Hostnames |
ns2.andover.co.uk remote.mypchelpdesk.co.uk |
Domains | andover.co.uk mypchelpdesk.co.uk |
Country | United Kingdom |
City | High Wycombe |
Organization | Andover Business Computers |
ISP | Virgin Media Limited |
ASN | AS5089 |
Operating System | Windows (build 10.0.17763) |
1246006197 | 2025-01-07T10:17:07.42994480 / tcp
HTTP/1.1 302 Found strict-transport-security: max-age=60000; includeSubDomains Referrer-Policy: no-referrer x-frame-options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; style-src 'self' 'unsafe-inline'; Location: https://62.255.243.240:443/ Vary: Accept Content-Type: text/html; charset=utf-8 Content-Length: 98 Date: Tue, 07 Jan 2025 10:17:06 GMT Connection: keep-alive
1157488734 | 2025-01-08T12:23:40.495279135 / tcp
Microsoft RPC Endpoint Mapper d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 62.255.243.240:49664 ncalrpc: WindowsShutdown ncacn_np: \\NCS\PIPE\InitShutdown ncalrpc: WMsgKRpc05EAC0 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\NCS\PIPE\InitShutdown ncalrpc: WMsgKRpc05EAC0 ncalrpc: WMsgKRpc06F141 fc48cd89-98d6-4628-9839-86f7a3e4161a version: v1.0 ncalrpc: dabrpc ncalrpc: csebpub ncalrpc: LRPC-579412792e0890462f ncalrpc: LRPC-6ef644b2ca92a70baa ncalrpc: LRPC-cb320e28722487eea2 ncalrpc: LRPC-053db091f4908c4468 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo d09bdeb5-6171-4a34-bfe2-06fa82652568 version: v1.0 ncalrpc: csebpub ncalrpc: LRPC-579412792e0890462f ncalrpc: LRPC-6ef644b2ca92a70baa ncalrpc: LRPC-cb320e28722487eea2 ncalrpc: LRPC-053db091f4908c4468 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-6ef644b2ca92a70baa ncalrpc: LRPC-cb320e28722487eea2 ncalrpc: LRPC-053db091f4908c4468 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-cb320e28722487eea2 ncalrpc: LRPC-053db091f4908c4468 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-5876a302e3e92fc1f3 ncalrpc: LRPC-dc638a26ac201ee0ca 697dcda9-3ba9-4eb2-9247-e11f1901b0d2 version: v1.0 ncalrpc: LRPC-579412792e0890462f ncalrpc: LRPC-6ef644b2ca92a70baa ncalrpc: LRPC-cb320e28722487eea2 ncalrpc: LRPC-053db091f4908c4468 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 9b008953-f195-4bf9-bde0-4471971e58ed version: v1.0 ncalrpc: LRPC-6ef644b2ca92a70baa ncalrpc: LRPC-cb320e28722487eea2 ncalrpc: LRPC-053db091f4908c4468 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo dd59071b-3215-4c59-8481-972edadc0f6a version: v1.0 ncalrpc: umpo 0d47017b-b33b-46ad-9e18-fe96456c5078 version: v1.0 ncalrpc: umpo 95406f0b-b239-4318-91bb-cea3a46ff0dc version: v1.0 ncalrpc: umpo 4ed8abcc-f1e2-438b-981f-bb0e8abc010c version: v1.0 ncalrpc: umpo 0ff1f646-13bb-400a-ab50-9a78f2b7a85a version: v1.0 ncalrpc: umpo 6982a06e-5fe2-46b1-b39c-a2c545bfa069 version: v1.0 ncalrpc: umpo 082a3471-31b6-422a-b931-a54401960c62 version: v1.0 ncalrpc: umpo fae436b0-b864-4a87-9eda-298547cd82f2 version: v1.0 ncalrpc: umpo e53d94ca-7464-4839-b044-09a2fb8b3ae5 version: v1.0 ncalrpc: umpo 178d84be-9291-4994-82c6-3f909aca5a03 version: v1.0 ncalrpc: umpo 4dace966-a243-4450-ae3f-9b7bcb5315b8 