GeneralInformation

Hostnames	37-157-165-165.ip.btc-net.bg
Domains	btc-net.bg
Country	Bulgaria
City	Sofia
Organization	Vivacom Bulgaria EAD
ISP	Vivacom Bulgaria EAD
ASN	AS8866

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

25 53 80 88 110 123 135 143 389 593 636 993 995 1027 1433 1434 3268 3269 3306 3389 6001 6002

1885634061 | 2024-11-01T19:29:55.456862

25 / tcp

220 data.scas.acad.bg Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at  Fri, 1 Nov 2024 21:29:49 +0200 
250-data.scas.acad.bg Hello [224.104.255.227]
250-TURN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50
250 OK

SMTP NTLM Info:
  OS: Windows Server 2003
  OS Build: 5.2.3790
  Target Name: SCAS
  NetBIOS Domain Name: SCAS
  NetBIOS Computer Name: SCAS1
  DNS Domain Name: scas.acad.bg
  DNS Tree Name: scas.acad.bg
  FQDN: scas1.scas.acad.bg

323073015 | 2024-10-31T20:40:11.924354

80 / tcp

You are not authorized to view this page

HTTP/1.1 401 Unauthorized
Content-Length: 1656
Content-Type: text/html
Server: Microsoft-IIS/6.0
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
WWW-Authenticate: Basic realm="37.157.165.165"
X-Powered-By: ASP.NET
Date: Thu, 31 Oct 2024 20:40:11 GMT


HTTP NTLM Info:
  OS: Windows Server 2003
  OS Build: 5.2.3790
  Target Name: SCAS
  NetBIOS Domain Name: SCAS
  NetBIOS Computer Name: SCAS1
  DNS Domain Name: scas.acad.bg
  DNS Tree Name: scas.acad.bg
  FQDN: scas1.scas.acad.bg

CVE-2008-1446 CVE-2009-1535 CVE-2009-4445 CVE-2009-4444 CVE-2009-2521 CVE-2005-2089

-2112605694 | 2024-11-06T07:29:08.646977

88 / udp

Microsoft Windows Kerberos
Server Time: 2024-11-06 07:29:08Z

1670113647 | 2024-11-05T17:19:33.396809

123 / udp

NTP
protocolversion: 3
stratum: 3
leap: 0
precision: -6
rootdelay: 0.0314483642578
rootdisp: 0.0512390136719
refid: 3002012474
reftime: 3939815164.7
poll: 0

-678361421 | 2024-11-08T07:27:53.291689

135 / tcp

Microsoft RPC Endpoint Mapper

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc
  ncalrpc: DNSResolver

12345678-1234-abcd-ef00-0123456789ab
  version: v1.0
  annotation: IPSec Policy agent endpoint
  protocol: [MS-RPRN]: Print System Remote Protocol
  provider: spoolsv.exe
  ncalrpc: OLED203C149777A4B40B36A658C211D
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

12345678-1234-abcd-ef00-01234567cffb
  version: v1.0
  protocol: [MS-NRPC]: Netlogon Remote Protocol
  provider: netlogon.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

12345778-1234-abcd-ef00-0123456789ab
  version: v0.0
  protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
  provider: lsasrv.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

16e0cf3a-a604-11d0-96b1-00a0c91ece30
  version: v2.0
  annotation: NTDS Restore Interface
  provider: ntdsbsrv.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

ecec0d70-a603-11d0-96b1-00a0c91ece30
  version: v2.0
  annotation: NTDS Backup Interface
  provider: ntdsbsrv.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

f5cc5a18-4264-101a-8c59-08002b2f8426
  version: v56.0
  annotation: MS NT Directory NSP Interface
  protocol: [MS-NSPI]: Name Service Provider Interface (NSPI) Protocol
  provider: ntdsai.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

e3514235-4b06-11d1-ab04-00c04fc2dcd2
  version: v4.0
  annotation: MS NT Directory DRS Interface
  protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
  provider: ntdsai.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

d674a233-5829-49dd-90f0-60cf9ceb7129
  version: v1.0
  annotation: ICF+ FW API
  provider: ipnathlp.dll
  ncalrpc: trkwks
  ncacn_np: \\SCAS1\pipe\trkwks
  ncalrpc: senssvc
  ncalrpc: SECLOGON
  ncalrpc: keysvc
  ncacn_np: \\SCAS1\pipe\keysvc
  ncacn_np: \\SCAS1\PIPE\srvsvc
  ncacn_np: \\SCAS1\PIPE\wkssvc
  ncalrpc: AudioSrv
  ncacn_np: \\SCAS1\PIPE\atsvc
  ncalrpc: OLE1A112EC2B3D149C0934511CCB4F2
  ncalrpc: wzcsvc

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncacn_np: \\SCAS1\PIPE\atsvc
  ncalrpc: OLE1A112EC2B3D149C0934511CCB4F2
  ncalrpc: wzcsvc

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SCAS1\PIPE\atsvc
  ncalrpc: OLE1A112EC2B3D149C0934511CCB4F2
  ncalrpc: wzcsvc

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SCAS1\PIPE\atsvc
  ncalrpc: OLE1A112EC2B3D149C0934511CCB4F2
  ncalrpc: wzcsvc

