Hostnames |
server213-171-221-18.live-servers.net serverhost1.serverhost1.net www.serverhost1.serverhost1.net surl.link cpanel.surl.link cpcalendars.surl.link cpcontacts.surl.link mail.surl.link webdisk.surl.link webmail.surl.link www.surl.link |
Domains | live-servers.net serverhost1.net surl.link |
Country | United Kingdom |
City | Gloucester |
Organization | Fasthosts Internet Limited |
ISP | IONOS SE |
ASN | AS8560 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
CVE-2023-51766 | Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not. |
CVE-2022-37452 | Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set. |
CVE-2022-37451 | Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc. |
CVE-2021-38371 | 5.0The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending. |
CVE-2021-27216 | 6.3Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options. |
CVE-2020-8015 | 7.2A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1. |
CVE-2020-28026 | 9.3Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary commands as root. |
CVE-2020-28025 | 5.0Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory. |
CVE-2020-28024 | 7.5Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp_ungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF. |
CVE-2020-28023 | 5.0Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information from process memory to an unauthenticated SMTP client. |
CVE-2020-28022 | 7.5Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands. |
CVE-2020-28021 | 9.0Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command. |
CVE-2020-28019 | 5.0Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA. |
CVE-2020-28018 | 7.5Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL. |
CVE-2020-28017 | 7.5Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be difficult because of resource consumption. |
CVE-2020-28016 | 7.2Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parse_fix_phrase. |
CVE-2020-28015 | 7.2Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root processes because a recipient address can have a newline character. |
CVE-2020-28014 | 5.6Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten. |
CVE-2020-28013 | 7.2Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the command line, and thus may allow privilege escalation from any user to root. This occurs because of the interpretation of negative sizes in strncpy. |
CVE-2020-28012 | 7.2Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rda_interpret uses a privileged pipe that lacks a close-on-exec flag. |
CVE-2020-28011 | 7.2Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause privilege escalation from exim to root. |
CVE-2020-28010 | 7.2Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small (on some common platforms). |
CVE-2020-28009 | 7.2Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow (multiple days). |
CVE-2020-28008 | 7.2Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input spool header file, in which a crafted recipient address can indirectly lead to command execution. |
CVE-2020-28007 | 7.2Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (owned by a non-root user), a symlink or hard link attack allows overwriting critical root-owned files anywhere on the filesystem. |
CVE-2020-12783 | 5.0Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c. |
2101372259 | 2024-05-03T21:36:00.52746221 / tcp
220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 21:35. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity. 530 Login authentication failed 214-The following SITE commands are recognized ALIAS CHMOD IDLE UTIME 214 Pure-FTPd - http://pureftpd.org/ 211-Extensions supported: EPRT IDLE MDTM SIZE MFMT REST STREAM MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*; MLSD AUTH TLS PBSZ PROT UTF8 TVFS ESTA PASV EPSV SPSV ESTP 211 End.
Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:07:ee:c6:e7:47:11:1a:a3:74:90:71:a6:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority Validity Not Before: Oct 3 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2024 GMT Subject: CN=serverhost1.serverhost1.net Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:dd:ca:7b:81:b0:8a:21:b7:82:e5:37:46:3c:60: 85:15:fc:47:8f:9a:9d:ba:32:71:67:03:e7:c7:4a: 7b:67:3c:51:e0:d2:61:4d:0b:5e:cb:c0:d4:03:4e: 46:df:02:c4:f7:f8:96:32:19:7d:98:49:95:23:67: b9:85:51:8f:0d:b3:cb:ea:0c:d1:2e:64:d6:fe:c6: 3a:c3:83:42:36:b2:04:73:1b:a8:e6:39:db:9c:cf: 25:03:cf:a7:64:da:f8:7b:da:78:e0:df:ab:9e:1b: 1d:e0:72:8a:41:88:89:2a:81:73:ce:a4:f8:55:c6: 74:17:22:55:b8:60:86:3f:24:fa:ef:c5:cc:9a:e1: 41:70:65:7d:a1:b7:44:9e:e5:49:8c:d2:69:36:4f: 40:c7:20:de:42:07:b4:83:37:2f:29:48:34:2c:76: 79:b5:db:00:66:76:09:d6:0d:33:0d:6b:49:c5:2f: 8f:43:06:e0:ab:32:9e:a3:7b:e5:fc:f5:02:d8:0a: 7c:a2:30:1d:c5:6c:1a:67:03:b6:de:c4:8a:41:ba: 9c:51:df:bf:6e:d9:36:86:55:fa:12:57:7c:7b:0b: af:c5:4f:c0:12:2d:f5:28:96:cb:58:c3:7e:7b:15: 7e:a0:41:b2:0b:9e:36:55:5f:8c:2d:12:fe:df:39: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65 X509v3 Subject Key Identifier: 4F:E9:E5:C2:DD:88:3E:66:29:2C:EB:9E:C1:73:66:0C:CB:12:79:52 X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.2.52 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl Authority Information Access: CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt OCSP - URI:http://ocsp.comodoca.com X509v3 Subject Alternative Name: DNS:serverhost1.serverhost1.net, DNS:www.serverhost1.serverhost1.net CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Oct 3 20:48:57.946 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:D9:A0:6F:98:EB:77:16:10:15:04: 4F:C7:26:47:71:BE:51:B7:5E:C7:4C:4D:E7:3B:4C:8B: F2:E1:75:AD:26:02:21:00:A2:B7:BD:0E:41:63:ED:4F: 26:B1:99:60:6F:EE:A3:6A:9C:BC:EB:E0:A8:F1:A2:62: FC:BE:4E:CD:15:2D:91:D8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Oct 3 20:48:58.002 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:73:CB:FE:41:6B:D6:BA:A4:69:D2:FA:61: 92:73:16:FF:1B:69:5F:5F:8F:78:AC:94:B2:33:40:FF: 98:BB:33:2B:02:20:20:50:8A:5F:94:79:7C:47:2E:E9: 3E:64:8C:50:7C:56:95:8C:59:B2:96:D3:8C:5A:2D:22: EB:93:81:FB:52:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Oct 3 20:48:58.060 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:12:F4:3B:C6:ED:B9:C3:91:A8:A9:17: F7:4E:85:12:F9:F2:0A:FF:5D:E4:F5:46:74:87:F5:4C: 01:E6:44:5C:02:21:00:A7:05:1C:DE:E2:5A:2E:9A:95: 05:E8:49:1C:91:CD:F7:7F:6C:A7:BC:1B:37:13:72:84: A2:69:1E:6D:FA:B5:14 Signature Algorithm: sha256WithRSAEncryption Signature Value: 7a:bb:3d:03:ab:26:b4:14:9d:e6:6b:f5:69:72:2b:8b:aa:e8: a6:5b:5d:8d:c5:30:6f:88:40:16:a0:51:0b:78:e9:5e:cb:a2: 9f:34:81:51:ee:08:3b:c3:3e:61:5d:b4:3c:ab:07:3c:3f:41: 64:0a:81:20:59:50:4c:d4:29:74:09:51:90:8f:0e:08:a0:b6: b8:be:d9:f0:86:d2:03:83:67:d7:b7:f3:61:c6:55:84:d6:c3: 18:41:b4:5a:f7:34:92:33:13:7d:44:1f:e8:7f:93:16:a7:7a: 65:61:e4:1b:a3:8f:27:2d:1d:8a:b6:a3:78:3b:f2:3c:9a:80: 53:d9:1b:4a:cf:28:18:2b:03:63:12:fb:77:7c:33:9a:7d:6b: ab:56:61:9e:6d:22:e3:dd:a5:24:0a:e8:d7:53:e6:ae:fe:b6: 39:27:17:5f:b4:4d:20:36:b1:1a:7a:b6:5e:a9:1b:d9:7c:38: 18:ea:29:39:a8:1e:c2:c0:00:86:d2:43:cd:2d:33:bd:57:58: c9:53:1e:f4:91:52:81:cb:aa:2f:1f:7b:a8:af:70:1a:a9:86: ab:69:50:82:fb:42:16:5d:a6:df:55:1d:cc:04:2f:aa:7a:36: 16:38:3b:8e:53:0f:02:95:36:e3:a3:9b:f2:56:cf:d5:26:56: 67:0b:cd:44
-1186328093 | 2024-04-21T00:13:45.58981953 / tcp
9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.8 Resolver name: serverhost1.serverhost1.net
495340503 | 2024-05-04T11:29:46.89547880 / tcp
HTTP/1.1 301 Moved Permanently Date: Sat, 04 May 2024 11:29:46 GMT Server: Apache Location: https://213.171.221.18/ Content-Length: 231 Content-Type: text/html; charset=iso-8859-1
1952082069 | 2024-04-11T23:44:19.496098110 / tcp
+OK Dovecot ready. +OK CAPA TOP UIDL RESP-CODES PIPELINING AUTH-RESP-CODE STLS USER SASL PLAIN LOGIN .
Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:07:ee:c6:e7:47:11:1a:a3:74:90:71:a6:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority Validity Not Before: Oct 3 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2024 GMT Subject: CN=serverhost1.serverhost1.net Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:dd:ca:7b:81:b0:8a:21:b7:82:e5:37:46:3c:60: 85:15:fc:47:8f:9a:9d:ba:32:71:67:03:e7:c7:4a: 7b:67:3c:51:e0:d2:61:4d:0b:5e:cb:c0:d4:03:4e: 46:df:02:c4:f7:f8:96:32:19:7d:98:49:95:23:67: b9:85:51:8f:0d:b3:cb:ea:0c:d1:2e:64:d6:fe:c6: 3a:c3:83:42:36:b2:04:73:1b:a8:e6:39:db:9c:cf: 25:03:cf:a7:64:da:f8:7b:da:78:e0:df:ab:9e:1b: 1d:e0:72:8a:41:88:89:2a:81:73:ce:a4:f8:55:c6: 74:17:22:55:b8:60:86:3f:24:fa:ef:c5:cc:9a:e1: 41:70:65:7d:a1:b7:44:9e:e5:49:8c:d2:69:36:4f: 40:c7:20:de:42:07:b4:83:37:2f:29:48:34:2c:76: 79:b5:db:00:66:76:09:d6:0d:33:0d:6b:49:c5:2f: 8f:43:06:e0:ab:32:9e:a3:7b:e5:fc:f5:02:d8:0a: 7c:a2:30:1d:c5:6c:1a:67:03:b6:de:c4:8a:41:ba: 9c:51:df:bf:6e:d9:36:86:55:fa:12:57:7c:7b:0b: af:c5:4f:c0:12:2d:f5:28:96:cb:58:c3:7e:7b:15: 7e:a0:41:b2:0b:9e:36:55:5f:8c:2d:12:fe:df:39: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65 X509v3 Subject Key Identifier: 4F:E9:E5:C2:DD:88:3E:66:29:2C:EB:9E:C1:73:66:0C:CB:12:79:52 X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.2.52 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl Authority Information Access: CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt OCSP - URI:http://ocsp.comodoca.com X509v3 Subject Alternative Name: DNS:serverhost1.serverhost1.net, DNS:www.serverhost1.serverhost1.net CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Oct 3 20:48:57.946 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:D9:A0:6F:98:EB:77:16:10:15:04: 4F:C7:26:47:71:BE:51:B7:5E:C7:4C:4D:E7:3B:4C:8B: F2:E1:75:AD:26:02:21:00:A2:B7:BD:0E:41:63:ED:4F: 26:B1:99:60:6F:EE:A3:6A:9C:BC:EB:E0:A8:F1:A2:62: FC:BE:4E:CD:15:2D:91:D8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Oct 3 20:48:58.002 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:73:CB:FE:41:6B:D6:BA:A4:69:D2:FA:61: 92:73:16:FF:1B:69:5F:5F:8F:78:AC:94:B2:33:40:FF: 98:BB:33:2B:02:20:20:50:8A:5F:94:79:7C:47:2E:E9: 3E:64:8C:50:7C:56:95:8C:59:B2:96:D3:8C:5A:2D:22: EB:93:81:FB:52:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Oct 3 20:48:58.060 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:12:F4:3B:C6:ED:B9:C3:91:A8:A9:17: F7:4E:85:12:F9:F2:0A:FF:5D:E4:F5:46:74:87:F5:4C: 01:E6:44:5C:02:21:00:A7:05:1C:DE:E2:5A:2E:9A:95: 05:E8:49:1C:91:CD:F7:7F:6C:A7:BC:1B:37:13:72:84: A2:69:1E:6D:FA:B5:14 Signature Algorithm: sha256WithRSAEncryption Signature Value: 7a:bb:3d:03:ab:26:b4:14:9d:e6:6b:f5:69:72:2b:8b:aa:e8: a6:5b:5d:8d:c5:30:6f:88:40:16:a0:51:0b:78:e9:5e:cb:a2: 9f:34:81:51:ee:08:3b:c3:3e:61:5d:b4:3c:ab:07:3c:3f:41: 64:0a:81:20:59:50:4c:d4:29:74:09:51:90:8f:0e:08:a0:b6: b8:be:d9:f0:86:d2:03:83:67:d7:b7:f3:61:c6:55:84:d6:c3: 18:41:b4:5a:f7:34:92:33:13:7d:44:1f:e8:7f:93:16:a7:7a: 65:61:e4:1b:a3:8f:27:2d:1d:8a:b6:a3:78:3b:f2:3c:9a:80: 53:d9:1b:4a:cf:28:18:2b:03:63:12:fb:77:7c:33:9a:7d:6b: ab:56:61:9e:6d:22:e3:dd:a5:24:0a:e8:d7:53:e6:ae:fe:b6: 39:27:17:5f:b4:4d:20:36:b1:1a:7a:b6:5e:a9:1b:d9:7c:38: 18:ea:29:39:a8:1e:c2:c0:00:86:d2:43:cd:2d:33:bd:57:58: c9:53:1e:f4:91:52:81:cb:aa:2f:1f:7b:a8:af:70:1a:a9:86: ab:69:50:82:fb:42:16:5d:a6:df:55:1d:cc:04:2f:aa:7a:36: 16:38:3b:8e:53:0f:02:95:36:e3:a3:9b:f2:56:cf:d5:26:56: 67:0b:cd:44
1559185454 | 2024-04-28T15:33:45.221504143 / tcp
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. * CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN A001 OK Pre-login capabilities listed, post-login capabilities have more. * ID ("name" "Dovecot") A002 OK ID completed. A003 BAD Error in IMAP command received by server. * BYE Logging out A004 OK Logout completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:07:ee:c6:e7:47:11:1a:a3:74:90:71:a6:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority Validity Not Before: Oct 3 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2024 GMT Subject: CN=serverhost1.serverhost1.net Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:dd:ca:7b:81:b0:8a:21:b7:82:e5:37:46:3c:60: 85:15:fc:47:8f:9a:9d:ba:32:71:67:03:e7:c7:4a: 7b:67:3c:51:e0:d2:61:4d:0b:5e:cb:c0:d4:03:4e: 46:df:02:c4:f7:f8:96:32:19:7d:98:49:95:23:67: b9:85:51:8f:0d:b3:cb:ea:0c:d1:2e:64:d6:fe:c6: 3a:c3:83:42:36:b2:04:73:1b:a8:e6:39:db:9c:cf: 25:03:cf:a7:64:da:f8:7b:da:78:e0:df:ab:9e:1b: 