version: v2.0 ncalrpc: umpo 1832bcf6-cab8-41d4-85d2-c9410764f75a version: v1.0 ncalrpc: umpo c521facf-09a9-42c5-b155-72388595cbf0 version: v0.0 ncalrpc: umpo 2c7fd9ce-e706-4b40-b412-953107ef9bb0 version: v0.0 ncalrpc: umpo 88abcbc3-34ea-76ae-8215-767520655a23 version: v0.0 ncalrpc: LRPC-053db091f4908c4468 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 76c217bc-c8b4-4201-a745-373ad9032b1a version: v1.0 ncalrpc: LRPC-053db091f4908c4468 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 55e6b932-1979-45d6-90c5-7f6270724112 version: v1.0 ncalrpc: LRPC-053db091f4908c4468 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 857fb1be-084f-4fb5-b59c-4b2c4be5f0cf version: v1.0 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo b8cadbaf-e84b-46b9-84f2-6f71c03f9e55 version: v1.0 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 20c40295-8dba-48e6-aebf-3e78ef3bb144 version: v1.0 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 2513bcbe-6cd4-4348-855e-7efb3c336dd3 version: v1.0 ncalrpc: LRPC-23b4dca5e4b9b5e611 ncalrpc: OLE2D26DEDBFD7D0F75BFAF3674CF70 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e version: v1.0 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo c605f9fb-f0a3-4e2a-a073-73560f8d9e3e version: v1.0 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 version: v1.0 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 8bfc3be1-6def-4e2d-af74-7c47cd0ade4a version: v1.0 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 2d98a740-581d-41b9-aa0d-a88b9d5ce938 version: v1.0 ncalrpc: LRPC-d20b5a816c4a91fc13 ncalrpc: actkernel ncalrpc: umpo 0361ae94-0316-4c6c-8ad8-c594375800e2 version: v1.0 ncalrpc: umpo 5824833b-3c1a-4ad2-bdfd-c31d19e23ed2 version: v1.0 ncalrpc: umpo bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 version: v1.0 ncalrpc: umpo 3b338d89-6cfa-44b8-847e-531531bc9992 version: v1.0 ncalrpc: umpo 8782d3b9-ebbd-4644-a3d8-e8725381919b version: v1.0 ncalrpc: umpo 085b0334-e454-4d91-9b8c-4134f9e793f3 version: v1.0 ncalrpc: umpo 4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 version: v1.0 ncalrpc: umpo c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-85ccc19b145d12a562 ncalrpc: LRPC-5be2ac8d7849da1ac2 ncalrpc: IUserProfile2 ncalrpc: LRPC-d34ac1d9869d85e6bf ncalrpc: senssvc ncalrpc: LRPC-e7f438fa3a5aab1d26 f3f09ffd-fbcf-4291-944d-70ad6e0e73bb version: v1.0 ncalrpc: LRPC-8f2484721187a6fe38 e40f7b57-7a25-4cd3-a135-7f7d3df9d16b version: v1.0 annotation: Network Connection Broker server endpoint ncalrpc: LRPC-ab24fdba94725d75cf ncalrpc: OLE3F4CFC494A326EF35EB903142D56 ncalrpc: LRPC-bfadd9660f295173d5 ncalrpc: LRPC-5876a302e3e92fc1f3 880fd55e-43b9-11e0-b1a8-cf4edfd72085 version: v1.0 annotation: KAPI Service endpoint ncalrpc: LRPC-ab24fdba94725d75cf ncalrpc: OLE3F4CFC494A326EF35EB903142D56 ncalrpc: LRPC-bfadd9660f295173d5 ncalrpc: LRPC-5876a302e3e92fc1f3 5222821f-d5e2-4885-84f1-5f6185a0ec41 version: v1.0 annotation: Network Connection Broker server endpoint for NCB Reset module ncalrpc: LRPC-bfadd9660f295173d5 ncalrpc: LRPC-5876a302e3e92fc1f3 a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 version: v1.0 ncalrpc: LRPC-6ba3321222d27c3713 ncalrpc: LRPC-dc638a26ac201ee0ca df4df73a-c52d-4e3a-8003-8437fdf8302a version: v0.0 annotation: WM_WindowManagerRPC\Server ncalrpc: LRPC-8020f77871de86f5c8 f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 62.255.243.240:49665 ncacn_np: \\NCS\pipe\eventlog ncalrpc: eventlog 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 annotation: Group Policy RPC Interface provider: gpsvc.dll ncalrpc: LRPC-cb12bac263d2d858b7 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-38b20b03e66c75ca72 3a9ef155-691d-4449-8d05-09ad57031823 version: v1.0 ncacn_ip_tcp: 62.255.243.240:49666 ncalrpc: LRPC-7983ae4d8007be85ae ncalrpc: ubpmtaskhostchannel ncacn_np: \\NCS\PIPE\atsvc ncalrpc: LRPC-a6e75100facdf5d569 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 62.255.243.240:49666 ncalrpc: LRPC-7983ae4d8007be85ae ncalrpc: ubpmtaskhostchannel ncacn_np: \\NCS\PIPE\atsvc ncalrpc: LRPC-a6e75100facdf5d569 33d84484-3626-47ee-8c6f-e7e98b113be1 version: v2.0 ncalrpc: LRPC-7983ae4d8007be85ae ncalrpc: ubpmtaskhostchannel ncacn_np: \\NCS\PIPE\atsvc ncalrpc: LRPC-a6e75100facdf5d569 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\NCS\PIPE\atsvc ncalrpc: LRPC-a6e75100facdf5d569 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\NCS\PIPE\atsvc ncalrpc: LRPC-a6e75100facdf5d569 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: LRPC-a6e75100facdf5d569 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncalrpc: LRPC-bde66e1ede9d349756 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\NCS\PIPE\wkssvc ncalrpc: LRPC-f8b1cf45631b6ebe56 eb081a0d-10ee-478a-a1dd-50995283e7a8 version: v3.0 annotation: Witness Client Test Interface ncalrpc: LRPC-f8b1cf45631b6ebe56 f2c9b409-c1c9-4100-8639-d8ab1486694a version: v1.0 annotation: Witness Client Upcall Server ncalrpc: LRPC-f8b1cf45631b6ebe56 29770a8f-829b-4158-90a2-78cd488501f7 version: v1.0 ncacn_ip_tcp: 62.255.243.240:49667 ncacn_np: \\NCS\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncalrpc: LRPC-e7f438fa3a5aab1d26 c2d1b5dd-fa81-4460-9dd6-e7658b85454b version: v1.0 ncalrpc: LRPC-07de0546249e4cb4a6 ncalrpc: OLE00B86BCACB90F57A5D8461A0D786 f44e62af-dab1-44c2-8013-049a9de417d6 version: v1.0 ncalrpc: LRPC-07de0546249e4cb4a6 ncalrpc: OLE00B86BCACB90F57A5D8461A0D786 7aeb6705-3ae6-471a-882d-f39c109edc12 version: v1.0 ncalrpc: LRPC-07de0546249e4cb4a6 ncalrpc: OLE00B86BCACB90F57A5D8461A0D786 e7f76134-9ef5-4949-a2d6-3368cc0988f3 version: v1.0 ncalrpc: LRPC-07de0546249e4cb4a6 ncalrpc: OLE00B86BCACB90F57A5D8461A0D786 b37f900a-eae4-4304-a2ab-12bb668c0188 version: v1.0 ncalrpc: LRPC-07de0546249e4cb4a6 ncalrpc: OLE00B86BCACB90F57A5D8461A0D786 abfb6ca3-0c5e-4734-9285-0aee72fe8d1c version: v1.0 ncalrpc: LRPC-07de0546249e4cb4a6 ncalrpc: OLE00B86BCACB90F57A5D8461A0D786 0d3c7f20-1c8d-4654-a1b3-51563b298bda version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-e6da28823adf3c2178 ncalrpc: OLE839BFAB047D53FBFF3D6F5ED0605 b18fbab6-56f8-4702-84e0-41053293a869 version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-e6da28823adf3c2178 ncalrpc: OLE839BFAB047D53FBFF3D6F5ED0605 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-249930e4717ae3aee8 ncalrpc: LRPC-7ac2dce33a698d70cc ncalrpc: LRPC-9377297cd2818860b1 ncalrpc: LRPC-7a864bed1bfe735c3c f47433c3-3e9d-4157-aad4-83aa1f5c2d4c version: v1.0 annotation: Fw APIs ncalrpc: LRPC-7ac2dce33a698d70cc ncalrpc: LRPC-9377297cd2818860b1 ncalrpc: LRPC-7a864bed1bfe735c3c 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-9377297cd2818860b1 ncalrpc: LRPC-7a864bed1bfe735c3c dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-7a864bed1bfe735c3c a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncalrpc: LRPC-3b2b159f74aa8a88c5 76f03f96-cdfd-44fc-a22c-64950a001209 version: v1.0 protocol: [MS-PAR]: Print System Asynchronous Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 62.255.243.240:49668 ncalrpc: LRPC-e7670bc9e20f357321 4a452661-8290-4b36-8fbe-7f4093a94978 version: v1.0 provider: spoolsv.exe ncacn_ip_tcp: 62.255.243.240:49668 ncalrpc: LRPC-e7670bc9e20f357321 ae33069b-a2a8-46ee-a235-ddfd339be281 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 62.255.243.240:49668 ncalrpc: LRPC-e7670bc9e20f357321 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 62.255.243.240:49668 ncalrpc: LRPC-e7670bc9e20f357321 12345678-1234-abcd-ef00-0123456789ab version: v1.0 protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 62.255.243.240:49668 ncalrpc: LRPC-e7670bc9e20f357321 b58aa02e-2884-4e97-8176-4ee06d794184 version: v1.0 provider: sysmain.dll ncalrpc: LRPC-2a7031594824acbe3f c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 version: v1.0 annotation: Adh APIs ncalrpc: OLEFDA4A249E309CDDFD489EED28044 ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-c2c7eac334991a5d4a c36be077-e14b-4fe9-8abc-e856ef4f048b version: v1.0 annotation: Proxy Manager client server endpoint ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-c2c7eac334991a5d4a 2e6035b2-e8f1-41a7-a044-656b439c4c34 version: v1.0 annotation: Proxy Manager provider server endpoint ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-c2c7eac334991a5d4a 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncalrpc: LRPC-c2c7eac334991a5d4a 1a0d010f-1c33-432c-b0f5-8cf4e8053099 version: v1.0 annotation: IdSegSrv service ncalrpc: LRPC-2eb1a53dbb84bc4d7e 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncalrpc: LRPC-2eb1a53dbb84bc4d7e 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncalrpc: LRPC-28eaf487b1fa2d901f 6b5bdd1e-528c-422c-af8c-a4079be4fe48 version: v1.0 annotation: Remote Fw APIs protocol: [MS-FASP]: Firewall and Advanced Security Protocol provider: FwRemoteSvr.dll ncacn_ip_tcp: 62.255.243.240:49669 ncalrpc: ipsec 50abc2a4-574d-40b3-9d66-ee4fd5fba076 version: v5.0 protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management provider: dns.exe ncacn_ip_tcp: 62.255.243.240:49671 98cd761e-e77d-41c8-a3c0-0fb756d90ec2 