ncalrpc: OLEBDF920F192C929E8466548EC6CF0
  ncacn_ip_tcp: 116.202.156.49:56259
  ncalrpc: LRPC-32dea73e9ff3d862dd
  ncalrpc: {C85C6041-D59E-4D8D-BCCA-517842965D42}
  ncalrpc: OLEFC61FBEEA66C7FCB626774906E17
  ncacn_ip_tcp: 116.202.156.49:20312
  ncalrpc: LRPC-a6ec22eb6371855b12
  ncalrpc: OLEFC61FBEEA66C7FCB626774906E17
  ncacn_ip_tcp: 116.202.156.49:20312
  ncalrpc: LRPC-a6ec22eb6371855b12
  ncalrpc: OLE1A57DF64C7CF03591559284D26D2
  ncacn_ip_tcp: 116.202.156.49:46220
  ncalrpc: LRPC-558012ac64dda8be69
  ncalrpc: OLE1A57DF64C7CF03591559284D26D2
  ncacn_ip_tcp: 116.202.156.49:46220
  ncalrpc: LRPC-558012ac64dda8be69
  ncalrpc: OLE50DDE9ADFCB3B7E36D2273DEA5E9
  ncacn_ip_tcp: 116.202.156.49:15590
  ncalrpc: LRPC-29ff455f8d7629d5b0
  ncalrpc: OLE50DDE9ADFCB3B7E36D2273DEA5E9
  ncacn_ip_tcp: 116.202.156.49:15590
  ncalrpc: LRPC-29ff455f8d7629d5b0
  ncalrpc: OLEBB8D5CD55D3BBFB564E3B3EC8A27
  ncacn_ip_tcp: 116.202.156.49:10229
  ncalrpc: LRPC-84834d642f50e69710
  ncalrpc: OLEBB8D5CD55D3BBFB564E3B3EC8A27
  ncacn_ip_tcp: 116.202.156.49:10229
  ncalrpc: LRPC-84834d642f50e69710
  ncalrpc: OLE18549976CD7CC7321E200EDE88FD
  ncacn_ip_tcp: 116.202.156.49:42975
  ncalrpc: LRPC-7a1a00e3e6a227d841
  ncalrpc: OLE18549976CD7CC7321E200EDE88FD
  ncacn_ip_tcp: 116.202.156.49:42975
  ncalrpc: LRPC-7a1a00e3e6a227d841
  ncalrpc: OLE4D4732431F2DC4EF7C4793F14CEE
  ncacn_ip_tcp: 116.202.156.49:47706
  ncalrpc: LRPC-be24bd509e63576b6c
  ncalrpc: OLE4D4732431F2DC4EF7C4793F14CEE
  ncacn_ip_tcp: 116.202.156.49:47706
  ncalrpc: LRPC-be24bd509e63576b6c
  ncalrpc: OLEA9E7F58113165518A901B6BA7122
  ncacn_ip_tcp: 116.202.156.49:47698
  ncalrpc: LRPC-ffc1f2565cdfa46109
  ncalrpc: OLEA9E7F58113165518A901B6BA7122
  ncacn_ip_tcp: 116.202.156.49:47698
  ncalrpc: LRPC-ffc1f2565cdfa46109
  ncalrpc: OLE68E93193B3315DEE18DD9BDBA7A6
  ncacn_ip_tcp: 116.202.156.49:50413
  ncalrpc: LRPC-603bb483d9979a6732
  ncalrpc: OLE68E93193B3315DEE18DD9BDBA7A6
  ncacn_ip_tcp: 116.202.156.49:50413
  ncalrpc: LRPC-603bb483d9979a6732
  ncalrpc: OLE3367D299C1803E7919C82854AAB2
  ncacn_ip_tcp: 116.202.156.49:8555
  ncalrpc: LRPC-69f20efaca96941097
  ncalrpc: OLE3367D299C1803E7919C82854AAB2
  ncacn_ip_tcp: 116.202.156.49:8555
  ncalrpc: LRPC-69f20efaca96941097
  ncalrpc: OLEE55DB606084333E3251CCD3B8057
  ncacn_ip_tcp: 116.202.156.49:8483
  ncalrpc: LRPC-5d4cf6b080b6dbba3c
  ncalrpc: OLEE55DB606084333E3251CCD3B8057
  ncacn_ip_tcp: 116.202.156.49:8483
  ncalrpc: LRPC-5d4cf6b080b6dbba3c
  ncalrpc: OLE7A765AC6838F7806AE1C96DE3EC3
  ncacn_ip_tcp: 116.202.156.49:8480
  ncalrpc: LRPC-762be697a51e44dfd7
  ncalrpc: OLE7A765AC6838F7806AE1C96DE3EC3
  ncacn_ip_tcp: 116.202.156.49:8480
  ncalrpc: LRPC-762be697a51e44dfd7
  ncalrpc: OLE05F14903F4DD674A4A82C26267B7
  ncacn_ip_tcp: 116.202.156.49:8472
  ncalrpc: LRPC-43cc6b415e2dfc9855
  ncalrpc: OLE05F14903F4DD674A4A82C26267B7
  ncacn_ip_tcp: 116.202.156.49:8472
  ncalrpc: LRPC-43cc6b415e2dfc9855
  ncalrpc: OLED1169132232F3982482562031709
  ncacn_ip_tcp: 116.202.156.49:42867
  ncalrpc: LRPC-0c15b69a9bc841761e
  ncalrpc: OLED1169132232F3982482562031709
  ncacn_ip_tcp: 116.202.156.49:42867
