| Hostnames |
14.140.246.42.STATIC-Delhi-vsnl.net.in napinosetu.com |
| Domains | STATIC-Delhi-vsnl.net.in napinosetu.com |
| Country | India |
| City | Delhi |
| Organization | Internet Service Provider |
| ISP | TATA Communications formerly VSNL is Leading ISP |
| ASN | AS4755 |
| Operating System | Windows Server 2012 Standard 9200 |
1441449644 | 2024-05-02T02:46:23.81724180 / tcp
HTTP/1.1 301 Moved Permanently Location: https://14.140.246.42/ Transfer-Encoding: chunked Date: Thu, 02 May 2024 02:46:23 India Standard Time Connection: keep-alive
-915912495 | 2024-05-05T11:12:29.788434135 / tcp
Microsoft RPC Endpoint Mapper d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 172.16.20.125:10000 ncalrpc: WindowsShutdown ncacn_np: \\KASEYA-APP-SERV\PIPE\InitShutdown ncalrpc: WMsgKRpc06D530 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\KASEYA-APP-SERV\PIPE\InitShutdown ncalrpc: WMsgKRpc06D530 ncalrpc: WMsgKRpc06DE51 ncalrpc: WMsgKRpc04A313653 ncalrpc: WMsgKRpc0342DFFEE2 0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e version: v1.0 ncalrpc: LSMApi ncalrpc: LRPC-1adb25f25ca62e839f ncalrpc: actkernel ncalrpc: umpo c605f9fb-f0a3-4e2a-a073-73560f8d9e3e version: v1.0 ncalrpc: LSMApi ncalrpc: LRPC-1adb25f25ca62e839f ncalrpc: actkernel ncalrpc: umpo 1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 version: v1.0 ncalrpc: LSMApi ncalrpc: LRPC-1adb25f25ca62e839f ncalrpc: actkernel ncalrpc: umpo 8bfc3be1-6def-4e2d-af74-7c47cd0ade4a version: v1.0 ncalrpc: LRPC-1adb25f25ca62e839f ncalrpc: actkernel ncalrpc: umpo c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-1adb25f25ca62e839f ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-ee44d03b8e8691db62 ncacn_np: \\KASEYA-APP-SERV\PIPE\srvsvc ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\KASEYA-APP-SERV\PIPE\ROUTER ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 ncalrpc: IUserProfile2 2d98a740-581d-41b9-aa0d-a88b9d5ce938 version: v1.0 ncalrpc: actkernel ncalrpc: umpo 3b338d89-6cfa-44b8-847e-531531bc9992 version: v1.0 ncalrpc: actkernel ncalrpc: umpo 8782d3b9-ebbd-4644-a3d8-e8725381919b version: v1.0 ncalrpc: actkernel ncalrpc: umpo 085b0334-e454-4d91-9b8c-4134f9e793f3 version: v1.0 ncalrpc: actkernel ncalrpc: umpo 4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 version: v1.0 ncalrpc: actkernel ncalrpc: umpo 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 ncalrpc: dhcpcsvc ncalrpc: LRPC-e481ec5e24b05c6135 ncacn_ip_tcp: 172.16.20.125:10001 ncacn_np: \\KASEYA-APP-SERV\pipe\eventlog ncalrpc: eventlog 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: LRPC-e481ec5e24b05c6135 ncacn_ip_tcp: 172.16.20.125:10001 ncacn_np: \\KASEYA-APP-SERV\pipe\eventlog ncalrpc: eventlog 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncalrpc: LRPC-e481ec5e24b05c6135 ncacn_ip_tcp: 172.16.20.125:10001 ncacn_np: \\KASEYA-APP-SERV\pipe\eventlog ncalrpc: eventlog f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 172.16.20.125:10001 ncacn_np: \\KASEYA-APP-SERV\pipe\eventlog ncalrpc: eventlog 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncalrpc: LRPC-ee44d03b8e8691db62 ncacn_np: \\KASEYA-APP-SERV\PIPE\srvsvc ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\KASEYA-APP-SERV\PIPE\ROUTER ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 1a0d010f-1c33-432c-b0f5-8cf4e8053099 version: v1.0 annotation: IdSegSrv service ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\KASEYA-APP-SERV\PIPE\ROUTER ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\KASEYA-APP-SERV\PIPE\ROUTER ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 version: v1.0 annotation: Adh APIs ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 c36be077-e14b-4fe9-8abc-e856ef4f048b version: v1.0 annotation: Proxy Manager client server endpoint ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 2e6035b2-e8f1-41a7-a044-656b439c4c34 version: v1.0 annotation: Proxy Manager provider server endpoint ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 3a9ef155-691d-4449-8d05-09ad57031823 version: v1.0 ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 172.16.20.125:10002 ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\KASEYA-APP-SERV\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: senssvc ncalrpc: OLEDC06AC997E6D41B4B12D35CC2372 ncalrpc: IUserProfile2 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 annotation: Group Policy RPC Interface provider: gpsvc.dll ncalrpc: LRPC-e516e8f2e3d1598963 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncacn_np: \\KASEYA-APP-SERV\PIPE\W32TIME_ALT ncalrpc: W32TIME_ALT ncalrpc: LRPC-6c933920de49c72800 ncalrpc: OLE8511B29A1965F0A83B279F1D4EDE 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-6c933920de49c72800 ncalrpc: OLE8511B29A1965F0A83B279F1D4EDE b2507c30-b126-494a-92ac-ee32b6eeb039 version: v1.0 ncalrpc: LRPC-49aea676665ca9fa3e ncalrpc: OLE56AC4AD1C63827C48999FB493D41 ncalrpc: LRPC-3f77a887e0967868aa ncalrpc: OLE7E072FC8A89C1D84455F801B2D4F 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-354758306f177b518b ncalrpc: LRPC-06e394494b5b323ed8 f47433c3-3e9d-4157-aad4-83aa1f5c2d4c version: v1.0 annotation: Fw APIs ncalrpc: LRPC-354758306f177b518b ncalrpc: LRPC-06e394494b5b323ed8 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-354758306f177b518b ncalrpc: LRPC-06e394494b5b323ed8 dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-06e394494b5b323ed8 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\KASEYA-APP-SERV\PIPE\wkssvc ncalrpc: LRPC-a996131cbbc9a14b53 ncalrpc: DNSResolver eb081a0d-10ee-478a-a1dd-50995283e7a8 version: v3.0 annotation: Witness Client Test Interface ncalrpc: LRPC-a996131cbbc9a14b53 ncalrpc: DNSResolver f2c9b409-c1c9-4100-8639-d8ab1486694a version: v1.0 annotation: Witness Client Upcall Server ncalrpc: LRPC-a996131cbbc9a14b53 ncalrpc: DNSResolver 4a452661-8290-4b36-8fbe-7f4093a94978 version: v1.0 annotation: Spooler function endpoint provider: spoolsv.exe ncalrpc: spoolss ae33069b-a2a8-46ee-a235-ddfd339be281 version: v1.0 annotation: Spooler base remote object endpoint protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncalrpc: spoolss 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 version: v1.0 annotation: Spooler function endpoint protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncalrpc: spoolss 1a9134dd-7b39-45ba-ad88-44d01ca47f28 