-370734890 | 2024-04-24T09:41:19.174342
21 /
tcp
220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
ABOR
ACCT
ADAT *
ALLO
APPE
AUTH
CCC
CDUP
CWD
DELE
ENC *
EPRT
EPSV
FEAT
HELP
HOST
LANG
LIST
MDTM
MIC *
MKD
MODE
NLST
NOOP
OPTS
PASS
PASV
PBSZ
PORT
PROT
PWD
QUIT
REIN
REST
RETR
RMD
RNFR
RNTO
SITE
SIZE
SMNT
STAT
STOR
STOU
STRU
SYST
TYPE
USER
XCUP
XCWD
XMKD
XPWD
XRMD
214 HELP command successful.
211-Extended features supported:
LANG EN*
UTF8
AUTH TLS;TLS-C;SSL;TLS-P;
PBSZ
PROT C;P;
CCC
HOST
SIZE
MDTM
REST STREAM
211 END
-1490724181 | 2024-04-24T14:54:33.857574
25 /
tcp
220 mail.collectorcarads.com
250-mail.collectorcarads.com Hello [224.18.146.63]
250-SIZE 31457280
250-AUTH LOGIN CRAM-MD5
250-8BITMIME
250 OK
1419891562 | 2024-04-24T02:47:08.752075
80 /
tcp
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
Set-Cookie: ASP.NET_SessionId=bdcrzpn4tk2yhnedhsgxon3d; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-UA-Compatible: IE=edge
Date: Wed, 24 Apr 2024 02:47:02 GMT
Content-Length: 6837
-733366918 | 2024-04-19T12:02:26.512124
110 /
tcp
+OK POP3 server ready <abdca9fa-f5e2-4375-a31e-4575d37404d7@mail.collectorcarads.com>
+OK Capability list follows
TOP
USER
UIDL
IMPLEMENTATION Smartertools_SmarterMail_1.5
.
51433088 | 2024-04-09T15:35:19.626785
143 /
tcp
* OK IMAP4rev1 SmarterMail
* CAPABILITY IMAP4rev1 UIDPLUS XLIST
A001 OK CAPABILITY completed
A002 BAD Command does not exist or is not implemented
A003 BAD Command does not exist or is not implemented
* BYE IMAP4rev1 Server logging out
A004 OK LOGOUT completed
1489525118 | 2024-04-18T15:43:53.792951
443 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Thu, 18 Apr 2024 15:43:48 GMT
Connection: close
Content-Length: 315
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:43:03:ab:5b:37:df:3c:42:73:da:2f:c5:e0:fe:30:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Jan 14 10:21:59 2023 GMT
Not After : Apr 14 10:21:58 2023 GMT
Subject: CN=collectorcarads.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ab:e0:52:38:2b:78:03:af:7c:b0:9e:9e:dd:24:
99:7e:59:9e:2a:ba:24:ba:fb:b0:20:85:21:b4:24:
48:88:04:09:37:47:fd:38:92:eb:c0:ed:ce:78:d9:
bc:46:94:45:c8:0d:74:04:83:1a:4a:14:cc:8f:e4:
30:e1:21:b2:b5:7f:4d:c4:3c:cc:1f:c3:b7:2c:51:
82:c7:f7:90:90:b6:64:aa:30:dc:b4:0d:56:52:71:
c0:a3:ab:dc:f0:f6:5d:68:9b:ef:6a:38:e9:0c:c0:
f6:8e:ef:d4:0e:bf:e5:e7:c0:b9:e6:d8:48:53:c6:
1c:4f:99:ab:23:98:87:44:66:63:02:85:2a:39:0a:
8c:41:a7:a0:d1:fd:6a:ba:a0:a2:94:81:c7:8b:74:
00:75:09:ff:05:50:7a:96:8b:8b:44:6e:03:98:83:
e1:39:c3:8a:78:df:b5:63:16:8a:81:6e:87:06:dd:
fa:f0:4b:01:df:57:ee:ea:1b:66:6a:d7:62:00:43:
79:01:53:01:fc:bb:f3:8e:49:9c:b1:57:ca:85:01:
6e:a7:ae:f2:b5:34:f3:c6:8a:a6:a9:45:35:4b:c6:
45:23:5d:a0:72:f8:07:7e:0e:da:f8:cd:02:2a:e7:
59:fc:a5:b9:6e:97:3a:f3:ca:af:6d:8a:ce:30:5b:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
A1:BA:ED:09:23:11:D1:42:CC:C8:FB:22:92:59:45:5A:03:1C:05:11
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:collectorcarads.com, DNS:www.collectorcarads.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.44947.1.1.1
CPS: http://cps.letsencrypt.org
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84:
16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52
Timestamp : Jan 14 11:21:59.603 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:16:C1:35:A6:5F:D6:FB:06:11:D5:0F:D8:
90:EF:FD:36:A5:D9:27:EC:5A:B6:68:1C:D6:9C:07:25:
DB:3A:21:AC:02:21:00:97:5B:88:DA:3E:26:FB:8F:5A:
37:5D:38:28:33:39:C7:FF:F4:46:2C:3E:4A:D0:DF:77:
48:78:E7:07:C0:B8:A4
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
