GeneralInformation

Country	Portugal
City	Viana do Castelo
Organization	Instituto Politecnico de Viana do Castelo
ISP	Fundacao para a Ciencia e a Tecnologia, I.P.
ASN	AS1930

OpenPorts

53 80 88 123 135 389 445 593 1723 3268 5985

80 / tcp

703707298 | 2025-02-10T00:07:53.579491

Hashes

hash

-1793864691

http.dom_hash

-1389411298

http.html_hash

703707298

http.server_hash

608434861

http.title_hash

-1871926727

IIS Windows Server

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Thu, 20 Feb 2020 11:41:13 GMT
Accept-Ranges: bytes
ETag: "33f50a7e2e7d51:0"
Server: Microsoft-IIS/10.0
Date: Mon, 10 Feb 2025 00:07:09 GMT
Content-Length: 703

88 / udp

1628422664 | 2025-02-09T21:00:19.446429

Microsoft Windows Kerberos
Server Time: 2025-02-09 20:59:34Z

123 / udp

-471737553 | 2025-02-08T12:00:46.416933

NTP
protocolversion: 3
stratum: 1
leap: 0
precision: -23
rootdelay: 0.0
rootdisp: 10.9512176514
refid: 1280262988
reftime: 3947922618.53
poll: 0

135 / tcp

720377297 | 2025-01-20T18:59:12.675088

Microsoft RPC Endpoint Mapper

d95afe70-a6d5-4259-822e-2c84da1ddb0d
  version: v1.0
  protocol: [MS-RSP]: Remote Shutdown Protocol
  provider: wininit.exe
  ncacn_ip_tcp: 193.137.65.70:49664
  ncalrpc: WindowsShutdown
  ncacn_np: \\FRW16\PIPE\InitShutdown
  ncalrpc: WMsgKRpc087F60

76f226c3-ec14-4325-8a99-6a46348418af
  version: v1.0
  provider: winlogon.exe
  ncalrpc: WindowsShutdown
  ncacn_np: \\FRW16\PIPE\InitShutdown
  ncalrpc: WMsgKRpc087F60
  ncalrpc: WMsgKRpc089821

9b008953-f195-4bf9-bde0-4471971e58ed
  version: v1.0
  ncalrpc: LRPC-70b757bb7d0cea8c98
  ncalrpc: dabrpc
  ncalrpc: csebpub
  ncalrpc: LRPC-7174ba6db7e4e01032
  ncalrpc: LRPC-ff9e03fb22be41a436
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

d09bdeb5-6171-4a34-bfe2-06fa82652568
  version: v1.0
  ncalrpc: csebpub
  ncalrpc: LRPC-7174ba6db7e4e01032
  ncalrpc: LRPC-ff9e03fb22be41a436
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-ff9e03fb22be41a436
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-9fc090281e10329b8d
  ncacn_ip_tcp: 193.137.65.70:49665
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8
  ncalrpc: LRPC-6af3854fb41f435c88

697dcda9-3ba9-4eb2-9247-e11f1901b0d2
  version: v1.0
  ncalrpc: LRPC-7174ba6db7e4e01032
  ncalrpc: LRPC-ff9e03fb22be41a436
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

857fb1be-084f-4fb5-b59c-4b2c4be5f0cf
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

b8cadbaf-e84b-46b9-84f2-6f71c03f9e55
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

20c40295-8dba-48e6-aebf-3e78ef3bb144
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

2513bcbe-6cd4-4348-855e-7efb3c336dd3
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

88abcbc3-34ea-76ae-8215-767520655a23
  version: v0.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

76c217bc-c8b4-4201-a745-373ad9032b1a
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

55e6b932-1979-45d6-90c5-7f6270724112
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

4dace966-a243-4450-ae3f-9b7bcb5315b8
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

1832bcf6-cab8-41d4-85d2-c9410764f75a
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

c521facf-09a9-42c5-b155-72388595cbf0
  version: v0.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

2c7fd9ce-e706-4b40-b412-953107ef9bb0
  version: v0.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

2d98a740-581d-41b9-aa0d-a88b9d5ce938
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
  version: v1.0
  annotation: Impl friendly name
  provider: sysntfy.dll
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B
  ncacn_np: \\FRW16\pipe\lsass
  ncalrpc: audit
  ncalrpc: securityevent
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsapolicylookup
  ncalrpc: lsasspirpc
  ncalrpc: protected_storage
  ncalrpc: SidKey Local End Point
  ncalrpc: samss lpc
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C

5824833b-3c1a-4ad2-bdfd-c31d19e23ed2
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

3b338d89-6cfa-44b8-847e-531531bc9992
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

8782d3b9-ebbd-4644-a3d8-e8725381919b
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

085b0334-e454-4d91-9b8c-4134f9e793f3
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

f3f09ffd-fbcf-4291-944d-70ad6e0e73bb
  version: v1.0
  ncalrpc: LRPC-4d9ebbe0d84d17b288

3473dd4d-2e88-4006-9cba-22570909dd10
  version: v5.256
  annotation: WinHttp Auto-Proxy Service
  ncalrpc: OLE824A0A94A03F816EA071EEAB5963
  ncalrpc: LRPC-f24419160f92ba600a

7ea70bcf-48af-4f6a-8968-6a440754d5fa
  version: v1.0
  annotation: NSI server endpoint
  provider: nsisvc.dll
  ncalrpc: LRPC-f24419160f92ba600a

a500d4c6-0dd1-4543-bc0c-d5f93486eaf8
  version: v1.0
  ncalrpc: LRPC-97106d6073dbef195d
  ncalrpc: LRPC-9fc090281e10329b8d
  ncacn_ip_tcp: 193.137.65.70:49665
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8

f6beaff7-1e19-4fbb-9f8f-b89e2018337c
  version: v1.0
  annotation: Event log TCPIP
  protocol: [MS-EVEN6]: EventLog Remoting Protocol
  provider: wevtsvc.dll
  ncacn_ip_tcp: 193.137.65.70:49665
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
  version: v1.0
  annotation: DHCPv6 Client LRPC Endpoint
  provider: dhcpcsvc6.dll
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8

30adc50c-5cbc-46ce-9a0e-91914789e23c
  version: v1.0
  annotation: NRP server endpoint
  provider: nrpsrv.dll
  ncalrpc: LRPC-2eddda798a5bcddcf8

bf4dc912-e52f-4904-8ebe-9317c1bdd497
  version: v1.0
  ncalrpc: LRPC-8f3c0f947a9d8ce292
  ncalrpc: LRPC-bba5bb506f8e0ead62
  ncalrpc: OLE0124B86C6CAA51B1677D35A19F69
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