version: v1.0 annotation: Message Queuing - RemoteRead V1 protocol: [MS-MQRR]: Message Queuing (MSMQ): provider: mqqm.dll ncacn_ip_tcp: 172.16.20.125:2105 ncacn_ip_tcp: 172.16.20.125:2103 ncacn_ip_tcp: 172.16.20.125:2107 ncacn_ip_tcp: 172.16.20.125:10006 ncalrpc: QMMgmtFacility$kaseya-app-serv ncalrpc: QMsvc$kaseya-app-serv 1088a980-eae5-11d0-8d9b-00a02453c337 version: v1.0 annotation: Message Queuing - QM2QM V1 protocol: [MS-MQQP]: Message Queuing (MSMQ): provider: mqqm.dll ncacn_ip_tcp: 172.16.20.125:2105 ncacn_ip_tcp: 172.16.20.125:2103 ncacn_ip_tcp: 172.16.20.125:2107 ncacn_ip_tcp: 172.16.20.125:10006 ncalrpc: QMMgmtFacility$kaseya-app-serv ncalrpc: QMsvc$kaseya-app-serv 76d12b80-3467-11d3-91ff-0090272f9ea3 version: v1.0 annotation: Message Queuing - QMRT V2 protocol: [MS-MQMP]: Message Queuing (MSMQ): provider: mqqm.dll ncacn_ip_tcp: 172.16.20.125:2105 ncacn_ip_tcp: 172.16.20.125:2103 ncacn_ip_tcp: 172.16.20.125:2107 ncacn_ip_tcp: 172.16.20.125:10006 ncalrpc: QMMgmtFacility$kaseya-app-serv ncalrpc: QMsvc$kaseya-app-serv fdb3a030-065f-11d1-bb9b-00a024ea5525 version: v1.0 annotation: Message Queuing - QMRT V1 protocol: [MS-MQMP]: Message Queuing (MSMQ): provider: mqqm.dll ncacn_ip_tcp: 172.16.20.125:2105 ncacn_ip_tcp: 172.16.20.125:2103 ncacn_ip_tcp: 172.16.20.125:2107 ncacn_ip_tcp: 172.16.20.125:10006 ncalrpc: QMMgmtFacility$kaseya-app-serv ncalrpc: QMsvc$kaseya-app-serv b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v2.0 annotation: KeyIso ncacn_ip_tcp: 172.16.20.125:10008 ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\KASEYA-APP-SERV\pipe\lsass 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 172.16.20.125:10008 ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\KASEYA-APP-SERV\pipe\lsass 2f5f6521-cb55-1059-b446-00df0bce31db version: v1.0 annotation: Unimodem LRPC Endpoint ncalrpc: unimdmsvc ncalrpc: tapsrvlpc ncacn_np: \\KASEYA-APP-SERV\pipe\tapsrv 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 172.16.20.125:10481 12345678-1234-abcd-ef00-0123456789ab version: v1.0 annotation: IPSec Policy agent endpoint protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncalrpc: LRPC-d303d902c04fc10209 ncacn_ip_tcp: 172.16.20.125:10495 6b5bdd1e-528c-422c-af8c-a4079be4fe48 version: v1.0 annotation: Remote Fw APIs protocol: [MS-FASP]: Firewall and Advanced Security Protocol provider: FwRemoteSvr.dll ncacn_ip_tcp: 172.16.20.125:10495 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-ef344fca30a4be9e0c ncalrpc: OLEDFC0A1C9534AAFFB4500480704AD ncalrpc: LRPC-595cf82072d1927b50 ncalrpc: LRPC-595cf82072d1927b50 ncalrpc: LRPC-595cf82072d1927b50 4b112204-0e19-11d3-b42b-0000f81feb9f version: v1.0 provider: ssdpsrv.dll ncalrpc: LRPC-b44509f87ff97c05f6 12e65dd8-887f-41ef-91bf-8d816c42c2e7 version: v1.0 annotation: Secure Desktop LRPC interface provider: winlogon.exe ncalrpc: WMsgKRpc04A313653
57231233 | 2024-04-24T01:45:24.119859137 / udp
NetBIOS Response:
Server Name: KASEYA-APP-SERV
MAC Address: 00:50:56:94:53:DA
Names:
WORKGROUP <0x0>
KASEYA-APP-SERV <0x0>
KASEYA-APP-SERV <0x20>
Additional Interfaces:
172.16.20.12500:50:56:94:53:DA
OUI: 00:50:56
Organization: VMware, Inc.