1d:e0:72:8a:41:88:89:2a:81:73:ce:a4:f8:55:c6: 74:17:22:55:b8:60:86:3f:24:fa:ef:c5:cc:9a:e1: 41:70:65:7d:a1:b7:44:9e:e5:49:8c:d2:69:36:4f: 40:c7:20:de:42:07:b4:83:37:2f:29:48:34:2c:76: 79:b5:db:00:66:76:09:d6:0d:33:0d:6b:49:c5:2f: 8f:43:06:e0:ab:32:9e:a3:7b:e5:fc:f5:02:d8:0a: 7c:a2:30:1d:c5:6c:1a:67:03:b6:de:c4:8a:41:ba: 9c:51:df:bf:6e:d9:36:86:55:fa:12:57:7c:7b:0b: af:c5:4f:c0:12:2d:f5:28:96:cb:58:c3:7e:7b:15: 7e:a0:41:b2:0b:9e:36:55:5f:8c:2d:12:fe:df:39: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65 X509v3 Subject Key Identifier: 4F:E9:E5:C2:DD:88:3E:66:29:2C:EB:9E:C1:73:66:0C:CB:12:79:52 X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.2.52 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl Authority Information Access: CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt OCSP - URI:http://ocsp.comodoca.com X509v3 Subject Alternative Name: DNS:serverhost1.serverhost1.net, DNS:www.serverhost1.serverhost1.net CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Oct 3 20:48:57.946 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:D9:A0:6F:98:EB:77:16:10:15:04: 4F:C7:26:47:71:BE:51:B7:5E:C7:4C:4D:E7:3B:4C:8B: F2:E1:75:AD:26:02:21:00:A2:B7:BD:0E:41:63:ED:4F: 26:B1:99:60:6F:EE:A3:6A:9C:BC:EB:E0:A8:F1:A2:62: FC:BE:4E:CD:15:2D:91:D8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Oct 3 20:48:58.002 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:73:CB:FE:41:6B:D6:BA:A4:69:D2:FA:61: 92:73:16:FF:1B:69:5F:5F:8F:78:AC:94:B2:33:40:FF: 98:BB:33:2B:02:20:20:50:8A:5F:94:79:7C:47:2E:E9: 3E:64:8C:50:7C:56:95:8C:59:B2:96:D3:8C:5A:2D:22: EB:93:81:FB:52:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Oct 3 20:48:58.060 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:12:F4:3B:C6:ED:B9:C3:91:A8:A9:17: F7:4E:85:12:F9:F2:0A:FF:5D:E4:F5:46:74:87:F5:4C: 01:E6:44:5C:02:21:00:A7:05:1C:DE:E2:5A:2E:9A:95: 05:E8:49:1C:91:CD:F7:7F:6C:A7:BC:1B:37:13:72:84: A2:69:1E:6D:FA:B5:14 Signature Algorithm: sha256WithRSAEncryption Signature Value: 7a:bb:3d:03:ab:26:b4:14:9d:e6:6b:f5:69:72:2b:8b:aa:e8: a6:5b:5d:8d:c5:30:6f:88:40:16:a0:51:0b:78:e9:5e:cb:a2: 9f:34:81:51:ee:08:3b:c3:3e:61:5d:b4:3c:ab:07:3c:3f:41: 64:0a:81:20:59:50:4c:d4:29:74:09:51:90:8f:0e:08:a0:b6: b8:be:d9:f0:86:d2:03:83:67:d7:b7:f3:61:c6:55:84:d6:c3: 18:41:b4:5a:f7:34:92:33:13:7d:44:1f:e8:7f:93:16:a7:7a: 65:61:e4:1b:a3:8f:27:2d:1d:8a:b6:a3:78:3b:f2:3c:9a:80: 53:d9:1b:4a:cf:28:18:2b:03:63:12:fb:77:7c:33:9a:7d:6b: ab:56:61:9e:6d:22:e3:dd:a5:24:0a:e8:d7:53:e6:ae:fe:b6: 39:27:17:5f:b4:4d:20:36:b1:1a:7a:b6:5e:a9:1b:d9:7c:38: 18:ea:29:39:a8:1e:c2:c0:00:86:d2:43:cd:2d:33:bd:57:58: c9:53:1e:f4:91:52:81:cb:aa:2f:1f:7b:a8:af:70:1a:a9:86: ab:69:50:82:fb:42:16:5d:a6:df:55:1d:cc:04:2f:aa:7a:36: 16:38:3b:8e:53:0f:02:95:36:e3:a3:9b:f2:56:cf:d5:26:56: 67:0b:cd:44
-1831046307 | 2024-05-05T12:56:07.153829443 / tcp
HTTP/1.1 302 Moved Temporarily Date: Sun, 05 May 2024 12:56:06 GMT Server: Apache location: http://shorturlapp.com Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Certificate: Data: Version: 3 (0x2) Serial Number: 03:9d:9d:4c:4b:a8:ce:d8:cd:83:7c:3a:82:5a:07:67:d0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Let's Encrypt, CN=R3 Validity Not Before: Apr 17 04:06:03 2024 GMT Not After : Jul 16 04:06:02 2024 GMT Subject: CN=webmail.surl.link Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:aa:3d:42:eb:27:96:02:65:0d:6f:a1:f7:c0:9e: 64:b7:2a:fd:97:66:96:15:96:c8:9c:dd:b5:94:f3: 8c:bb:17:b4:d0:c0:7e:7d:03:bb:42:07:65:ae:ab: 5a:43:5c:0e:0c:68:1d:73:61:2f:2e:86:1f:33:94: 2b:bb:26:f3:02:d3:cb:ce:37:d2:22:1c:44:0f:56: 82:16:1e:f3:28:f7:09:c1:a9:32:38:8c:7f:71:a2: 5b:dd:22:7e:88:a9:07:be:c5:ab:13:4b:09:82:d9: 5c:a8:36:79:b6:5a:ab:6e:f6:6a:24:87:84:73:6b: 34:64:05:d0:56:2e:07:1e:85:a2:ed:a4:b8:74:af: 7c:86:bc:c4:b2:2b:ca:38:90:5b:75:be:75:c5:ba: 63:c7:f8:f0:5c:85:5e:e6:3d:c4:62:43:32:e8:f9: 03:c4:c6:b6:5a:81:9e:6e:3e:3d:6a:e2:42:0e:b2: 35:d3:8c:0b:79:d9:66:97:ec:9d:50:5c:19:6b:54: d1:c5:5a:4b:ff:76:86:3a:7d:70:77:49:ce:d2:1f: e2:03:fa:98:59:60:19:8e:df:95:e4:c3:cb:14:7b: 1f:d8:a2:fd:18:07:f5:14:8f:51:02:23:ed:df:04: 31:c5:e4:32:c9:0e:f8:7d:45:02:bf:88:dc:fe:45: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: CC:45:B8:5C:F1:CE:7B:FE:39:C5:BA:25:96:95:71:36:7A:F3:C4:85 X509v3 Authority Key Identifier: 14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6 Authority Information Access: OCSP - URI:http://r3.o.lencr.org CA Issuers - URI:http://r3.i.lencr.org/ X509v3 