0767a036-0d22-48aa-ba69-b619480f38cb
  version: v1.0
  annotation: PcaSvc
  provider: pcasvc.dll
  ncalrpc: LRPC-bba5bb506f8e0ead62
  ncalrpc: OLE0124B86C6CAA51B1677D35A19F69
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

e40f7b57-7a25-4cd3-a135-7f7d3df9d16b
  version: v1.0
  annotation: Network Connection Broker server endpoint
  ncalrpc: LRPC-bba5bb506f8e0ead62
  ncalrpc: OLE0124B86C6CAA51B1677D35A19F69
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

880fd55e-43b9-11e0-b1a8-cf4edfd72085
  version: v1.0
  annotation: KAPI Service endpoint
  ncalrpc: LRPC-bba5bb506f8e0ead62
  ncalrpc: OLE0124B86C6CAA51B1677D35A19F69
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

5222821f-d5e2-4885-84f1-5f6185a0ec41
  version: v1.0
  annotation: Network Connection Broker server endpoint for NCB Reset module
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

2fb92682-6599-42dc-ae13-bd2ca89bd11c
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-b51c3aab29c0373a66
  ncalrpc: LRPC-2197b77bdefd58e44b
  ncalrpc: LRPC-24a934547e06433135

f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
  version: v1.0
  annotation: Fw APIs
  ncalrpc: LRPC-b51c3aab29c0373a66
  ncalrpc: LRPC-2197b77bdefd58e44b
  ncalrpc: LRPC-24a934547e06433135

7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-b51c3aab29c0373a66
  ncalrpc: LRPC-2197b77bdefd58e44b
  ncalrpc: LRPC-24a934547e06433135

dd490425-5325-4565-b774-7e27d6c09c24
  version: v1.0
  annotation: Base Firewall Engine API
  provider: BFE.DLL
  ncalrpc: LRPC-2197b77bdefd58e44b
  ncalrpc: LRPC-24a934547e06433135

df4df73a-c52d-4e3a-8003-8437fdf8302a
  version: v0.0
  annotation: WM_WindowManagerRPC\Server
  ncalrpc: LRPC-24a934547e06433135

650a7e26-eab8-5533-ce43-9c1dfce11511
  version: v1.0
  annotation: Vpn APIs
  ncalrpc: LRPC-0bc5869be33a04f5e7
  ncalrpc: VpnikeRpc
  ncalrpc: RasmanLrpc
  ncacn_np: \\FRW16\PIPE\ROUTER
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

a398e520-d59a-4bdd-aa7a-3c1e0303a511
  version: v1.0
  annotation: IKE/Authip API
  provider: IKEEXT.DLL
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
  version: v1.0
  annotation: Adh APIs
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

c36be077-e14b-4fe9-8abc-e856ef4f048b
  version: v1.0
  annotation: Proxy Manager client server endpoint
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

2e6035b2-e8f1-41a7-a044-656b439c4c34
  version: v1.0
  annotation: Proxy Manager provider server endpoint
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

552d076a-cb29-4e44-8b6a-d15e59e2c0af
  version: v1.0
  annotation: IP Transition Configuration endpoint
  provider: iphlpsvc.dll
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

0d3c7f20-1c8d-4654-a1b3-51563b298bda
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

b18fbab6-56f8-4702-84e0-41053293a869
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

3a9ef155-691d-4449-8d05-09ad57031823
  version: v1.0
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

86d35949-83c9-4044-b424-db363231fd0c
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: schedsvc.dll
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

33d84484-3626-47ee-8c6f-e7e98b113be1
  version: v2.0
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

2eb08e3e-639f-4fba-97b1-14f878961076
  version: v1.0
  annotation: Group Policy RPC Interface
  provider: gpsvc.dll
  ncalrpc: LRPC-65921284bb8d02e0b7

7aeb6705-3ae6-471a-882d-f39c109edc12
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

e7f76134-9ef5-4949-a2d6-3368cc0988f3
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

b3781086-6a54-489b-91c8-51d067172ab7
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

b37f900a-eae4-4304-a2ab-12bb668c0188
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

7f1343fe-50a9-4927-a778-0c5859517bac
  version: v1.0
  annotation: DfsDs service
  ncacn_np: \\FRW16\PIPE\wkssvc
  ncalrpc: nlaapi
  ncalrpc: DNSResolver
  ncalrpc: nlaplg

eb081a0d-10ee-478a-a1dd-50995283e7a8
  version: v3.0
  annotation: Witness Client Test Interface
  ncalrpc: nlaapi
  ncalrpc: DNSResolver
  ncalrpc: nlaplg

f2c9b409-c1c9-4100-8639-d8ab1486694a
  version: v1.0
  annotation: Witness Client Upcall Server
  ncalrpc: nlaapi
  ncalrpc: DNSResolver
  ncalrpc: nlaplg

51a227ae-825b-41f2-b4a9-1ac9557a1018
  version: v1.0
  annotation: Ngc Pop Key Service
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

8fb74744-b2ff-4c00-be0d-9ef9a191fe1b
  version: v1.0
  annotation: Ngc Pop Key Service
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
  version: v2.0
  annotation: KeyIso
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

12345678-1234-abcd-ef00-01234567cffb
  version: v1.0
  protocol: [MS-NRPC]: Netlogon Remote Protocol
  provider: netlogon.dll
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7
  version: v0.0
  annotation: RemoteAccessCheck
  protocol: [MS-RAA]: Remote Authorization API Protocol
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

12345778-1234-abcd-ef00-0123456789ab
  version: v0.0
  protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
  provider: lsasrv.dll
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

e3514235-4b06-11d1-ab04-00c04fc2dcd2
  version: v4.0
  annotation: MS NT Directory DRS Interface
  protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
  provider: ntdsai.dll
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncacn_np: \\FRW16\pipe\lsass
  ncalrpc: audit
  ncalrpc: securityevent
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsapolicylookup
  ncalrpc: lsasspirpc
  ncalrpc: protected_storage

c503f532-443a-4c69-8300-ccd1fbdb3839
  version: v2.0
  ncalrpc: OLEDCD8E1C49AAF812F67322A2A28CA
  ncalrpc: LRPC-f2b1955abd62fb0c92

6bffd098-a112-3610-9833-46c3f874532d
  version: v1.0
  protocol: [MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP)
  provider: dhcpssvc.dll
  ncalrpc: OLE77C1FBD6120610144BD7BC52BB43
  ncacn_ip_tcp: 193.137.65.70:52183

5b821720-f63b-11d0-aad2-00c04fc324db
  version: v1.0
  protocol: [MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP)
  provider: dhcpssvc.dll
  ncalrpc: OLE77C1FBD6120610144BD7BC52BB43
  ncacn_ip_tcp: 193.137.65.70:52183