Assignment: MA-L
Registration Date: 2000-01-04
-757264002 | 2024-05-03T23:51:08.162858139 / tcp
\x83\x00\x00\x01\x8f
-1582471384 | 2024-05-02T02:46:34.522677443 / tcp
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Mon, 08 Jan 2018 09:56:06 GMT ETag: "03f8ee66688d31:0" Date: Thu, 02 May 2024 02:46:34 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains Connection: keep-alive Content-Length: 512
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:82:97:83:18:c3:42:71:ec:34:27:25:f9:0a:9c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL TLS RSA CA G1
Validity
Not Before: Dec 1 00:00:00 2023 GMT
Not After : Dec 16 23:59:59 2024 GMT
Subject: CN=*.napinosetu.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:dc:1a:76:c7:30:5e:20:f9:77:16:96:80:08:b9:
eb:74:a1:81:64:32:9a:cf:4b:14:ac:b5:48:66:57:
a8:ab:f0:d5:07:19:41:25:e8:12:3c:44:97:9e:a8:
bd:10:c3:f8:0f:31:7b:a1:4a:66:15:ec:03:05:25:
f9:73:a7:51:b8:31:1c:ae:3f:5e:92:a0:38:48:53:
c6:32:d1:b8:4c:4a:52:ca:d2:89:f2:76:b4:6c:8f:
47:5c:1c:2d:3f:4a:2b:65:97:4e:98:d5:f3:63:b1:
24:13:7f:c4:b3:06:84:58:c6:c0:3b:f9:51:c1:30:
76:e0:77:f9:e4:d0:47:64:fc:68:92:ce:19:bb:c8:
3d:af:85:0a:58:69:be:d3:bd:0c:a8:71:1e:d8:95:
4b:b8:9e:c3:4b:e1:84:1a:a8:cd:cb:d1:d8:b1:78:
f0:84:46:65:7c:87:2b:6e:42:14:be:83:d5:85:3d:
f6:7f:10:6a:ec:95:8f:4b:93:20:47:05:ba:0b:10:
1c:63:98:8a:42:e2:17:a0:db:61:b2:ca:2e:77:38:
df:c4:b4:93:49:70:72:28:69:c9:0a:c8:0d:15:a1:
54:95:21:40:16:64:f3:42:2b:3b:e5:c3:b8:71:a1:
99:65:32:7b:f7:31:51:a0:66:24:46:2b:e2:4e:98:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
0C:DB:6C:82:49:0F:4A:67:0A:B8:14:EE:7A:C4:48:52:88:EB:56:38
X509v3 Subject Key Identifier:
82:D1:5E:8A:24:EC:20:5C:C4:12:DC:6E:15:C6:97:E3:DA:2A:2C:5A
X509v3 Subject Alternative Name:
DNS:*.napinosetu.com, DNS:napinosetu.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
Authority Information Access:
OCSP - URI:http://status.rapidssl.com
CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Dec 1 04:34:54.800 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:AC:58:7F:89:CE:F0:A7:2C:2F:5A:6F:
4D:D4:2A:AA:04:C0:5A:B6:D8:6B:DC:E8:C4:AF:94:91:
EF:8B:BB:DC:69:02:20:2A:06:3B:79:FD:BE:8B:2C:72:
D8:20:EF:D0:65:6E:94:EC:65:1B:11:F2:D4:64:A0:7A:
83:A9:22:0C:16:4E:10
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Dec 1 04:34:54.799 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:D1:14:2B:24:0D:ED:F3:A3:1B:5D:43:
89:E8:B9:72:6D:F3:7B:46:EC:2D:4D:27:79:68:4C:BE:
E0:27:50:BB:56:02:21:00:C1:CB:24:3D:67:9E:4D:F9:
8E:73:4C:AD:EF:F1:2D:87:0B:22:B1:05:AC:75:E7:BA:
6B:2B:7C:C3:DE:6A:36:44
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