Subject Alternative Name: DNS:cpanel.surl.link, DNS:cpcalendars.surl.link, DNS:cpcontacts.surl.link, DNS:mail.surl.link, DNS:surl.link, DNS:webdisk.surl.link, DNS:webmail.surl.link, DNS:www.surl.link X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB: 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73 Timestamp : Apr 17 05:06:03.445 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6F:5A:C7:9E:A3:35:0F:56:C5:5C:82:7F: 35:3D:D8:52:FD:43:A8:AB:17:05:03:D8:ED:B9:D3:EC: 82:55:70:29:02:20:54:51:BA:A6:70:B5:08:CD:F0:1B: 6E:B0:5B:DC:F6:33:20:93:70:AB:80:1B:05:F9:0C:39: F9:6F:66:39:8E:FA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32: 4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C Timestamp : Apr 17 05:06:03.649 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:69:88:00:0D:C3:0D:48:7B:8D:E8:E5:34: 41:CB:58:75:3C:C6:0C:1F:D7:11:28:A7:36:B1:23:90: 5B:E1:86:AC:02:21:00:EC:2C:A4:C5:44:CB:A5:15:A4: AC:5E:D9:C5:A0:91:8F:0C:46:D6:99:C6:15:45:4A:6F: 8E:4B:17:2E:4E:52:A7 Signature Algorithm: sha256WithRSAEncryption Signature Value: 2e:ac:40:d3:78:95:0e:f0:6c:2c:3f:64:0b:ba:1a:8b:04:4a: 2a:06:81:ce:55:4a:b8:34:b0:61:93:43:37:c9:05:d3:9b:50: 35:dd:1b:bd:69:4b:d3:f5:9c:58:dd:6a:22:75:39:45:04:8e: c7:c9:d3:41:8a:e8:b3:2a:ce:33:97:fe:07:11:6a:6d:8e:ed: 50:b5:10:b6:f9:59:9a:d0:2b:1f:a6:d7:f2:26:dd:d4:24:11: 3e:60:d2:da:c1:f7:94:a2:f8:e4:87:15:a0:e3:a0:e1:97:6b: 35:13:3a:63:72:42:75:0c:7e:c6:7b:9c:40:4c:08:cd:23:28: 7e:25:75:84:ce:14:f7:fe:38:23:88:df:4d:a3:9c:1b:69:b6: ff:ed:2d:5f:f2:23:a8:de:19:86:cf:95:34:fb:65:be:1b:ef: 03:03:1b:3c:c5:42:b8:5c:f1:36:9a:67:3f:4b:5b:6d:3f:b0: e4:b7:59:dd:c1:ae:8a:c7:99:60:13:c8:09:8b:c3:4b:3a:5b: 5f:5f:f6:43:5d:de:eb:e6:2f:2f:c8:3d:59:b6:30:03:47:1c: ac:66:77:1e:3a:56:59:f1:5d:8a:f6:8f:69:b1:d9:06:84:98: a9:c3:89:a2:f7:77:b5:2c:32:c0:5a:3b:a2:80:1a:00:ab:4d: f7:fc:95:b8
-127996216 | 2024-04-26T02:40:37.954696465 / tcp
220-serverhost1.serverhost1.net ESMTP Exim 4.93 #2 Fri, 26 Apr 2024 03:40:25 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail. 250-serverhost1.serverhost1.net Hello 224.213.10.231 [224.213.10.231] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-AUTH PLAIN LOGIN 250 HELP
Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:07:ee:c6:e7:47:11:1a:a3:74:90:71:a6:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority Validity Not Before: Oct 3 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2024 GMT Subject: CN=serverhost1.serverhost1.net Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:dd:ca:7b:81:b0:8a:21:b7:82:e5:37:46:3c:60: 85:15:fc:47:8f:9a:9d:ba:32:71:67:03:e7:c7:4a: 7b:67:3c:51:e0:d2:61:4d:0b:5e:cb:c0:d4:03:4e: 46:df:02:c4:f7:f8:96:32:19:7d:98:49:95:23:67: b9:85:51:8f:0d:b3:cb:ea:0c:d1:2e:64:d6:fe:c6: 3a:c3:83:42:36:b2:04:73:1b:a8:e6:39:db:9c:cf: 25:03:cf:a7:64:da:f8:7b:da:78:e0:df:ab:9e:1b: 1d:e0:72:8a:41:88:89:2a:81:73:ce:a4:f8:55:c6: 74:17:22:55:b8:60:86:3f:24:fa:ef:c5:cc:9a:e1: 41:70:65:7d:a1:b7:44:9e:e5:49:8c:d2:69:36:4f: 40:c7:20:de:42:07:b4:83:37:2f:29:48:34:2c:76: 79:b5:db:00:66:76:09:d6:0d:33:0d:6b:49:c5:2f: 8f:43:06:e0:ab:32:9e:a3:7b:e5:fc:f5:02:d8:0a: 7c:a2:30:1d:c5:6c:1a:67:03:b6:de:c4:8a:41:ba: 9c:51:df:bf:6e:d9:36:86:55:fa:12:57:7c:7b:0b: af:c5:4f:c0:12:2d:f5:28:96:cb:58:c3:7e:7b:15: 7e:a0:41:b2:0b:9e:36:55:5f:8c:2d:12:fe:df:39: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65 X509v3 Subject Key Identifier: 4F:E9:E5:C2:DD:88:3E:66:29:2C:EB:9E:C1:73:66:0C:CB:12:79:52 X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.2.52 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl Authority Information Access: CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt OCSP - URI:http://ocsp.comodoca.com X509v3 Subject Alternative Name: DNS:serverhost1.serverhost1.net, DNS:www.serverhost1.serverhost1.net CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Oct 3 20:48:57.946 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:D9:A0:6F:98:EB:77:16:10:15:04: 4F:C7:26:47:71:BE:51:B7:5E:C7:4C:4D:E7:3B:4C:8B: F2:E1:75:AD:26:02:21:00:A2:B7:BD:0E:41:63:ED:4F: 26:B1:99:60:6F:EE:A3:6A:9C:BC:EB:E0:A8:F1:A2:62: FC:BE:4E:CD:15:2D:91:D8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Oct 3 20:48:58.002 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:73:CB:FE:41:6B:D6:BA:A4:69:D2:FA:61: 92:73:16:FF:1B:69:5F:5F:8F:78:AC:94:B2:33:40:FF: 98:BB:33:2B:02:20:20:50:8A:5F:94:79:7C:47:2E:E9: 3E:64:8C:50:7C:56:95:8C:59:B2:96:D3:8C:5A:2D:22: EB:93:81:FB:52:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Oct 3 20:48:58.060 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:12:F4:3B:C6:ED:B9:C3:91:A8:A9:17: F7:4E:85:12:F9:F2:0A:FF:5D:E4:F5:46:74:87:F5:4C: 01:E6:44:5C:02:21:00:A7:05:1C:DE:E2:5A:2E:9A:95: 05:E8:49:1C:91:CD:F7:7F:6C:A7:BC:1B:37:13:72:84: A2:69:1E:6D:FA:B5:14 Signature Algorithm: sha256WithRSAEncryption Signature Value: 7a:bb:3d:03:ab:26:b4:14:9d:e6:6b:f5:69:72:2b:8b:aa:e8: a6:5b:5d:8d:c5:30:6f:88:40:16:a0:51:0b:78:e9:5e:cb:a2: 9f:34:81:51:ee:08:3b:c3:3e:61:5d:b4:3c:ab:07:3c:3f:41: 64:0a:81:20:59:50:4c:d4:29:74:09:51:90:8f:0e:08:a0:b6: b8:be:d9:f0:86:d2:03:83:67:d7:b7:f3:61:c6:55:84:d6:c3: 18:41:b4:5a:f7:34:92:33:13:7d:44:1f:e8:7f:93:16:a7:7a: 65:61:e4:1b:a3:8f:27:2d:1d:8a:b6:a3:78:3b:f2:3c:9a:80: 53:d9:1b:4a:cf:28:18:2b:03:63:12:fb:77:7c:33:9a:7d:6b: ab:56:61:9e:6d:22:e3:dd:a5:24:0a:e8:d7:53:e6:ae:fe:b6: 39:27:17:5f:b4:4d:20:36:b1:1a:7a:b6:5e:a9:1b:d9:7c:38: 18:ea:29:39:a8:1e:c2:c0:00:86:d2:43:cd:2d:33:bd:57:58: c9:53:1e:f4:91:52:81:cb:aa:2f:1f:7b:a8:af:70:1a:a9:86: ab:69:50:82:fb:42:16:5d:a6:df:55:1d:cc:04:2f:aa:7a:36: 16:38:3b:8e:53:0f:02:95:36:e3:a3:9b:f2:56:cf:d5:26:56: 67:0b:cd:44
-1231807059 | 2024-04-21T17:03:18.318375587 / tcp
220-serverhost1.serverhost1.net ESMTP Exim 4.93 #2 Sun, 21 Apr 2024 18:02:29 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail. 250-serverhost1.serverhost1.net Hello 224.24.179.175 [224.24.179.175] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-STARTTLS 250 HELP
Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:07:ee:c6:e7:47:11:1a:a3:74:90:71:a6:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority Validity Not Before: Oct 3 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2024 GMT Subject: CN=serverhost1.serverhost1.net Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:dd:ca:7b:81:b0:8a:21:b7:82:e5:37:46:3c:60: 85:15:fc:47:8f:9a:9d:ba:32:71:67:03:e7:c7:4a: 7b:67:3c:51:e0:d2:61:4d:0b:5e:cb:c0:d4:03:4e: 46:df:02:c4:f7:f8:96:32:19:7d:98:49:95:23:67: b9:85:51:8f:0d:b3:cb:ea:0c:d1:2e:64:d6:fe:c6: 3a:c3:83:42:36:b2:04:73:1b:a8:e6:39:db:9c:cf: 25:03:cf:a7:64:da:f8:7b:da:78:e0:df:ab:9e:1b: 1d:e0:72:8a:41:88:89:2a:81:73:ce:a4:f8:55:c6: 74:17:22:55:b8:60:86:3f:24:fa:ef:c5:cc:9a:e1: 41:70:65:7d:a1:b7:44:9e:e5:49:8c:d2:69:36:4f: 40:c7:20:de:42:07:b4:83:37:2f:29:48:34:2c:76: 79:b5:db:00:66:76:09:d6:0d:33:0d:6b:49:c5:2f: 8f:43:06:e0:ab:32:9e:a3:7b:e5:fc:f5:02:d8:0a: 7c:a2:30:1d:c5:6c:1a:67:03:b6:de:c4:8a:41:ba: 9c:51:df:bf:6e:d9:36:86:55:fa:12:57:7c:7b:0b: af:c5:4f:c0:12:2d:f5:28:96:cb:58:c3:7e:7b:15: 7e:a0:41:b2:0b:9e:36:55:5f:8c:2d:12:fe:df:39: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65 X509v3 Subject Key Identifier: 4F:E9:E5:C2:DD:88:3E:66:29:2C:EB:9E:C1:73:66:0C:CB:12:79:52 X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.2.52 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl Authority Information Access: CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt OCSP - URI:http://ocsp.comodoca.com X509v3 Subject Alternative Name: DNS:serverhost1.serverhost1.net, DNS:www.serverhost1.serverhost1.net CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Oct 3 20:48:57.946 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:D9:A0:6F:98:EB:77:16:10:15:04: 4F:C7:26:47:71:BE:51:B7:5E:C7:4C:4D:E7:3B:4C:8B: F2:E1:75:AD:26:02:21:00:A2:B7:BD:0E:41:63:ED:4F: 26:B1:99:60:6F:EE:A3:6A:9C:BC:EB:E0:A8:F1:A2:62: FC:BE:4E:CD:15:2D:91:D8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Oct 3 20:48:58.002 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:73:CB:FE:41:6B:D6:BA:A4:69:D2:FA:61: 92:73:16:FF:1B:69:5F:5F:8F:78:AC:94:B2:33:40:FF: 98:BB:33:2B:02:20:20:50:8A:5F:94:79:7C:47:2E:E9: 3E:64:8C:50:7C:56:95:8C:59:B2:96:D3:8C:5A:2D:22: EB:93:81:FB:52:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Oct 3 20:48:58.060 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:12:F4:3B:C6:ED:B9:C3:91:A8:A9:17: F7:4E:85:12:F9:F2:0A:FF:5D:E4:F5:46:74:87:F5:4C: 01:E6:44:5C:02:21:00:A7:05:1C:DE:E2:5A:2E:9A:95: 05:E8:49:1C:91:CD:F7:7F:6C:A7:BC:1B:37:13:72:84: A2:69:1E:6D:FA:B5:14 Signature Algorithm: sha256WithRSAEncryption Signature Value: 7a:bb:3d:03:ab:26:b4:14:9d:e6:6b:f5:69:72:2b:8b:aa:e8: a6:5b:5d:8d:c5:30:6f:88:40:16:a0:51:0b:78:e9:5e:cb:a2: 9f:34:81:51:ee:08:3b:c3:3e:61:5d:b4:3c:ab:07:3c:3f:41: 64:0a:81:20:59:50:4c:d4:29:74:09:51:90:8f:0e:08:a0:b6: b8:be:d9:f0:86:d2:03:83:67:d7:b7:f3:61:c6:55:84:d6:c3: 18:41:b4:5a:f7:34:92:33:13:7d:44:1f:e8:7f:93:16:a7:7a: 65:61:e4:1b:a3:8f:27:2d:1d:8a:b6:a3:78:3b:f2:3c:9a:80: 53:d9:1b:4a:cf:28:18:2b:03:63:12:fb:77:7c:33:9a:7d:6b: ab:56:61:9e:6d:22:e3:dd:a5:24:0a:e8:d7:53:e6:ae:fe:b6: 39:27:17:5f:b4:4d:20:36:b1:1a:7a:b6:5e:a9:1b:d9:7c:38: 18:ea:29:39:a8:1e:c2:c0:00:86:d2:43:cd:2d:33:bd:57:58: c9:53:1e:f4:91:52:81:cb:aa:2f:1f:7b:a8:af:70:1a:a9:86: ab:69:50:82:fb:42:16:5d:a6:df:55:1d:cc:04:2f:aa:7a:36: 16:38:3b:8e:53:0f:02:95:36:e3:a3:9b:f2:56:cf:d5:26:56: 67:0b:cd:44