  ncalrpc: LRPC-0c15b69a9bc841761e
  ncalrpc: OLEBBF9624A60495C7B283A88C60C6B
  ncacn_ip_tcp: 116.202.156.49:11904
  ncalrpc: LRPC-9e44a503273675db46
  ncalrpc: OLEBBF9624A60495C7B283A88C60C6B
  ncacn_ip_tcp: 116.202.156.49:11904
  ncalrpc: LRPC-9e44a503273675db46
  ncalrpc: OLE6B13DB6A35D0F96310426FDE8B31
  ncacn_ip_tcp: 116.202.156.49:7315
  ncalrpc: LRPC-deea1ee48159ad73c2
  ncalrpc: OLE6B13DB6A35D0F96310426FDE8B31
  ncacn_ip_tcp: 116.202.156.49:7315
  ncalrpc: LRPC-deea1ee48159ad73c2
  ncalrpc: OLEFD123AA77D5436241DC01A7218F6
  ncacn_ip_tcp: 116.202.156.49:7299
  ncalrpc: LRPC-df06cac02f75c9c4a3
  ncalrpc: OLEFD123AA77D5436241DC01A7218F6
  ncacn_ip_tcp: 116.202.156.49:7299
  ncalrpc: LRPC-df06cac02f75c9c4a3
  ncalrpc: OLE91CB2DE9C2620A7D06AEAECE5E06
  ncacn_ip_tcp: 116.202.156.49:7056
  ncalrpc: LRPC-2277da6d8d736569ea
  ncalrpc: OLE91CB2DE9C2620A7D06AEAECE5E06
  ncacn_ip_tcp: 116.202.156.49:7056
  ncalrpc: LRPC-2277da6d8d736569ea
  ncalrpc: OLE37A9AC5841F9CAACACC46CE08182
  ncacn_ip_tcp: 116.202.156.49:7038
  ncalrpc: LRPC-0c5f96cacb37280ea7
  ncalrpc: OLE37A9AC5841F9CAACACC46CE08182
  ncacn_ip_tcp: 116.202.156.49:7038
  ncalrpc: LRPC-0c5f96cacb37280ea7
  ncalrpc: OLE1F36F191CDC2D4EB0FA12CE34392
  ncacn_ip_tcp: 116.202.156.49:7013
  ncalrpc: LRPC-ffd0299c5d579e19ec
  ncalrpc: OLE1F36F191CDC2D4EB0FA12CE34392
  ncacn_ip_tcp: 116.202.156.49:7013
  ncalrpc: LRPC-ffd0299c5d579e19ec
  ncalrpc: OLE56DC85F0D76A52DC3B417EFEB0B7
  ncacn_ip_tcp: 116.202.156.49:6975
  ncalrpc: LRPC-c7e618bc96890d54ca
  ncalrpc: OLE56DC85F0D76A52DC3B417EFEB0B7
  ncacn_ip_tcp: 116.202.156.49:6975
  ncalrpc: LRPC-c7e618bc96890d54ca
  ncalrpc: OLE9E8BF718DA6227531F6C6020F231
  ncacn_ip_tcp: 116.202.156.49:6968
  ncalrpc: LRPC-377d9555711c2c2ce5
  ncalrpc: {082494DD-29DA-461B-84AD-07FB7D5771C9}
  ncalrpc: OLE9E8BF718DA6227531F6C6020F231
  ncacn_ip_tcp: 116.202.156.49:6968
  ncalrpc: LRPC-377d9555711c2c2ce5
  ncalrpc: OLE9E8BF718DA6227531F6C6020F231
  ncacn_ip_tcp: 116.202.156.49:6968
  ncalrpc: LRPC-377d9555711c2c2ce5
  ncalrpc: {082494DD-29DA-461B-84AD-07FB7D5771C9}
  ncalrpc: OLE1A554AE6E19DE30ACE8DBABDF918
  ncacn_ip_tcp: 116.202.156.49:6921
  ncalrpc: LRPC-26752195465baff03f
  ncalrpc: {5577C3D5-4E9B-42E4-BF55-A363D3C258C9}
  ncalrpc: OLE1A554AE6E19DE30ACE8DBABDF918
  ncacn_ip_tcp: 116.202.156.49:6921
  ncalrpc: LRPC-26752195465baff03f
  ncalrpc: OLE1A554AE6E19DE30ACE8DBABDF918
  ncacn_ip_tcp: 116.202.156.49:6921
  ncalrpc: LRPC-26752195465baff03f
  ncalrpc: {5577C3D5-4E9B-42E4-BF55-A363D3C258C9}
  ncalrpc: OLE114FD63A7A369150FDDAA781DB83
  ncacn_ip_tcp: 116.202.156.49:6915
  ncalrpc: LRPC-017dc707d3575478cd
  ncalrpc: OLE114FD63A7A369150FDDAA781DB83
  ncacn_ip_tcp: 116.202.156.49:6915
  ncalrpc: LRPC-017dc707d3575478cd
  ncalrpc: OLE84F3DD26A1DDD86C1CE738DF33F7
  ncacn_ip_tcp: 116.202.156.49:6910
  ncalrpc: LRPC-bf69302e19eec033cf
  ncalrpc: OLE84F3DD26A1DDD86C1CE738DF33F7
  ncacn_ip_tcp: 116.202.156.49:6910
  ncalrpc: LRPC-bf69302e19eec033cf
  ncalrpc: OLE6B1FA7F0A54E9C9CD3FBC331DE5E
  ncacn_ip_tcp: 116.202.156.49:6859
  ncalrpc: LRPC-86168b9760b9e70c6c