897e2e5f-93f3-4376-9c9c-fd2277495c27
  version: v1.0
  annotation: Frs2 Service
  protocol: [MS-FRS2]: Distributed File System Replication Protocol
  provider: dfsrmig.exe
  ncalrpc: OLEAB746511B3C3305549B290859B17
  ncacn_ip_tcp: 193.137.65.70:52176

906b0ce0-c70b-1067-b317-00dd010662da
  version: v1.0
  protocol: [MS-CMPO]: MSDTC Connection Manager:
  provider: msdtcprx.dll
  ncalrpc: LRPC-2b88b5489460acfce8
  ncalrpc: LRPC-2b88b5489460acfce8
  ncalrpc: LRPC-2b88b5489460acfce8
  ncalrpc: OLE12346A088FED3F4EB88E1D0F49BA
  ncalrpc: LRPC-2c2cfd100b7e57acad

367abb81-9844-35f1-ad32-98f038001003
  version: v2.0
  protocol: [MS-SCMR]: Service Control Manager Remote Protocol
  provider: services.exe
  ncacn_ip_tcp: 193.137.65.70:49722

50abc2a4-574d-40b3-9d66-ee4fd5fba076
  version: v5.0
  protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
  provider: dns.exe
  ncacn_ip_tcp: 193.137.65.70:49712

4c9dbf19-d39e-4bb9-90ee-8f7179b20283
  version: v1.0
  ncalrpc: LRPC-f1d0ce2458ff9f3efc

e38f5360-8572-473e-b696-1b46873beeab
  version: v1.0
  ncalrpc: LRPC-f1d0ce2458ff9f3efc

12345678-1234-abcd-ef00-0123456789ab
  version: v1.0
  protocol: [MS-RPRN]: Print System Remote Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

ae33069b-a2a8-46ee-a235-ddfd339be281
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

4a452661-8290-4b36-8fbe-7f4093a94978
  version: v1.0
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

76f03f96-cdfd-44fc-a22c-64950a001209
  version: v1.0
  protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

98716d03-89ac-44c7-bb8c-285824e51c4a
  version: v1.0
  annotation: XactSrv service
  provider: srvsvc.dll
  ncalrpc: LRPC-91d93ac66527e29111

1a0d010f-1c33-432c-b0f5-8cf4e8053099
  version: v1.0
  annotation: IdSegSrv service
  ncalrpc: LRPC-91d93ac66527e29111

389 / tcp

-129350627 | 2025-02-07T10:16:43.830614

LDAP:
  CurrentTime: 20250207101601.0Z
  SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=frw16,DC=esapl,DC=pt
  DsServiceName: CN=NTDS Settings,CN=FRW16,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=frw16,DC=esapl,DC=pt
  NamingContexts:
    CN=Configuration,DC=frw16,DC=esapl,DC=pt
    CN=Schema,CN=Configuration,DC=frw16,DC=esapl,DC=pt
    DC=DomainDnsZones,DC=frw16,DC=esapl,DC=pt
    DC=ForestDnsZones,DC=frw16,DC=esapl,DC=pt
    DC=frw16,DC=esapl,DC=pt
  DefaultNamingContext: DC=frw16,DC=esapl,DC=pt
  SchemaNamingContext: CN=Schema,CN=Configuration,DC=frw16,DC=esapl,DC=pt
  ConfigurationNamingContext: CN=Configuration,DC=frw16,DC=esapl,DC=pt
  RootDomainNamingContext: DC=frw16,DC=esapl,DC=pt
  SupportedControl:
    1.2.840.113556.1.4.1338
    1.2.840.113556.1.4.1339
    1.2.840.113556.1.4.1340
    1.2.840.113556.1.4.1341
    1.2.840.113556.1.4.1413
    1.2.840.113556.1.4.1504
    1.2.840.113556.1.4.1852
    1.2.840.113556.1.4.1907
    1.2.840.113556.1.4.1948
    1.2.840.113556.1.4.1974
    1.2.840.113556.1.4.2026
    1.2.840.113556.1.4.2064
    1.2.840.113556.1.4.2065
    1.2.840.113556.1.4.2066
    1.2.840.113556.1.4.2090
    1.2.840.113556.1.4.2204
    1.2.840.113556.1.4.2205
    1.2.840.113556.1.4.2206
    1.2.840.113556.1.4.2211
    1.2.840.113556.1.4.2239
    1.2.840.113556.1.4.2255
    1.2.840.113556.1.4.2256
    1.2.840.113556.1.4.2309
    1.2.840.113556.1.4.319
    1.2.840.113556.1.4.417
    1.2.840.113556.1.4.473
    1.2.840.113556.1.4.474
    1.2.840.113556.1.4.521
    1.2.840.113556.1.4.528
    1.2.840.113556.1.4.529
    1.2.840.113556.1.4.619
    1.2.840.113556.1.4.801
    1.2.840.113556.1.4.802
    1.2.840.113556.1.4.805
    1.2.840.113556.1.4.841
    1.2.840.113556.1.4.970
    2.16.840.1.113730.3.4.10
    2.16.840.1.113730.3.4.9
  SupportedLDAPVersion:
    2
    3
  SupportedLDAPPolicies:
    InitRecvTimeout
    MaxBatchReturnMessages
    MaxConnIdleTime
    MaxConnections
    MaxDatagramRecv
    MaxDirSyncDuration
    MaxNotificationPerConn
    MaxPageSize
    MaxPercentDirSyncRequests
    MaxPoolThreads
    MaxQueryDuration
    MaxReceiveBuffer
    MaxResultSetSize
    MaxResultSetsPerConn
    MaxTempTableSize
    MaxValRange
    MaxValRangeTransitive
    MinResultSets
    SystemMemoryLimitPercent
    ThreadMemoryLimit
  HighestCommittedUSN: 392965
  SupportedSASLMechanisms:
    DIGEST-MD5
    EXTERNAL
    GSS-SPNEGO
    GSSAPI
  DnsHostName: frw16.frw16.esapl.pt
  LdapServiceName: frw16.esapl.pt:frw16$@FRW16.ESAPL.PT
  ServerName: CN=FRW16,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=frw16,DC=esapl,DC=pt
  SupportedCapabilities:
    1.2.840.113556.1.4.1670
    1.2.840.113556.1.4.1791
    1.2.840.113556.1.4.1935
    1.2.840.113556.1.4.2080
    1.2.840.113556.1.4.2237
    1.2.840.113556.1.4.800
  IsSynchronized: TRUE
  IsGlobalCatalogReady: TRUE
  SupportedExtension:
    1.2.840.113556.1.4.1781
    1.2.840.113556.1.4.2212
    1.3.6.1.4.1.1466.101.119.1
    1.3.6.1.4.1.1466.20037
    1.3.6.1.4.1.4203.1.11.3
  DomainFunctionality: 7
  ForestFunctionality: 7

