GeneralInformation

Hostnames	www.frostyserver.com
Domains	frostyserver.com
Country	United States
City	Los Angeles
Organization	Spectrum Solutions
ISP	QuadraNet Enterprises LLC
ASN	AS8100

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 53 80 135 445 1434 1801 5357 9999

-370734890 | 2024-10-26T12:19:09.234281

21 / tcp

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST 
    MDTM 
    MIC *
    MKD 
    MODE 
    NLST 
    NOOP 
    OPTS 
    PASS 
    PASV 
    PBSZ 
    PORT 
    PROT 
    PWD 
    QUIT 
    REIN 
    REST 
    RETR 
    RMD 
    RNFR 
    RNTO 
    SITE 
    SIZE 
    SMNT 
    STAT 
    STOR 
    STOU 
    STRU 
    SYST 
    TYPE 
    USER 
    XCUP 
    XCWD 
    XMKD 
    XPWD 
    XRMD 
214 HELP command successful.
211-Extended features supported:
 LANG EN*
 UTF8
 AUTH TLS;TLS-C;SSL;TLS-P;
 PBSZ
 PROT C;P;
 CCC
 HOST
 SIZE
 MDTM
 REST STREAM
211 END

-591159890 | 2024-10-13T08:19:23.165662

80 / tcp

500 - Internal server error.

HTTP/1.1 500 Internal Server Error
Content-Type: text/html
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Sun, 13 Oct 2024 08:19:20 GMT
Content-Length: 1208

CVE-2008-1446 CVE-2009-2521

-1774632839 | 2024-10-21T07:04:02.050253

135 / tcp

Microsoft RPC Endpoint Mapper

12345778-1234-abcd-ef00-0123456789ac
  version: v1.0
  protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
  provider: samsrv.dll
  ncacn_ip_tcp: 96.44.171.98:49155
  ncalrpc: samss lpc
  ncalrpc: dsrole
  ncacn_np: \\FROSTYSERVER\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncalrpc: LRPC-3223c623227d4c67ba
  ncacn_np: \\FROSTYSERVER\pipe\lsass

c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
  version: v1.0
  annotation: Impl friendly name
  provider: sysntfy.dll
  ncalrpc: samss lpc
  ncalrpc: dsrole
  ncacn_np: \\FROSTYSERVER\PIPE\protected_storage
  ncalrpc: protected_storage
  ncalrpc: securityevent
  ncalrpc: audit
  ncalrpc: LRPC-3223c623227d4c67ba
  ncacn_np: \\FROSTYSERVER\pipe\lsass
  ncalrpc: LRPC-c455151e9419ec66dc
  ncacn_np: \\FROSTYSERVER\PIPE\srvsvc
  ncalrpc: SECLOGON
  ncacn_ip_tcp: 96.44.171.98:49154
  ncacn_np: \\FROSTYSERVER\PIPE\atsvc
  ncalrpc: OLE20579C15C7534A948B24C9BAB0D4
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: senssvc
  ncalrpc: IUserProfile2
  ncalrpc: IUserProfile2
  ncalrpc: LRPC-e03b0e41ab42ae0a6e

d95afe70-a6d5-4259-822e-2c84da1ddb0d
  version: v1.0
  protocol: [MS-RSP]: Remote Shutdown Protocol
  provider: wininit.exe
  ncacn_ip_tcp: 96.44.171.98:49152
  ncalrpc: WindowsShutdown
  ncacn_np: \\FROSTYSERVER\PIPE\InitShutdown
  ncalrpc: WMsgKRpc0F6CA0

76f226c3-ec14-4325-8a99-6a46348418af
  version: v1.0
  provider: winlogon.exe
  ncalrpc: WindowsShutdown
  ncacn_np: \\FROSTYSERVER\PIPE\InitShutdown
  ncalrpc: WMsgKRpc0F6CA0
  ncalrpc: WMsgKRpc0F9691
  ncalrpc: WMsgKRpc05BDD92

12e65dd8-887f-41ef-91bf-8d816c42c2e7
  version: v1.0
  annotation: Secure Desktop LRPC interface
  provider: winlogon.exe
  ncalrpc: WMsgKRpc0F9691
  ncalrpc: WMsgKRpc05BDD92

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
  version: v1.0
  annotation: DHCP Client LRPC Endpoint
  provider: dhcpcsvc.dll
  ncalrpc: dhcpcsvc
  ncalrpc: dhcpcsvc6
  ncacn_ip_tcp: 96.44.171.98:49153
  ncacn_np: \\FROSTYSERVER\pipe\eventlog
  ncalrpc: eventlog