  ncalrpc: OLE6B1FA7F0A54E9C9CD3FBC331DE5E
  ncacn_ip_tcp: 116.202.156.49:6859
  ncalrpc: LRPC-86168b9760b9e70c6c
  ncalrpc: OLED7BC4A1FE9CEDACA26B4D37A0293
  ncacn_ip_tcp: 116.202.156.49:6805
  ncalrpc: LRPC-56835ab491414bc166
  ncalrpc: OLED7BC4A1FE9CEDACA26B4D37A0293
  ncacn_ip_tcp: 116.202.156.49:6805
  ncalrpc: LRPC-56835ab491414bc166
  ncalrpc: OLE41CF0F02D41A43DFEBA6CE17859D
  ncacn_ip_tcp: 116.202.156.49:6714
  ncalrpc: LRPC-6abc7128252523423e
  ncalrpc: {5F5FB4CB-603B-4806-881E-F6C84B00608C}
  ncalrpc: OLE41CF0F02D41A43DFEBA6CE17859D
  ncacn_ip_tcp: 116.202.156.49:6714
  ncalrpc: LRPC-6abc7128252523423e
  ncalrpc: OLE41CF0F02D41A43DFEBA6CE17859D
  ncacn_ip_tcp: 116.202.156.49:6714
  ncalrpc: LRPC-6abc7128252523423e
  ncalrpc: {5F5FB4CB-603B-4806-881E-F6C84B00608C}
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7
  ncalrpc: OLE13C1C34B13445C6476286E183822
  ncacn_ip_tcp: 116.202.156.49:6687
  ncalrpc: LRPC-a9f21e18135fdaf982
  ncalrpc: {A6E501B8-F84C-4C98-BF9E-4B7879825E01}
  ncalrpc: OLE13C1C34B13445C6476286E183822
  ncacn_ip_tcp: 116.202.156.49:6687
  ncalrpc: LRPC-a9f21e18135fdaf982
  ncalrpc: OLE13C1C34B13445C6476286E183822
  ncacn_ip_tcp: 116.202.156.49:6687
  ncalrpc: LRPC-a9f21e18135fdaf982
  ncalrpc: {A6E501B8-F84C-4C98-BF9E-4B7879825E01}
  ncalrpc: OLEAF8024D17BA1829AD71DE2C4615D
  ncalrpc: LRPC-f4265e73a9840a4957
  ncacn_ip_tcp: 116.202.156.49:6629
  ncalrpc: OLEAF8024D17BA1829AD71DE2C4615D
  ncalrpc: LRPC-f4265e73a9840a4957
  ncacn_ip_tcp: 116.202.156.49:6629
  ncalrpc: OLE0605C57E266C718ED780F1E9EC4A
  ncacn_ip_tcp: 116.202.156.49:6609
  ncalrpc: LRPC-16608199138c5bf057
  ncalrpc: OLE0605C57E266C718ED780F1E9EC4A
  ncacn_ip_tcp: 116.202.156.49:6609
  ncalrpc: LRPC-16608199138c5bf057
  ncalrpc: OLE89DB2F6CFE67ECEDFB5FF3240D18
  ncacn_ip_tcp: 116.202.156.49:6594
  ncalrpc: LRPC-3986aafc6386744e89
  ncalrpc: OLE89DB2F6CFE67ECEDFB5FF3240D18
  ncacn_ip_tcp: 116.202.156.49:6594
  ncalrpc: LRPC-3986aafc6386744e89
  ncalrpc: OLE1C1166A4F1FD56A95301A479F36B
  ncacn_ip_tcp: 116.202.156.49:6535
  ncalrpc: LRPC-6160857456ab0bcb23
  ncalrpc: OLE1C1166A4F1FD56A95301A479F36B
  ncacn_ip_tcp: 116.202.156.49:6535
  ncalrpc: LRPC-6160857456ab0bcb23
  ncalrpc: OLE9BEB60D299EBCF664047029ED28F
  ncacn_ip_tcp: 116.202.156.49:6534
  ncalrpc: LRPC-2f002ebb87643892f5
  ncalrpc: OLE9BEB60D299EBCF664047029ED28F
  ncacn_ip_tcp: 116.202.156.49:6534
  ncalrpc: LRPC-2f002ebb87643892f5
  ncalrpc: OLEDAADDF9D5A78457A54191DF0B1F1
  ncacn_ip_tcp: 116.202.156.49:6533
  ncalrpc: LRPC-ae4c2bf27fb9212d1b
  ncalrpc: OLEDAADDF9D5A78457A54191DF0B1F1
  ncacn_ip_tcp: 116.202.156.49:6533
  ncalrpc: LRPC-ae4c2bf27fb9212d1b
  ncalrpc: OLE95968F982483A6CD9108162C2FE3
  ncacn_ip_tcp: 116.202.156.49:6530
  ncalrpc: LRPC-c6c3cf0c30ced30a4c
  ncalrpc: OLE95968F982483A6CD9108162C2FE3
  ncacn_ip_tcp: 116.202.156.49:6530
  ncalrpc: LRPC-c6c3cf0c30ced30a4c
  ncalrpc: OLE8DE8368E370E00BFF9712341CC6A
  ncacn_ip_tcp: 116.202.156.49:6526
  ncalrpc: LRPC-37f20200513bd5dbef
  ncalrpc: OLE8DE8368E370E00BFF9712341CC6A
  ncacn_ip_tcp: 116.202.156.49:6526
  ncalrpc: LRPC-37f20200513bd5dbef