version: v1.0 ncalrpc: LRPC-42db8c394576fd43ac d22895ef-aff4-42c5-a5b2-b14466d34ab4 version: v1.0 ncalrpc: LRPC-42db8c394576fd43ac e38f5360-8572-473e-b696-1b46873beeab version: v1.0 ncalrpc: LRPC-42db8c394576fd43ac 95095ec8-32ea-4eb0-a3e2-041f97b36168 version: v1.0 ncalrpc: LRPC-42db8c394576fd43ac fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d version: v1.0 ncalrpc: LRPC-42db8c394576fd43ac 4c9dbf19-d39e-4bb9-90ee-8f7179b20283 version: v1.0 ncalrpc: LRPC-42db8c394576fd43ac 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 62.255.243.240:49673 5b821720-f63b-11d0-aad2-00c04fc324db version: v1.0 protocol: [MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP) provider: dhcpssvc.dll ncacn_ip_tcp: 62.255.243.240:49674 ncalrpc: OLE1FB818C94032B0378A5186BB4C3F 6bffd098-a112-3610-9833-46c3f874532d version: v1.0 protocol: [MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP) provider: dhcpssvc.dll ncacn_ip_tcp: 62.255.243.240:49674 ncalrpc: OLE1FB818C94032B0378A5186BB4C3F 51a227ae-825b-41f2-b4a9-1ac9557a1018 version: v1.0 annotation: Ngc Pop Key Service ncacn_ip_tcp: 62.255.243.240:49675 ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\NCS\pipe\lsass 8fb74744-b2ff-4c00-be0d-9ef9a191fe1b version: v1.0 annotation: Ngc Pop Key Service ncacn_ip_tcp: 62.255.243.240:49675 ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\NCS\pipe\lsass b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v2.0 annotation: KeyIso ncacn_ip_tcp: 62.255.243.240:49675 ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\NCS\pipe\lsass 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 62.255.243.240:49675 ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\NCS\pipe\lsass 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-095f93f7b1f6c11da6 ncalrpc: LRPC-095f93f7b1f6c11da6 ncalrpc: LRPC-095f93f7b1f6c11da6 54b4c689-969a-476f-8dc2-990885e9f562 version: v0.0 ncalrpc: LRPC-bb62e1f2d0abf03d80 be7f785e-0e3a-4ab7-91de-7e46e443be29 version: v0.0 ncalrpc: LRPC-bb62e1f2d0abf03d80 0767a036-0d22-48aa-ba69-b619480f38cb version: v1.0 annotation: PcaSvc provider: pcasvc.dll ncalrpc: LRPC-22ff4d1795ed552a76 bf4dc912-e52f-4904-8ebe-9317c1bdd497 version: v1.0 ncalrpc: LRPC-4be37b9ad75c10206e ncalrpc: OLEB561AA46669607283A2EFCBD3436 a4b8d482-80ce-40d6-934d-b22a01a44fe7 version: v1.0 annotation: LicenseManager ncalrpc: LicenseServiceEndpoint 58e604e8-9adb-4d2e-a464-3b0683fb1480 version: v1.0 annotation: AppInfo provider: appinfo.dll ncalrpc: LRPC-4401890f303e77d8c2 fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 version: v1.0 annotation: AppInfo provider: appinfo.dll ncalrpc: LRPC-4401890f303e77d8c2 5f54ce7d-5b79-4175-8584-cb65313a0e98 version: v1.0 annotation: AppInfo provider: appinfo.dll ncalrpc: LRPC-4401890f303e77d8c2 201ef99a-7fa0-444c-9399-19ba84f12a1a version: v1.0 annotation: AppInfo provider: appinfo.dll ncalrpc: LRPC-4401890f303e77d8c2 0497b57d-2e66-424f-a0c6-157cd5d41700 version: v1.0 annotation: AppInfo ncalrpc: LRPC-4401890f303e77d8c2 c503f532-443a-4c69-8300-ccd1fbdb3839 version: v2.0 ncalrpc: LRPC-4dcb0501a0cb9e1f64 ncalrpc: OLE495DC95774F686C0E4597263C063 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncalrpc: 95198ed1-f7d0-4342-9ddf-6e37ad950084 ncalrpc: LRPC-93986b6c69427d68ab
