Hostnames |
mail.host4cloud.net webmail.paradigmsolutions.co.za |
Domains | host4cloud.net paradigmsolutions.co.za |
Country | South Africa |
City | Cape Town |
Organization | Dimension Data |
ISP | Dimension Data |
ASN | AS10474 |
Operating System | Windows Server 2008 R2 Standard 7601 Service Pack 1 |
-370734890 | 2024-11-08T02:58:56.52195121 / tcp
220 Microsoft FTP Service 530 User cannot log in. 214-The following commands are recognized (* ==>'s unimplemented). ABOR ACCT ADAT * ALLO APPE AUTH CCC CDUP CWD DELE ENC * EPRT EPSV FEAT HELP HOST LANG LIST MDTM MIC * MKD MODE NLST NOOP OPTS PASS PASV PBSZ PORT PROT PWD QUIT REIN REST RETR RMD RNFR RNTO SITE SIZE SMNT STAT STOR STOU STRU SYST TYPE USER XCUP XCWD XMKD XPWD XRMD 214 HELP command successful. 211-Extended features supported: LANG EN* UTF8 AUTH TLS;TLS-C;SSL;TLS-P; PBSZ PROT C;P; CCC HOST SIZE MDTM REST STREAM 211 END
-985096807 | 2024-11-13T10:36:57.51738180 / tcp
HTTP/1.1 403 Forbidden Content-Type: text/html Server: WWW Server/1.1 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Date: Wed, 13 Nov 2024 10:36:56 GMT Content-Length: 1233
286222671 | 2024-10-24T09:25:00.329002135 / tcp
Microsoft RPC Endpoint Mapper d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 197.85.184.20:49152 ncalrpc: WindowsShutdown ncacn_np: \\COM1WEB\PIPE\InitShutdown ncalrpc: WMsgKRpc0158FD0 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\COM1WEB\PIPE\InitShutdown ncalrpc: WMsgKRpc0158FD0 ncalrpc: WMsgKRpc3439F42766 ncalrpc: WMsgKRpc115DE291074 c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-39402e5667f1b16d4e ncacn_np: \\COM1WEB\PIPE\srvsvc ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 ncalrpc: IUserProfile2 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 197.85.184.20:49153 ncacn_np: \\COM1WEB\pipe\eventlog ncalrpc: eventlog 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 197.85.184.20:49153 ncacn_np: \\COM1WEB\pipe\eventlog ncalrpc: eventlog 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncacn_ip_tcp: 197.85.184.20:49153 ncacn_np: \\COM1WEB\pipe\eventlog ncalrpc: eventlog f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 197.85.184.20:49153 ncacn_np: \\COM1WEB\pipe\eventlog ncalrpc: eventlog 58e604e8-9adb-4d2e-a464-3b0683fb1480 version: v1.0 annotation: AppInfo provider: appinfo.dll ncacn_np: \\COM1WEB\PIPE\srvsvc ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 version: v1.0 annotation: AppInfo provider: appinfo.dll ncacn_np: \\COM1WEB\PIPE\srvsvc ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 5f54ce7d-5b79-4175-8584-cb65313a0e98 version: v1.0 annotation: AppInfo provider: appinfo.dll ncacn_np: \\COM1WEB\PIPE\srvsvc ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 201ef99a-7fa0-444c-9399-19ba84f12a1a version: v1.0 annotation: AppInfo provider: appinfo.dll ncacn_np: \\COM1WEB\PIPE\srvsvc ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncacn_np: \\COM1WEB\PIPE\srvsvc ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 197.85.184.20:49154 ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\COM1WEB\PIPE\atsvc ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: senssvc ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 provider: gpsvc.dll ncalrpc: OLE9339F0A08B314A31BCFD754831FD ncalrpc: IUserProfile2 