ecca92d9-07d1-4136-87f7-2ac4109337ee
  version: v7.0
  ncalrpc: LRPC-37f20200513bd5dbef
  ncacn_ip_tcp: 116.202.156.49:6526
  ncalrpc: OLE8DE8368E370E00BFF9712341CC6A

1febdc2a-1734-4e06-8998-ed919c26ad43
  version: v2.0
  ncalrpc: OLEA6590DA83CAC80A20A2C9D7275D8
  ncacn_ip_tcp: 116.202.156.49:56668
  ncalrpc: LRPC-00bdbc4cc43d26199e

e62eb024-ee96-4d89-b24a-746cf02a3e98
  version: v1.0
  ncalrpc: OLEA6590DA83CAC80A20A2C9D7275D8
  ncacn_ip_tcp: 116.202.156.49:56668
  ncalrpc: LRPC-00bdbc4cc43d26199e

8879d5aa-30a7-4eb2-9023-bec055dbe648
  version: v1.0
  ncalrpc: OLEA6590DA83CAC80A20A2C9D7275D8
  ncacn_ip_tcp: 116.202.156.49:56668
  ncalrpc: LRPC-00bdbc4cc43d26199e

d3444dd6-ee15-4564-83fc-0b16b8f5e8d4
  version: v1.0
  ncalrpc: OLEA6590DA83CAC80A20A2C9D7275D8
  ncacn_ip_tcp: 116.202.156.49:56668
  ncalrpc: LRPC-00bdbc4cc43d26199e

6f08d61c-fd57-42b0-bb11-f30aedaca66e
  version: v1.0
  ncalrpc: OLEA6590DA83CAC80A20A2C9D7275D8
  ncacn_ip_tcp: 116.202.156.49:56668
  ncalrpc: LRPC-00bdbc4cc43d26199e

f2d0ca50-457a-4d87-ab1e-45f3a324993f
  version: v1.0
  ncalrpc: OLEA6590DA83CAC80A20A2C9D7275D8
  ncacn_ip_tcp: 116.202.156.49:56668
  ncalrpc: LRPC-00bdbc4cc43d26199e

ea0c3893-d1fd-4fb3-82d0-8e9a86486dc5
  version: v2.0
  ncalrpc: OLEA6590DA83CAC80A20A2C9D7275D8
  ncacn_ip_tcp: 116.202.156.49:56668
  ncalrpc: LRPC-00bdbc4cc43d26199e

75f47e04-c7c9-411e-a9eb-080b174b03a9
  version: v1.0
  ncalrpc: OLEA6590DA83CAC80A20A2C9D7275D8
  ncacn_ip_tcp: 116.202.156.49:56668
  ncalrpc: LRPC-00bdbc4cc43d26199e

8384fc47-956a-4d1e-ab2a-1205014f96ec
  version: v1.0
  ncalrpc: OLE1A57DF64C7CF03591559284D26D2
  ncacn_ip_tcp: 116.202.156.49:46220
  ncalrpc: LRPC-558012ac64dda8be69

bd5790c9-d855-42b0-990f-3dfed8c184b3
  version: v1.0
  ncalrpc: OLE1A57DF64C7CF03591559284D26D2
  ncacn_ip_tcp: 116.202.156.49:46220
  ncalrpc: LRPC-558012ac64dda8be69

640aa52e-d472-443a-952c-4d3fe97f480c
  version: v1.0
  ncalrpc: OLE1A57DF64C7CF03591559284D26D2
  ncacn_ip_tcp: 116.202.156.49:46220
  ncalrpc: LRPC-558012ac64dda8be69

41f5fae1-e0ac-414c-a721-0d287466cb23
  version: v1.0
  ncalrpc: OLE1A57DF64C7CF03591559284D26D2
  ncacn_ip_tcp: 116.202.156.49:46220
  ncalrpc: LRPC-558012ac64dda8be69