-491722162 | 2024-12-23T21:27:37.312858137 / udp
NetBIOS Response: MAC Address: 50:3E:AA:11:B0:72 Names: NCS <0x0> WORKGROUP <0x0>
50:3E:AA:11:B0:72 OUI: 50:3E:AA Organization: TP-LINK TECHNOLOGIES CO.,LTD. Assignment: MA-L Registration Date: 2017-07-20
-771585430 | 2025-01-10T22:22:01.3265073389 / tcp
Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00 Remote Desktop Protocol NTLM Info: OS: Windows 10 (version 1809)/Windows Server 2019 (version 1809) OS Build: 10.0.17763 Target Name: NCS NetBIOS Domain Name: NCS NetBIOS Computer Name: NCS DNS Domain Name: NCS FQDN: NCS
Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d2:60:a5:62:aa:9d:81:44:44:38:02:20:69:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=NCS Validity Not Before: Nov 15 10:06:48 2024 GMT Not After : May 17 10:06:48 2025 GMT Subject: CN=NCS Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:a4:62:fd:c2:92:43:ad:77:8e:3f:12:a4:5f:e6: 6e:e6:d0:0b:87:68:8d:cf:e0:88:c2:0c:31:8b:e1: 14:33:e1:c6:06:55:17:6e:e9:83:ca:9f:68:f8:fe: df:56:e6:37:a9:74:74:04:8d:a7:96:c6:94:db:ba: 65:11:cc:f6:f7:e1:11:9d:fa:ed:e1:3b:a0:40:d4: 1a:92:24:84:d8:84:b5:54:58:d0:6f:36:49:4e:e9: a8:55:14:f9:dd:a6:d6:2c:0a:4d:e2:88:9c:d3:18: bc:de:6a:fa:91:45:82:91:e7:3f:d0:c4:87:d9:6c: 47:58:94:e9:23:60:3b:3d:1c:36:6c:7d:4b:34:06: fa:f7:c7:c6:7a:1b:ce:34:3d:ba:cf:94:a4:43:6c: 6f:8e:9a:ba:58:76:be:22:be:6b:fa:06:ff:29:ce: 20:6e:93:06:3a:77:b8:00:79:c8:ae:7d:a7:da:6d: ab:6a:0e:cd:23:5e:84:5d:89:ec:66:e3:cc:87:48: d0:f8:eb:60:4e:37:01:06:4d:67:5c:71:93:29:b6: a7:9f:be:91:0e:63:cd:2d:d9:74:3f:14:49:ef:ae: cb:e7:8f:cd:92:4d:10:5f:73:a5:9a:68:ee:80:b8: b7:ac:91:42:39:23:5e:7c:94:80:46:02:cc:d7:0e: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Key Usage: Key Encipherment, Data Encipherment Signature Algorithm: sha256WithRSAEncryption Signature Value: 61:a6:c9:61:73:43:86:ed:3e:14:46:fc:d9:d9:00:f1:29:60: 11:4b:53:54:36:70:4b:df:1b:35:46:48:94:f8:09:fd:80:75: 13:e0:a2:41:ba:8e:63:6a:83:3d:79:a4:e6:1c:23:c9:7a:a0: 20:fc:11:b1:a0:bd:aa:21:24:b9:0d:fd:38:f7:97:4c:64:de: ed:15:1c:51:91:8e:fa:16:97:60:9e:09:97:92:fb:34:a1:db: 0b:36:b5:77:bc:78:3e:9e:6b:fc:d1:4b:5c:d1:09:1f:b8:7a: 60:df:68:ea:8d:12:81:4e:ec:b3:a8:4e:39:89:db:7d:39:82: c6:f8:16:82:94:6e:f6:88:69:ef:52:3e:2d:89:94:ff:c0:38: 90:c4:68:34:1c:1b:ce:bf:2e:27:50:ab:fc:81:30:ca:e9:76: 16:97:db:70:a0:2c:ff:7f:71:56:fd:83:4f:67:c9:7c:d1:27: 4f:d0:19:a4:5b:af:dd:2e:a7:6a:26:95:3c:6a:b9:87:29:26: 20:b9:ae:a0:ec:c5:c7:c2:77:d9:e4:57:78:9a:ff:90:3a:68: 56:44:18:1a:0c:af:87:e8:b2:cd:97:ed:22:40:d0:79:a8:b3: d0:a2:d9:fd:12:45:b8:4d:11:60:94:94:7e:dc:68:ed:bb:8e: 06:fe:5a:ad
-277592876 | 2025-01-05T19:30:07.9336024433 / tcp
HTTP/1.1 200 OK Host: 62.255.243.240 Connection: keep-alive Cache-Control: no-cache Content-Type: text/html Content-Length: 150