906b0ce0-c70b-1067-b317-00dd010662da
  version: v1.0
  protocol: [MS-CMPO]: MSDTC Connection Manager:
  provider: msdtcprx.dll
  ncalrpc: LRPC0000066c.00000001
  ncalrpc: LRPC0000066c.00000001
  ncalrpc: LRPC0000066c.00000001
  ncalrpc: LRPC0000066c.00000001
  ncalrpc: LRPC00000848.00000001

a00c021c-2be2-11d2-b678-0000f87a8f8e
  version: v1.0
  annotation: PERFMON SERVICE
  provider: ntfrs.exe
  ncalrpc: LRPC000008c8.00000001
  ncacn_ip_tcp: 37.157.165.165:1032
  ncalrpc: OLE84E0FBA2094A420088BC464C3F0D

d049b186-814f-11d1-9a3c-00c04fc9b232
  version: v1.256
  annotation: NtFrs API
  protocol: [MS-FRS1]: File Replication Service Protocol
  ncalrpc: LRPC000008c8.00000001
  ncacn_ip_tcp: 37.157.165.165:1032
  ncalrpc: OLE84E0FBA2094A420088BC464C3F0D

f5cc59b4-4264-101a-8c59-08002b2f8426
  version: v1.256
  annotation: NtFrs Service
  protocol: [MS-FRS1]: File Replication Service Protocol
  ncalrpc: LRPC000008c8.00000001
  ncacn_ip_tcp: 37.157.165.165:1032
  ncalrpc: OLE84E0FBA2094A420088BC464C3F0D

50abc2a4-574d-40b3-9d66-ee4fd5fba076
  version: v5.0
  protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
  provider: dns.exe
  ncacn_ip_tcp: 37.157.165.165:1066

76209fe5-9049-4336-ba84-632d907cb154
  version: v1.0
  annotation: Interprocess Logon Service
  ncalrpc: ReportingServices$MSSQL.3

1544f5e0-613c-11d1-93df-00c04fd7bd09
  version: v1.0
  annotation: MS Exchange Directory RFR Interface
  protocol: [MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol
  ncalrpc: OLE7FAC3795CD954409BC3DAE334F94
  ncacn_ip_http: 37.157.165.165:6002
  ncacn_ip_udp: 37.157.165.165:1120
  ncacn_ip_tcp: 37.157.165.165:1119
  ncalrpc: LRPC00000fcc.00000001
  ncacn_np: \\SCAS1\pipe\7F165BB19FCF8196

f930c514-1215-11d3-99a5-00a0c9b61b04
  version: v1.0
  annotation: MS Exchange System Attendant Cluster Interface
  ncacn_ip_http: 37.157.165.165:6002
  ncacn_ip_udp: 37.157.165.165:1120
  ncacn_ip_tcp: 37.157.165.165:1119
  ncalrpc: LRPC00000fcc.00000001
  ncacn_np: \\SCAS1\pipe\7F165BB19FCF8196

83d72bf0-0d89-11ce-b13f-00aa003bac6c
  version: v6.0
  annotation: MS Exchange System Attendant Private Interface
  ncacn_ip_http: 37.157.165.165:6002
  ncacn_ip_udp: 37.157.165.165:1120
  ncacn_ip_tcp: 37.157.165.165:1119
  ncalrpc: LRPC00000fcc.00000001
  ncacn_np: \\SCAS1\pipe\7F165BB19FCF8196

469d6ec0-0d87-11ce-b13f-00aa003bac6c
  version: v16.256
  annotation: MS Exchange System Attendant Public Interface
  ncacn_ip_http: 37.157.165.165:6002
  ncacn_ip_udp: 37.157.165.165:1120
  ncacn_ip_tcp: 37.157.165.165:1119
  ncalrpc: LRPC00000fcc.00000001
  ncacn_np: \\SCAS1\pipe\7F165BB19FCF8196

a4f1db00-ca47-1067-b31f-00dd010662da
  version: v0.20736
  annotation: Exchange 2003 Server STORE EMSMDB Interface
  protocol: [MS-OXCRPC]: Wire Format Protocol
  ncalrpc: OLE017DDC74D00748A99C97B4003AB8
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

0e4a0156-dd5d-11d2-8c2f-00c04fb6bcde
  version: v1.0
  annotation: Microsoft Information Store
  ncalrpc: OLE017DDC74D00748A99C97B4003AB8
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

1453c42c-0fa6-11d2-a910-00c04f990f3b
  version: v1.0
  annotation: Microsoft Information Store
  ncalrpc: OLE017DDC74D00748A99C97B4003AB8
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

10f24e8e-0fa6-11d2-a910-00c04f990f3b
  version: v1.0
  annotation: Microsoft Information Store
  ncalrpc: OLE017DDC74D00748A99C97B4003AB8
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

99e64010-b032-11d0-97a4-00c04fd6551d
  version: v4.0
  annotation: Exchange Server STORE ADMIN Interface
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

89742ace-a9ed-11cf-9c0c-08002be7ae86
  version: v2.0
  annotation: Exchange Server STORE ADMIN Interface
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

a4f1db00-ca47-1067-b31e-00dd010662da
  version: v1.0
  annotation: Exchange Server STORE ADMIN Interface
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

2f5f6521-cb55-1059-b446-00df0bce31db
  version: v1.0
  annotation: Unimodem LRPC Endpoint
  ncalrpc: unimdmsvc
  ncalrpc: tapsrvlpc
  ncacn_np: \\SCAS1\pipe\tapsrv

bfa951d1-2f0e-11d3-bfd1-00c04fa3490a
  version: v1.0
  provider: aqueue.dll
  ncacn_ip_udp: 37.157.165.165:58290
  ncacn_ip_tcp: 37.157.165.165:58288
  ncalrpc: LRPC000049d8.00000001
  ncacn_np: \\SCAS1\PIPE\SMTPSVC
  ncacn_ip_tcp: 37.157.165.165:58282
  ncalrpc: SMTPSVC_LPC
  ncacn_np: \\SCAS1\PIPE\RESVC
  ncalrpc: RESVC_LPC
  ncacn_np: \\SCAS1\PIPE\POP3SVC
  ncacn_ip_tcp: 37.157.165.165:58281
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:58280
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:58279
  ncacn_ip_tcp: 37.157.165.165:58278
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLEE00A637A02EE4F19BC1F1EB8571F