389 / udp

-932092565 | 2025-01-31T06:01:31.707565

0\x84\x00\x00\x0b\xa0\x02\x01\x07d\x84\x00\x00\x0b\x97\x04\x000\x84\x00\x00\x0b\x8f0\x84\x00\x00\x00&\x04\x0bcurrentTime1\x84\x00\x00\x00\x13\x04\x1120250131060055.0Z0\x84\x00\x00\x00Z\x04\x11subschemaSubentry1\x84\x00\x00\x00A\x04?CN=Aggregate,CN=Schema,CN=Configuration,DC=frw16,DC=esapl,DC=pt0\x84\x00\x00\x00\x88\x04\rdsServiceName1\x84\x00\x00\x00s\x04qCN=NTDS Settings,CN=FRW16,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=frw16,DC=esapl,DC=pt0\x84\x00\x00\x00\xe3\x04\x0enamingContexts1\x84\x00\x00\x00\xcd\x04\x17DC=frw16,DC=esapl,DC=pt\x04(CN=Configuration,DC=frw16,DC=esapl,DC=pt\x042CN=Schema,CN=Configuration,DC=frw16,DC=esapl,DC=pt\x04)DC=DomainDnsZones,DC=frw16,DC=esapl,DC=pt\x04)DC=ForestDnsZones,DC=frw16,DC=esapl,DC=pt0\x84\x00\x00\x005\x04\x14defaultNamingContext1\x84\x00\x00\x00\x19\x04\x17DC=frw16,DC=esapl,DC=pt0\x84\x00\x00\x00O\x04\x13schemaNamingContext1\x84\x00\x00\x004\x042CN=Schema,CN=Configuration,DC=frw16,DC=esapl,DC=pt0\x84\x00\x00\x00L\x04\x1aconfigurationNamingContext1\x84\x00\x00\x00*\x04(CN=Configuration,DC=frw16,DC=esapl,DC=pt0\x84\x00\x00\x008\x04\x17rootDomainNamingContext1\x84\x00\x00\x00\x19\x04\x17DC=frw16,DC=esapl,DC=pt0\x84\x00\x00\x03\xc2\x04\x10supportedControl1\x84\x00\x00\x03\xaa\x04\x161.2.840.113556.1.4.319\x04\x161.2.840.113556.1.4.801\x04\x161.2.840.113556.1.4.473\x04\x161.2.840.113556.1.4.528\x04\x161.2.840.113556.1.4.417\x04\x161.2.840.113556.1.4.619\x04\x161.2.840.113556.1.4.841\x04\x161.2.840.113556.1.4.529\x04\x161.2.840.113556.1.4.805\x04\x161.2.840.113556.1.4.521\x04\x161.2.840.113556.1.4.970\x04\x171.2.840.113556.1.4.1338\x04\x161.2.840.113556.1.4.474\x04\x171.2.840.113556.1.4.1339\x04\x171.2.840.113556.1.4.1340\x04\x171.2.840.113556.1.4.1413\x04\x172.16.840.1.113730.3.4.9\x04\x182.16.840.1.113730.3.4.10\x04\x171.2.840.113556.1.4.1504\x04\x171.2.840.113556.1.4.1852\x04\x161.2.840.113556.1.4.802\x04\x171.2.840.113556.1.4.1907\x04\x171.2.840.113556.1.4.1948\x04\x171.2.840.113556.1.4.1974\x04\x171.2.840.113556.1.4.1341\x04\x171@\x06\x00\x00;g\x9cg\x1b\xf0\t\x1c\xea\x05\x00\x00\xea\x05\x00\x00\x01\x00\x00 V\x00d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x08\x00\x02\x00\x00\x00\x01\x00\x00\x06|\xfe\x90\xcd\x87\xdcc\x1aG\x06\x87\x83\x11Q[\x181\xdcX\x06\x92P\xf2\xab`\x12\x00%\x90\xd6c\xce|\xfe\x90\xcd\x87\xdc\x08\x00E\x00\x05\xdc`\xb7 \xb9q\x11\xf1G\xc1\x89AFG\x06\x87\x83.2.840.113556.1.4.2026\x04\x171.2.840.113556.1.4.2064\x04\x171.2.840.113556.1.4.2065\x04\x171.2.840.113556.1.4.2066\x04\x171.2.840.113556.1.4.2090\x04\x171.2.840.113556.1.4.2205\x04\x171.2.840.113556.1.4.2204\x04\x171.2.840.113556.1.4.2206\x04\x171.2.840.113556.1.4.2211\x04\x171.2.840.113556.1.4.2239\x04\x171.2.840.113556.1.4.2255\x04\x171.2.840.113556.1.4.2256\x04\x171.2.840.113556.1.4.23090\x84\x00\x00\x00"\x04\x14supportedLDAPVersion1\x84\x00\x00\x00\x06\x04\x013\x04\x0120\x84\x00\x00\x01\x9a\x04\x15supportedLDAPPolicies1\x84\x00\x00\x01}\x04\x0eMaxPoolThreads\x04\x19MaxPercentDirSyncRequests\x04\x0fMaxDatagramRecv\x04\x10MaxReceiveBuffer\x04\x0fInitRecvTimeout\x04\x0eMaxConnections\x04\x0fMaxConnIdleTime\x04\x0bMaxPageSize\x04\x16MaxBatchReturnMessages\x04\x10MaxQueryDuration\x04\x12MaxDirSyncDuration\x04\x10MaxTempTableSize\x04\x10MaxResultSetSize\x04\rMinResultSets\x04\x14MaxResultSetsPerConn\x04\x16MaxNotificationPerConn\x04\x0bMaxValRange\x04\x15MaxValRangeTransitive\x04\x11ThreadMemoryLimit\x04\x18SystemMemoryLimitPercent0\x84\x00\x00\x00#\x04\x13highestCommittedUSN1\x84\x00\x00\x00\x08\x04\x063914050\x84\x00\x00\x00I\x04\x17supportedSASLMechanisms1\x84\x00\x00\x00*\x04\x06GSSAPI\x04\nGSS-SPNEGO\x04\x08EXTERNAL\x04\nDIGEST-MD50\x84\x00\x00\x00)\x04\x0bdnsHostName1\x84\x00\x00\x00\x16\x04\x14frw16.frw16.esapl.pt0\x84\x00\x00\x00=\x04\x0fldapServiceName1\x84\x00\x00\x00&\x04$frw16.esapl.pt:frw16$@FRW16.ESAPL.PT0\x84\x00\x00\x00t\x04\nserverName1\x84\x00\x00\x00b\x04`CN=FRW16,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=frw16,DC=esapl,DC=pt0\x84\x00\x00\x00\xb2\x04\x15supportedCapabilities1\x84\x00\x00\x00\x95\x04\x161.2.840.113556.1.4.800\x04\x171.2.840.113556.1.4.1670\x04\x171.2.840.113556.1.4.1791\x04\x171.2.840.113556.1.4.1935\x04\x171.2.840.113556.1.4.2080\x04\x171.2.840.113556.1.4.22370\x84\x00\x00\x00\x1c\x04\x0eisSynchronized1\x84\x00\x00\x00\x06\x04\x04TRUE0\x84\x00\x00\x00"\x04\x14isGlobalCatalogReady1\x84\x00\x00\x00\x06\x04\x04TRUE0\x84\x00\x00\x00\x1e\x04\x13domainFuncti