Certificate: Data: Version: 3 (0x2) Serial Number: 70989793074 (0x1087524732) Signature Algorithm: sha384WithRSAEncryption Issuer: CN=MeshCentralRoot-eafba6, O=unknown, C=unknown Validity Not Before: Jan 1 00:00:00 2018 GMT Not After : Dec 31 00:00:00 2049 GMT Subject: CN=remote.mypchelpdesk.co.uk Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:c8:1a:e6:c4:fc:64:88:53:bd:5a:08:f1:04:c5: d7:68:83:d3:91:e5:a5:d5:0c:39:5f:82:90:be:ef: ab:ef:e4:cd:3c:0a:02:b2:84:2f:33:90:a4:bd:cb: 50:6d:a0:91:fb:39:34:9b:20:93:8e:dd:25:a1:1a: 2f:53:69:be:c8:9c:3a:37:0d:9c:26:39:42:59:2a: 99:99:d8:84:b4:47:61:80:df:5f:27:bc:04:ab:25: 55:a6:2d:3a:dc:9f:da:8e:c6:6f:6c:72:49:8b:51: 28:00:93:3d:8b:b6:54:e1:e2:7f:5a:0e:e9:f9:75: fd:40:c1:d1:9f:31:44:2c:fc:5f:12:0d:4f:2f:44: 0d:ce:7e:70:fb:e2:44:2c:81:57:a9:30:ea:ff:b0: d9:01:b6:78:b8:58:ea:2a:b8:bc:a6:f5:b4:36:6c: 33:df:9b:4d:2a:e5:2a:43:ab:1e:53:14:25:7b:16: af:17:54:36:70:aa:ba:37:53:64:14:e9:74:4b:3f: 78:a0:52:45:1f:84:13:79:ae:1c:e5:23:f5:f5:f7: ab:e5:3f:d2:57:3f:fe:13:ff:5e:ca:9f:5e:ba:6f: bf:a1:8e:bb:01:05:58:3d:a9:fe:77:bf:44:b6:21: e0:08:b6:6b:9f:d6:37:de:f3:ab:20:e0:06:d3:d0: 24:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Subject Key Identifier: 80:FA:92:88:D3:22:A8:F5:2A:68:08:9C:B4:F1:6C:96:BC:D0:92:9D X509v3 Subject Alternative Name: DNS:remote.mypchelpdesk.co.uk, URI:http://remote.mypchelpdesk.co.uk/, DNS:localhost, URI:http://localhost/, IP Address:127.0.0.1 Signature Algorithm: sha384WithRSAEncryption Signature Value: c5:23:e1:d7:e7:35:73:8c:ae:55:65:98:a9:9d:2e:ef:69:d9: a9:aa:76:be:c9:71:f4:c2:21:73:67:8c:90:7b:87:ae:3b:36: f5:ac:47:06:c8:2e:f7:08:49:54:50:75:f3:7e:f9:0b:75:ed: a4:32:9f:7c:51:cf:ae:45:c5:d5:02:a7:41:a4:ee:e5:0b:4c: 07:28:da:11:a9:48:8d:72:f2:47:0e:69:58:dc:6a:52:f0:cf: 47:c7:8f:55:a0:81:0f:c8:d1:03:57:21:86:6e:a5:ca:bc:ee: 94:5e:4b:f7:af:17:0e:a2:fc:64:4f:96:be:37:80:f3:3f:a4: 06:91:94:90:8b:32:57:80:97:0b:32:36:d3:a6:b8:ec:08:fb: 9f:ab:b9:5d:de:63:81:79:24:dd:b0:51:c7:01:e5:73:48:01: 9d:92:b5:a2:e3:4b:a0:9f:05:e9:66:04:95:16:9a:19:b0:c3: a5:10:6f:77:52:98:a5:9b:98:71:07:37:e8:27:fb:90:83:1d: 19:4a:18:b7:08:d0:c3:c0:45:11:88:bf:ff:3b:9b:13:94:01: d4:29:7b:a6:01:2f:ff:83:bd:17:a7:6d:35:03:6c:8e:53:b4: 37:77:54:65:bf:8a:7d:46:17:b1:fd:a7:00:78:07:d5:29:b6: 18:d2:62:ad:f6:24:d4:f0:f3:aa:b4:88:fc:6c:26:73:46:d3: 8c:fb:1a:9a:14:46:24:33:a3:b2:df:12:ab:8d:4a:92:bf:2c: b2:97:94:03:b0:e4:84:03:62:ec:5c:d1:83:13:8d:e0:8c:d8: d1:98:6c:48:3a:ec:32:cb:9c:b9:d1:81:e1:43:cd:b9:25:9c: c7:10:88:96:b4:4b:09:c2:ff:76:aa:86:34:db:87:90:05:13: 8f:96:7c:ee:65:0d:a8:86:86:e2:3d:a2:65:1e:bb:19:d9:a5: 30:03:1f:41:c5:84:bb:41:d5:31:3f:8b:95:b3:86:ff:ac:09: 6d:e9:45:95:4b:e6
1489525118 | 2025-01-06T07:28:35.5558695985 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Mon, 06 Jan 2025 07:28:35 GMT Connection: close Content-Length: 315 WinRM NTLM Info: OS: Windows Server 2019 (version 1809) OS Build: 10.0.17763 Target Name: NCS NetBIOS Domain Name: NCS NetBIOS Computer Name: NCS DNS Domain Name: NCS FQDN: NCS