-699038518 | 2024-05-23T03:44:09.444829
25 /
tcp
220 SRV-EXCH-03-UFA.GK-FORWARD.COM Microsoft ESMTP MAIL Service ready at Thu, 23 May 2024 08:44:00 +0500
250-SRV-EXCH-03-UFA.GK-FORWARD.COM Hello [224.173.148.218]
250-SIZE 37748736
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-X-ANONYMOUSTLS
250-AUTH NTLM
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250 XRDST
SMTP NTLM Info:
OS: Windows 8/Windows Server 2012
OS Build: 6.2.9200
Target Name: GK-FORWARD
NetBIOS Domain Name: GK-FORWARD
NetBIOS Computer Name: SRV-EXCH-03-UFA
DNS Domain Name: GK-FORWARD.COM
DNS Tree Name: GK-FORWARD.COM
FQDN: srv-exch-03-ufa.GK-FORWARD.COM
520742660 | 2024-06-11T01:00:47.376610
143 /
tcp
* OK The Microsoft Exchange IMAP4 service is ready.
* CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS UIDPLUS MOVE ID CHILDREN IDLE NAMESPACE LITERAL+
A001 OK CAPABILITY completed.
* ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.0")
A002 OK ID completed
A003 BAD Command Error. 12
* BYE Microsoft Exchange Server 2013 IMAP4 server signing off.
A004 OK LOGOUT completed.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:00:00:00:08:5e:bb:7b:e2:18:62:8f:44:00:00:00:00:00:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: DC=COM, DC=GK-FORWARD, CN=GK-FORWARD-SRV-PKI-02-UFA-CA
Validity
Not Before: Jul 17 12:52:22 2023 GMT
Not After : Jul 16 12:52:22 2025 GMT
Subject: C=RU, ST=Bashkortostan, L=Ufa, O=Forward, OU=AIS, CN=mail.gk-forward.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b2:b1:db:bd:85:68:b1:63:12:31:41:83:fb:46:
cc:e2:b2:f8:98:07:1e:74:66:5e:9c:6d:32:e7:50:
d3:da:ec:9c:a4:9b:4d:1a:c2:ca:77:2c:cc:9a:2f:
39:19:bd:e6:d0:73:dc:4f:43:0e:e2:48:12:3e:9d:
11:2d:7b:6c:4d:4b:a4:d0:89:b8:63:5a:c7:a4:15:
23:20:be:b2:dd:c6:ec:ac:b1:b2:e9:87:a4:7f:ae:
6d:df:19:c8:5f:c7:33:49:34:c3:dc:41:9b:db:e5:
4e:a3:eb:9e:86:4d:1c:d5:61:d7:fa:bc:cb:47:f0:
97:6c:8f:09:38:be:72:d8:92:cc:7b:38:b3:38:1f:
f2:ce:6a:c2:25:e8:d0:41:0c:bf:9b:e3:38:ae:be:
e4:6c:1b:83:7a:6c:a7:5b:f6:74:00:80:b5:cf:a6:
32:cd:5b:11:51:d7:5f:4b:c5:20:51:17:46:a6:12:
1f:76:29:23:ab:24:31:dd:ca:81:65:94:e9:37:85:
7c:bc:ce:cc:72:b7:90:bb:67:2a:ff:0d:00:53:7a:
72:f8:5c:3d:8a:ee:41:97:ce:ca:a2:af:d5:2f:6e:
4e:ba:46:92:47:54:c9:d6:b6:ae:b1:6f:9f:7e:54:
c1:22:80:b7:a6:46:73:c2:7c:83:3c:c8:c4:37:c9:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Subject Key Identifier:
9E:A3:43:F7:68:52:85:D9:69:13:F6:56:4A:D0:27:EC:6F:FD:B0:E5
X509v3 Subject Alternative Name:
DNS:mail.gk-forward.com, DNS:AutoDiscover.GK-FORWARD.COM, DNS:srv-exch-03-ufa.gk-forward.com, DNS:srv-exch-03-ufa, DNS:GK-FORWARD.COM
X509v3 Authority Key Identifier:
36:16:0F:00:EE:49:D7:05:AA:17:8E:E0:8C:FF:12:7B:91:8D:B3:C8