37fc1b02-da36-4b27-a745-bf2f58a98ff6
  version: v3.0
  ncalrpc: OLE50DDE9ADFCB3B7E36D2273DEA5E9
  ncacn_ip_tcp: 116.202.156.49:15590
  ncalrpc: LRPC-29ff455f8d7629d5b0

f224209f-9076-40f7-98ad-5416dbfa178e
  version: v3.0
  ncalrpc: OLE50DDE9ADFCB3B7E36D2273DEA5E9
  ncacn_ip_tcp: 116.202.156.49:15590
  ncalrpc: LRPC-29ff455f8d7629d5b0

d9318e75-8a8b-4abb-88e7-aceb01f09e60
  version: v1.0
  ncalrpc: OLE18549976CD7CC7321E200EDE88FD
  ncacn_ip_tcp: 116.202.156.49:42975
  ncalrpc: LRPC-7a1a00e3e6a227d841

20434699-5e7e-47d6-95f6-698c4a0ec2f0
  version: v1.0
  ncalrpc: OLE18549976CD7CC7321E200EDE88FD
  ncacn_ip_tcp: 116.202.156.49:42975
  ncalrpc: LRPC-7a1a00e3e6a227d841

8fd9e884-86a5-4b2f-bc7c-2adaa75d0469
  version: v1.0
  ncalrpc: OLE18549976CD7CC7321E200EDE88FD
  ncacn_ip_tcp: 116.202.156.49:42975
  ncalrpc: LRPC-7a1a00e3e6a227d841

37c6221b-cc4b-47ae-8366-7449f2fe9a06
  version: v1.0
  ncalrpc: OLE18549976CD7CC7321E200EDE88FD
  ncacn_ip_tcp: 116.202.156.49:42975
  ncalrpc: LRPC-7a1a00e3e6a227d841

b396a3ff-9203-4c75-a367-244cf29b419f
  version: v1.0
  ncalrpc: OLE18549976CD7CC7321E200EDE88FD
  ncacn_ip_tcp: 116.202.156.49:42975
  ncalrpc: LRPC-7a1a00e3e6a227d841

d014c423-0d54-40a3-90dc-56c7a6071e6f
  version: v1.0
  ncalrpc: OLE18549976CD7CC7321E200EDE88FD
  ncacn_ip_tcp: 116.202.156.49:42975
  ncalrpc: LRPC-7a1a00e3e6a227d841

245a2854-fcdf-4215-adf4-0b4c364e79fb
  version: v1.0
  ncalrpc: OLE18549976CD7CC7321E200EDE88FD
  ncacn_ip_tcp: 116.202.156.49:42975
  ncalrpc: LRPC-7a1a00e3e6a227d841

f1f21151-7185-4170-ac8d-9bb077c29bd3
  version: v1.0
  ncalrpc: OLE134CBAA1E34B108DA75971CA907B
  ncacn_ip_tcp: 116.202.156.49:6414
  ncalrpc: LRPC-2a23ea21fec4b84eb4

5a4d59fe-42ac-4c6e-b554-b12c6af35956
  version: v1.0
  ncalrpc: OLEA9E7F58113165518A901B6BA7122
  ncacn_ip_tcp: 116.202.156.49:47698
  ncalrpc: LRPC-ffc1f2565cdfa46109

4d88f820-8c32-4453-9e30-7297e2fcf025
  version: v1.0
  ncalrpc: OLE05F14903F4DD674A4A82C26267B7
  ncacn_ip_tcp: 116.202.156.49:8472
  ncalrpc: LRPC-43cc6b415e2dfc9855

f3f09ffd-fbcf-4291-944d-70ad6e0e73bb
  version: v1.0
  ncalrpc: LRPC-b489b5c73a65ecbc98

d2716e94-25cb-4820-bc15-537866578562
  version: v1.0
  ncalrpc: OLE4A3DC51432D82AD5CFF2BFE929EC
  ncalrpc: LRPC-5a3747bcd9c0101ad1

0c53aa2e-fb1c-49c5-bfb6-c54f8e5857cd
  version: v1.0
  ncalrpc: OLE4A3DC51432D82AD5CFF2BFE929EC
  ncalrpc: LRPC-5a3747bcd9c0101ad1

923c9623-db7f-4b34-9e6d-e86580f8ca2a
  version: v1.0
  ncalrpc: OLE4A3DC51432D82AD5CFF2BFE929EC
  ncalrpc: LRPC-5a3747bcd9c0101ad1

8ec21e98-b5ce-4916-a3d6-449fa428a007
  version: v0.0
  ncalrpc: OLE55DF07785C275E37862E26D7BA6C
  ncalrpc: LRPC-03d344a2440e7da4a0

0fc77b1a-95d8-4a2e-a0c0-cff54237462b
  version: v0.0
  ncalrpc: OLE55DF07785C275E37862E26D7BA6C
  ncalrpc: LRPC-03d344a2440e7da4a0

b1ef227e-dfa5-421e-82bb-67a6a129c496
  version: v0.0
  ncalrpc: OLE55DF07785C275E37862E26D7BA6C
  ncalrpc: LRPC-03d344a2440e7da4a0

12e65dd8-887f-41ef-91bf-8d816c42c2e7
  version: v1.0
  annotation: Secure Desktop LRPC interface
  provider: winlogon.exe
  ncalrpc: WMsgKRpc06C6347D83

