Microsoft HTTPAPI httpd2.0

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Thu, 06 Feb 2025 10:08:23 GMT
Connection: close
Content-Length: 315

Microsoft RPC Endpoint Mapper

Microsoft RPC Endpoint Mapper

d95afe70-a6d5-4259-822e-2c84da1ddb0d
  version: v1.0
  protocol: [MS-RSP]: Remote Shutdown Protocol
  provider: wininit.exe
  ncacn_ip_tcp: 172.31.228.144:49152
  ncalrpc: WindowsShutdown
  ncacn_np: \\SHOUJIAHKS\PIPE\InitShutdown
  ncalrpc: WMsgKRpc055BB0

76f226c3-ec14-4325-8a99-6a46348418af
  version: v1.0
  provider: winlogon.exe
  ncalrpc: WindowsShutdown
  ncacn_np: \\SHOUJIAHKS\PIPE\InitShutdown
  ncalrpc: WMsgKRpc055BB0
  ncalrpc: WMsgKRpc055DF1
  ncalrpc: WMsgKRpc06704F2

c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
  version: v1.0
  annotation: Impl friendly name
  provider: sysntfy.dll
  ncalrpc: LRPC-fbd0b190e3f6f99e0a
  ncalrpc: VpnikeRpc
  ncacn_np: \\SHOUJIAHKS\PIPE\srvsvc
  ncalrpc: RasmanLrpc
  ncacn_np: \\SHOUJIAHKS\PIPE\ROUTER
  ncacn_ip_tcp: 172.31.228.144:49154
  ncacn_np: \\SHOUJIAHKS\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2
  ncalrpc: IUserProfile2
  ncalrpc: IUserProfile2

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
  version: v1.0
  annotation: DHCPv6 Client LRPC Endpoint
  provider: dhcpcsvc6.dll
  ncalrpc: dhcpcsvc6
  ncalrpc: dhcpcsvc
  ncacn_ip_tcp: 172.31.228.144:49153
  ncacn_np: \\SHOUJIAHKS\pipe\eventlog
  ncalrpc: eventlog

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc
  ncacn_ip_tcp: 172.31.228.144:49153
  ncacn_np: \\SHOUJIAHKS\pipe\eventlog
  ncalrpc: eventlog

30adc50c-5cbc-46ce-9a0e-91914789e23c
  version: v1.0
  annotation: NRP server endpoint
  provider: nrpsrv.dll
  ncacn_ip_tcp: 172.31.228.144:49153
  ncacn_np: \\SHOUJIAHKS\pipe\eventlog
  ncalrpc: eventlog

f6beaff7-1e19-4fbb-9f8f-b89e2018337c
  version: v1.0
  annotation: Event log TCPIP
  protocol: [MS-EVEN6]: EventLog Remoting Protocol
  provider: wevtsvc.dll
  ncacn_ip_tcp: 172.31.228.144:49153
  ncacn_np: \\SHOUJIAHKS\pipe\eventlog
  ncalrpc: eventlog

30b044a5-a225-43f0-b3a4-e060df91f9c1
  version: v1.0
  provider: certprop.dll
  ncalrpc: VpnikeRpc
  ncacn_np: \\SHOUJIAHKS\PIPE\srvsvc
  ncalrpc: RasmanLrpc
  ncacn_np: \\SHOUJIAHKS\PIPE\ROUTER
  ncacn_ip_tcp: 172.31.228.144:49154
  ncacn_np: \\SHOUJIAHKS\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2

98716d03-89ac-44c7-bb8c-285824e51c4a
  version: v1.0
  annotation: XactSrv service
  provider: srvsvc.dll
  ncacn_ip_tcp: 172.31.228.144:49154
  ncacn_np: \\SHOUJIAHKS\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2

552d076a-cb29-4e44-8b6a-d15e59e2c0af
  version: v1.0
  annotation: IP Transition Configuration endpoint
  provider: iphlpsvc.dll
  ncacn_ip_tcp: 172.31.228.144:49154
  ncacn_np: \\SHOUJIAHKS\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2

a398e520-d59a-4bdd-aa7a-3c1e0303a511
  version: v1.0
  annotation: IKE/Authip API
  provider: IKEEXT.DLL
  ncacn_ip_tcp: 172.31.228.144:49154
  ncacn_np: \\SHOUJIAHKS\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2

