25 /
tcp
154011098 | 2025-03-25T06:17:22.149754
220 ns13.netcfm.com (IMail 8.22 969288-2) NT-ESMTP Server X1
250-ns13.netcfm.com says hello
250-SIZE 0
250-8BITMIME
250-DSN
250-ETRN
250-AUTH LOGIN CRAM-MD5
250-AUTH LOGIN
250-AUTH=LOGIN
250 EXPN
110 /
tcp
2062673556 | 2025-03-18T15:52:28.404039
+OK X1 NT-POP3 Server <4764.1742313153315@ns13.netcfm.com> (IMail 8.22 6116-1)
+OK Capability list follows
TOP
USER
SASL LOGIN PLAIN CRAM-MD5
RESP-CODES
LOGIN-DELAY 120
PIPELINING
EXPIRE 30 USER
UIDL
IMPLEMENTATION Ipswitch_IMail_8.20
.
135 /
tcp
245861287 | 2025-03-23T15:18:12.188085
Microsoft RPC Endpoint Mapper
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: DNSResolver
d674a233-5829-49dd-90f0-60cf9ceb7129
version: v1.0
annotation: ICF+ FW API
provider: ipnathlp.dll
ncalrpc: trkwks
ncacn_np: \\NS13\pipe\trkwks
ncalrpc: senssvc
ncalrpc: SECLOGON
ncacn_np: \\NS13\PIPE\srvsvc
ncalrpc: keysvc
ncacn_np: \\NS13\pipe\keysvc
ncacn_np: \\NS13\PIPE\wkssvc
ncacn_np: \\NS13\PIPE\atsvc
ncalrpc: LRPC000003a4.00000001
ncalrpc: OLE01EA234A668B47B39CDD38D4914A
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncacn_np: \\NS13\PIPE\atsvc
ncalrpc: LRPC000003a4.00000001
ncalrpc: OLE01EA234A668B47B39CDD38D4914A
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\NS13\PIPE\atsvc
ncalrpc: LRPC000003a4.00000001
ncalrpc: OLE01EA234A668B47B39CDD38D4914A
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\NS13\PIPE\atsvc
ncalrpc: LRPC000003a4.00000001
ncalrpc: OLE01EA234A668B47B39CDD38D4914A
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncacn_ip_tcp: 23.239.110.244:1025
ncalrpc: LRPC00000410.00000001
ncacn_ip_tcp: 23.239.110.244:1025
ncalrpc: LRPC00000410.00000001
ncacn_ip_tcp: 23.239.110.244:1025
ncalrpc: LRPC00000410.00000001
ncacn_ip_tcp: 23.239.110.244:1025
ncalrpc: LRPC00000410.00000001
ncalrpc: LRPC00001794.00000001
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 23.239.110.244:1026
ncalrpc: dsrole
ncacn_np: \\NS13\PIPE\protected_storage
ncalrpc: protected_storage
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\NS13\PIPE\lsass
50abc2a4-574d-40b3-9d66-ee4fd5fba076
version: v5.0
protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
provider: dns.exe
ncacn_ip_tcp: 23.239.110.244:1039
2f5f6521-cb55-1059-b446-00df0bce31db
version: v1.0
annotation: Unimodem LRPC Endpoint
ncalrpc: unimdmsvc
ncalrpc: tapsrvlpc
ncacn_np: \\NS13\pipe\tapsrv
143 /
tcp
-481332745 | 2025-03-20T09:34:36.806927
* OK IMAP4 Server (IMail 8.22)
* CAPABILITY IMAP4 IMAP4rev1 UIDPLUS AUTH=CRAM-MD5 AUTH=PLAIN AUTH=LOGIN
A001 OK CAPABILITY completed
A002 BAD ID Unknown Command
A003 BAD UNKNOWNCMD Unknown Command
* BYE IMAP4 Server logging out
A004 OK LOGOUT completed
465 /
tcp
-1945100136 | 2025-03-05T09:01:00.574123
220 ns13.netcfm.com (IMail 8.22 348541-1) NT-ESMTP Server X1
250-ns13.netcfm.com says hello
250-SIZE 0
250-8BITMIME
250-DSN
250-ETRN
250-AUTH LOGIN CRAM-MD5
250-AUTH LOGIN
250-AUTH=LOGIN
250 EXPN
SSL Certificate
Certificate:
Data:
Version: 1 (0x0)
Serial Number: 0 (0x0)
Signature Algorithm: md5WithRSAEncryption
Issuer: C=US, ST=MA, O=Ipswitch,Inc., L=Lexington, OU=Web/emailAddress=admin@ipswitch.com, CN=Ipswitch,Inc.
Validity
Not Before: Jul 27 07:54:18 1999 GMT
Not After : Jul 24 07:54:18 2009 GMT
Subject: C=US, ST=MA, O=Ipswitch,Inc., L=Lexington, OU=Web/emailAddress=admin@ipswitch.com, CN=Ipswitch,Inc.
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:9b:29:3a:6d:e1:5b:26:31:cc:a3:b1:44:b2:f5:
a2:6c:bb:f1:c4:ff:03:99:fb:9a:a4:2e:32:a4:6c:
94:93:7f:04:fa:2a:a5:aa:75:96:69:cc:37:07:de:
e9:8b:f9:82:e8:4c:7b:e3:6c:a3:4f:ca:0e:30:d4:
91:ce:92:a1:81:73:7b:cc:fb:01:f8:74:5e:88:b9:
c1:62:77:58:16:67:40:58:2f:22:60:c5:c1:8c:69:
68:89:74:48:88:d0:3d:68:5a:8d:23:33:70:64:fc:
f2:f3:91:61:e3:34:cc:a7:c0:36:57:ca:da:59:2c:
b2:ff:bd:0c:34:72:17:93:15
Exponent: 65537 (0x10001)
Signature Algorithm: md5WithRSAEncryption
Signature Value:
1b:aa:59:f9:85:24:27:11:17:3e:0d:b7:41:b5:68:64:7a:db:
10:3a:74:c0:b6:33:5e:6b:45:9b:b5:98:8b:4a:2e:4c:77:8a:
94:ef:e9:22:bb:00:46:41:40:a5:ca:84:5c:62:d0:d0:23:16:
13:c8:9a:86:cb:9d:c9:ac:1b:9b:ea:17:bc:29:f7:36:d2:0e:
45:65:14:30:cf:73:a1:2a:8c:01:2a:e5:ac:b4:46:8a:e5:ce:
57:e6:06:14:5d:c9:4b:38:b0:fe:9f:05:b9:d5:1d:ed:8d:70:
6c:cf:c0:02:12:b3:c8:33:46:70:86:61:00:65:a2:cd:2d:30:
56:01
1433 /
tcp
758073748 | 2025-03-13T13:59:08.218352
MS-SQL NTLM Info:
OS: Windows Server 2003
OS Build: 5.2.3790
3306 /
tcp
-358343244 | 2025-03-24T02:09:21.478558
>\x00\x00\x00\n5.1.60-community\x00\xa8\x05\x00\x00qB7+ope,\x00\xff\xf7\x08\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G_*SB0jGc=D|\x00