3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
  version: v1.0
  annotation: DHCPv6 Client LRPC Endpoint
  provider: dhcpcsvc6.dll
  ncalrpc: dhcpcsvc6
  ncacn_ip_tcp: 96.44.171.98:49153
  ncacn_np: \\FROSTYSERVER\pipe\eventlog
  ncalrpc: eventlog

f6beaff7-1e19-4fbb-9f8f-b89e2018337c
  version: v1.0
  annotation: Event log TCPIP
  protocol: [MS-EVEN6]: EventLog Remoting Protocol
  provider: wevtsvc.dll
  ncacn_ip_tcp: 96.44.171.98:49153
  ncacn_np: \\FROSTYSERVER\pipe\eventlog
  ncalrpc: eventlog

30b044a5-a225-43f0-b3a4-e060df91f9c1
  version: v1.0
  provider: certprop.dll
  ncacn_np: \\FROSTYSERVER\PIPE\srvsvc
  ncalrpc: SECLOGON
  ncacn_ip_tcp: 96.44.171.98:49154
  ncacn_np: \\FROSTYSERVER\PIPE\atsvc
  ncalrpc: OLE20579C15C7534A948B24C9BAB0D4
  ncalrpc: senssvc
  ncalrpc: IUserProfile2

a398e520-d59a-4bdd-aa7a-3c1e0303a511
  version: v1.0
  annotation: IKE/Authip API
  provider: IKEEXT.DLL
  ncacn_ip_tcp: 96.44.171.98:49154
  ncacn_np: \\FROSTYSERVER\PIPE\atsvc
  ncalrpc: OLE20579C15C7534A948B24C9BAB0D4
  ncalrpc: senssvc
  ncalrpc: IUserProfile2

86d35949-83c9-4044-b424-db363231fd0c
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: schedsvc.dll
  ncacn_ip_tcp: 96.44.171.98:49154
  ncacn_np: \\FROSTYSERVER\PIPE\atsvc
  ncalrpc: OLE20579C15C7534A948B24C9BAB0D4
  ncalrpc: senssvc
  ncalrpc: IUserProfile2

378e52b0-c0a9-11cf-822d-00aa0051e40f
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\FROSTYSERVER\PIPE\atsvc
  ncalrpc: OLE20579C15C7534A948B24C9BAB0D4
  ncalrpc: senssvc
  ncalrpc: IUserProfile2

1ff70682-0a51-30e8-076d-740be8cee98b
  version: v1.0
  protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
  provider: taskcomp.dll
  ncacn_np: \\FROSTYSERVER\PIPE\atsvc
  ncalrpc: OLE20579C15C7534A948B24C9BAB0D4
  ncalrpc: senssvc
  ncalrpc: IUserProfile2

0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
  version: v1.0
  provider: schedsvc.dll
  ncalrpc: OLE20579C15C7534A948B24C9BAB0D4
  ncalrpc: senssvc
  ncalrpc: IUserProfile2

2eb08e3e-639f-4fba-97b1-14f878961076
  version: v1.0
  provider: gpsvc.dll
  ncalrpc: LRPC-e03b0e41ab42ae0a6e

3473dd4d-2e88-4006-9cba-22570909dd10
  version: v5.256
  annotation: WinHttp Auto-Proxy Service
  ncacn_np: \\FROSTYSERVER\PIPE\W32TIME_ALT
  ncalrpc: W32TIME_ALT
  ncacn_np: \\FROSTYSERVER\PIPE\wkssvc
  ncalrpc: LRPC-1cf9b03dc5b734d7b0
  ncalrpc: OLE87EB2405AD514D6C821F00E18056

7ea70bcf-48af-4f6a-8968-6a440754d5fa
  version: v1.0
  annotation: NSI server endpoint
  provider: nsisvc.dll
  ncalrpc: LRPC-1cf9b03dc5b734d7b0
  ncalrpc: OLE87EB2405AD514D6C821F00E18056

2fb92682-6599-42dc-ae13-bd2ca89bd11c
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-55730b5c98546a6715

7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
  version: v1.0
  annotation: Fw APIs
  provider: MPSSVC.dll
  ncalrpc: LRPC-55730b5c98546a6715

dd490425-5325-4565-b774-7e27d6c09c24
  version: v1.0
  annotation: Base Firewall Engine API
  provider: BFE.DLL
  ncalrpc: LRPC-55730b5c98546a6715