X509v3 CRL Distribution Points:
Full Name:
URI:ldap:///CN=GK-FORWARD-SRV-PKI-02-UFA-CA,CN=srv-pki-02-ufa,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=GK-FORWARD,DC=COM?certificateRevocationList?base?objectClass=cRLDistributionPoint
Authority Information Access:
CA Issuers - URI:ldap:///CN=GK-FORWARD-SRV-PKI-02-UFA-CA,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=GK-FORWARD,DC=COM?cACertificate?base?objectClass=certificationAuthority
1.3.6.1.4.1.311.20.2:
...W.e.b.S.e.r.v.e.r
X509v3 Extended Key Usage:
TLS Web Server Authentication
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
0d:f9:b5:66:c8:c9:92:66:e2:55:14:c3:68:19:09:fd:ad:9f:
99:19:06:dd:c1:76:22:4c:26:bf:b4:8c:07:7e:7d:9f:47:c0:
ad:c0:b2:27:3a:52:c4:03:1b:01:95:51:c6:51:63:59:d0:bd:
dd:26:b4:d2:b3:d0:79:d9:97:43:d4:91:bb:af:e0:dd:5c:7e:
94:4f:f1:0c:a7:66:7f:03:b2:3a:a1:66:6b:88:2e:41:66:a5:
1d:52:ac:09:19:49:6a:1b:11:5f:bb:db:53:14:a1:46:f6:0f:
b7:84:41:8f:b3:e5:d0:12:45:a7:02:45:08:5e:b6:98:7b:7c:
fe:aa:9d:11:ae:01:fb:95:0d:2e:98:21:70:e8:a1:cb:05:8a:
98:b3:eb:24:5d:f2:69:f0:56:38:21:2f:d2:50:1a:e4:70:4e:
5b:28:30:ce:db:e1:8b:94:c3:ab:7d:12:66:9d:b2:97:3a:b6:
ab:2a:94:39:42:2a:14:e4:39:c7:48:77:10:18:09:2a:63:ca:
51:dd:72:a1:d9:2c:8f:e0:1f:85:72:ad:cc:11:2f:cf:16:05:
15:85:c8:d2:16:e3:cf:c0:2d:50:30:64:45:9a:6e:07:51:d3:
26:b4:5d:e2:ef:c9:9c:3b:49:13:33:14:0d:ce:16:c3:2c:41:
10:8d:2c:02
1351555859 | 2024-06-15T01:41:37.075427
443 /
tcp
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/8.0
request-id: 8cd993e9-3aee-4b45-8c48-123b348315c3
Set-Cookie: ClientId=9MM0KIUKAV0WPHLDDG; expires=Sun, 15-Jun-2025 01:41:36 GMT; path=/; HttpOnly
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 15 Jun 2024 01:41:36 GMT
Content-Length: 56261
Microsoft Exchange:
Name: Exchange Server 2013 CU23 Mar23SU
Build Number: 15.0.1497.48
Build Date: March 14, 2023
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:00:00:00:08:5e:bb:7b:e2:18:62:8f:44:00:00:00:00:00:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: DC=COM, DC=GK-FORWARD, CN=GK-FORWARD-SRV-PKI-02-UFA-CA
Validity
Not Before: Jul 17 12:52:22 2023 GMT
Not After : Jul 16 12:52:22 2025 GMT
Subject: C=RU, ST=Bashkortostan, L=Ufa, O=Forward, OU=AIS, CN=mail.gk-forward.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b2:b1:db:bd:85:68:b1:63:12:31:41:83:fb:46:
cc:e2:b2:f8:98:07:1e:74:66:5e:9c:6d:32:e7:50:
d3:da:ec:9c:a4:9b:4d:1a:c2:ca:77:2c:cc:9a:2f:
39:19:bd:e6:d0:73:dc:4f:43:0e:e2:48:12:3e:9d:
11:2d:7b:6c:4d:4b:a4:d0:89:b8:63:5a:c7:a4:15:
23:20:be:b2:dd:c6:ec:ac:b1:b2:e9:87:a4:7f:ae:
6d:df:19:c8:5f:c7:33:49:34:c3:dc:41:9b:db:e5:
4e:a3:eb:9e:86:4d:1c:d5:61:d7:fa:bc:cb:47:f0:
97:6c:8f:09:38:be:72:d8:92:cc:7b:38:b3:38:1f:
f2:ce:6a:c2:25:e8:d0:41:0c:bf:9b:e3:38:ae:be:
e4:6c:1b:83:7a:6c:a7:5b:f6:74:00:80:b5:cf:a6:
32:cd:5b:11:51:d7:5f:4b:c5:20:51:17:46:a6:12:
1f:76:29:23:ab:24:31:dd:ca:81:65:94:e9:37:85:
7c:bc:ce:cc:72:b7:90:bb:67:2a:ff:0d:00:53:7a:
72:f8:5c:3d:8a:ee:41:97:ce:ca:a2:af:d5:2f:6e:
4e:ba:46:92:47:54:c9:d6:b6:ae:b1:6f:9f:7e:54:
c1:22:80:b7:a6:46:73:c2:7c:83:3c:c8:c4:37:c9:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Subject Key Identifier:
9E:A3:43:F7:68:52:85:D9:69:13:F6:56:4A:D0:27:EC:6F:FD:B0:E5
X509v3 Subject Alternative Name:
DNS:mail.gk-forward.com, DNS:AutoDiscover.GK-FORWARD.COM, DNS:srv-exch-03-ufa.gk-forward.com, DNS:srv-exch-03-ufa, DNS:GK-FORWARD.COM
X509v3 Authority Key Identifier:
36:16:0F:00:EE:49:D7:05:AA:17:8E:E0:8C:FF:12:7B:91:8D:B3:C8
X509v3 CRL Distribution Points:
Full Name:
URI:ldap:///CN=GK-FORWARD-SRV-PKI-02-UFA-CA,CN=srv-pki-02-ufa,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=GK-FORWARD,DC=COM?certificateRevocationList?base?objectClass=cRLDistributionPoint
Authority Information Access:
CA Issuers - URI:ldap:///CN=GK-FORWARD-SRV-PKI-02-UFA-CA,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=GK-FORWARD,DC=COM?cACertificate?base?objectClass=certificationAuthority
1.3.6.1.4.1.311.20.2:
...W.e.b.S.e.r.v.e.r
X509v3 Extended Key Usage:
TLS Web Server Authentication
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
0d:f9:b5:66:c8:c9:92:66:e2:55:14:c3:68:19:09:fd:ad:9f:
99:19:06:dd:c1:76:22:4c:26:bf:b4:8c:07:7e:7d:9f:47:c0:
ad:c0:b2:27:3a:52:c4:03:1b:01:95:51:c6:51:63:59:d0:bd:
dd:26:b4:d2:b3:d0:79:d9:97:43:d4:91:bb:af:e0:dd:5c:7e:
94:4f:f1:0c:a7:66:7f:03:b2:3a:a1:66:6b:88:2e:41:66:a5:
1d:52:ac:09:19:49:6a:1b:11:5f:bb:db:53:14:a1:46:f6:0f:
b7:84:41:8f:b3:e5:d0:12:45:a7:02:45:08:5e:b6:98:7b:7c:
fe:aa:9d:11:ae:01:fb:95:0d:2e:98:21:70:e8:a1:cb:05:8a:
98:b3:eb:24:5d:f2:69:f0:56:38:21:2f:d2:50:1a:e4:70:4e:
5b:28:30:ce:db:e1:8b:94:c3:ab:7d:12:66:9d:b2:97:3a:b6:
ab:2a:94:39:42:2a:14:e4:39:c7:48:77:10:18:09:2a:63:ca:
51:dd:72:a1:d9:2c:8f:e0:1f:85:72:ad:cc:11:2f:cf:16:05:
15:85:c8:d2:16:e3:cf:c0:2d:50:30:64:45:9a:6e:07:51:d3:
26:b4:5d:e2:ef:c9:9c:3b:49:13:33:14:0d:ce:16:c3:2c:41:
10:8d:2c:02
-985193584 | 2024-05-31T17:20:01.392042
993 /
tcp
* OK The Microsoft Exchange IMAP4 service is ready.
* CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=NTLM AUTH=GSSAPI UIDPLUS MOVE ID CHILDREN IDLE NAMESPACE LITERAL+
A001 OK CAPABILITY completed.
* ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.0")
A002 OK ID completed
A003 BAD Command Error. 12
* BYE Microsoft Exchange Server 2013 IMAP4 server signing off.