86d35949-83c9-4044-b424-db363231fd0c
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: schedsvc.dll
  ncacn_ip_tcp: 172.31.228.144:49154
  ncacn_np: \\SHOUJIAHKS\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SHOUJIAHKS\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\SHOUJIAHKS\PIPE\atsvc
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncalrpc: senssvc
  ncalrpc: OLE0017AE21FC6744BCA6BA15110967
  ncalrpc: IUserProfile2

2eb08e3e-639f-4fba-97b1-14f878961076
  version: v1.0
  provider: gpsvc.dll
  ncalrpc: IUserProfile2

3473dd4d-2e88-4006-9cba-22570909dd10
  version: v5.256
  annotation: WinHttp Auto-Proxy Service
  ncacn_np: \\SHOUJIAHKS\PIPE\W32TIME_ALT
  ncalrpc: W32TIME_ALT
  ncalrpc: LRPC-1afae02ef1a217232e
  ncalrpc: OLEE328FC2DB4DC4690ADCFAF34C996

7ea70bcf-48af-4f6a-8968-6a440754d5fa
  version: v1.0
  annotation: NSI server endpoint
  provider: nsisvc.dll
  ncalrpc: LRPC-1afae02ef1a217232e
  ncalrpc: OLEE328FC2DB4DC4690ADCFAF34C996

24019106-a203-4642-b88d-82dae9158929
  version: v1.0
  provider: authui.dll
  ncalrpc: LRPC-c9fe00240eded18da6

2fb92682-6599-42dc-ae13-bd2ca89bd11c
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-64e048dbad23303fc4

7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-64e048dbad23303fc4

dd490425-5325-4565-b774-7e27d6c09c24
  version: v1.0
  annotation: Base Firewall Engine API
  provider: BFE.DLL
  ncalrpc: LRPC-64e048dbad23303fc4

7f1343fe-50a9-4927-a778-0c5859517bac
  version: v1.0
  annotation: DfsDs service
  ncacn_np: \\SHOUJIAHKS\PIPE\wkssvc
  ncalrpc: DNSResolver

4a452661-8290-4b36-8fbe-7f4093a94978
  version: v1.0
  annotation: Spooler function endpoint
  provider: spoolsv.exe
  ncalrpc: spoolss

ae33069b-a2a8-46ee-a235-ddfd339be281
  version: v1.0
  annotation: Spooler base remote object endpoint
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: spoolss

0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
  version: v1.0
  annotation: Spooler function endpoint
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: spoolss

2f5f6521-cb55-1059-b446-00df0bce31db
  version: v1.0
  annotation: Unimodem LRPC Endpoint
  ncalrpc: unimdmsvc
  ncalrpc: tapsrvlpc
  ncacn_np: \\SHOUJIAHKS\pipe\tapsrv

b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
  version: v1.0
  annotation: KeyIso
  provider: keyiso.dll
  ncacn_ip_tcp: 172.31.228.144:49164
  ncalrpc: samss lpc
  ncalrpc: dsrole
  ncacn_np: \\SHOUJIAHKS\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncalrpc: LRPC-6ec96ef690a9105214
  ncacn_np: \\SHOUJIAHKS\pipe\lsass

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_tcp: 172.31.228.144:49164
  ncalrpc: samss lpc
  ncalrpc: dsrole
  ncacn_np: \\SHOUJIAHKS\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: lsasspirpc
  ncalrpc: lsapolicylookup
  ncalrpc: LSARPC_ENDPOINT
  ncalrpc: securityevent
  ncalrpc: audit
  ncalrpc: LRPC-6ec96ef690a9105214
  ncacn_np: \\SHOUJIAHKS\pipe\lsass

367abb81-9844-35f1-ad32-98f038001003
  version: v2.0
  protocol: [MS-SCMR]: Service Control Manager Remote Protocol
  provider: services.exe
  ncacn_ip_tcp: 172.31.228.144:49166

12345678-1234-abcd-ef00-0123456789ab
  version: v1.0
  annotation: IPSec Policy agent endpoint
  protocol: [MS-RPRN]: Print System Remote Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-ce5f0decd47f209261
  ncacn_ip_tcp: 172.31.228.144:49167