4a452661-8290-4b36-8fbe-7f4093a94978
  version: v1.0
  annotation: Spooler function endpoint
  provider: spoolsv.exe
  ncalrpc: spoolss

ae33069b-a2a8-46ee-a235-ddfd339be281
  version: v1.0
  annotation: Spooler base remote object endpoint
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: spoolss

0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
  version: v1.0
  annotation: Spooler function endpoint
  protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
  provider: spoolsv.exe
  ncalrpc: spoolss

12345678-1234-abcd-ef00-0123456789ab
  version: v1.0
  annotation: IPSec Policy agent endpoint
  protocol: [MS-RPRN]: Print System Remote Protocol
  provider: spoolsv.exe
  ncalrpc: LRPC-4e2f3e3555d4ed6908
  ncacn_ip_tcp: 96.44.171.98:49156

6b5bdd1e-528c-422c-af8c-a4079be4fe48
  version: v1.0
  annotation: Remote Fw APIs
  protocol: [MS-FASP]: Firewall and Advanced Security Protocol
  provider: FwRemoteSvr.dll
  ncacn_ip_tcp: 96.44.171.98:49156

1a9134dd-7b39-45ba-ad88-44d01ca47f28
  version: v1.0
  annotation: Message Queuing - RemoteRead V1
  protocol: [MS-MQRR]: Message Queuing (MSMQ):
  provider: mqqm.dll
  ncacn_ip_tcp: 96.44.171.98:2105
  ncacn_ip_tcp: 96.44.171.98:2103
  ncacn_ip_tcp: 96.44.171.98:2107
  ncacn_ip_tcp: 96.44.171.98:49157
  ncalrpc: QMMgmtFacility$frostyserver
  ncalrpc: QMsvc$frostyserver

1088a980-eae5-11d0-8d9b-00a02453c337
  version: v1.0
  annotation: Message Queuing - QM2QM V1
  protocol: [MS-MQQP]: Message Queuing (MSMQ):
  provider: mqqm.dll
  ncacn_ip_tcp: 96.44.171.98:2105
  ncacn_ip_tcp: 96.44.171.98:2103
  ncacn_ip_tcp: 96.44.171.98:2107
  ncacn_ip_tcp: 96.44.171.98:49157
  ncalrpc: QMMgmtFacility$frostyserver
  ncalrpc: QMsvc$frostyserver

76d12b80-3467-11d3-91ff-0090272f9ea3
  version: v1.0
  annotation: Message Queuing - QMRT V2
  protocol: [MS-MQMP]: Message Queuing (MSMQ):
  provider: mqqm.dll
  ncacn_ip_tcp: 96.44.171.98:2105
  ncacn_ip_tcp: 96.44.171.98:2103
  ncacn_ip_tcp: 96.44.171.98:2107
  ncacn_ip_tcp: 96.44.171.98:49157
  ncalrpc: QMMgmtFacility$frostyserver
  ncalrpc: QMsvc$frostyserver

fdb3a030-065f-11d1-bb9b-00a024ea5525
  version: v1.0
  annotation: Message Queuing - QMRT V1
  protocol: [MS-MQMP]: Message Queuing (MSMQ):
  provider: mqqm.dll
  ncacn_ip_tcp: 96.44.171.98:2105
  ncacn_ip_tcp: 96.44.171.98:2103
  ncacn_ip_tcp: 96.44.171.98:2107
  ncacn_ip_tcp: 96.44.171.98:49157
  ncalrpc: QMMgmtFacility$frostyserver
  ncalrpc: QMsvc$frostyserver

50abc2a4-574d-40b3-9d66-ee4fd5fba076
  version: v5.0
  protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
  provider: dns.exe
  ncacn_ip_tcp: 96.44.171.98:49161

367abb81-9844-35f1-ad32-98f038001003
  version: v2.0
  protocol: [MS-SCMR]: Service Control Manager Remote Protocol
  provider: services.exe
  ncacn_ip_tcp: 96.44.171.98:49162

2f5f6521-cb55-1059-b446-00df0bce31db
  version: v1.0
  annotation: Unimodem LRPC Endpoint
  ncalrpc: unimdmsvc
  ncalrpc: tapsrvlpc
  ncacn_np: \\FROSTYSERVER\pipe\tapsrv