445 / tcp

2031512078 | 2025-02-07T10:25:47.298835

SMB Status:
  Authentication: enabled
  SMB Version: 1
  OS: Windows Server 2016 Datacenter 14393
  Software: Windows Server 2016 Datacenter 6.3
  Capabilities: dfs, extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode

593 / tcp

-2024107383 | 2025-02-10T07:16:53.395047

ncacn_http/1.0

Microsoft RPC Endpoint Mapper over HTTP

d95afe70-a6d5-4259-822e-2c84da1ddb0d
  version: v1.0
  protocol: [MS-RSP]: Remote Shutdown Protocol
  provider: wininit.exe
  ncacn_ip_tcp: 193.137.65.70:49664
  ncalrpc: WindowsShutdown
  ncacn_np: \\FRW16\PIPE\InitShutdown
  ncalrpc: WMsgKRpc087F60

76f226c3-ec14-4325-8a99-6a46348418af
  version: v1.0
  provider: winlogon.exe
  ncalrpc: WindowsShutdown
  ncacn_np: \\FRW16\PIPE\InitShutdown
  ncalrpc: WMsgKRpc087F60
  ncalrpc: WMsgKRpc089821

9b008953-f195-4bf9-bde0-4471971e58ed
  version: v1.0
  ncalrpc: LRPC-70b757bb7d0cea8c98
  ncalrpc: dabrpc
  ncalrpc: csebpub
  ncalrpc: LRPC-7174ba6db7e4e01032
  ncalrpc: LRPC-ff9e03fb22be41a436
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

d09bdeb5-6171-4a34-bfe2-06fa82652568
  version: v1.0
  ncalrpc: csebpub
  ncalrpc: LRPC-7174ba6db7e4e01032
  ncalrpc: LRPC-ff9e03fb22be41a436
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-ff9e03fb22be41a436
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: LRPC-9fc090281e10329b8d
  ncacn_ip_tcp: 193.137.65.70:49665
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8
  ncalrpc: LRPC-6af3854fb41f435c88

697dcda9-3ba9-4eb2-9247-e11f1901b0d2
  version: v1.0
  ncalrpc: LRPC-7174ba6db7e4e01032
  ncalrpc: LRPC-ff9e03fb22be41a436
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

857fb1be-084f-4fb5-b59c-4b2c4be5f0cf
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

b8cadbaf-e84b-46b9-84f2-6f71c03f9e55
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

20c40295-8dba-48e6-aebf-3e78ef3bb144
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

2513bcbe-6cd4-4348-855e-7efb3c336dd3
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

88abcbc3-34ea-76ae-8215-767520655a23
  version: v0.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

76c217bc-c8b4-4201-a745-373ad9032b1a
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

55e6b932-1979-45d6-90c5-7f6270724112
  version: v1.0
  ncalrpc: LRPC-294317d45de0ab4557
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

4dace966-a243-4450-ae3f-9b7bcb5315b8
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

1832bcf6-cab8-41d4-85d2-c9410764f75a
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

c521facf-09a9-42c5-b155-72388595cbf0
  version: v0.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

2c7fd9ce-e706-4b40-b412-953107ef9bb0
  version: v0.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

2d98a740-581d-41b9-aa0d-a88b9d5ce938
  version: v1.0
  ncacn_np: \\FRW16\pipe\LSM_API_service
  ncalrpc: LSMApi
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo

c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
  version: v1.0
  annotation: Impl friendly name
  provider: sysntfy.dll
  ncalrpc: LRPC-b5a0ea82fa319bd5d8
  ncalrpc: actkernel
  ncalrpc: umpo
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B
  ncacn_np: \\FRW16\pipe\lsass
  ncalrpc: audit
  ncalrpc: securityevent
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsapolicylookup
  ncalrpc: lsasspirpc
  ncalrpc: protected_storage
  ncalrpc: SidKey Local End Point
  ncalrpc: samss lpc
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C

5824833b-3c1a-4ad2-bdfd-c31d19e23ed2
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

3b338d89-6cfa-44b8-847e-531531bc9992
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

8782d3b9-ebbd-4644-a3d8-e8725381919b
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

085b0334-e454-4d91-9b8c-4134f9e793f3
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
  version: v1.0
  ncalrpc: actkernel
  ncalrpc: umpo

f3f09ffd-fbcf-4291-944d-70ad6e0e73bb
  version: v1.0
  ncalrpc: LRPC-4d9ebbe0d84d17b288

3473dd4d-2e88-4006-9cba-22570909dd10
  version: v5.256
  annotation: WinHttp Auto-Proxy Service
  ncalrpc: OLE824A0A94A03F816EA071EEAB5963
  ncalrpc: LRPC-f24419160f92ba600a

7ea70bcf-48af-4f6a-8968-6a440754d5fa
  version: v1.0
  annotation: NSI server endpoint
  provider: nsisvc.dll
  ncalrpc: LRPC-f24419160f92ba600a

a500d4c6-0dd1-4543-bc0c-d5f93486eaf8
  version: v1.0
  ncalrpc: LRPC-97106d6073dbef195d
  ncalrpc: LRPC-9fc090281e10329b8d
  ncacn_ip_tcp: 193.137.65.70:49665
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8

f6beaff7-1e19-4fbb-9f8f-b89e2018337c
  version: v1.0
  annotation: Event log TCPIP
  protocol: [MS-EVEN6]: EventLog Remoting Protocol
  provider: wevtsvc.dll
  ncacn_ip_tcp: 193.137.65.70:49665
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
  version: v1.0
  annotation: DHCPv6 Client LRPC Endpoint
  provider: dhcpcsvc6.dll
  ncalrpc: dhcpcsvc6
  ncacn_np: \\FRW16\pipe\eventlog
  ncalrpc: eventlog
  ncalrpc: LRPC-2eddda798a5bcddcf8