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncacn_np: \\COM1WEB\PIPE\W32TIME_ALT ncalrpc: W32TIME_ALT ncalrpc: LRPC-b0be2e8ec32c0e0805 ncalrpc: OLE4B977BA010B045D992A6CDCEE28C 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-b0be2e8ec32c0e0805 ncalrpc: OLE4B977BA010B045D992A6CDCEE28C 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-7d12cad913380fdad7 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-7d12cad913380fdad7 dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-7d12cad913380fdad7 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\COM1WEB\PIPE\wkssvc ncalrpc: DNSResolver b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v1.0 annotation: KeyIso provider: keyiso.dll ncacn_ip_tcp: 197.85.184.20:49155 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\COM1WEB\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-c2b4a9dec033086455 ncacn_np: \\COM1WEB\pipe\lsass 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 197.85.184.20:49155 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\COM1WEB\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-c2b4a9dec033086455 ncacn_np: \\COM1WEB\pipe\lsass 50abc2a4-574d-40b3-9d66-ee4fd5fba076 version: v5.0 protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management provider: dns.exe ncacn_ip_tcp: 197.85.184.20:49156 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 197.85.184.20:49219 12345678-1234-abcd-ef00-0123456789ab version: v1.0 annotation: IPSec Policy agent endpoint protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncalrpc: LRPC-6d2e57749415118dd2 ncacn_ip_tcp: 197.85.184.20:49227 6b5bdd1e-528c-422c-af8c-a4079be4fe48 version: v1.0 annotation: Remote Fw APIs protocol: [MS-FASP]: Firewall and Advanced Security Protocol provider: FwRemoteSvr.dll ncacn_ip_tcp: 197.85.184.20:49227 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-1cfd8a4eb03c9dc25a ncalrpc: LRPC-1cfd8a4eb03c9dc25a ncalrpc: LRPC-1cfd8a4eb03c9dc25a ncalrpc: LRPC-1cfd8a4eb03c9dc25a 24019106-a203-4642-b88d-82dae9158929 version: v1.0 provider: authui.dll ncalrpc: LRPC-6136a98042732c4aa5 12e65dd8-887f-41ef-91bf-8d816c42c2e7 version: v1.0 annotation: Secure Desktop LRPC interface provider: winlogon.exe ncalrpc: WMsgKRpc115DE291074
1489525118 | 2024-11-12T17:59:26.082012443 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 12 Nov 2024 17:59:24 GMT Connection: close Content-Length: 315
Certificate: Data: Version: 3 (0x2) Serial Number: 03:ad:8b:9a:4a:b1:30:01:c1:c2:b7:c9:54:61:cc:12:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Let's Encrypt, CN=R11 Validity Not Before: Nov 4 17:57:57 2024 GMT Not After : Feb 2 17:57:56 2025 GMT Subject: CN=webmail.paradigmsolutions.co.za Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:aa:1a:6f:87:c5:16:58:da:62:a1:26:71:46:7d: 26:c5:a6:19:8c:65:f0:83:79:39:c7:9e:8e:d0:85: 00:d6:fc:82:a7:0e:4d:bb:27:f1:8f:a2:30:d5:e0: bf:83:8c:7b:59:47:58:f6:6d:25:a5:b6:d1:ed:87: ed:9d:2e:70:b4:17:c0:7d:87:c5:88:44:98:18:f1: 56:ea:68:6c:cf:c2:ed:96:9c:c1:31:18:eb:43:5c: a1:bb:5c:1e:c7:7c:30:dd:20:c8:55:05:33:68:3d: 41:49:94:66:04:73:72:55:31:1a:a6:bc:c5:bc:c9: 13:23:7f:b9:4b:8d:c4:d2:39:87:8a:33:0d:3f:b5: 61:49:78:b3:aa:b8:fb:50:bd:da:b2:71:05:da:bd: 8a:be:4f:ff:65:a4:4a:82:4f:25:03:6c:a9:c7:84: 27:3f:8d:28:5b:17:a5:e1:72:d3:bd:d6:f9:04:27: f6:11:ad:60:42:a1:9a:a7:be:4a:6f:e9:89:65:15: bd:5a:44:89:28:88:39:ee:de:17:42:8a:eb:da:36: 93:cd:ec:65:84:b4:02:25:bc:3d:8f:c1:57:68:1f: 68:9b:d1:0f:c1:6f:4c:5b:9b:f0:a1:9d:70:3a:63: 9e:ed:70:c2:ec:9c:07:69:48:de:c7:f4:b0:9e:40: 22:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E2:41:C0:AC:B2:37:4E:41:6B:D4:73:A3:60:A9:14:48:77:48:06:93 X509v3 Authority Key Identifier: C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9 Authority Information Access: OCSP - URI:http://r11.o.lencr.org CA Issuers - URI:http://r11.i.lencr.org/ X509v3 Subject Alternative Name: DNS:webmail.paradigmsolutions.co.za X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Nov 4 18:56:27.567 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DC:FE:FE:5B:59:73:C6:19:F4:94:3C: 3B:C7:DE:F1:BA:22:A6:64:19:29:06:E1:0D:8B:E1:4D: 53:B5:41:CD:06:02:20:23:22:59:20:59:5E:3A:87:6A: C0:A2:90:B3:7D:F9:1E:47:3D:73:4D:65:58:2E:CD:D9: F1:6E:10:31:53:53:44 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4: 16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22 Timestamp : Nov 4 18:56:27.766 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:B9:84:73:46:7C:E2:6F:D3:B1:3A:FB: FD:67:08:0E:FE:60:1D:3B:D6:71:B3:2A:0C:DC:9B:E4: ED:92:FA:21:56:02:20:79:CA:BB:B3:76:1A:B5:43:BE: 72:45:31:32:95:2E:E7:6E:D4:D9:3A:D7:81:FB:A1:BA: C3:9C:B8:FE:FD:54:96 Signature Algorithm: sha256WithRSAEncryption Signature Value: 88:c5:68:2b:81:6f:02:d4:28:30:b3:1c:7c:35:9f:b2:df:9c: d2:12:ef:d7:c7:ee:57:5e:0d:96:30:64:98:71:29:b9:ae:00: 1b:77:bb:dd:19:73:10:91:b9:2e:c2:43:99:32:7c:41:b2:e4: 0e:65:aa:d9:16:22:44:ff:df:67:a0:ca:aa:73:65:41:cb:46: 1d:12:a8:64:58:c7:62:af:3d:e2:71:ae:b4:3a:e9:3f:53:05: a9:29:31:aa:39:18:0f:cc:e8:14:a7:de:25:d9:a7:a3:a4:2f: 56:e2:ee:99:d7:19:1b:7e:f7:50:ba:01:00:49:aa:dc:ff:d0: 67:75:29:e2:38:3a:3b:34:70:ed:28:9b:19:d4:7c:48:43:15: 86:c9:ca:6f:05:a7:14:b4:4e:a7:46:cd:66:0c:4a:6c:2d:0b: 41:3d:46:45:0c:04:52:ad:3d:51:30:ea:e9:6e:30:07:1f:ea: 11:76:ed:b6:f1:fe:0d:6b:4b:6d:c8:cc:03:31:79:87:ab:7d: 00:ea:62:88:af:c5:e4:e4:d7:2c:7f:35:2c:0b:89:8c:3a:67: d9:f3:94:45:5d:e5:2a:2e:3e:56:9b:d8:4d:20:2c:8e:de:2b: a1:2a:81:c8:ae:ee:ce:f8:ba:fb:c5:a3:e8:b1:5b:3b:61:9f: 94:f9:a0:37
1641389631 | 2024-11-15T11:03:08.272615445 / tcp
SMB Status: Authentication: enabled SMB Version: 1 OS: Windows Server 2008 R2 Standard 7601 Service Pack 1 Software: Windows Server 2008 R2 Standard 6.1 Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode
1489525118 | 2024-10-27T11:35:38.3532615985 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 27 Oct 2024 11:35:35 GMT Connection: close Content-Length: 315 WinRM NTLM Info: OS: Windows Server 2008 R2 OS Build: 6.1.7601 Target Name: COM1WEB NetBIOS Domain Name: COM1WEB NetBIOS Computer Name: COM1WEB DNS Domain Name: COM1WEB.paradigmsolutions.co.za FQDN: COM1WEB.paradigmsolutions.co.za
263389693 | 2024-10-27T09:15:53.1476699001 / tcp
HTTP/1.1 302 Found Cache-Control: private Content-Length: 158 Content-Type: text/html; charset=utf-8 Location: /Default.aspx?pid=Login&ReturnUrl=%2f Server: WWW Server/1.1 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Date: Sun, 27 Oct 2024 09:15:49 GMT <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/Default.aspx?pid=Login&ReturnUrl=%2f">here</a>.</h2> </body></html>