906b0ce0-c70b-1067-b317-00dd010662da
  version: v1.0
  protocol: [MS-CMPO]: MSDTC Connection Manager:
  provider: msdtcprx.dll
  ncalrpc: LRPC-7b0dca8625457c099d
  ncalrpc: LRPC-7b0dca8625457c099d
  ncalrpc: LRPC-7b0dca8625457c099d
  ncalrpc: LRPC-7b0dca8625457c099d

1038387782 | 2024-10-28T02:46:03.826417

445 / tcp

SMB Status:
  Authentication: enabled
  SMB Version: 1
  OS: Windows Server (R) 2008 Enterprise 6003 Service Pack 2
  Software: Windows Server (R) 2008 Enterprise 6.0
  Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, raw-mode, rpc-remote-api, unicode

-417448172 | 2024-11-02T12:00:49.412496

1434 / udp

SQL Server Browser Service:
  Instance #1:
    Server Name: FROSTYSERVER
    Instance Name: MS_ADMT
    Is Clustered: False
    Version: 9.00.5000.00
    Version Name: MS-SQL Server 2005 SP4RTW/PCU4

23367463 | 2024-10-26T22:44:35.497978

1801 / tcp

\x10Z\x0b\x00LIOR<\x02\x00\x00\xff\xff\xff\xff\x00\x00\x12\x00\x06U=Q6\xdf\xc7@\x96C\x17\\<\xe7l\xaa\xafn\xd0\x90\x1b/\xbdO\x99\x11\xec\x82{\xc9\xcap\x00\x00\x00\x00\x10\x02\x00\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

-1684583448 | 2024-11-01T16:06:47.865025

5357 / tcp

Service Unavailable

HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 01 Nov 2024 16:06:46 GMT
Connection: close
Content-Length: 326

-1131459862 | 2024-10-23T11:14:35.970038

9999 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 23 Oct 2024 11:14:35 GMT
Connection: close
Content-Length: 326

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Bad Request</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Bad Request - Invalid Verb</h2>
<hr><p>HTTP Error 400. The request verb is invalid.</p>
</BODY></HTML>

96.44.171.98

Last Seen: 2024-11-02

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-370734890 | 2024-10-26T12:19:09.234281
21 / tcp

Microsoft ftpd

-591159890 | 2024-10-13T08:19:23.165662
80 / tcp

Microsoft IIS httpd7.0

-1774632839 | 2024-10-21T07:04:02.050253
135 / tcp

Microsoft RPC Endpoint Mapper

1038387782 | 2024-10-28T02:46:03.826417
445 / tcp

-417448172 | 2024-11-02T12:00:49.412496
1434 / udp

SQL Server Browser Service

23367463 | 2024-10-26T22:44:35.497978
1801 / tcp

Microsoft Message Queuing

-1684583448 | 2024-11-01T16:06:47.865025
5357 / tcp

-1131459862 | 2024-10-23T11:14:35.970038
9999 / tcp

Microsoft HTTPAPI httpd2.0

Products

Pricing

Contact Us

96.44.171.98

Last Seen: 2024-11-02

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

-370734890 | 2024-10-26T12:19:09.234281 21 / tcp

Microsoft ftpd

-591159890 | 2024-10-13T08:19:23.165662 80 / tcp

Microsoft IIS httpd7.0

-1774632839 | 2024-10-21T07:04:02.050253 135 / tcp

Microsoft RPC Endpoint Mapper

1038387782 | 2024-10-28T02:46:03.826417 445 / tcp

-417448172 | 2024-11-02T12:00:49.412496 1434 / udp

SQL Server Browser Service

23367463 | 2024-10-26T22:44:35.497978 1801 / tcp

Microsoft Message Queuing

-1684583448 | 2024-11-01T16:06:47.865025 5357 / tcp

-1131459862 | 2024-10-23T11:14:35.970038 9999 / tcp

Microsoft HTTPAPI httpd2.0

Products

Pricing

Contact Us

Vulnerabilities

-370734890 | 2024-10-26T12:19:09.234281
21 / tcp

-591159890 | 2024-10-13T08:19:23.165662
80 / tcp

-1774632839 | 2024-10-21T07:04:02.050253
135 / tcp

1038387782 | 2024-10-28T02:46:03.826417
445 / tcp

-417448172 | 2024-11-02T12:00:49.412496
1434 / udp

23367463 | 2024-10-26T22:44:35.497978
1801 / tcp

-1684583448 | 2024-11-01T16:06:47.865025
5357 / tcp

-1131459862 | 2024-10-23T11:14:35.970038
9999 / tcp