| Hostnames |
ecotopia.com remote.ecotopia.com www.ecotopia.com |
| Domains | ecotopia.com |
| Country | United States |
| City | Santa Clara |
| Organization | Private Customer - AT&T Internet Services |
| ISP | AT&T Services, Inc. |
| ASN | AS7018 |
| Operating System | Windows |
703707298 | 2024-10-11T05:33:00.28285080 / tcp
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Sat, 10 Aug 2024 21:37:45 GMT Accept-Ranges: bytes ETag: "5332b3896debda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Fri, 11 Oct 2024 05:31:26 GMT Content-Length: 703
703707298 | 2024-10-13T18:40:35.384187443 / tcp
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Sat, 10 Aug 2024 21:37:45 GMT Accept-Ranges: bytes ETag: "5332b3896debda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:35:19 GMT Content-Length: 703
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d0:4a:05:43:49:75:23:a6:24:1f:29:b3:2b:d5:56:11:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R10
Validity
Not Before: Oct 13 15:54:27 2024 GMT
Not After : Jan 11 15:54:26 2025 GMT
Subject: CN=ecotopia.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:8c:20:35:56:e6:25:cc:94:39:a9:e4:73:05:e6:
c1:9c:86:d6:14:21:58:a8:c8:a4:05:12:c9:3c:99:
41:de:62:a5:24:e6:81:49:bf:e1:c7:c5:2d:af:38:
f3:d7:d8:3a:b2:41:41:4c:18:81:5a:93:6b:2c:9a:
32:d3:c2:e9:9b:3e:4e:4b:01:ae:52:03:c1:dd:5f:
6f:eb:5e:a5:c4:9b:36:1e:55:c4:21:e6:b8:37:a9:
07:57:21:7c:a2:04:74:40:77:d5:83:12:7c:88:e7:
7b:61:a2:fc:7e:6f:f4:d2:df:50:d4:91:83:2b:40:
ad:4e:03:6a:44:00:b2:bc:ac:df:f9:72:85:65:7f:
cc:06:a5:12:32:85:b7:e6:38:c4:28:82:eb:e4:59:
c2:50:ba:a3:e0:cb:c7:2c:5c:fa:ea:b6:7c:8e:ac:
f5:41:15:ed:1c:88:e4:a5:d8:09:7a:da:92:ab:7c:
d3:0e:0f:e4:14:b7:e4:3f:35:74:11:7f:3a:c7:d9:
b2:49:2e:e0:c6:5b:ff:ff:04:47:a2:d1:1f:06:6d:
42:30:c5:7e:36:68:f6:d1:91:88:01:0b:8e:d9:6e:
11:5d:db:a0:49:81:8b:8a:6c:ee:19:36:0e:bb:61:
0a:59:d0:6e:36:39:71:9d:59:32:17:5f:02:0a:52:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
0C:4E:C0:C2:51:6C:63:7F:D7:5C:56:D8:06:A4:DB:98:05:F5:4F:8A
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:ecotopia.com, DNS:remote.ecotopia.com, DNS:www.ecotopia.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
Timestamp : Oct 13 16:52:57.584 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:91:F8:66:DE:33:2F:49:A9:CD:55:AD:
2E:B2:96:F2:93:BF:61:55:D9:2D:85:AF:97:E2:3D:27:
3B:B6:2F:00:9B:02:20:05:BC:35:51:8E:AC:69:D1:40:
F9:C5:94:B9:63:96:67:E4:CF:62:01:CE:E1:37:53:48:
EA:A5:0B:81:FB:34:10
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Oct 13 16:52:57.617 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:9C:09:73:80:0E:25:1D:09:0B:8A:D6:
A2:6B:13:02:96:C8:89:DC:03:59:39:3E:D7:3C:4C:5C:
9C:E3:85:C6:7B:02:20:4E:94:B6:6A:EB:3D:7C:AD:FF:
A4:9C:86:82:03:F7:D6:05:3D:52:BE:C2:3A:19:83:87:
86:0B:1A:83:CD:FD:50
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
5f:d5:dd:22:b5:42:ee:14:3c:e5:57:6c:e9:83:13:3f:e7:7d:
33:f4:19:5c:cd:c2:fd:3d:be:b9:84:fa:22:41:cc:ed:fa:6a:
a8:93:f2:16:98:ea:89:77:ad:d1:4d:62:42:3e:e9:54:15:55:
03:e6:de:88:da:49:0b:70:e8:18:0d:78:3e:95:fb:ec:4c:a1:
b1:01:bc:7a:54:21:b9:2c:cc:9c:94:aa:96:39:4d:a0:6c:c6:
59:f5:7b:af:22:d4:9f:5b:5d:f8:cf:5f:ae:50:eb:4b:2f:3b:
e0:19:e7:b6:81:c1:12:30:fd:49:17:1d:b5:6a:f3:5c:16:28:
41:27:e5:fb:8e:15:af:a9:1e:10:20:e6:b8:ae:0b:82:d1:d0:
e6:df:6b:09:52:a2:9e:ea:9f:76:db:d2:7b:1e:8c:45:56:f2:
eb:d1:3f:ac:f6:37:41:cc:8d:53:31:8a:65:91:2b:14:d3:e9:
20:87:61:03:0a:b8:6c:09:e4:29:cc:e4:45:97:22:26:49:85:
85:98:29:9d:bf:dd:cc:fb:a5:78:80:04:22:e4:a5:dc:43:f2:
62:68:9e:4d:69:15:0d:eb:10:1c:d5:41:36:2b:90:d6:4b:78:
63:e3:eb:84:fb:94:a4:87:dc:6f:33:95:b5:60:df:60:03:56:
93:59:29:3e
-110190215 | 2024-10-06T19:43:17.235523593 / tcp
ncacn_http/1.0 Microsoft RPC Endpoint Mapper over HTTP 51a227ae-825b-41f2-b4a9-1ac9557a1018 version: v1.0 annotation: Ngc Pop Key Service ncacn_ip_tcp: 99.24.130.180:49671 ncalrpc: NETLOGON_LRPC ncacn_ip_tcp: 99.24.130.180:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\ECOWEB\pipe\lsass 8fb74744-b2ff-4c00-be0d-9ef9a191fe1b version: v1.0 annotation: Ngc Pop Key Service ncacn_ip_tcp: 99.24.130.180:49671 ncalrpc: NETLOGON_LRPC ncacn_ip_tcp: 99.24.130.180:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\ECOWEB\pipe\lsass b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v2.0 annotation: KeyIso ncacn_ip_tcp: 99.24.130.180:49671 ncalrpc: NETLOGON_LRPC ncacn_ip_tcp: 99.24.130.180:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\ECOWEB\pipe\lsass 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 version: v0.0 annotation: RemoteAccessCheck protocol: [MS-RAA]: Remote Authorization API Protocol ncacn_ip_tcp: 99.24.130.180:49671 ncalrpc: NETLOGON_LRPC ncacn_ip_tcp: 99.24.130.180:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\ECOWEB\pipe\lsass ncacn_ip_tcp: 99.24.130.180:49671 ncalrpc: NETLOGON_LRPC ncacn_ip_tcp: 99.24.130.180:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\ECOWEB\pipe\lsass 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 99.24.130.180:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\ECOWEB\pipe\lsass d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 99.24.130.180:49665 ncalrpc: WindowsShutdown ncacn_np: \\ECOWEB\PIPE\InitShutdown ncalrpc: WMsgKRpc09A030 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\ECOWEB\PIPE\InitShutdown ncalrpc: WMsgKRpc09A030 ncalrpc: WMsgKRpc013984E12 ncalrpc: WMsgKRpc02E8F0751 fc48cd89-98d6-4628-9839-86f7a3e4161a version: v1.0 ncalrpc: dabrpc ncalrpc: csebpub ncalrpc: LRPC-b671c1fe929c97d5e3 ncalrpc: LRPC-dea5ddc0e115532d33 ncalrpc: LRPC-ba340315433d2f5218 ncalrpc: LRPC-70e337f2b00a09c141 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo d09bdeb5-6171-4a34-bfe2-06fa82652568 version: v1.0 ncalrpc: csebpub ncalrpc: LRPC-b671c1fe929c97d5e3 ncalrpc: LRPC-dea5ddc0e115532d33 ncalrpc: LRPC-ba340315433d2f5218 ncalrpc: LRPC-70e337f2b00a09c141 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-dea5ddc0e115532d33 