6b5bdd1e-528c-422c-af8c-a4079be4fe48
  version: v1.0
  annotation: Remote Fw APIs
  protocol: [MS-FASP]: Firewall and Advanced Security Protocol
  provider: FwRemoteSvr.dll
  ncacn_ip_tcp: 172.31.228.144:49167

906b0ce0-c70b-1067-b317-00dd010662da
  version: v1.0
  protocol: [MS-CMPO]: MSDTC Connection Manager:
  provider: msdtcprx.dll
  ncalrpc: LRPC-4ea2ac4342cc3341c3
  ncalrpc: LRPC-4ea2ac4342cc3341c3
  ncalrpc: LRPC-4ea2ac4342cc3341c3
  ncalrpc: LRPC-4ea2ac4342cc3341c3

12e65dd8-887f-41ef-91bf-8d816c42c2e7
  version: v1.0
  annotation: Secure Desktop LRPC interface
  provider: winlogon.exe
  ncalrpc: WMsgKRpc06704F2

NetBIOS Response:
  Server Name: SHOUJIAHKS
  MAC Address: 00:16:3E:02:5C:62
  Names:
    SHOUJIAHKS <0x0>
    WORKGROUP <0x0>
    SHOUJIAHKS <0x20>
  Additional Interfaces:
    172.31.228.144

00:16:3E:02:5C:62
    OUI: 00:16:3E
    Organization: Xensource, Inc.
    Assignment: MA-L
    Registration Date: 2005-10-29

\x83\x00\x00\x01\x8f

Microsoft HTTPAPI httpd2.0

HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sat, 25 Jan 2025 20:08:35 GMT
Connection: close
Content-Length: 326

