1429503136 | 2024-12-31T10:38:30.509536
21 /
tcp
220 Microsoft FTP Service
530 User anonymous cannot log in.
214-The following commands are recognized(* ==>'s unimplemented).
ABOR
ACCT
ALLO
APPE
CDUP
CWD
DELE
FEAT
HELP
LIST
MDTM
MKD
MODE
NLST
NOOP
OPTS
PASS
PASV
PORT
PWD
QUIT
REIN
REST
RETR
RMD
RNFR
RNTO
SITE
SIZE
SMNT
STAT
STOR
STOU
STRU
SYST
TYPE
USER
XCUP
XCWD
XMKD
XPWD
XRMD
214 HELP command successful.
530 Please login with USER and PASS.
244733761 | 2024-12-31T06:46:24.832138
80 /
tcp
HTTP/1.1 200 OK
Date: Tue, 31 Dec 2024 06:46:24 GMT
Server: Microsoft-IIS/6.0
MicrosoftOfficeWebServer: 5.0_Pub
X-Powered-By: ASP.NET
Content-Length: 8989
Content-Type: text/html
Set-Cookie: ASPSESSIONIDQADTRCTB=BAAMJIMBNGPJOMLMKHJNEOLO; path=/
Cache-control: private
-360424164 | 2024-12-19T21:16:08.179970
81 /
tcp
HTTP/1.1 200 OK
Date: Thu, 19 Dec 2024 21:16:05 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 23542
1338911929 | 2024-12-19T02:43:33.571992
135 /
tcp
Microsoft RPC Endpoint Mapper
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: DNSResolver
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncacn_np: \\WEB119\PIPE\atsvc
ncalrpc: OLE119C625FC4694D4C945D27940575
ncalrpc: wzcsvc
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\WEB119\PIPE\atsvc
ncalrpc: OLE119C625FC4694D4C945D27940575
ncalrpc: wzcsvc
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\WEB119\PIPE\atsvc
ncalrpc: OLE119C625FC4694D4C945D27940575
ncalrpc: wzcsvc
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncacn_ip_tcp: 118.163.222.239:1025
ncalrpc: LRPC00000444.00000001
ncacn_ip_tcp: 118.163.222.239:1025
ncalrpc: LRPC00000444.00000001
ncacn_ip_tcp: 118.163.222.239:1025
ncalrpc: LRPC00000444.00000001
ncacn_ip_tcp: 118.163.222.239:1025
ncalrpc: LRPC00000444.00000001
ncalrpc: LRPC000005c8.00000001
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 118.163.222.239:1026
ncalrpc: dsrole
ncacn_np: \\WEB119\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\WEB119\PIPE\lsass
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
annotation: IPSec Policy agent endpoint
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncalrpc: dsrole
ncacn_np: \\WEB119\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\WEB119\PIPE\lsass
82ad4280-036b-11cf-972c-00aa006887b0
version: v2.0
protocol: [MS-IRP]: Internet Information Services (IIS) Inetinfo Remote
provider: infocomm.dll
ncacn_np: \\WEB119\PIPE\INETINFO
ncacn_ip_tcp: 118.163.222.239:1027
ncalrpc: INETINFO_LPC
ncalrpc: OLE127524158A194403B8BB10F07DAB
2f5f6521-cb55-1059-b446-00df0bce31db
version: v1.0
annotation: Unimodem LRPC Endpoint
ncalrpc: unimdmsvc
ncalrpc: tapsrvlpc
ncacn_np: \\WEB119\pipe\tapsrv
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncacn_np: \\WEB119\PIPE\W32TIME_ALT
ncalrpc: W32TIME_ALT
758073748 | 2024-12-28T22:51:53.821951
1433 /
tcp
MS-SQL NTLM Info:
OS: Windows Server 2003
OS Build: 5.2.3790
388956925 | 2024-12-31T21:33:33.298337
1434 /
udp
SQL Server Browser Service:
Instance #1:
Server Name: WEB119
Instance Name: MSSQLSERVER
Is Clustered: False
Version: 8.00.194
TCP Port: 1433
Named Pipe: \\WEB119\pipe\sql\query
Version Name: MS-SQL Server 2000 RTM