ncalrpc: LRPC-ba340315433d2f5218 ncalrpc: LRPC-70e337f2b00a09c141 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-ba340315433d2f5218 ncalrpc: LRPC-70e337f2b00a09c141 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-2212bb99e193953649 ncalrpc: LRPC-6c6324b3f6107e02da 697dcda9-3ba9-4eb2-9247-e11f1901b0d2 version: v1.0 ncalrpc: LRPC-b671c1fe929c97d5e3 ncalrpc: LRPC-dea5ddc0e115532d33 ncalrpc: LRPC-ba340315433d2f5218 ncalrpc: LRPC-70e337f2b00a09c141 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 9b008953-f195-4bf9-bde0-4471971e58ed version: v1.0 ncalrpc: LRPC-dea5ddc0e115532d33 ncalrpc: LRPC-ba340315433d2f5218 ncalrpc: LRPC-70e337f2b00a09c141 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 0d47017b-b33b-46ad-9e18-fe96456c5078 version: v1.0 ncalrpc: umpo 95406f0b-b239-4318-91bb-cea3a46ff0dc version: v1.0 ncalrpc: umpo 4ed8abcc-f1e2-438b-981f-bb0e8abc010c version: v1.0 ncalrpc: umpo 0ff1f646-13bb-400a-ab50-9a78f2b7a85a version: v1.0 ncalrpc: umpo 6982a06e-5fe2-46b1-b39c-a2c545bfa069 version: v1.0 ncalrpc: umpo 082a3471-31b6-422a-b931-a54401960c62 version: v1.0 ncalrpc: umpo fae436b0-b864-4a87-9eda-298547cd82f2 version: v1.0 ncalrpc: umpo e53d94ca-7464-4839-b044-09a2fb8b3ae5 version: v1.0 ncalrpc: umpo 178d84be-9291-4994-82c6-3f909aca5a03 version: v1.0 ncalrpc: umpo 4dace966-a243-4450-ae3f-9b7bcb5315b8 version: v2.0 ncalrpc: umpo 1832bcf6-cab8-41d4-85d2-c9410764f75a version: v1.0 ncalrpc: umpo c521facf-09a9-42c5-b155-72388595cbf0 version: v0.0 ncalrpc: umpo 2c7fd9ce-e706-4b40-b412-953107ef9bb0 version: v0.0 ncalrpc: umpo 88abcbc3-34ea-76ae-8215-767520655a23 version: v0.0 ncalrpc: LRPC-70e337f2b00a09c141 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 76c217bc-c8b4-4201-a745-373ad9032b1a version: v1.0 ncalrpc: LRPC-70e337f2b00a09c141 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 55e6b932-1979-45d6-90c5-7f6270724112 version: v1.0 ncalrpc: LRPC-70e337f2b00a09c141 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 857fb1be-084f-4fb5-b59c-4b2c4be5f0cf version: v1.0 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 20c40295-8dba-48e6-aebf-3e78ef3bb144 version: v2.0 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 2513bcbe-6cd4-4348-855e-7efb3c336dd3 version: v2.0 ncalrpc: OLE79E57CA26C0C241CF599ADD1DA3E ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e version: v1.0 ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo c605f9fb-f0a3-4e2a-a073-73560f8d9e3e version: v1.0 ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 version: v1.0 ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 8bfc3be1-6def-4e2d-af74-7c47cd0ade4a version: v1.0 ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo 2d98a740-581d-41b9-aa0d-a88b9d5ce938 version: v1.0 ncalrpc: LRPC-eefa4a1b267a516ceb ncalrpc: actkernel ncalrpc: umpo dd59071b-3215-4c59-8481-972edadc0f6a version: v1.0 ncalrpc: actkernel ncalrpc: umpo 0361ae94-0316-4c6c-8ad8-c594375800e2 version: v1.0 ncalrpc: umpo 