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:49:2f:7c:06:ed:c0:49:64:80:96:a8:4e:96:d8:73
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL TLS RSA CA G1
        Validity
            Not Before: Aug  8 00:00:00 2023 GMT
            Not After : Aug 21 23:59:59 2024 GMT
        Subject: CN=*.orthok.cn
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:5a:52:f9:4d:31:48:9e:eb:d3:9d:62:48:
                    5f:86:9c:13:82:94:89:52:e8:48:16:ee:03:55:28:
                    f1:d2:ab:65:8d:8c:b1:00:1e:cd:47:8e:11:ca:a9:
                    c1:7f:3c:7c:55:15:db:34:95:1c:34:73:28:a2:3f:
                    6e:10:42:c6:27:cd:88:c9:7b:01:68:7a:63:46:ee:
                    25:b7:a4:37:d8:1d:fc:00:2b:76:49:97:01:2d:c4:
                    7d:da:ea:89:b3:dc:14:45:98:81:81:15:37:0b:dd:
                    54:9f:72:a1:94:07:0d:ab:86:a4:61:f9:36:1e:8e:
                    92:e2:40:a3:f5:5a:2e:99:ed:a3:f9:02:3b:ff:11:
                    51:1c:90:2b:ee:78:fb:2d:d8:11:91:ae:7c:9f:57:
                    5f:5c:2a:ed:c9:2d:61:86:15:fe:b2:43:e6:45:b6:
                    8b:79:3c:41:33:6a:10:6f:5e:9e:dc:78:de:7a:8c:
                    f2:6b:77:42:5b:5e:0f:ef:50:57:92:60:87:fc:f7:
                    28:45:f4:5e:06:f6:e8:8e:9f:64:cb:ee:f4:61:53:
                    0e:76:26:83:41:ff:3f:df:19:0c:8a:eb:20:c0:24:
                    23:36:92:91:8b:69:d7:99:9b:86:3b:23:54:eb:f7:
                    79:f5:0d:42:0d:7c:54:47:20:af:80:0f:5b:e2:22:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                0C:DB:6C:82:49:0F:4A:67:0A:B8:14:EE:7A:C4:48:52:88:EB:56:38
            X509v3 Subject Key Identifier: 
                57:19:99:35:3F:ED:D1:F1:AE:1E:9A:31:23:50:A4:17:75:59:42:51
            X509v3 Subject Alternative Name: 
                DNS:*.orthok.cn, DNS:orthok.cn
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                  CPS: http://www.digicert.com/CPS
            Authority Information Access: 
                OCSP - URI:http://status.rapidssl.com
                CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
            X509v3 Basic Constraints: 
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Aug  8 04:02:09.290 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:43:1C:98:EE:7C:FD:79:B8:5B:76:0B:08:
                                D5:3C:44:12:51:28:7B:11:65:5A:56:42:78:85:17:4E:
                                9A:3E:21:4E:02:21:00:CD:59:67:94:87:BE:F4:5B:08:
                                6F:AB:11:6D:EE:A2:A6:96:10:6B:D1:F2:38:93:E2:A1:
                                DA:0C:24:DF:81:E2:AC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Aug  8 04:02:09.348 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:65:2E:AA:44:10:DA:7D:E7:AD:18:38:4D:
                                8B:70:B0:5D:61:FF:85:F5:73:E4:22:CE:5D:AA:3A:19:
                                C8:03:E8:42:02:20:74:90:01:A5:7C:E7:DD:D4:8B:3D:
                                35:DD:0D:19:B7:47:13:B2:6D:5B:D6:83:2B:C2:92:20:
                                EF:C4:A4:C7:CC:5C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Aug  8 04:02:09.274 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:32:AE:FF:79:89:BC:59:F5:F9:52:48:58:
                                9E:B5:D9:C5:67:9B:D9:F5:97:06:CB:3D:05:86:A6:93:
                                2D:45:30:F0:02:20:0D:56:3F:D1:93:18:FE:4D:C0:C8:
                                C1:42:46:03:74:F5:C3:21:88:F1:0A:02:69:4E:7C:60:
                                AA:B2:AC:80:CB:75
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1f:3d:db:85:60:3c:0f:3f:7d:e7:9e:1a:0a:70:b5:18:30:3c:
        11:3c:e4:d7:72:68:9b:8c:bb:a5:15:01:09:4f:7d:21:15:42:
        43:38:45:89:8b:e6:2b:c5:5d:15:d8:a8:02:88:f0:84:03:69:
        5b:9c:eb:b9:d1:72:d2:26:36:87:98:5b:5a:da:9b:6d:8f:43:
        49:27:a7:08:cc:a7:10:27:d4:f6:59:a8:01:57:40:b5:15:0b:
        c0:6f:c8:88:da:c2:d2:42:5d:30:b3:5a:07:25:36:80:88:6f:
        e5:2e:7f:db:78:59:7a:72:19:50:bc:9d:d0:f7:3b:2e:7f:13:
        b5:63:f0:95:c4:0e:2f:fe:51:06:30:6d:24:87:63:c6:bd:ff:
        54:0f:0f:50:08:2b:f9:d3:15:0b:c5:59:5d:05:d9:8a:bf:cd:
        36:7b:f8:45:78:90:e7:c8:bc:bb:0c:42:f0:20:16:bf:15:dd:
        9b:4d:0c:24:87:86:8a:aa:53:9e:16:8e:8a:c4:ae:37:9b:e3:
        d1:15:93:66:39:83:e6:d0:a8:0a:72:30:1b:57:e2:74:30:fb:
        16:94:a3:d2:16:4e:0f:fe:3a:73:10:12:09:f6:61:7f:e3:ae:
        96:8f:f7:9f:46:32:82:15:5c:ff:83:1f:78:50:9a:dc:9f:d1:
        fd:8b:27:4f

SMB Status:
  Authentication: enabled
  SMB Version: 1
  OS: Windows Server 2008 R2 Enterprise 7601 Service Pack 1
  Software: Windows Server 2008 R2 Enterprise 6.1
  Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode

SQL Server Browser Service

SQL Server Browser Service:
  Instance #1:
    Server Name: SHOUJIAHKS
    Instance Name: MSSQLSERVER
    Is Clustered: False
    Version: 8.00.194
    TCP Port: 1433
    Named Pipe: \\SHOUJIAHKS\pipe\sql\query
    Version Name: MS-SQL Server 2000 RTM

HTTP/1.1 401 Unauthorized
Content-Type: text/plain; charset=utf-8
Www-Authenticate: Basic realm="Restricted"
X-Content-Type-Options: nosniff
Date: Sun, 12 Jan 2025 19:43:15 GMT
Content-Length: 13

Serv-U ftpd6.3

220 Serv-U FTP Server v6.3 for WinSock ready...