Timestamp : Dec 1 04:34:54.809 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:12:B0:51:86:E1:8D:ED:7B:E6:FE:B5:FF:
A4:4F:D3:57:B3:CD:06:EC:4F:E3:EA:4C:28:44:57:30:
28:FA:69:D3:02:21:00:D6:A8:64:15:0D:A8:77:59:F9:
D2:47:9C:3A:6D:E9:59:9B:6D:50:18:63:32:FB:7F:5D:
E6:BD:D0:43:71:72:09
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
02:13:30:6e:8f:57:b7:44:ec:2c:a5:83:56:13:c7:98:1f:29:
f0:e8:17:98:61:ef:cf:39:b1:c7:49:6f:b9:6e:d0:f4:b0:e5:
d6:82:4a:85:78:d8:b8:fd:a8:2f:01:42:a8:63:d4:c0:43:33:
95:be:02:b4:60:f4:f8:b2:78:30:5e:71:09:9c:65:97:6a:70:
c3:30:94:7f:74:2e:ae:de:df:12:f4:c4:ea:8b:3a:07:11:57:
b1:80:ce:22:06:89:63:60:d2:40:ff:51:84:6f:1c:3c:b4:7b:
71:23:53:fa:45:5a:dc:59:0c:91:f5:43:f4:1d:ef:ea:1c:a2:
4b:c3:1d:43:dd:d7:93:a8:42:db:65:a8:71:aa:90:5d:02:ee:
f0:a7:58:4e:97:dc:cf:37:fb:8d:74:bd:41:0c:c6:5d:f0:44:
cd:0e:1a:d7:ad:a5:f0:34:f7:64:55:ce:a6:c1:af:ed:1b:b3:
c7:4c:fc:18:f3:0f:bb:35:7b:92:7f:3b:da:e1:35:ab:ea:6f:
23:00:38:2c:15:7b:a8:24:80:72:e8:a9:6e:15:a3:9f:0d:bf:
f7:3c:8d:6b:d5:36:46:ef:12:ed:6d:78:c6:84:92:6d:de:ca:
15:10:22:0e:44:3e:de:ae:dd:97:92:3a:12:b8:b0:75:2f:7e:
6d:6b:47:26
973987490 | 2024-05-06T21:37:14.347136445 / tcp
SMB Status: Authentication: enabled SMB Version: 1 OS: Windows Server 2012 Standard 9200 Software: Windows Server 2012 Standard 6.2 Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode
1754131886 | 2024-04-29T14:27:37.2514141434 / udp
SQL Server Browser Service:
Instance #1:
Server Name: KASEYA-APP-SERV
Instance Name: SQLEXPRESS
Is Clustered: False
Version: 11.0.2100.60
TCP Port: 60835
Version Name: MS-SQL Server 2012 RTM
941448006 | 2024-04-29T02:59:22.9007221723 / tcp
PPTP: Firmware: 0 Hostname: Vendor: Microsoft
-132131002 | 2024-04-21T14:13:03.4137151801 / tcp
\x10Z\x0b\x00LIOR<\x02\x00\x00\xff\xff\xff\xff\x00\x00\x12\x00\x06U=Q6\xdf\xc7@\x96C\x17\\<\xe7l\xaa\xb9\xfeN\x80\xaa{\xa0H\xb1\x14\x19gx\x87\xa3)\x00\x00\x00\x00\x10\x02\x00\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
1489525118 | 2024-05-03T08:52:07.1781465985 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Date: Fri, 03 May 2024 08:52:07 GMT Connection: close Content-Length: 315
-1582471384 | 2024-04-27T11:40:32.45952318081 / tcp
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Mon, 08 Jan 2018 09:56:06 GMT ETag: "03f8ee66688d31:0" Date: Sat, 27 Apr 2024 11:40:31 GMT Content-Length: 512
1385380818 | 2024-04-29T14:27:42.15692860835 / tcp
MS-SQL NTLM Info: OS: Windows 8/Windows Server 2012 OS Build: 6.2.9200 Target Name: KASEYA-APP-SERV NetBIOS Domain Name: KASEYA-APP-SERV NetBIOS Computer Name: KASEYA-APP-SERV DNS Domain Name: Kaseya-APP-Server FQDN: Kaseya-APP-Server