5824833b-3c1a-4ad2-bdfd-c31d19e23ed2 version: v1.0 ncalrpc: umpo bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 version: v1.0 ncalrpc: umpo 3b338d89-6cfa-44b8-847e-531531bc9992 version: v1.0 ncalrpc: umpo 8782d3b9-ebbd-4644-a3d8-e8725381919b version: v1.0 ncalrpc: umpo 085b0334-e454-4d91-9b8c-4134f9e793f3 version: v1.0 ncalrpc: umpo 4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 version: v1.0 ncalrpc: umpo c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-93436c0d461931de05 ncalrpc: IUserProfile2 ncalrpc: LRPC-fdf1a7a7a08085a885 ncalrpc: LRPC-0d5fb222161fb3c4c3 ncalrpc: senssvc ncalrpc: LRPC-ba975f5534effe9062 e40f7b57-7a25-4cd3-a135-7f7d3df9d16b version: v1.0 ncalrpc: LRPC-a785dfea22abde7a1a 880fd55e-43b9-11e0-b1a8-cf4edfd72085 version: v1.0 annotation: KAPI Service endpoint ncalrpc: LRPC-eb7bc13cb60afe46e5 ncalrpc: OLED247729E9A0E1BD4CD60DC25E75B ncalrpc: LRPC-2212bb99e193953649 5222821f-d5e2-4885-84f1-5f6185a0ec41 version: v1.0 ncalrpc: LRPC-f30459bfaa618f6744 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-a13ad4a36ee1b9e0de a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 version: v1.0 ncalrpc: LRPC-256ede9bc470f9671a ncalrpc: LRPC-6c6324b3f6107e02da 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncalrpc: LRPC-04e08ba11ed9d5d573 ncalrpc: DNSResolver 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 99.24.130.180:49666 ncacn_np: \\ECOWEB\pipe\eventlog ncalrpc: eventlog 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 annotation: Group Policy RPC Interface provider: gpsvc.dll ncalrpc: LRPC-3a4421b59686ba0c90 3a9ef155-691d-4449-8d05-09ad57031823 version: v1.0 ncacn_ip_tcp: 99.24.130.180:49670 ncalrpc: LRPC-8a75f45fe1251caf38 ncalrpc: ubpmtaskhostchannel ncacn_np: \\ECOWEB\PIPE\atsvc ncalrpc: LRPC-3c1f0a461b4a570184 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 99.24.130.180:49670 ncalrpc: LRPC-8a75f45fe1251caf38 ncalrpc: ubpmtaskhostchannel ncacn_np: \\ECOWEB\PIPE\atsvc ncalrpc: LRPC-3c1f0a461b4a570184 33d84484-3626-47ee-8c6f-e7e98b113be1 version: v2.0 ncalrpc: LRPC-8a75f45fe1251caf38 ncalrpc: ubpmtaskhostchannel ncacn_np: \\ECOWEB\PIPE\atsvc ncalrpc: LRPC-3c1f0a461b4a570184 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\ECOWEB\PIPE\atsvc ncalrpc: LRPC-3c1f0a461b4a570184 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\ECOWEB\PIPE\atsvc ncalrpc: LRPC-3c1f0a461b4a570184 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: LRPC-3c1f0a461b4a570184 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-91db7a6e83b711c918 ncalrpc: LRPC-a85322913d398a1c3b ncalrpc: LRPC-b119c695fb8f10c1f1 ncalrpc: LRPC-e513bcb018ca808ced f47433c3-3e9d-4157-aad4-83aa1f5c2d4c version: v1.0 annotation: Fw APIs ncalrpc: LRPC-a85322913d398a1c3b ncalrpc: LRPC-b119c695fb8f10c1f1 ncalrpc: LRPC-e513bcb018ca808ced 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-b119c695fb8f10c1f1 ncalrpc: LRPC-e513bcb018ca808ced dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-e513bcb018ca808ced 