30adc50c-5cbc-46ce-9a0e-91914789e23c
  version: v1.0
  annotation: NRP server endpoint
  provider: nrpsrv.dll
  ncalrpc: LRPC-2eddda798a5bcddcf8

bf4dc912-e52f-4904-8ebe-9317c1bdd497
  version: v1.0
  ncalrpc: LRPC-8f3c0f947a9d8ce292
  ncalrpc: LRPC-bba5bb506f8e0ead62
  ncalrpc: OLE0124B86C6CAA51B1677D35A19F69
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

0767a036-0d22-48aa-ba69-b619480f38cb
  version: v1.0
  annotation: PcaSvc
  provider: pcasvc.dll
  ncalrpc: LRPC-bba5bb506f8e0ead62
  ncalrpc: OLE0124B86C6CAA51B1677D35A19F69
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

e40f7b57-7a25-4cd3-a135-7f7d3df9d16b
  version: v1.0
  annotation: Network Connection Broker server endpoint
  ncalrpc: LRPC-bba5bb506f8e0ead62
  ncalrpc: OLE0124B86C6CAA51B1677D35A19F69
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

880fd55e-43b9-11e0-b1a8-cf4edfd72085
  version: v1.0
  annotation: KAPI Service endpoint
  ncalrpc: LRPC-bba5bb506f8e0ead62
  ncalrpc: OLE0124B86C6CAA51B1677D35A19F69
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

5222821f-d5e2-4885-84f1-5f6185a0ec41
  version: v1.0
  annotation: Network Connection Broker server endpoint for NCB Reset module
  ncalrpc: LRPC-b4f2b3ad59e8d43101
  ncalrpc: LRPC-6af3854fb41f435c88

2fb92682-6599-42dc-ae13-bd2ca89bd11c
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-b51c3aab29c0373a66
  ncalrpc: LRPC-2197b77bdefd58e44b
  ncalrpc: LRPC-24a934547e06433135

f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
  version: v1.0
  annotation: Fw APIs
  ncalrpc: LRPC-b51c3aab29c0373a66
  ncalrpc: LRPC-2197b77bdefd58e44b
  ncalrpc: LRPC-24a934547e06433135

7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-b51c3aab29c0373a66
  ncalrpc: LRPC-2197b77bdefd58e44b
  ncalrpc: LRPC-24a934547e06433135

dd490425-5325-4565-b774-7e27d6c09c24
  version: v1.0
  annotation: Base Firewall Engine API
  provider: BFE.DLL
  ncalrpc: LRPC-2197b77bdefd58e44b
  ncalrpc: LRPC-24a934547e06433135

df4df73a-c52d-4e3a-8003-8437fdf8302a
  version: v0.0
  annotation: WM_WindowManagerRPC\Server
  ncalrpc: LRPC-24a934547e06433135

650a7e26-eab8-5533-ce43-9c1dfce11511
  version: v1.0
  annotation: Vpn APIs
  ncalrpc: LRPC-0bc5869be33a04f5e7
  ncalrpc: VpnikeRpc
  ncalrpc: RasmanLrpc
  ncacn_np: \\FRW16\PIPE\ROUTER
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

a398e520-d59a-4bdd-aa7a-3c1e0303a511
  version: v1.0
  annotation: IKE/Authip API
  provider: IKEEXT.DLL
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
  version: v1.0
  annotation: Adh APIs
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

c36be077-e14b-4fe9-8abc-e856ef4f048b
  version: v1.0
  annotation: Proxy Manager client server endpoint
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

2e6035b2-e8f1-41a7-a044-656b439c4c34
  version: v1.0
  annotation: Proxy Manager provider server endpoint
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

552d076a-cb29-4e44-8b6a-d15e59e2c0af
  version: v1.0
  annotation: IP Transition Configuration endpoint
  provider: iphlpsvc.dll
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

0d3c7f20-1c8d-4654-a1b3-51563b298bda
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

b18fbab6-56f8-4702-84e0-41053293a869
  version: v1.0
  annotation: UserMgrCli
  ncalrpc: LRPC-48f53c20ad354f29cc
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

3a9ef155-691d-4449-8d05-09ad57031823
  version: v1.0
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

86d35949-83c9-4044-b424-db363231fd0c
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: schedsvc.dll
  ncacn_ip_tcp: 193.137.65.70:49666
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

33d84484-3626-47ee-8c6f-e7e98b113be1
  version: v2.0
  ncalrpc: LRPC-3c8c3d895ec2fcfb18
  ncalrpc: ubpmtaskhostchannel
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\FRW16\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: DeviceSetupManager
  ncalrpc: OLE2F3D6D5032EBD23A19E34CD4BC5B

2eb08e3e-639f-4fba-97b1-14f878961076
  version: v1.0
  annotation: Group Policy RPC Interface
  provider: gpsvc.dll
  ncalrpc: LRPC-65921284bb8d02e0b7

7aeb6705-3ae6-471a-882d-f39c109edc12
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

e7f76134-9ef5-4949-a2d6-3368cc0988f3
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

b3781086-6a54-489b-91c8-51d067172ab7
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

b37f900a-eae4-4304-a2ab-12bb668c0188
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
  version: v1.0
  ncalrpc: LRPC-da44a4ac47b875bce5

7f1343fe-50a9-4927-a778-0c5859517bac
  version: v1.0
  annotation: DfsDs service
  ncacn_np: \\FRW16\PIPE\wkssvc
  ncalrpc: nlaapi
  ncalrpc: DNSResolver
  ncalrpc: nlaplg

eb081a0d-10ee-478a-a1dd-50995283e7a8
  version: v3.0
  annotation: Witness Client Test Interface
  ncalrpc: nlaapi
  ncalrpc: DNSResolver
  ncalrpc: nlaplg

f2c9b409-c1c9-4100-8639-d8ab1486694a
  version: v1.0
  annotation: Witness Client Upcall Server
  ncalrpc: nlaapi
  ncalrpc: DNSResolver
  ncalrpc: nlaplg

51a227ae-825b-41f2-b4a9-1ac9557a1018
  version: v1.0
  annotation: Ngc Pop Key Service
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

8fb74744-b2ff-4c00-be0d-9ef9a191fe1b
  version: v1.0
  annotation: Ngc Pop Key Service
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
  version: v2.0
  annotation: KeyIso
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