367abb81-9844-35f1-ad32-98f038001003
  version: v2.0
  protocol: [MS-SCMR]: Service Control Manager Remote Protocol
  provider: services.exe
  ncacn_ip_tcp: 116.202.156.49:6726

89742ace-a9ed-11cf-9c0c-08002be7ae86
  version: v2.0
  annotation: Exchange Server STORE Admin20 Interface
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7
  ncalrpc: OLEAF8024D17BA1829AD71DE2C4615D
  ncalrpc: LRPC-f4265e73a9840a4957
  ncacn_ip_tcp: 116.202.156.49:6629

99e64010-b032-11d0-97a4-00c04fd6551d
  version: v4.0
  annotation: Exchange Server STORE Admin40 Interface
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7
  ncalrpc: OLEAF8024D17BA1829AD71DE2C4615D
  ncalrpc: LRPC-f4265e73a9840a4957
  ncacn_ip_tcp: 116.202.156.49:6629

da107c01-2b50-44d7-9d5f-bfd4fd8e95ed
  version: v5.0
  annotation: Exchange Server STORE Admin50 Interface
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7
  ncalrpc: OLEAF8024D17BA1829AD71DE2C4615D
  ncalrpc: LRPC-f4265e73a9840a4957
  ncacn_ip_tcp: 116.202.156.49:6629

938fe036-ede6-4f6c-966e-a3d7300279c8
  version: v0.256
  annotation: EmsmdbPool Interface
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7
  ncalrpc: OLEAF8024D17BA1829AD71DE2C4615D
  ncalrpc: LRPC-f4265e73a9840a4957
  ncacn_ip_tcp: 116.202.156.49:6629

9b48e5eb-b4cd-4b6d-ae73-656e0a777bda
  version: v0.256
  annotation: EmsmdbPoolNotify Interface
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7
  ncalrpc: OLEAF8024D17BA1829AD71DE2C4615D
  ncalrpc: LRPC-f4265e73a9840a4957
  ncacn_ip_tcp: 116.202.156.49:6629

10f24e8e-0fa6-11d2-a910-00c04f990f3b
  version: v1.0
  annotation: c443f9b8-1ead-4091-8584-cd1ee64b3fa7
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7

1453c42c-0fa6-11d2-a910-00c04f990f3b
  version: v1.0
  annotation: c443f9b8-1ead-4091-8584-cd1ee64b3fa7
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7

bf6dd426-77b4-44b3-984e-d413fc075562
  version: v2.0
  annotation: c443f9b8-1ead-4091-8584-cd1ee64b3fa7
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7

0e4a0156-dd5d-11d2-8c2f-00c04fb6bcde
  version: v1.0
  annotation: c443f9b8-1ead-4091-8584-cd1ee64b3fa7
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7

a9e05b20-6f57-4e24-a540-52412017e6ff
  version: v1.0
  annotation: c443f9b8-1ead-4091-8584-cd1ee64b3fa7
  ncalrpc: OLEA6D6ED7D8AD675BB60F917956FA2
  ncacn_ip_tcp: 116.202.156.49:6698
  ncalrpc: LRPC-9cfa5825f94da4456a
  ncalrpc: OLE373527087E2659A989940A790A40
  ncacn_ip_tcp: 116.202.156.49:6696
  ncalrpc: LRPC-4df3cd2b8075c27ac0
  ncalrpc: OLE9D23FE9BB0219526203B2159A9F5
  ncacn_ip_tcp: 116.202.156.49:6695
  ncalrpc: LRPC-3e8aeaf8548dde6ef7

df831451-edad-415d-905f-9d3793f92db3
  version: v0.20736
  annotation: Exchange Server STORE EmsmdbMT Proxy Interface
  ncalrpc: OLEAF8024D17BA1829AD71DE2C4615D
  ncalrpc: LRPC-f4265e73a9840a4957
  ncacn_ip_tcp: 116.202.156.49:6629

31e68719-d4fc-401a-8788-bc56169a336b
  version: v0.256
  ncalrpc: OLEAF8024D17BA1829AD71DE2C4615D
  ncalrpc: LRPC-f4265e73a9840a4957
  ncacn_ip_tcp: 116.202.156.49:6629

4a020372-bb0a-4031-a5a7-7c6896522c00
  version: v1.0
  ncalrpc: OLE0605C57E266C718ED780F1E9EC4A
  ncacn_ip_tcp: 116.202.156.49:6609
  ncalrpc: LRPC-16608199138c5bf057

76c0d124-a18e-49d4-adf1-d8c6ba868ea6
  version: v1.0
  ncalrpc: OLE0605C57E266C718ED780F1E9EC4A
  ncacn_ip_tcp: 116.202.156.49:6609
  ncalrpc: LRPC-16608199138c5bf057

4b112204-0e19-11d3-b42b-0000f81feb9f
  version: v1.0
  provider: ssdpsrv.dll
  ncalrpc: LRPC-4ed5c649784935f579

52d3f3f5-248c-4d74-a01f-a06e41d5cd59
  version: v1.0
  ncalrpc: OLEDD8D1D04B347AF12EE5B2A733887
  ncacn_ip_tcp: 116.202.156.49:6575
  ncalrpc: LRPC-8d3b3215d84df04578