8cfb5d70-31a4-11cf-a7d8-00805f48a135
  version: v3.0
  provider: smtpsvc.dll
  ncacn_np: \\SCAS1\PIPE\SMTPSVC
  ncacn_ip_tcp: 37.157.165.165:58282
  ncalrpc: SMTPSVC_LPC
  ncacn_np: \\SCAS1\PIPE\RESVC
  ncalrpc: RESVC_LPC
  ncacn_np: \\SCAS1\PIPE\POP3SVC
  ncacn_ip_tcp: 37.157.165.165:58281
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:58280
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:58279
  ncacn_ip_tcp: 37.157.165.165:58278
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLEE00A637A02EE4F19BC1F1EB8571F

a520d06e-11de-11d2-ab59-00c04fa3590c
  version: v3.0
  ncacn_np: \\SCAS1\PIPE\RESVC
  ncalrpc: RESVC_LPC
  ncacn_np: \\SCAS1\PIPE\POP3SVC
  ncacn_ip_tcp: 37.157.165.165:58281
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:58280
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:58279
  ncacn_ip_tcp: 37.157.165.165:58278
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLEE00A637A02EE4F19BC1F1EB8571F

1be617c0-31a5-11cf-a7d8-00805f48a135
  version: v3.0
  ncacn_np: \\SCAS1\PIPE\POP3SVC
  ncacn_ip_tcp: 37.157.165.165:58281
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:58280
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:58279
  ncacn_ip_tcp: 37.157.165.165:58278
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLEE00A637A02EE4F19BC1F1EB8571F

2465e9e0-a873-11d0-930b-00a0c90ab17c
  version: v3.0
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:58280
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:58279
  ncacn_ip_tcp: 37.157.165.165:58278
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLEE00A637A02EE4F19BC1F1EB8571F

97f83d5c-1994-11d1-a90d-00c04fb960f8
  version: v2.0
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:58279
  ncacn_ip_tcp: 37.157.165.165:58278
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLEE00A637A02EE4F19BC1F1EB8571F

82ad4280-036b-11cf-972c-00aa006887b0
  version: v2.0
  protocol: [MS-IRP]: Internet Information Services (IIS) Inetinfo Remote
  provider: infocomm.dll
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:58279
  ncacn_ip_tcp: 37.157.165.165:58278
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLEE00A637A02EE4F19BC1F1EB8571F

-280130819 | 2024-11-05T13:46:30.002739

143 / tcp

* OK Microsoft Exchange Server 2003 IMAP4rev1 server version 6.5.7638.1 (scas1.scas.acad.bg) ready.
* CAPABILITY IMAP4 IMAP4rev1 IDLE LOGIN-REFERRALS MAILBOX-REFERRALS NAMESPACE LITERAL+ UIDPLUS CHILDREN AUTH=NTLM
A001 OK CAPABILITY completed.
A002 BAD Protocol Error: "Unidentifiable command specified".
A003 BAD Protocol Error: "Unidentifiable command specified".
* BYE Microsoft Exchange Server 2003 IMAP4rev1 server version 6.5.7638.1 signing off.
A004 OK LOGOUT completed.

-123837826 | 2024-10-22T02:54:32.829811

389 / tcp

0\x84\x00\x00\t~\x02\x01\x02d\x84\x00\x00\tu\x04\x000\x84\x00\x00\tm0\x84\x00\x00\x00&\x04\x0bcurrentTime1\x84\x00\x00\x00\x13\x04\x1120241022025432.0Z0\x84\x00\x00\x00X\x04\x11subschemaSubentry1\x84\x00\x00\x00?\x04=CN=Aggregate,CN=Schema,CN=Configuration,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x00\x86\x04\rdsServiceName1\x84\x00\x00\x00q\x04oCN=NTDS Settings,CN=SCAS1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x00\xd9\x04\x0enamingContexts1\x84\x00\x00\x00\xc3\x04\x15DC=scas,DC=acad,DC=bg\x04&CN=Configuration,DC=scas,DC=acad,DC=bg\x040CN=Schema,CN=Configuration,DC=scas,DC=acad,DC=bg\x04\'DC=DomainDnsZones,DC=scas,DC=acad,DC=bg\x04\'DC=ForestDnsZones,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x003\x04\x14defaultNamingContext1\x84\x00\x00\x00\x17\x04\x15DC=scas,DC=acad,DC=bg0\x84\x00\x00\x00M\x04\x13schemaNamingContext1\x84\x00\x00\x002\x040CN=Schema,CN=Configuration,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x00J\x04\x1aconfigurationNamingContext1\x84\x00\x00\x00(\x04&CN=Configuration,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x006\x04\x17rootDomainNamingContext1\x84\x00\x00\x00\x17\x04\x15DC=scas,DC=acad,DC=bg0\x84\x00\x00\x02K\x04\x10supportedControl1\x84\x00\x00\x023\x04\x161.2.840.113556.1.4.319\x04\x161.2.840.113556.1.4.801\x04\x161.2.840.113556.1.4.473\x04\x161.2.840.113556.1.4.528\x04\x161.2.840.113556.1.4.417\x04\x161.2.840.113556.1.4.619\x04\x161.2.840.113556.1.4.841\x04\x161.2.840.113556.1.4.529\x04\x161.2.840.113556.1.4.805\x04\x161.2.840.113556.1.4.521\x04\x161.2.840.113556.1.4.970\x04\x171.2.840.113556.1.4.1338\x04\x161.2.840.113556.1.4.474\x04\x171.2.840.113556.1.4.1339\x04\x171.2.840.113556.1.4.1340\x04\x171.2.840.113556.1.4.1413\x04\x172.16.840.1.113730.3.4.9\x04\x182.16.840.1.113730.3.4.10\x04\x171.2.840.113556.1.4.1504\x04\x171.2.840.113556.1.4.1852\x04\x161.2.840.113556.1.4.802\x04\x171.2.840.113556.1.4.1907\x04\x171.2.840.113556.1.4.19480\x84\x00\x00\x00"\x04\x14supportedLDAPVersion1\x84\x00\x00\x00\x06\x04\x013\x04\x0120\x84\x00\x00\x01\x17\x04\x15sup