12345678-1234-abcd-ef00-01234567cffb
  version: v1.0
  protocol: [MS-NRPC]: Netlogon Remote Protocol
  provider: netlogon.dll
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7
  version: v0.0
  annotation: RemoteAccessCheck
  protocol: [MS-RAA]: Remote Authorization API Protocol
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass
  ncalrpc: NETLOGON_LRPC
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

12345778-1234-abcd-ef00-0123456789ab
  version: v0.0
  protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
  provider: lsasrv.dll
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_tcp: 193.137.65.70:49671
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\FRW16\pipe\lsass

e3514235-4b06-11d1-ab04-00c04fc2dcd2
  version: v4.0
  annotation: MS NT Directory DRS Interface
  protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
  provider: ntdsai.dll
  ncacn_np: \\FRW16\pipe\c3cb2dbdcee45fd2
  ncacn_ip_http: 193.137.65.70:49670
  ncalrpc: NTDS_LPC
  ncalrpc: OLEE59DD2CECCF33E69378E61B3475C
  ncacn_ip_tcp: 193.137.65.70:49667
  ncalrpc: samss lpc
  ncalrpc: SidKey Local End Point
  ncacn_np: \\FRW16\pipe\lsass
  ncalrpc: audit
  ncalrpc: securityevent
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: lsacap
  ncalrpc: LSA_EAS_ENDPOINT
  ncalrpc: lsapolicylookup
  ncalrpc: lsasspirpc
  ncalrpc: protected_storage

c503f532-443a-4c69-8300-ccd1fbdb3839
  version: v2.0
  ncalrpc: OLEDCD8E1C49AAF812F67322A2A28CA
  ncalrpc: LRPC-f2b1955abd62fb0c92

6bffd098-a112-3610-9833-46c3f874532d
  version: v1.0
  protocol: [MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP)
  provider: dhcpssvc.dll
  ncalrpc: OLE77C1FBD6120610144BD7BC52BB43
  ncacn_ip_tcp: 193.137.65.70:52183

5b821720-f63b-11d0-aad2-00c04fc324db
  version: v1.0
  protocol: [MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP)
  provider: dhcpssvc.dll
  ncalrpc: OLE77C1FBD6120610144BD7BC52BB43
  ncacn_ip_tcp: 193.137.65.70:52183

897e2e5f-93f3-4376-9c9c-fd2277495c27
  version: v1.0
  annotation: Frs2 Service
  protocol: [MS-FRS2]: Distributed File System Replication Protocol
  provider: dfsrmig.exe
  ncalrpc: OLEAB746511B3C3305549B290859B17
  ncacn_ip_tcp: 193.137.65.70:52176

906b0ce0-c70b-1067-b317-00dd010662da
  version: v1.0
  protocol: [MS-CMPO]: MSDTC Connection Manager:
  provider: msdtcprx.dll
  ncalrpc: LRPC-2b88b5489460acfce8
  ncalrpc: LRPC-2b88b5489460acfce8
  ncalrpc: LRPC-2b88b5489460acfce8
  ncalrpc: OLE12346A088FED3F4EB88E1D0F49BA
  ncalrpc: LRPC-2c2cfd100b7e57acad

367abb81-9844-35f1-ad32-98f038001003
  version: v2.0
  protocol: [MS-SCMR]: Service Control Manager Remote Protocol
  provider: services.exe
  ncacn_ip_tcp: 193.137.65.70:49722

50abc2a4-574d-40b3-9d66-ee4fd5fba076
  version: v5.0
  protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
  provider: dns.exe
  ncacn_ip_tcp: 193.137.65.70:49712

4c9dbf19-d39e-4bb9-90ee-8f7179b20283
  version: v1.0
  ncalrpc: LRPC-f1d0ce2458ff9f3efc

e38f5360-8572-473e-b696-1b46873beeab
  version: v1.0
  ncalrpc: LRPC-f1d0ce2458ff9f3efc

12345678-1234-abcd-ef00-0123456789ab
  version: v1.0
  protocol: [MS-RPRN]: Print System Remote Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

ae33069b-a2a8-46ee-a235-ddfd339be281
  version: v1.0
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

4a452661-8290-4b36-8fbe-7f4093a94978
  version: v1.0
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

76f03f96-cdfd-44fc-a22c-64950a001209
  version: v1.0
  protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-91c2a4a6dce2c76d43
  ncacn_ip_tcp: 193.137.65.70:49703

98716d03-89ac-44c7-bb8c-285824e51c4a
  version: v1.0
  annotation: XactSrv service
  provider: srvsvc.dll
  ncalrpc: LRPC-91d93ac66527e29111

1a0d010f-1c33-432c-b0f5-8cf4e8053099
  version: v1.0
  annotation: IdSegSrv service
  ncalrpc: LRPC-91d93ac66527e29111