A004 OK LOGOUT completed.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:00:00:00:08:5e:bb:7b:e2:18:62:8f:44:00:00:00:00:00:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: DC=COM, DC=GK-FORWARD, CN=GK-FORWARD-SRV-PKI-02-UFA-CA
Validity
Not Before: Jul 17 12:52:22 2023 GMT
Not After : Jul 16 12:52:22 2025 GMT
Subject: C=RU, ST=Bashkortostan, L=Ufa, O=Forward, OU=AIS, CN=mail.gk-forward.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b2:b1:db:bd:85:68:b1:63:12:31:41:83:fb:46:
cc:e2:b2:f8:98:07:1e:74:66:5e:9c:6d:32:e7:50:
d3:da:ec:9c:a4:9b:4d:1a:c2:ca:77:2c:cc:9a:2f:
39:19:bd:e6:d0:73:dc:4f:43:0e:e2:48:12:3e:9d:
11:2d:7b:6c:4d:4b:a4:d0:89:b8:63:5a:c7:a4:15:
23:20:be:b2:dd:c6:ec:ac:b1:b2:e9:87:a4:7f:ae:
6d:df:19:c8:5f:c7:33:49:34:c3:dc:41:9b:db:e5:
4e:a3:eb:9e:86:4d:1c:d5:61:d7:fa:bc:cb:47:f0:
97:6c:8f:09:38:be:72:d8:92:cc:7b:38:b3:38:1f:
f2:ce:6a:c2:25:e8:d0:41:0c:bf:9b:e3:38:ae:be:
e4:6c:1b:83:7a:6c:a7:5b:f6:74:00:80:b5:cf:a6:
32:cd:5b:11:51:d7:5f:4b:c5:20:51:17:46:a6:12:
1f:76:29:23:ab:24:31:dd:ca:81:65:94:e9:37:85:
7c:bc:ce:cc:72:b7:90:bb:67:2a:ff:0d:00:53:7a:
72:f8:5c:3d:8a:ee:41:97:ce:ca:a2:af:d5:2f:6e:
4e:ba:46:92:47:54:c9:d6:b6:ae:b1:6f:9f:7e:54:
c1:22:80:b7:a6:46:73:c2:7c:83:3c:c8:c4:37:c9:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Subject Key Identifier:
9E:A3:43:F7:68:52:85:D9:69:13:F6:56:4A:D0:27:EC:6F:FD:B0:E5
X509v3 Subject Alternative Name:
DNS:mail.gk-forward.com, DNS:AutoDiscover.GK-FORWARD.COM, DNS:srv-exch-03-ufa.gk-forward.com, DNS:srv-exch-03-ufa, DNS:GK-FORWARD.COM
X509v3 Authority Key Identifier:
36:16:0F:00:EE:49:D7:05:AA:17:8E:E0:8C:FF:12:7B:91:8D:B3:C8
X509v3 CRL Distribution Points:
Full Name:
URI:ldap:///CN=GK-FORWARD-SRV-PKI-02-UFA-CA,CN=srv-pki-02-ufa,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=GK-FORWARD,DC=COM?certificateRevocationList?base?objectClass=cRLDistributionPoint
Authority Information Access:
CA Issuers - URI:ldap:///CN=GK-FORWARD-SRV-PKI-02-UFA-CA,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=GK-FORWARD,DC=COM?cACertificate?base?objectClass=certificationAuthority
1.3.6.1.4.1.311.20.2:
...W.e.b.S.e.r.v.e.r
X509v3 Extended Key Usage:
TLS Web Server Authentication
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
0d:f9:b5:66:c8:c9:92:66:e2:55:14:c3:68:19:09:fd:ad:9f:
99:19:06:dd:c1:76:22:4c:26:bf:b4:8c:07:7e:7d:9f:47:c0:
ad:c0:b2:27:3a:52:c4:03:1b:01:95:51:c6:51:63:59:d0:bd:
dd:26:b4:d2:b3:d0:79:d9:97:43:d4:91:bb:af:e0:dd:5c:7e:
94:4f:f1:0c:a7:66:7f:03:b2:3a:a1:66:6b:88:2e:41:66:a5:
1d:52:ac:09:19:49:6a:1b:11:5f:bb:db:53:14:a1:46:f6:0f:
b7:84:41:8f:b3:e5:d0:12:45:a7:02:45:08:5e:b6:98:7b:7c:
fe:aa:9d:11:ae:01:fb:95:0d:2e:98:21:70:e8:a1:cb:05:8a:
98:b3:eb:24:5d:f2:69:f0:56:38:21:2f:d2:50:1a:e4:70:4e:
5b:28:30:ce:db:e1:8b:94:c3:ab:7d:12:66:9d:b2:97:3a:b6:
ab:2a:94:39:42:2a:14:e4:39:c7:48:77:10:18:09:2a:63:ca:
51:dd:72:a1:d9:2c:8f:e0:1f:85:72:ad:cc:11:2f:cf:16:05:
15:85:c8:d2:16:e3:cf:c0:2d:50:30:64:45:9a:6e:07:51:d3:
26:b4:5d:e2:ef:c9:9c:3b:49:13:33:14:0d:ce:16:c3:2c:41:
10:8d:2c:02