1062542573 | 2024-10-24T22:09:52.530208

389 / udp

0\x84\x00\x00\t?\x02\x01\x07d\x84\x00\x00\t6\x04\x000\x84\x00\x00\t.0\x84\x00\x00\x00&\x04\x0bcurrentTime1\x84\x00\x00\x00\x13\x04\x1120241024220952.0Z0\x84\x00\x00\x00X\x04\x11subschemaSubentry1\x84\x00\x00\x00?\x04=CN=Aggregate,CN=Schema,CN=Configuration,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x00\x86\x04\rdsServiceName1\x84\x00\x00\x00q\x04oCN=NTDS Settings,CN=SCAS1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x00\xd9\x04\x0enamingContexts1\x84\x00\x00\x00\xc3\x04\x15DC=scas,DC=acad,DC=bg\x04&CN=Configuration,DC=scas,DC=acad,DC=bg\x040CN=Schema,CN=Configuration,DC=scas,DC=acad,DC=bg\x04\'DC=DomainDnsZones,DC=scas,DC=acad,DC=bg\x04\'DC=ForestDnsZones,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x003\x04\x14defaultNamingContext1\x84\x00\x00\x00\x17\x04\x15DC=scas,DC=acad,DC=bg0\x84\x00\x00\x00M\x04\x13schemaNamingContext1\x84\x00\x00\x002\x040CN=Schema,CN=Configuration,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x00J\x04\x1aconfigurationNamingContext1\x84\x00\x00\x00(\x04&CN=Configuration,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x006\x04\x17rootDomainNamingContext1\x84\x00\x00\x00\x17\x04\x15DC=scas,DC=acad,DC=bg0\x84\x00\x00\x02K\x04\x10supportedControl1\x84\x00\x00\x023\x04\x161.2.840.113556.1.4.319\x04\x161.2.840.113556.1.4.801\x04\x161.2.840.113556.1.4.473\x04\x161.2.840.113556.1.4.528\x04\x161.2.840.113556.1.4.417\x04\x161.2.840.113556.1.4.619\x04\x161.2.840.113556.1.4.841\x04\x161.2.840.113556.1.4.529\x04\x161.2.840.113556.1.4.805\x04\x161.2.840.113556.1.4.521\x04\x161.2.840.113556.1.4.970\x04\x171.2.840.113556.1.4.1338\x04\x161.2.840.113556.1.4.474\x04\x171.2.840.113556.1.4.1339\x04\x171.2.840.113556.1.4.1340\x04\x171.2.840.113556.1.4.1413\x04\x172.16.840.1.113730.3.4.9\x04\x182.16.840.1.113730.3.4.10\x04\x171.2.840.113556.1.4.1504\x04\x171.2.840.113556.1.4.1852\x04\x161.2.840.113556.1.4.802\x04\x171.2.840.113556.1.4.1907\x04\x171.2.840.113556.1.4.19480\x84\x00\x00\x00"\x04\x14supportedLDAPVersion1\x84\x00\x00\x00\x06\x04\x013\x04\x0120\x84\x00\x00\x01\x17\x04\x15supportedLDAPPolicies1\x84\x00\x00\x00\xfa\x98\x00\x00\x00\xb0\xc5\x1ag\t\xa9/\x16B\x00\x00\x00B\x00\x00\x00\x81\x00\x00 V\x00d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x08\x00\x04\x00\x00\x00\x01\x00\x00\x06\xa06\x9f\xdeq&\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x08\x00\x04\x00\xec\xf4\xbb\xe6\x9d\x10\xa06\x9f\xdeq&\x08\x00EH\x004\xad\xe6@\x00\xf5\x06\xc7\xe5&\xcf%w\xcfZ\xf4\x0eQ\x90\xea\xe6 /\xf4\xe7\x12\xbe\x90b\x80\x12r\x10\xf8\x92\x00\x00\x02\x04\x05\xb4\x01\x03\x03\x07\x01\x01\x04\x02\x18\x04\x00\x00\xb0\xc5\x1ag\xb9\x010\x16\xbd\x03\x00\x00\xbd\x03\x00\x00\x01\x00\x00 V\x00d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x08\x00\x04\x00\x00\x00\x01\x00\x00\x06\xa06\x9f\xdeq&\x9e\x9c\x80\x12\xec\xf4\xbb\xe6\x9d\x10\xa06\x9f\xdeq&\x08\x00Eh\xec\xf4\xbb\xe6\x9d\x10\xa06\x9f\xdeq&\x08\x00E(\x03\xafQK\x00\xb9o\x11gf%\x9d\xa5\xa5\xcfZ\xf4\x0e\x04\x0eMaxPoolThreads\x04\x0fMaxDatagramRecv\x04\x10MaxReceiveBuffer\x04\x0fInitRecvTimeout\x04\x0eMaxConnections\x04\x0fMaxConnIdleTime\x04\x0bMaxPageSize\x04\x10MaxQueryDuration\x04\x10MaxTempTableSize\x04\x10MaxResultSetSize\x04\x16MaxNotificationPerConn\x04\x0bMaxValRange\x04\x11ThreadMemoryLimit\x04\x18SystemMemoryLimitPercent0\x84\x00\x00\x00%\x04\x13highestCommittedUSN1\x84\x00\x00\x00\n\x04\x08545406680\x84\x00\x00\x00I\x04\x17supportedSASLMechanisms1\x84\x00\x00\x00*\x04\x06GSSAPI\x04\nGSS-SPNEGO\x04\x08EXTERNAL\x04\nDIGEST-MD50\x84\x00\x00\x00\'\x04\x0bdnsHostName1\x84\x00\x00\x00\x14\x04\x12scas1.scas.acad.bg0\x84\x00\x00\x009\x04\x0fldapServiceName1\x84\x00\x00\x00"\x04 scas.acad.bg:scas1$@SCAS.ACAD.BG0\x84\x00\x00\x00r\x04\nserverName1\x84\x00\x00\x00`\x04^CN=SCAS1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=scas,DC=acad,DC=bg0\x84\x00\x00\x00g\x04\x15supportedCapabilities1\x84\x00\x00\x00J\x04\x161.2.840.113556