1723 / tcp

941448006 | 2025-01-25T14:18:01.010937

PPTP:
  Firmware: 0
  Hostname: 
  Vendor: Microsoft

3268 / tcp

-1852674425 | 2025-02-06T18:02:03.246229

LDAP:
  CurrentTime: 20250206180118.0Z
  SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=frw16,DC=esapl,DC=pt
  DsServiceName: CN=NTDS Settings,CN=FRW16,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=frw16,DC=esapl,DC=pt
  NamingContexts:
    CN=Configuration,DC=frw16,DC=esapl,DC=pt
    CN=Schema,CN=Configuration,DC=frw16,DC=esapl,DC=pt
    DC=DomainDnsZones,DC=frw16,DC=esapl,DC=pt
    DC=ForestDnsZones,DC=frw16,DC=esapl,DC=pt
    DC=frw16,DC=esapl,DC=pt
  DefaultNamingContext: DC=frw16,DC=esapl,DC=pt
  SchemaNamingContext: CN=Schema,CN=Configuration,DC=frw16,DC=esapl,DC=pt
  ConfigurationNamingContext: CN=Configuration,DC=frw16,DC=esapl,DC=pt
  RootDomainNamingContext: DC=frw16,DC=esapl,DC=pt
  SupportedControl:
    1.2.840.113556.1.4.1338
    1.2.840.113556.1.4.1339
    1.2.840.113556.1.4.1340
    1.2.840.113556.1.4.1341
    1.2.840.113556.1.4.1413
    1.2.840.113556.1.4.1504
    1.2.840.113556.1.4.1852
    1.2.840.113556.1.4.1907
    1.2.840.113556.1.4.1948
    1.2.840.113556.1.4.1974
    1.2.840.113556.1.4.2026
    1.2.840.113556.1.4.2064
    1.2.840.113556.1.4.2065
    1.2.840.113556.1.4.2066
    1.2.840.113556.1.4.2090
    1.2.840.113556.1.4.2204
    1.2.840.113556.1.4.2205
    1.2.840.113556.1.4.2206
    1.2.840.113556.1.4.2211
    1.2.840.113556.1.4.2239
    1.2.840.113556.1.4.2255
    1.2.840.113556.1.4.2256
    1.2.840.113556.1.4.2309
    1.2.840.113556.1.4.319
    1.2.840.113556.1.4.417
    1.2.840.113556.1.4.473
    1.2.840.113556.1.4.474
    1.2.840.113556.1.4.521
    1.2.840.113556.1.4.528
    1.2.840.113556.1.4.529
    1.2.840.113556.1.4.619
    1.2.840.113556.1.4.801
    1.2.840.113556.1.4.802
    1.2.840.113556.1.4.805
    1.2.840.113556.1.4.841
    1.2.840.113556.1.4.970
    2.16.840.1.113730.3.4.10
    2.16.840.1.113730.3.4.9
  SupportedLDAPVersion:
    2
    3
  SupportedLDAPPolicies:
    InitRecvTimeout
    MaxBatchReturnMessages
    MaxConnIdleTime
    MaxConnections
    MaxDatagramRecv
    MaxDirSyncDuration
    MaxNotificationPerConn
    MaxPageSize
    MaxPercentDirSyncRequests
    MaxPoolThreads
    MaxQueryDuration
    MaxReceiveBuffer
    MaxResultSetSize
    MaxResultSetsPerConn
    MaxTempTableSize
    MaxValRange
    MaxValRangeTransitive
    MinResultSets
    SystemMemoryLimitPercent
    ThreadMemoryLimit
  HighestCommittedUSN: 392898
  SupportedSASLMechanisms:
    DIGEST-MD5
    EXTERNAL
    GSS-SPNEGO
    GSSAPI
  DnsHostName: frw16.frw16.esapl.pt
  LdapServiceName: frw16.esapl.pt:frw16$@FRW16.ESAPL.PT
  ServerName: CN=FRW16,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=frw16,DC=esapl,DC=pt
  SupportedCapabilities:
    1.2.840.113556.1.4.1670
    1.2.840.113556.1.4.1791
    1.2.840.113556.1.4.1935
    1.2.840.113556.1.4.2080
    1.2.840.113556.1.4.2237
    1.2.840.113556.1.4.800
  IsSynchronized: TRUE
  IsGlobalCatalogReady: TRUE
  SupportedExtension:
    1.2.840.113556.1.4.1781
    1.2.840.113556.1.4.2212
    1.3.6.1.4.1.1466.101.119.1
    1.3.6.1.4.1.1466.20037
    1.3.6.1.4.1.4203.1.11.3
  DomainFunctionality: 7
  ForestFunctionality: 7

5985 / tcp

1489525118 | 2025-02-04T06:56:26.827730

Hashes

hash

1957076018

http.dom_hash

1386055181

http.html_hash

1489525118

http.server_hash

-761617706

http.title_hash

1009235027

Not Found

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 04 Feb 2025 06:55:47 GMT
Connection: close
Content-Length: 315


WinRM NTLM Info:
  OS: Windows Server 2016 (version 1607)
  OS Build: 10.0.14393
  Target Name: FRW_16
  NetBIOS Domain Name: FRW_16
  NetBIOS Computer Name: FRW16
  DNS Domain Name: frw16.esapl.pt
  DNS Tree Name: frw16.esapl.pt
  FQDN: frw16.frw16.esapl.pt

193.137.65.70

Last Seen: 2025-02-10

Tags:

GeneralInformation

OpenPorts

80 / tcp

703707298 | 2025-02-10T00:07:53.579491

Hashes

Microsoft IIS httpd10.0

88 / udp

1628422664 | 2025-02-09T21:00:19.446429

Windows 2003 Kerberos

123 / udp

-471737553 | 2025-02-08T12:00:46.416933

135 / tcp

720377297 | 2025-01-20T18:59:12.675088

Microsoft RPC Endpoint Mapper

389 / tcp

-129350627 | 2025-02-07T10:16:43.830614

389 / udp

-932092565 | 2025-01-31T06:01:31.707565

445 / tcp

2031512078 | 2025-02-07T10:25:47.298835

593 / tcp

-2024107383 | 2025-02-10T07:16:53.395047

Microsoft RPC Endpoint Mapper over HTTP

1723 / tcp

941448006 | 2025-01-25T14:18:01.010937

PPTP

3268 / tcp

-1852674425 | 2025-02-06T18:02:03.246229

5985 / tcp

1489525118 | 2025-02-04T06:56:26.827730

Hashes

WinRM

Products

Pricing

Contact Us

193.137.65.70

Last Seen: 2025-02-10

Tags:

GeneralInformation

OpenPorts

80 / tcp 703707298 | 2025-02-10T00:07:53.579491

Hashes

Microsoft IIS httpd10.0

88 / udp 1628422664 | 2025-02-09T21:00:19.446429

Windows 2003 Kerberos

123 / udp -471737553 | 2025-02-08T12:00:46.416933

135 / tcp 720377297 | 2025-01-20T18:59:12.675088

Microsoft RPC Endpoint Mapper

389 / tcp -129350627 | 2025-02-07T10:16:43.830614

389 / udp -932092565 | 2025-01-31T06:01:31.707565

445 / tcp 2031512078 | 2025-02-07T10:25:47.298835

593 / tcp -2024107383 | 2025-02-10T07:16:53.395047

Microsoft RPC Endpoint Mapper over HTTP

1723 / tcp 941448006 | 2025-01-25T14:18:01.010937

PPTP

3268 / tcp -1852674425 | 2025-02-06T18:02:03.246229

5985 / tcp 1489525118 | 2025-02-04T06:56:26.827730

Hashes

WinRM

Products

Pricing

Contact Us

80 / tcp

703707298 | 2025-02-10T00:07:53.579491

88 / udp

1628422664 | 2025-02-09T21:00:19.446429

123 / udp

-471737553 | 2025-02-08T12:00:46.416933

135 / tcp

720377297 | 2025-01-20T18:59:12.675088

389 / tcp

-129350627 | 2025-02-07T10:16:43.830614

389 / udp

-932092565 | 2025-01-31T06:01:31.707565

445 / tcp

2031512078 | 2025-02-07T10:25:47.298835

593 / tcp

-2024107383 | 2025-02-10T07:16:53.395047

1723 / tcp

941448006 | 2025-01-25T14:18:01.010937

3268 / tcp

-1852674425 | 2025-02-06T18:02:03.246229

5985 / tcp

1489525118 | 2025-02-04T06:56:26.827730