-1132241830 | 2024-05-07T09:21:02.263397993 / tcp
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready. * CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN A001 OK Pre-login capabilities listed, post-login capabilities have more. * ID ("name" "Dovecot") A002 OK ID completed. A003 BAD Error in IMAP command received by server. * BYE Logging out A004 OK Logout completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:07:ee:c6:e7:47:11:1a:a3:74:90:71:a6:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority Validity Not Before: Oct 3 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2024 GMT Subject: CN=serverhost1.serverhost1.net Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:dd:ca:7b:81:b0:8a:21:b7:82:e5:37:46:3c:60: 85:15:fc:47:8f:9a:9d:ba:32:71:67:03:e7:c7:4a: 7b:67:3c:51:e0:d2:61:4d:0b:5e:cb:c0:d4:03:4e: 46:df:02:c4:f7:f8:96:32:19:7d:98:49:95:23:67: b9:85:51:8f:0d:b3:cb:ea:0c:d1:2e:64:d6:fe:c6: 3a:c3:83:42:36:b2:04:73:1b:a8:e6:39:db:9c:cf: 25:03:cf:a7:64:da:f8:7b:da:78:e0:df:ab:9e:1b: 1d:e0:72:8a:41:88:89:2a:81:73:ce:a4:f8:55:c6: 74:17:22:55:b8:60:86:3f:24:fa:ef:c5:cc:9a:e1: 41:70:65:7d:a1:b7:44:9e:e5:49:8c:d2:69:36:4f: 40:c7:20:de:42:07:b4:83:37:2f:29:48:34:2c:76: 79:b5:db:00:66:76:09:d6:0d:33:0d:6b:49:c5:2f: 8f:43:06:e0:ab:32:9e:a3:7b:e5:fc:f5:02:d8:0a: 7c:a2:30:1d:c5:6c:1a:67:03:b6:de:c4:8a:41:ba: 9c:51:df:bf:6e:d9:36:86:55:fa:12:57:7c:7b:0b: af:c5:4f:c0:12:2d:f5:28:96:cb:58:c3:7e:7b:15: 7e:a0:41:b2:0b:9e:36:55:5f:8c:2d:12:fe:df:39: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65 X509v3 Subject Key Identifier: 4F:E9:E5:C2:DD:88:3E:66:29:2C:EB:9E:C1:73:66:0C:CB:12:79:52 X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.2.52 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl Authority Information Access: CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt OCSP - URI:http://ocsp.comodoca.com X509v3 Subject Alternative Name: DNS:serverhost1.serverhost1.net, DNS:www.serverhost1.serverhost1.net CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Oct 3 20:48:57.946 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:D9:A0:6F:98:EB:77:16:10:15:04: 4F:C7:26:47:71:BE:51:B7:5E:C7:4C:4D:E7:3B:4C:8B: F2:E1:75:AD:26:02:21:00:A2:B7:BD:0E:41:63:ED:4F: 26:B1:99:60:6F:EE:A3:6A:9C:BC:EB:E0:A8:F1:A2:62: FC:BE:4E:CD:15:2D:91:D8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Oct 3 20:48:58.002 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:73:CB:FE:41:6B:D6:BA:A4:69:D2:FA:61: 92:73:16:FF:1B:69:5F:5F:8F:78:AC:94:B2:33:40:FF: 98:BB:33:2B:02:20:20:50:8A:5F:94:79:7C:47:2E:E9: 3E:64:8C:50:7C:56:95:8C:59:B2:96:D3:8C:5A:2D:22: EB:93:81:FB:52:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Oct 3 20:48:58.060 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:12:F4:3B:C6:ED:B9:C3:91:A8:A9:17: F7:4E:85:12:F9:F2:0A:FF:5D:E4:F5:46:74:87:F5:4C: 01:E6:44:5C:02:21:00:A7:05:1C:DE:E2:5A:2E:9A:95: 05:E8:49:1C:91:CD:F7:7F:6C:A7:BC:1B:37:13:72:84: A2:69:1E:6D:FA:B5:14 Signature Algorithm: sha256WithRSAEncryption Signature Value: 7a:bb:3d:03:ab:26:b4:14:9d:e6:6b:f5:69:72:2b:8b:aa:e8: a6:5b:5d:8d:c5:30:6f:88:40:16:a0:51:0b:78:e9:5e:cb:a2: 9f:34:81:51:ee:08:3b:c3:3e:61:5d:b4:3c:ab:07:3c:3f:41: 64:0a:81:20:59:50:4c:d4:29:74:09:51:90:8f:0e:08:a0:b6: b8:be:d9:f0:86:d2:03:83:67:d7:b7:f3:61:c6:55:84:d6:c3: 18:41:b4:5a:f7:34:92:33:13:7d:44:1f:e8:7f:93:16:a7:7a: 65:61:e4:1b:a3:8f:27:2d:1d:8a:b6:a3:78:3b:f2:3c:9a:80: 53:d9:1b:4a:cf:28:18:2b:03:63:12:fb:77:7c:33:9a:7d:6b: ab:56:61:9e:6d:22:e3:dd:a5:24:0a:e8:d7:53:e6:ae:fe:b6: 39:27:17:5f:b4:4d:20:36:b1:1a:7a:b6:5e:a9:1b:d9:7c:38: 18:ea:29:39:a8:1e:c2:c0:00:86:d2:43:cd:2d:33:bd:57:58: c9:53:1e:f4:91:52:81:cb:aa:2f:1f:7b:a8:af:70:1a:a9:86: ab:69:50:82:fb:42:16:5d:a6:df:55:1d:cc:04:2f:aa:7a:36: 16:38:3b:8e:53:0f:02:95:36:e3:a3:9b:f2:56:cf:d5:26:56: 67:0b:cd:44
-1001764030 | 2024-04-19T02:23:22.754676995 / tcp
+OK Dovecot ready. +OK CAPA TOP UIDL RESP-CODES PIPELINING AUTH-RESP-CODE USER SASL PLAIN LOGIN .
Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:07:ee:c6:e7:47:11:1a:a3:74:90:71:a6:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority Validity Not Before: Oct 3 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2024 GMT Subject: CN=serverhost1.serverhost1.net Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:dd:ca:7b:81:b0:8a:21:b7:82:e5:37:46:3c:60: 85:15:fc:47:8f:9a:9d:ba:32:71:67:03:e7:c7:4a: 7b:67:3c:51:e0:d2:61:4d:0b:5e:cb:c0:d4:03:4e: 46:df:02:c4:f7:f8:96:32:19:7d:98:49:95:23:67: b9:85:51:8f:0d:b3:cb:ea:0c:d1:2e:64:d6:fe:c6: 3a:c3:83:42:36:b2:04:73:1b:a8:e6:39:db:9c:cf: 25:03:cf:a7:64:da:f8:7b:da:78:e0:df:ab:9e:1b: 1d:e0:72:8a:41:88:89:2a:81:73:ce:a4:f8:55:c6: 74:17:22:55:b8:60:86:3f:24:fa:ef:c5:cc:9a:e1: 41:70:65:7d:a1:b7:44:9e:e5:49:8c:d2:69:36:4f: 40:c7:20:de:42:07:b4:83:37:2f:29:48:34:2c:76: 79:b5:db:00:66:76:09:d6:0d:33:0d:6b:49:c5:2f: 8f:43:06:e0:ab:32:9e:a3:7b:e5:fc:f5:02:d8:0a: 7c:a2:30:1d:c5:6c:1a:67:03:b6:de:c4:8a:41:ba: 9c:51:df:bf:6e:d9:36:86:55:fa:12:57:7c:7b:0b: af:c5:4f:c0:12:2d:f5:28:96:cb:58:c3:7e:7b:15: 7e:a0:41:b2:0b:9e:36:55:5f:8c:2d:12:fe:df:39: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65 X509v3 Subject Key Identifier: 4F:E9:E5:C2:DD:88:3E:66:29:2C:EB:9E:C1:73:66:0C:CB:12:79:52 X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.2.52 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl Authority Information Access: CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt OCSP - URI:http://ocsp.comodoca.com X509v3 Subject Alternative Name: DNS:serverhost1.serverhost1.net, DNS:www.serverhost1.serverhost1.net CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Oct 3 20:48:57.946 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:D9:A0:6F:98:EB:77:16:10:15:04: 4F:C7:26:47:71:BE:51:B7:5E:C7:4C:4D:E7:3B:4C:8B: F2:E1:75:AD:26:02:21:00:A2:B7:BD:0E:41:63:ED:4F: 26:B1:99:60:6F:EE:A3:6A:9C:BC:EB:E0:A8:F1:A2:62: FC:BE:4E:CD:15:2D:91:D8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Oct 3 20:48:58.002 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:73:CB:FE:41:6B:D6:BA:A4:69:D2:FA:61: 92:73:16:FF:1B:69:5F:5F:8F:78:AC:94:B2:33:40:FF: 98:BB:33:2B:02:20:20:50:8A:5F:94:79:7C:47:2E:E9: 3E:64:8C:50:7C:56:95:8C:59:B2:96:D3:8C:5A:2D:22: EB:93:81:FB:52:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Oct 3 20:48:58.060 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:12:F4:3B:C6:ED:B9:C3:91:A8:A9:17: F7:4E:85:12:F9:F2:0A:FF:5D:E4:F5:46:74:87:F5:4C: 01:E6:44:5C:02:21:00:A7:05:1C:DE:E2:5A:2E:9A:95: 05:E8:49:1C:91:CD:F7:7F:6C:A7:BC:1B:37:13:72:84: A2:69:1E:6D:FA:B5:14 Signature Algorithm: sha256WithRSAEncryption Signature Value: 7a:bb:3d:03:ab:26:b4:14:9d:e6:6b:f5:69:72:2b:8b:aa:e8: a6:5b:5d:8d:c5:30:6f:88:40:16:a0:51:0b:78:e9:5e:cb:a2: 9f:34:81:51:ee:08:3b:c3:3e:61:5d:b4:3c:ab:07:3c:3f:41: 64:0a:81:20:59:50:4c:d4:29:74:09:51:90:8f:0e:08:a0:b6: b8:be:d9:f0:86:d2:03:83:67:d7:b7:f3:61:c6:55:84:d6:c3: 18:41:b4:5a:f7:34:92:33:13:7d:44:1f:e8:7f:93:16:a7:7a: 65:61:e4:1b:a3:8f:27:2d:1d:8a:b6:a3:78:3b:f2:3c:9a:80: 53:d9:1b:4a:cf:28:18:2b:03:63:12:fb:77:7c:33:9a:7d:6b: ab:56:61:9e:6d:22:e3:dd:a5:24:0a:e8:d7:53:e6:ae:fe:b6: 39:27:17:5f:b4:4d:20:36:b1:1a:7a:b6:5e:a9:1b:d9:7c:38: 18:ea:29:39:a8:1e:c2:c0:00:86:d2:43:cd:2d:33:bd:57:58: c9:53:1e:f4:91:52:81:cb:aa:2f:1f:7b:a8:af:70:1a:a9:86: ab:69:50:82:fb:42:16:5d:a6:df:55:1d:cc:04:2f:aa:7a:36: 16:38:3b:8e:53:0f:02:95:36:e3:a3:9b:f2:56:cf:d5:26:56: 67:0b:cd:44
1345043008 | 2024-04-25T08:33:59.6267552082 / tcp
HTTP/1.1 301 Moved Content-length: 112 Location: https://213.171.221.18:2083/ Content-type: text/html; charset="utf-8" Cache-Control: no-cache, no-store, must-revalidate, private
815745073 | 2024-05-01T10:04:46.1944262083 / tcp
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset="utf-8" Date: Wed, 01 May 2024 10:04:45 GMT Cache-Control: no-cache, no-store, must-revalidate, private Pragma: no-cache Set-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure Set-Cookie: cpsession=%3aX7eE3moQfQjWW3IY%2c435d8bf5c9015470db6522d11c20b15c; HttpOnly; path=/; port=2083; secure Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=213.171.221.18; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure Set-Cookie: Horde=expired; HttpOnly; domain=.213.171.221.18; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.213.171.221.18; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2083; secure Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure Set-Cookie: imp_key=expired; HttpOnly; domain=213.171.221.18; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure Set-Cookie: Horde=expired; HttpOnly; domain=.213.171.221.18; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083 Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.213.171.221.18; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083 Cache-Control: no-cache, no-store, must-revalidate, private Content-Length: 40682
Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:07:ee:c6:e7:47:11:1a:a3:74:90:71:a6:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority Validity Not Before: Oct 3 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2024 GMT Subject: CN=serverhost1.serverhost1.net Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:dd:ca:7b:81:b0:8a:21:b7:82:e5:37:46:3c:60: 85:15:fc:47:8f:9a:9d:ba:32:71:67:03:e7:c7:4a: 7b:67:3c:51:e0:d2:61:4d:0b:5e:cb:c0:d4:03:4e: 46:df:02:c4:f7:f8:96:32:19:7d:98:49:95:23:67: b9:85:51:8f:0d:b3:cb:ea:0c:d1:2e:64:d6:fe:c6: 3a:c3:83:42:36:b2:04:73:1b:a8:e6:39:db:9c:cf: 25:03:cf:a7:64:da:f8:7b:da:78:e0:df:ab:9e:1b: 1d:e0:72:8a:41:88:89:2a:81:73:ce:a4:f8:55:c6: 74:17:22:55:b8:60:86:3f:24:fa:ef:c5:cc:9a:e1: 41:70:65:7d:a1:b7:44:9e:e5:49:8c:d2:69:36:4f: 40:c7:20:de:42:07:b4:83:37:2f:29:48:34:2c:76: 79:b5:db:00:66:76:09:d6:0d:33:0d:6b:49:c5:2f: 8f:43:06:e0:ab:32:9e:a3:7b:e5:fc:f5:02:d8:0a: 7c:a2:30:1d:c5:6c:1a:67:03:b6:de:c4:8a:41:ba: 9c:51:df:bf:6e:d9:36:86:55:fa:12:57:7c:7b:0b: af:c5:4f:c0:12:2d:f5:28:96:cb:58:c3:7e:7b:15: 7e:a0:41:b2:0b:9e:36:55:5f:8c:2d:12:fe:df:39: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65 X509v3 Subject Key Identifier: 4F:E9:E5:C2:DD:88:3E:66:29:2C:EB:9E:C1:73:66:0C:CB:12:79:52 X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.2.52 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl Authority Information Access: CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt OCSP - URI:http://ocsp.comodoca.com X509v3 Subject Alternative Name: DNS:serverhost1.serverhost1.net, DNS:www.serverhost1.serverhost1.net CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Oct 3 20:48:57.946 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:D9:A0:6F:98:EB:77:16:10:15:04: 4F:C7:26:47:71:BE:51:B7:5E:C7:4C:4D:E7:3B:4C:8B: F2:E1:75:AD:26:02:21:00:A2:B7:BD:0E:41:63:ED:4F: 26:B1:99:60:6F:EE:A3:6A:9C:BC:EB:E0:A8:F1:A2:62: FC:BE:4E:CD:15:2D:91:D8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Oct 3 20:48:58.002 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:73:CB:FE:41:6B:D6:BA:A4:69:D2:FA:61: 92:73:16:FF:1B:69:5F:5F:8F:78:AC:94:B2:33:40:FF: 98:BB:33:2B:02:20:20:50:8A:5F:94:79:7C:47:2E:E9: 3E:64:8C:50:7C:56:95:8C:59:B2:96:D3:8C:5A:2D:22: EB:93:81:FB:52:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Oct 3 20:48:58.060 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:12:F4:3B:C6:ED:B9:C3:91:A8:A9:17: F7:4E:85:12:F9:F2:0A:FF:5D:E4:F5:46:74:87:F5:4C: 01:E6:44:5C:02:21:00:A7:05:1C:DE:E2:5A:2E:9A:95: 05:E8:49:1C:91:CD:F7:7F:6C:A7:BC:1B:37:13:72:84: A2:69:1E:6D:FA:B5:14 Signature Algorithm: sha256WithRSAEncryption Signature Value: 7a:bb:3d:03:ab:26:b4:14:9d:e6:6b:f5:69:72:2b:8b:aa:e8: a6:5b:5d:8d:c5:30:6f:88:40:16:a0:51:0b:78:e9:5e:cb:a2: 9f:34:81:51:ee:08:3b:c3:3e:61:5d:b4:3c:ab:07:3c:3f:41: 64:0a:81:20:59:50:4c:d4:29:74:09:51:90:8f:0e:08:a0:b6: b8:be:d9:f0:86:d2:03:83:67:d7:b7:f3:61:c6:55:84:d6:c3: 18:41:b4:5a:f7:34:92:33:13:7d:44:1f:e8:7f:93:16:a7:7a: 65:61:e4:1b:a3:8f:27:2d:1d:8a:b6:a3:78:3b:f2:3c:9a:80: 53:d9:1b:4a:cf:28:18:2b:03:63:12:fb:77:7c:33:9a:7d:6b: ab:56:61:9e:6d:22:e3:dd:a5:24:0a:e8:d7:53:e6:ae:fe:b6: 39:27:17:5f:b4:4d:20:36:b1:1a:7a:b6:5e:a9:1b:d9:7c:38: 18:ea:29:39:a8:1e:c2:c0:00:86:d2:43:cd:2d:33:bd:57:58: c9:53:1e:f4:91:52:81:cb:aa:2f:1f:7b:a8:af:70:1a:a9:86: ab:69:50:82:fb:42:16:5d:a6:df:55:1d:cc:04:2f:aa:7a:36: 16:38:3b:8e:53:0f:02:95:36:e3:a3:9b:f2:56:cf:d5:26:56: 67:0b:cd:44
-585886895 | 2024-05-03T22:58:55.4073122086 / tcp
HTTP/1.1 301 Moved Content-length: 112 Location: https://213.171.221.18:2087/ Content-type: text/html; charset="utf-8" Cache-Control: no-cache, no-store, must-revalidate, private
-693939296 | 2024-05-07T03:20:20.3912462087 / tcp
HTTP/1.1 301 Moved Content-length: 124 Location: https://serverhost1.serverhost1.net:2087 Content-type: text/html; charset="utf-8" Cache-Control: no-cache, no-store, must-revalidate, private Pragma: no-cache <html><head><META HTTP-EQUIV="refresh" CONTENT="2;URL=https://serverhost1.serverhost1.net:2087"></head><body></body></html>
-1818294028 | 2024-04-30T22:46:56.8619203306 / tcp
MySQL: Error Message: Host '224.213.29.6' is not allowed to connect to this MySQL server Error Code: 1130