95411705 | 2024-11-04T07:06:13.443017

593 / tcp

ncacn_http/1.0

Microsoft RPC Endpoint Mapper over HTTP

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc
  ncalrpc: DNSResolver

12345678-1234-abcd-ef00-0123456789ab
  version: v1.0
  annotation: IPSec Policy agent endpoint
  protocol: [MS-RPRN]: Print System Remote Protocol
  provider: spoolsv.exe
  ncalrpc: OLED203C149777A4B40B36A658C211D
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

12345678-1234-abcd-ef00-01234567cffb
  version: v1.0
  protocol: [MS-NRPC]: Netlogon Remote Protocol
  provider: netlogon.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

12345778-1234-abcd-ef00-0123456789ab
  version: v0.0
  protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
  provider: lsasrv.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

16e0cf3a-a604-11d0-96b1-00a0c91ece30
  version: v2.0
  annotation: NTDS Restore Interface
  provider: ntdsbsrv.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

ecec0d70-a603-11d0-96b1-00a0c91ece30
  version: v2.0
  annotation: NTDS Backup Interface
  provider: ntdsbsrv.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

f5cc5a18-4264-101a-8c59-08002b2f8426
  version: v56.0
  annotation: MS NT Directory NSP Interface
  protocol: [MS-NSPI]: Name Service Provider Interface (NSPI) Protocol
  provider: ntdsai.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

e3514235-4b06-11d1-ab04-00c04fc2dcd2
  version: v4.0
  annotation: MS NT Directory DRS Interface
  protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
  provider: ntdsai.dll
  ncacn_ip_http: 37.157.165.165:1027
  ncalrpc: NTDS_LPC
  ncacn_ip_tcp: 37.157.165.165:1026
  ncalrpc: dsrole
  ncacn_np: \\SCAS1\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncacn_np: \\SCAS1\PIPE\lsass

d674a233-5829-49dd-90f0-60cf9ceb7129
  version: v1.0
  annotation: ICF+ FW API
  provider: ipnathlp.dll
  ncalrpc: trkwks
  ncacn_np: \\SCAS1\pipe\trkwks
  ncalrpc: senssvc
  ncalrpc: SECLOGON
  ncalrpc: keysvc
  ncacn_np: \\SCAS1\pipe\keysvc
  ncacn_np: \\SCAS1\PIPE\srvsvc
  ncacn_np: \\SCAS1\PIPE\wkssvc
  ncalrpc: AudioSrv
  ncacn_np: \\SCAS1\PIPE\atsvc
  ncalrpc: OLE1A112EC2B3D149C0934511CCB4F2
  ncalrpc: wzcsvc

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncacn_np: \\SCAS1\PIPE\atsvc
  ncalrpc: OLE1A112EC2B3D149C0934511CCB4F2
  ncalrpc: wzcsvc

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SCAS1\PIPE\atsvc
  ncalrpc: OLE1A112EC2B3D149C0934511CCB4F2
  ncalrpc: wzcsvc

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SCAS1\PIPE\atsvc
  ncalrpc: OLE1A112EC2B3D149C0934511CCB4F2
  ncalrpc: wzcsvc

906b0ce0-c70b-1067-b317-00dd010662da
  version: v1.0
  protocol: [MS-CMPO]: MSDTC Connection Manager:
  provider: msdtcprx.dll
  ncalrpc: LRPC0000066c.00000001
  ncalrpc: LRPC0000066c.00000001
  ncalrpc: LRPC0000066c.00000001
  ncalrpc: LRPC0000066c.00000001
  ncalrpc: LRPC00000848.00000001

a00c021c-2be2-11d2-b678-0000f87a8f8e
  version: v1.0
  annotation: PERFMON SERVICE
  provider: ntfrs.exe
  ncalrpc: LRPC000008c8.00000001
  ncacn_ip_tcp: 37.157.165.165:1032
  ncalrpc: OLE84E0FBA2094A420088BC464C3F0D

d049b186-814f-11d1-9a3c-00c04fc9b232
  version: v1.256
  annotation: NtFrs API
  protocol: [MS-FRS1]: File Replication Service Protocol
  ncalrpc: LRPC000008c8.00000001
  ncacn_ip_tcp: 37.157.165.165:1032
  ncalrpc: OLE84E0FBA2094A420088BC464C3F0D

f5cc59b4-4264-101a-8c59-08002b2f8426
  version: v1.256
  annotation: NtFrs Service
  protocol: [MS-FRS1]: File Replication Service Protocol
  ncalrpc: LRPC000008c8.00000001
  ncacn_ip_tcp: 37.157.165.165:1032
  ncalrpc: OLE84E0FBA2094A420088BC464C3F0D

50abc2a4-574d-40b3-9d66-ee4fd5fba076
  version: v5.0
  protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
  provider: dns.exe
  ncacn_ip_tcp: 37.157.165.165:1066