5261574a-4572-206e-b268-6b199213b4e4
  version: v0.256
  protocol: [MS-OXCRPC]: Wire Format Protocol
  ncalrpc: OLE95968F982483A6CD9108162C2FE3
  ncacn_ip_tcp: 116.202.156.49:6530
  ncalrpc: LRPC-c6c3cf0c30ced30a4c
  ncacn_ip_http: 116.202.156.49:6001

a4f1db00-ca47-1067-b31f-00dd010662da
  version: v0.20736
  protocol: [MS-OXCRPC]: Wire Format Protocol
  ncalrpc: OLE95968F982483A6CD9108162C2FE3
  ncacn_ip_tcp: 116.202.156.49:6530
  ncalrpc: LRPC-c6c3cf0c30ced30a4c
  ncacn_ip_http: 116.202.156.49:6001

ba3fa067-8d56-4b56-ba1f-9cbae8db3478
  version: v1.0
  ncalrpc: OLE95968F982483A6CD9108162C2FE3
  ncacn_ip_tcp: 116.202.156.49:6530
  ncalrpc: LRPC-c6c3cf0c30ced30a4c
  ncacn_ip_http: 116.202.156.49:6001

1544f5e0-613c-11d1-93df-00c04fd7bd09
  version: v1.0
  annotation: Microsoft Exchange RFR Interface
  protocol: [MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol
  ncalrpc: OLE95968F982483A6CD9108162C2FE3
  ncacn_ip_tcp: 116.202.156.49:6530
  ncalrpc: LRPC-c6c3cf0c30ced30a4c
  ncacn_ip_http: 116.202.156.49:6001

443 / tcp

1730662532 | 2025-04-01T06:51:45.143190

Hashes

hash

1195067920

http.dom_hash

35052746

http.favicon.hash

1768726119

http.html_hash

1730662532

http.server_hash

608434861

http.title_hash

-480606949

Outlook

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
request-id: 0fdddb53-440d-43d4-8376-fb8eed94c685
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 01 Apr 2025 06:50:55 GMT
Content-Length: 58721


Microsoft Exchange:
  Name: Exchange Server 2016 CU23 Apr24HU
  Build Number: 15.1.2507.39
  Build Date: April 23, 2024