3f787932-3452-4363-8651-6ea97bb373bb version: v1.0 annotation: NSP Rpc Interface ncalrpc: LRPC-a7f416ca42a3c042b6 ncalrpc: OLE4A5D9B7942F91F615A9522641582 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncalrpc: dda44e48-3515-4fe0-aa1d-d15f97794f20 ncalrpc: LRPC-6eee8c82b33c334d4a 13560fa9-8c09-4b56-a1fd-04d083b9b2a1 version: v1.0 ncalrpc: LRPC-1967522ed4c9fc7755 ncalrpc: OLE0601A21897D468D950FBE27F14AF c2d1b5dd-fa81-4460-9dd6-e7658b85454b version: v1.0 ncalrpc: LRPC-1967522ed4c9fc7755 ncalrpc: OLE0601A21897D468D950FBE27F14AF f44e62af-dab1-44c2-8013-049a9de417d6 version: v1.0 ncalrpc: LRPC-1967522ed4c9fc7755 ncalrpc: OLE0601A21897D468D950FBE27F14AF b37f900a-eae4-4304-a2ab-12bb668c0188 version: v1.0 ncalrpc: LRPC-1967522ed4c9fc7755 ncalrpc: OLE0601A21897D468D950FBE27F14AF abfb6ca3-0c5e-4734-9285-0aee72fe8d1c version: v1.0 ncalrpc: LRPC-1967522ed4c9fc7755 ncalrpc: OLE0601A21897D468D950FBE27F14AF c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 version: v1.0 annotation: Adh APIs ncalrpc: OLEDEF4A3A8A3588F9A57AAA09579C1 ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-c35136c6daa2404646 c36be077-e14b-4fe9-8abc-e856ef4f048b version: v1.0 annotation: Proxy Manager client server endpoint ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-c35136c6daa2404646 2e6035b2-e8f1-41a7-a044-656b439c4c34 version: v1.0 annotation: Proxy Manager provider server endpoint ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-c35136c6daa2404646 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncalrpc: LRPC-c35136c6daa2404646 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\ECOWEB\PIPE\wkssvc ncalrpc: LRPC-9dd5558c9aaa0ec262 eb081a0d-10ee-478a-a1dd-50995283e7a8 version: v3.0 annotation: Witness Client Test Interface ncalrpc: LRPC-9dd5558c9aaa0ec262 f2c9b409-c1c9-4100-8639-d8ab1486694a version: v1.0 annotation: Witness Client Upcall Server ncalrpc: LRPC-9dd5558c9aaa0ec262 29770a8f-829b-4158-90a2-78cd488501f7 version: v1.0 ncacn_ip_tcp: 99.24.130.180:49677 ncacn_np: \\ECOWEB\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncalrpc: LRPC-ba975f5534effe9062 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncalrpc: LRPC-774c5113b334e004fc 0d3c7f20-1c8d-4654-a1b3-51563b298bda version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-822f8f86f390cd5217 ncalrpc: OLE906B32EE4158EDD0FB564496617A b18fbab6-56f8-4702-84e0-41053293a869 version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-822f8f86f390cd5217 ncalrpc: OLE906B32EE4158EDD0FB564496617A b58aa02e-2884-4e97-8176-4ee06d794184 version: v1.0 provider: sysmain.dll ncalrpc: LRPC-26f9e7c74899829e2d 76f03f96-cdfd-44fc-a22c-64950a001209 version: v1.0 protocol: [MS-PAR]: Print System Asynchronous Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 99.24.130.180:49697 ncalrpc: LRPC-5b77cb7ef2224a38fc 4a452661-8290-4b36-8fbe-7f4093a94978 version: v1.0 provider: spoolsv.exe ncacn_ip_tcp: 99.24.130.180:49697 ncalrpc: LRPC-5b77cb7ef2224a38fc ae33069b-a2a8-46ee-a235-ddfd339be281 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 99.24.130.180:49697 ncalrpc: LRPC-5b77cb7ef2224a38fc 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 99.24.130.180:49697 ncalrpc: LRPC-5b77cb7ef2224a38fc 12345678-1234-abcd-ef00-0123456789ab version: v1.0 protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 99.24.130.180:49697 ncalrpc: LRPC-5b77cb7ef2224a38fc 1a0d010f-1c33-432c-b0f5-8cf4e8053099 version: v1.0 annotation: IdSegSrv service ncalrpc: LRPC-4e4dd0ed31c5844e7f 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncalrpc: LRPC-4e4dd0ed31c5844e7f 650a7e26-eab8-5533-ce43-9c1dfce11511 version: v1.0 annotation: Vpn APIs ncalrpc: LRPC-88a89c9dc851dca09a ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\ECOWEB\PIPE\ROUTER 1d45e083-478f-437c-9618-3594ced8c235 version: v1.0 ncalrpc: LRPC-3ba372747198e29394 ncalrpc: OLE88357481483865AE20EB212DD071 98cd761e-e77d-41c8-a3c0-0fb756d90ec2 version: v1.0 ncalrpc: LRPC-3ba372747198e29394 ncalrpc: OLE88357481483865AE20EB212DD071 d22895ef-aff4-42c5-a5b2-b14466d34ab4 version: v1.0 ncalrpc: LRPC-3ba372747198e29394 ncalrpc: OLE88357481483865AE20EB212DD071 e38f5360-8572-473e-b696-1b46873beeab version: v1.0 ncalrpc: LRPC-3ba372747198e29394 ncalrpc: OLE88357481483865AE20EB212DD071 95095ec8-32ea-4eb0-a3e2-041f97b36168 version: v1.0 ncalrpc: LRPC-3ba372747198e29394 ncalrpc: OLE88357481483865AE20EB212DD071 fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d version: v1.0 ncalrpc: LRPC-3ba372747198e29394 ncalrpc: OLE88357481483865AE20EB212DD071 4c9dbf19-d39e-4bb9-90ee-8f7179b20283 version: v1.0 ncalrpc: LRPC-3ba372747198e29394 ncalrpc: OLE88357481483865AE20EB212DD071 d4051bde-9cdd-4910-b393-4aa85ec3c482 version: v1.0 ncalrpc: LRPC-3ba372747198e29394 ncalrpc: OLE88357481483865AE20EB212DD071 7df1ceae-de4e-4e6f-ab14-49636e7c2052 version: v1.0 ncalrpc: LRPC-83684c46d05a2994e1 5b821720-f63b-11d0-aad2-00c04fc324db version: v1.0 protocol: [MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP) provider: dhcpssvc.dll ncacn_ip_tcp: 99.24.130.180:54700 ncalrpc: OLE6B981FB3FAF104B0076033FC5684 6bffd098-a112-3610-9833-46c3f874532d version: v1.0 protocol: [MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP) provider: dhcpssvc.dll ncacn_ip_tcp: 99.24.130.180:54700 ncalrpc: OLE6B981FB3FAF104B0076033FC5684 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 99.24.130.180:54705 c503f532-443a-4c69-8300-ccd1fbdb3839 version: v2.0 ncalrpc: LRPC-202ecb8efee7d200ba ncalrpc: OLE6911248C065EAA383B1D98FEFD6F d249bd56-4cc0-4fd3-8ce6-6fe050d590cb version: v0.0 ncalrpc: LRPC-62081e32bf5e6741cd d8140e00-5c46-4ae6-80ac-2f9a76df224c version: v0.0 ncalrpc: LRPC-62081e32bf5e6741cd 7d814569-35b3-4850-bb32-83035fcebf6e version: v1.0 annotation: IAS RPC server provider: ias.dll ncalrpc: LRPC-3292291ece2a7702f4 ncalrpc: OLE821A3E48FF3AC760DCDD8167A091 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-0e6a845eec12071c4a ncalrpc: LRPC-0e6a845eec12071c4a ncalrpc: LRPC-0e6a845eec12071c4a 0767a036-0d22-48aa-ba69-b619480f38cb version: v1.0 annotation: PcaSvc provider: pcasvc.dll ncalrpc: LRPC-c71c59601f53b126f0 3357951c-a1d1-47db-a278-ab945d063d03 version: v1.0 provider: LBService.dll ncacn_ip_tcp: 99.24.130.180:54761 958f92d8-da20-467a-bbe3-65e7e9b4edcf version: v1.0 annotation: TsProxyMgmt protocol: [MS-TSGU]: Terminal Services Gateway Server Management Interface ncalrpc: AAGMgmt ncacn_ip_http: 99.24.130.180:3388 44e265dd-7daf-42cd-8560-3cdb6e7a2729 version: v1.768 annotation: TsProxy protocol: [MS-TSGU]: Terminal Services Gateway Server Protocol ncalrpc: AAGMgmt ncacn_ip_http: 99.24.130.180:3388 12e65dd8-887f-41ef-91bf-8d816c42c2e7 version: v1.0 annotation: Secure Desktop LRPC interface provider: winlogon.exe ncalrpc: WMsgKRpc013984E12 b1ef227e-dfa5-421e-82bb-67a6a129c496 version: v0.0 ncalrpc: LRPC-b0652095d711394f31 ncalrpc: OLE67F7004A8D8AC53D0F6931C2118D 0fc77b1a-95d8-4a2e-a0c0-cff54237462b version: v0.0 ncalrpc: LRPC-b0652095d711394f31 ncalrpc: OLE67F7004A8D8AC53D0F6931C2118D 8ec21e98-b5ce-4916-a3d6-449fa428a007 version: v0.0 ncalrpc: LRPC-b0652095d711394f31 ncalrpc: OLE67F7004A8D8AC53D0F6931C2118D a4b8d482-80ce-40d6-934d-b22a01a44fe7 version: v1.0 annotation: LicenseManager ncalrpc: LicenseServiceEndpoint bf4dc912-e52f-4904-8ebe-9317c1bdd497 version: v1.0 ncalrpc: LRPC-3844a0f8c7747ab395 ncalrpc: OLE336F793B788BB9C78365CDBD28A1 f3f09ffd-fbcf-4291-944d-70ad6e0e73bb version: v1.0 ncalrpc: LRPC-b7b3ac5a184771cdc9 509bc7ae-77be-4ee8-b07c-0d096bb44345 version: v1.0 ncalrpc: LRPC-1ce5de6641a2110c1a ncalrpc: OLE16DE4A9043F768E89A0F8D965038 ff9fd3c4-742e-45e0-91dd-2f5bc632a1df version: v1.0 annotation: appxsvc ncalrpc: LRPC-67b3b22a86b2642a61 ae2dc901-312d-41df-8b79-e835e63db874 version: v1.0 annotation: appxsvc ncalrpc: LRPC-67b3b22a86b2642a61
-813368478 | 2024-10-04T02:11:46.2834531433 / tcp
MS-SQL NTLM Info: OS: Windows Server 2022 OS Build: 10.0.20348 Target Name: ECO NetBIOS Domain Name: ECO NetBIOS Computer Name: ECOWEB DNS Domain Name: Eco.local DNS Tree Name: Eco.local FQDN: EcoWEB.Eco.local
-1272271639 | 2024-10-13T08:38:17.6838091434 / udp
SQL Server Browser Service:
Instance #1:
Server Name: ECOWEB
Instance Name: SQLEXPRESS
Is Clustered: False
Version: 16.0.1000.6
TCP Port: 1433
Version Name: MS-SQL Server 2022 RTM
114556312 | 2024-10-10T03:20:02.6485773391 / udp
\x16\xfe\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00/\x03\x00\x00#\x00\x00\x00\x00\x00\x00\x00#\xfe\xff h\xb0\xd1*,\x94\xbfh,\xcb/\xbd\x9ab\xd1F+\xff\xcdu\xe6u\x97>\xfcY\xeb\n\x00H\xebF
1489525118 | 2024-09-29T08:43:10.6683915985 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 29 Sep 2024 08:42:34 GMT Connection: close Content-Length: 315 WinRM NTLM Info: OS: Windows Server 2022 OS Build: 10.0.20348 Target Name: ECO NetBIOS Domain Name: ECO NetBIOS Computer Name: ECOWEB DNS Domain Name: Eco.local DNS Tree Name: Eco.local FQDN: EcoWEB.Eco.local