76209fe5-9049-4336-ba84-632d907cb154
  version: v1.0
  annotation: Interprocess Logon Service
  ncalrpc: ReportingServices$MSSQL.3

1544f5e0-613c-11d1-93df-00c04fd7bd09
  version: v1.0
  annotation: MS Exchange Directory RFR Interface
  protocol: [MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol
  ncalrpc: OLE7FAC3795CD954409BC3DAE334F94
  ncacn_ip_http: 37.157.165.165:6002
  ncacn_ip_udp: 37.157.165.165:1120
  ncacn_ip_tcp: 37.157.165.165:1119
  ncalrpc: LRPC00000fcc.00000001
  ncacn_np: \\SCAS1\pipe\7F165BB19FCF8196

f930c514-1215-11d3-99a5-00a0c9b61b04
  version: v1.0
  annotation: MS Exchange System Attendant Cluster Interface
  ncacn_ip_http: 37.157.165.165:6002
  ncacn_ip_udp: 37.157.165.165:1120
  ncacn_ip_tcp: 37.157.165.165:1119
  ncalrpc: LRPC00000fcc.00000001
  ncacn_np: \\SCAS1\pipe\7F165BB19FCF8196

83d72bf0-0d89-11ce-b13f-00aa003bac6c
  version: v6.0
  annotation: MS Exchange System Attendant Private Interface
  ncacn_ip_http: 37.157.165.165:6002
  ncacn_ip_udp: 37.157.165.165:1120
  ncacn_ip_tcp: 37.157.165.165:1119
  ncalrpc: LRPC00000fcc.00000001
  ncacn_np: \\SCAS1\pipe\7F165BB19FCF8196

469d6ec0-0d87-11ce-b13f-00aa003bac6c
  version: v16.256
  annotation: MS Exchange System Attendant Public Interface
  ncacn_ip_http: 37.157.165.165:6002
  ncacn_ip_udp: 37.157.165.165:1120
  ncacn_ip_tcp: 37.157.165.165:1119
  ncalrpc: LRPC00000fcc.00000001
  ncacn_np: \\SCAS1\pipe\7F165BB19FCF8196

a4f1db00-ca47-1067-b31f-00dd010662da
  version: v0.20736
  annotation: Exchange 2003 Server STORE EMSMDB Interface
  protocol: [MS-OXCRPC]: Wire Format Protocol
  ncalrpc: OLE017DDC74D00748A99C97B4003AB8
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

0e4a0156-dd5d-11d2-8c2f-00c04fb6bcde
  version: v1.0
  annotation: Microsoft Information Store
  ncalrpc: OLE017DDC74D00748A99C97B4003AB8
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

1453c42c-0fa6-11d2-a910-00c04f990f3b
  version: v1.0
  annotation: Microsoft Information Store
  ncalrpc: OLE017DDC74D00748A99C97B4003AB8
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

10f24e8e-0fa6-11d2-a910-00c04f990f3b
  version: v1.0
  annotation: Microsoft Information Store
  ncalrpc: OLE017DDC74D00748A99C97B4003AB8
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

99e64010-b032-11d0-97a4-00c04fd6551d
  version: v4.0
  annotation: Exchange Server STORE ADMIN Interface
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

89742ace-a9ed-11cf-9c0c-08002be7ae86
  version: v2.0
  annotation: Exchange Server STORE ADMIN Interface
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

a4f1db00-ca47-1067-b31e-00dd010662da
  version: v1.0
  annotation: Exchange Server STORE ADMIN Interface
  ncacn_ip_http: 37.157.165.165:6001
  ncacn_ip_udp: 37.157.165.165:1173
  ncacn_ip_tcp: 37.157.165.165:1172
  ncalrpc: MSExchangeIS_LPC
  ncacn_np: \\SCAS1\pipe\ADA3AA64122D39CE

2f5f6521-cb55-1059-b446-00df0bce31db
  version: v1.0
  annotation: Unimodem LRPC Endpoint
  ncalrpc: unimdmsvc
  ncalrpc: tapsrvlpc
  ncacn_np: \\SCAS1\pipe\tapsrv

bfa951d1-2f0e-11d3-bfd1-00c04fa3490a
  version: v1.0
  provider: aqueue.dll
  ncacn_ip_udp: 37.157.165.165:36197
  ncacn_ip_tcp: 37.157.165.165:36196
  ncalrpc: LRPC000040d0.00000001
  ncacn_np: \\SCAS1\PIPE\SMTPSVC
  ncacn_ip_tcp: 37.157.165.165:36191
  ncalrpc: SMTPSVC_LPC
  ncacn_np: \\SCAS1\PIPE\RESVC
  ncalrpc: RESVC_LPC
  ncacn_np: \\SCAS1\PIPE\POP3SVC
  ncacn_ip_tcp: 37.157.165.165:36190
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:36189
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:36188
  ncacn_ip_tcp: 37.157.165.165:36187
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLE0B96E9D5FC8847609EF1336DA2FD

8cfb5d70-31a4-11cf-a7d8-00805f48a135
  version: v3.0
  provider: smtpsvc.dll
  ncacn_np: \\SCAS1\PIPE\SMTPSVC
  ncacn_ip_tcp: 37.157.165.165:36191
  ncalrpc: SMTPSVC_LPC
  ncacn_np: \\SCAS1\PIPE\RESVC
  ncalrpc: RESVC_LPC
  ncacn_np: \\SCAS1\PIPE\POP3SVC
  ncacn_ip_tcp: 37.157.165.165:36190
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:36189
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:36188
  ncacn_ip_tcp: 37.157.165.165:36187
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLE0B96E9D5FC8847609EF1336DA2FD

a520d06e-11de-11d2-ab59-00c04fa3590c
  version: v3.0
  ncacn_np: \\SCAS1\PIPE\RESVC
  ncalrpc: RESVC_LPC
  ncacn_np: \\SCAS1\PIPE\POP3SVC
  ncacn_ip_tcp: 37.157.165.165:36190
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:36189
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:36188
  ncacn_ip_tcp: 37.157.165.165:36187
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLE0B96E9D5FC8847609EF1336DA2FD