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e0:ee:0e:6b:34:35:8b:81:60:fd:76:42:76:8b:f5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Domain Validation CA SHA2
        Validity
            Not Before: Jul 24 05:11:21 2024 GMT
            Not After : Jul 24 05:11:20 2025 GMT
        Subject: CN=mail.tethys-shipping.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:16:84:76:4c:3a:ed:b2:a0:6b:97:72:f0:
                    27:eb:27:7c:60:39:74:cd:76:a2:7e:42:4c:1a:73:
                    dc:4f:25:eb:e3:cc:6f:b7:19:db:4c:3b:84:fc:86:
                    c4:3d:c9:03:6e:87:39:e0:16:7b:9d:27:e5:f4:51:
                    76:69:57:de:0c:fc:43:ed:1f:b9:c8:bc:3c:83:11:
                    7f:ba:41:95:36:d5:68:9b:29:fe:63:b2:16:1d:35:
                    8a:86:4d:0c:58:9c:54:4b:40:55:a7:ac:1f:38:05:
                    c1:5e:b6:b9:5a:31:82:9f:2a:31:28:9d:32:30:c6:
                    d1:2d:10:3c:dd:4d:6a:c5:c3:0a:4a:d1:d8:7c:6f:
                    7d:36:5e:35:b4:03:c4:ef:27:15:05:ab:62:27:92:
                    cb:23:2d:60:3c:81:f6:d1:f4:db:81:1d:5f:ef:82:
                    b2:58:13:64:49:58:3f:b5:67:7f:94:7f:96:2f:1b:
                    9a:61:2b:38:ee:f9:48:0e:44:d1:37:30:64:90:bf:
                    2c:a5:04:9f:30:12:23:e3:37:3f:a6:c7:e0:b2:14:
                    dd:0d:f6:a1:5c:61:95:e1:49:53:95:4e:85:c7:55:
                    60:6b:ef:ae:e0:7d:e3:13:d4:bf:3a:f5:64:17:7e:
                    b2:66:a2:e0:a0:b7:fa:e8:5f:41:59:04:f0:e6:30:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.certum.pl/dvcasha2.crl
            Authority Information Access: 
                OCSP - URI:http://dvcasha2.ocsp-certum.com
                CA Issuers - URI:http://repository.certum.pl/dvcasha2.cer
            X509v3 Authority Key Identifier: 
                E5:31:AD:BF:3A:11:96:F4:83:BC:50:3C:D4:B7:90:9B:90:EE:DE:25
            X509v3 Subject Key Identifier: 
                40:D6:8B:58:D5:D8:A2:3F:C0:35:07:85:16:EA:09:6B:B7:E6:12:E4
            X509v3 Issuer Alternative Name: 
                email:dvcasha2@certum.pl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.2.616.1.113527.2.5.1.3
                  CPS: https://www.certum.pl/CPS
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:mail.tethys-shipping.com, DNS:autodiscover.tethys-shipping.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Jul 24 05:11:22.758 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:42:9C:D3:FA:E5:D1:6A:EF:2E:B6:67:BB:
                                FF:A5:24:27:E8:00:E7:C0:3A:10:B7:09:29:42:B5:17:
                                88:D6:FB:E2:02:21:00:E1:27:9D:AE:28:E8:A6:DE:66:
                                4B:64:87:9B:45:7E:23:0D:F7:A1:EC:7C:89:2F:98:93:
                                9F:12:58:68:D3:97:23
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
                    Timestamp : Jul 24 05:11:23.113 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:20:29:D0:6B:FB:A5:C7:9F:CB:65:0B:EC:
                                6A:3C:2F:39:A3:D3:46:99:C0:35:61:2E:F8:36:4E:3F:
                                B1:AD:9F:EA:02:21:00:AE:D4:1D:04:5C:7C:83:CA:2A:
                                32:7B:1F:A1:71:8E:C2:9B:13:E9:FC:72:E5:37:9F:D7:
                                73:49:EF:9A:20:DA:8C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jul 24 05:11:23.239 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:8B:51:4E:B9:92:93:D4:B3:79:DE:7F:
                                5A:32:1A:A2:F0:B1:BC:35:DD:F5:91:90:41:73:1A:0D:
                                1F:C7:CB:CC:DA:02:21:00:F3:62:08:B6:F6:7B:F8:F6:
                                2A:94:6C:AB:2A:99:1A:D5:C9:3B:60:B0:63:73:0F:4F:
                                85:30:D7:01:58:88:6E:E8
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4b:7c:69:23:99:32:b4:23:65:1d:0b:bf:f0:01:84:70:31:73:
        7d:b5:85:71:b5:39:14:73:5b:73:bf:36:39:5c:58:88:fa:09:
        9b:f5:c5:66:73:50:3e:bf:c5:33:14:50:78:07:3e:1b:11:8e:
        27:95:a3:b3:cb:7f:e3:22:ea:a0:78:f6:67:6c:7f:62:fe:0f:
        b9:78:d2:3d:3a:c7:fb:1e:cf:5c:cf:78:f3:c1:bb:67:4a:c3:
        02:e8:dd:8f:32:39:1b:46:b6:e1:fb:0a:ae:94:0a:2a:4d:75:
        90:f1:55:81:96:84:d6:e5:6e:44:86:1d:5d:45:86:51:f1:ce:
        4f:12:12:e5:4d:bc:f1:69:17:1b:b2:44:58:33:d0:cb:fc:14:
        59:4e:b3:de:55:cb:8d:ac:1f:68:87:d0:b9:50:7b:6a:be:96:
        76:c0:4b:d4:9e:1f:e4:2d:ec:ba:38:5a:fa:f6:9b:49:85:aa:
        03:87:f6:92:77:de:7d:7d:52:68:af:d0:1b:8b:48:e9:13:31:
        b3:aa:3b:3f:18:83:dc:3a:f9:33:8d:38:d7:04:99:31:3b:a8:
        fc:96:70:d5:6a:78:ba:2b:30:4a:db:79:17:94:20:fe:c0:57:
        47:77:29:91:3d:88:f7:73:13:87:05:91:6f:b3:7a:09:88:91:
        c1:f1:77:0e

5985 / tcp

1489525118 | 2025-04-02T03:50:29.653500

Hashes

hash

-771518410

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 02 Apr 2025 03:49:37 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2016 (version 1607)
  OS Build: 10.0.14393
  Target Name: TETHYS-SHIPPING
  NetBIOS Domain Name: TETHYS-SHIPPING
  NetBIOS Computer Name: EXCH
  DNS Domain Name: tethys-shipping.com
  DNS Tree Name: tethys-shipping.com
  FQDN: Exch.tethys-shipping.com

116.202.156.49

Last Seen: 2025-04-02

Tags:

GeneralInformation

WebTechnologies

OpenPorts

25 / tcp

-1350459732 | 2025-03-21T05:53:42.829823

Microsoft Exchange smtpd

135 / tcp

-1672299101 | 2025-03-31T21:51:06.823676

Microsoft RPC Endpoint Mapper

443 / tcp

1730662532 | 2025-04-01T06:51:45.143190

Hashes

Outlook Web App

5985 / tcp

1489525118 | 2025-04-02T03:50:29.653500

Hashes

WinRM

Products

Pricing

Contact Us

116.202.156.49

Last Seen: 2025-04-02

Tags:

GeneralInformation

WebTechnologies

OpenPorts

25 / tcp -1350459732 | 2025-03-21T05:53:42.829823

Microsoft Exchange smtpd

135 / tcp -1672299101 | 2025-03-31T21:51:06.823676

Microsoft RPC Endpoint Mapper

443 / tcp 1730662532 | 2025-04-01T06:51:45.143190

Hashes

Outlook Web App

5985 / tcp 1489525118 | 2025-04-02T03:50:29.653500

Hashes

WinRM

Products

Pricing

Contact Us

25 / tcp

-1350459732 | 2025-03-21T05:53:42.829823

135 / tcp

-1672299101 | 2025-03-31T21:51:06.823676

443 / tcp

1730662532 | 2025-04-01T06:51:45.143190

5985 / tcp

1489525118 | 2025-04-02T03:50:29.653500