1be617c0-31a5-11cf-a7d8-00805f48a135
  version: v3.0
  ncacn_np: \\SCAS1\PIPE\POP3SVC
  ncacn_ip_tcp: 37.157.165.165:36190
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:36189
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:36188
  ncacn_ip_tcp: 37.157.165.165:36187
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLE0B96E9D5FC8847609EF1336DA2FD

2465e9e0-a873-11d0-930b-00a0c90ab17c
  version: v3.0
  ncacn_np: \\SCAS1\PIPE\IMAP4SVC
  ncacn_ip_tcp: 37.157.165.165:36189
  ncalrpc: POP3SVC_LPC
  ncalrpc: IMAP4SVC_LPC
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:36188
  ncacn_ip_tcp: 37.157.165.165:36187
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLE0B96E9D5FC8847609EF1336DA2FD

97f83d5c-1994-11d1-a90d-00c04fb960f8
  version: v2.0
  ncacn_np: \\SCAS1\PIPE\KNETINFO
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:36188
  ncacn_ip_tcp: 37.157.165.165:36187
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLE0B96E9D5FC8847609EF1336DA2FD

82ad4280-036b-11cf-972c-00aa006887b0
  version: v2.0
  protocol: [MS-IRP]: Internet Information Services (IIS) Inetinfo Remote
  provider: infocomm.dll
  ncacn_np: \\SCAS1\PIPE\INETINFO
  ncacn_ip_tcp: 37.157.165.165:36188
  ncacn_ip_tcp: 37.157.165.165:36187
  ncalrpc: KNETINFO_LPC
  ncalrpc: INETINFO_LPC
  ncalrpc: OLE0B96E9D5FC8847609EF1336DA2FD

1308377066 | 2024-10-10T09:40:11.506020

1027 / tcp

ncacn_http/1.0

758073748 | 2024-11-02T02:37:27.704874

1433 / tcp

MS-SQL NTLM Info:
  OS: Windows Server 2003
  OS Build: 5.2.3790

-1424789742 | 2024-11-03T16:56:40.985017

1434 / udp

SQL Server Browser Service:
  Instance #1:
    Server Name: SCAS1
    Instance Name: MSSQLSERVER
    Is Clustered: False
    Version: 9.00.1399.06
    TCP Port: 1433
    Named Pipe: \\SCAS1\pipe\sql\query
    VIA:
      NIC: 0
      Port: 1433
      NETBIOS: SCAS1
    Version Name: MS-SQL Server 2005 RTM

1295180537 | 2024-11-08T19:32:01.915827

3268 / tcp

LDAP:
  CurrentTime: 20241108193201.0Z
  SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=scas,DC=acad,DC=bg
  DsServiceName: CN=NTDS Settings,CN=SCAS1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=scas,DC=acad,DC=bg
  NamingContexts:
    CN=Configuration,DC=scas,DC=acad,DC=bg
    CN=Schema,CN=Configuration,DC=scas,DC=acad,DC=bg
    DC=DomainDnsZones,DC=scas,DC=acad,DC=bg
    DC=ForestDnsZones,DC=scas,DC=acad,DC=bg
    DC=scas,DC=acad,DC=bg
  DefaultNamingContext: DC=scas,DC=acad,DC=bg
  SchemaNamingContext: CN=Schema,CN=Configuration,DC=scas,DC=acad,DC=bg
  ConfigurationNamingContext: CN=Configuration,DC=scas,DC=acad,DC=bg
  RootDomainNamingContext: DC=scas,DC=acad,DC=bg
  SupportedControl:
    1.2.840.113556.1.4.1338
    1.2.840.113556.1.4.1339
    1.2.840.113556.1.4.1340
    1.2.840.113556.1.4.1413
    1.2.840.113556.1.4.1504
    1.2.840.113556.1.4.1852
    1.2.840.113556.1.4.1907
    1.2.840.113556.1.4.1948
    1.2.840.113556.1.4.319
    1.2.840.113556.1.4.417
    1.2.840.113556.1.4.473
    1.2.840.113556.1.4.474
    1.2.840.113556.1.4.521
    1.2.840.113556.1.4.528
    1.2.840.113556.1.4.529
    1.2.840.113556.1.4.619
    1.2.840.113556.1.4.801
    1.2.840.113556.1.4.802
    1.2.840.113556.1.4.805
    1.2.840.113556.1.4.841
    1.2.840.113556.1.4.970
    2.16.840.1.113730.3.4.10
    2.16.840.1.113730.3.4.9
  SupportedLDAPVersion:
    2
    3
  SupportedLDAPPolicies:
    InitRecvTimeout
    MaxConnIdleTime
    MaxConnections
    MaxDatagramRecv
    MaxNotificationPerConn
    MaxPageSize
    MaxPoolThreads
    MaxQueryDuration
    MaxReceiveBuffer
    MaxResultSetSize
    MaxTempTableSize
    MaxValRange
    SystemMemoryLimitPercent
    ThreadMemoryLimit
  HighestCommittedUSN: 54812568
  SupportedSASLMechanisms:
    DIGEST-MD5
    EXTERNAL
    GSS-SPNEGO
    GSSAPI
  DnsHostName: scas1.scas.acad.bg
  LdapServiceName: scas.acad.bg:scas1$@SCAS.ACAD.BG
  ServerName: CN=SCAS1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=scas,DC=acad,DC=bg
  SupportedCapabilities:
    1.2.840.113556.1.4.1670
    1.2.840.113556.1.4.1791
    1.2.840.113556.1.4.800
  IsSynchronized: TRUE
  IsGlobalCatalogReady: TRUE
  SupportedExtension:
    1.2.840.113556.1.4.1781
    1.3.6.1.4.1.1466.101.119.1
    1.3.6.1.4.1.1466.20037
  DomainFunctionality: 2
  ForestFunctionality: 2

2024344435 | 2024-10-28T02:41:54.082669

3306 / tcp

MySQL:
  Error Message: Host '224.132.156.100' is not allowed to connect to this MySQL server
  Error Code: 1130

-1012971753 | 2024-11-06T22:56:52.798404

3389 / tcp

Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x03\x00\x08\x00\x03\x00\x00\x00

Log On to Windows
User name:
Password:
Cancel Options

CVE-2019-0708

1308377066 | 2024-10-28T21:55:45.979098

6001 / tcp

ncacn_http/1.0

1308377066 | 2024-11-04T20:07:18.709286

6002 / tcp

ncacn_http/1.0

37.157.165.165

Last Seen: 2024-11-08

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1885634061 | 2024-11-01T19:29:55.456862
25 / tcp

Microsoft ESMTP6.0.3790.4675

323073015 | 2024-10-31T20:40:11.924354
80 / tcp

Microsoft IIS httpd6.0

-2112605694 | 2024-11-06T07:29:08.646977
88 / udp

Windows 2003 Kerberos

1670113647 | 2024-11-05T17:19:33.396809
123 / udp

-678361421 | 2024-11-08T07:27:53.291689
135 / tcp

Microsoft RPC Endpoint Mapper

-280130819 | 2024-11-05T13:46:30.002739
143 / tcp

-123837826 | 2024-10-22T02:54:32.829811
389 / tcp

1062542573 | 2024-10-24T22:09:52.530208
389 / udp

95411705 | 2024-11-04T07:06:13.443017
593 / tcp

Microsoft RPC Endpoint Mapper over HTTP

1308377066 | 2024-10-10T09:40:11.506020
1027 / tcp

Microsoft Windows RPC over HTTP1.0

758073748 | 2024-11-02T02:37:27.704874
1433 / tcp

MS-SQL Server 2005 RTM9.0.1399.0

-1424789742 | 2024-11-03T16:56:40.985017
1434 / udp

SQL Server Browser Service

1295180537 | 2024-11-08T19:32:01.915827
3268 / tcp

2024344435 | 2024-10-28T02:41:54.082669
3306 / tcp

MySQL

-1012971753 | 2024-11-06T22:56:52.798404
3389 / tcp

Remote Desktop Protocol

1308377066 | 2024-10-28T21:55:45.979098
6001 / tcp

Microsoft Windows RPC over HTTP1.0

1308377066 | 2024-11-04T20:07:18.709286
6002 / tcp

Microsoft Windows RPC over HTTP1.0

Products

Pricing

Contact Us

37.157.165.165

Last Seen: 2024-11-08

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 3389 Latest CVSS

OpenPorts

1885634061 | 2024-11-01T19:29:55.456862 25 / tcp

323073015 | 2024-10-31T20:40:11.924354 80 / tcp

-2112605694 | 2024-11-06T07:29:08.646977 88 / udp

1670113647 | 2024-11-05T17:19:33.396809 123 / udp

-678361421 | 2024-11-08T07:27:53.291689 135 / tcp

-280130819 | 2024-11-05T13:46:30.002739 143 / tcp

-123837826 | 2024-10-22T02:54:32.829811 389 / tcp

1062542573 | 2024-10-24T22:09:52.530208 389 / udp

95411705 | 2024-11-04T07:06:13.443017 593 / tcp

1308377066 | 2024-10-10T09:40:11.506020 1027 / tcp

758073748 | 2024-11-02T02:37:27.704874 1433 / tcp

-1424789742 | 2024-11-03T16:56:40.985017 1434 / udp

1295180537 | 2024-11-08T19:32:01.915827 3268 / tcp

2024344435 | 2024-10-28T02:41:54.082669 3306 / tcp

-1012971753 | 2024-11-06T22:56:52.798404 3389 / tcp

1308377066 | 2024-10-28T21:55:45.979098 6001 / tcp

1308377066 | 2024-11-04T20:07:18.709286 6002 / tcp

Products

Pricing

Contact Us

Vulnerabilities

1885634061 | 2024-11-01T19:29:55.456862
25 / tcp

323073015 | 2024-10-31T20:40:11.924354
80 / tcp

-2112605694 | 2024-11-06T07:29:08.646977
88 / udp

1670113647 | 2024-11-05T17:19:33.396809
123 / udp

-678361421 | 2024-11-08T07:27:53.291689
135 / tcp

-280130819 | 2024-11-05T13:46:30.002739
143 / tcp

-123837826 | 2024-10-22T02:54:32.829811
389 / tcp

1062542573 | 2024-10-24T22:09:52.530208
389 / udp

95411705 | 2024-11-04T07:06:13.443017
593 / tcp

1308377066 | 2024-10-10T09:40:11.506020
1027 / tcp

758073748 | 2024-11-02T02:37:27.704874
1433 / tcp

-1424789742 | 2024-11-03T16:56:40.985017
1434 / udp

1295180537 | 2024-11-08T19:32:01.915827
3268 / tcp

2024344435 | 2024-10-28T02:41:54.082669
3306 / tcp

-1012971753 | 2024-11-06T22:56:52.798404
3389 / tcp

1308377066 | 2024-10-28T21:55:45.979098
6001 / tcp

1308377066 | 2024-11-04T20:07:18.709286
6002 / tcp