Timestamp : Jan 14 11:21:59.585 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:42:6D:87:12:63:98:F0:8D:EC:35:B6:CB:
7A:3D:56:60:F2:F9:32:3D:26:B1:DF:B7:78:83:8E:E7:
08:31:04:62:02:20:0E:33:65:6E:02:A7:E5:8A:3D:B2:
8E:FF:0B:21:E2:25:36:99:BE:E0:AF:85:53:65:08:99:
ED:9B:EB:44:A0:00
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
b8:86:3c:cc:54:8b:17:c1:21:88:ae:77:31:60:f2:83:f3:66:
f8:2e:73:d8:14:27:38:d9:23:6b:50:90:6f:cb:75:91:f0:4d:
bc:aa:ff:a5:22:2d:c8:ef:86:51:17:01:65:40:22:73:33:e7:
83:87:49:62:ee:b7:c7:66:7c:4f:4b:be:7f:cb:80:e8:3e:2b:
03:92:f4:28:6b:9a:d9:82:d1:23:3b:13:d1:a1:40:d9:58:87:
ee:cc:19:72:a0:f1:df:9e:04:46:e9:2b:65:87:eb:fe:60:27:
85:20:55:39:48:cf:31:1e:83:fe:0b:56:f3:9b:f3:3c:66:98:
4f:9d:24:86:4c:b8:45:95:e0:12:75:e7:52:f4:08:e5:ca:2d:
91:b7:95:3f:11:5e:f7:f4:94:37:fe:71:06:eb:41:2f:ae:b6:
f3:66:34:7f:00:f8:63:00:77:02:cc:dd:22:a3:d5:80:54:30:
c0:80:6c:d5:69:7b:8a:ef:b6:12:ad:e9:81:ee:66:da:83:69:
eb:d7:56:46:1d:94:9a:34:fd:64:43:6c:95:c1:6f:cc:d7:ad:
de:11:71:88:a1:a0:8f:75:01:7c:cd:24:4e:e7:a0:5a:d9:4a:
a0:c0:6a:bb:7a:e3:35:a9:cf:23:6f:77:5a:ff:bb:97:15:1f:
d1:9b:5c:8a
1815202799 | 2024-04-20T10:06:27.805370
1801 /
tcp
\x10Z\x0b\x00LIOR<\x02\x00\x00\xff\xff\xff\xff\x00\x00\x12\x00\x06U=Q6\xdf\xc7@\x96C\x17\\<\xe7l\xaa\x8f*\x97\xd4\xed\xeeqK\x93\xe2\xc6\xccUa\x05\xe9\x00\x00\x00\x00\x10\x02\x00\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
-1261823363 | 2024-04-22T15:50:36.400842
3306 /
tcp
MySQL:
Protocol Version: 10
Version: 5.7.18-log
Capabilities: 63487
Server Language: 33
Server Status: 2
Extended Server Capabilities: 33279
Authentication Plugin: mysql_native_password
-675193201 | 2024-03-28T23:59:25.769607
3389 /
tcp
Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
OS: Windows 10 (version 1607)/Windows Server 2016 (version 1607)
OS Build: 10.0.14393
Target Name: WIN-1C5HTFL81LU
NetBIOS Domain Name: WIN-1C5HTFL81LU
NetBIOS Computer Name: WIN-1C5HTFL81LU
DNS Domain Name: WIN-1C5HTFL81LU
FQDN: WIN-1C5HTFL81LU
Administrator
dwicklund
gversh
SCPServer
Mayoral ale
- Administrator
el
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bc:79:eb:0c:a2:3f:b5:47:5f:65:7b:ea:72:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=WIN-1C5HTFL81LU
Validity
Not Before: Apr 14 12:11:18 2023 GMT
Not After : Oct 14 12:11:18 2023 GMT
Subject: CN=WIN-1C5HTFL81LU
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:9a:06:95:e9:47:30:b2:b2:ce:86:d4:06:ff:10:
f3:c5:64:72:8b:66:3b:96:12:ee:d3:3e:ca:eb:44:
97:75:05:cf:c3:93:cb:e4:ea:6f:c1:76:b0:c7:7a:
c8:39:c8:fe:e0:73:2e:69:2c:ae:43:c1:75:7e:78:
2b:7f:1a:98:10:61:98:45:36:2f:ec:32:cc:20:b7:
0a:2a:40:99:81:74:9b:3c:46:bf:21:d7:fa:d2:60:
2c:a0:c0:ce:f9:f6:00:dd:1d:e2:d5:28:cb:0a:7e:
f7:24:a8:0a:a5:c1:15:e5:f5:0b:02:ed:31:e7:83:
14:f8:b2:b3:16:bc:32:71:74:5a:79:e5:84:69:00:
49:56:79:cb:18:6a:28:98:83:1f:a1:b9:67:ed:f3:
43:41:63:2b:38:f1:e3:dc:81:c1:93:e8:5c:75:3b:
3b:63:d5:00:23:c2:66:b9:f5:a3:18:a0:bc:0b:d6:
f1:6b:9e:57:6a:b9:45:83:88:29:d7:42:6a:e9:d0:
95:af:a2:38:1c:1f:c6:10:71:a4:d6:8b:81:a8:96:
f9:c8:54:9f:a1:3c:97:2b:aa:73:48:0b:49:72:2a:
f4:c4:3b:42:8c:08:30:b9:22:e2:81:25:86:ec:52:
d7:da:1a:fc:85:d9:6a:ca:d4:b3:19:9e:8c:2b:62:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
42:3e:52:87:db:9c:b5:4f:bd:63:07:61:e1:f5:b4:44:40:8c:
d2:1a:63:23:90:73:e7:a7:9f:28:f7:6a:33:77:37:3e:ca:01:
8b:7e:e6:97:52:08:92:c0:de:b9:bd:28:c1:05:6c:c3:dd:7e:
ed:e5:c5:29:25:55:54:71:db:c5:d6:e8:1c:1c:db:1c:18:bc:
fc:43:74:45:d5:0f:56:da:be:b3:19:68:bd:30:cf:3d:a1:02:
d9:60:10:b6:26:2b:03:f6:ad:f3:c9:f3:1a:43:f2:e2:8b:16:
2e:eb:32:b0:a9:f9:3f:df:0a:bd:f2:8e:23:72:7b:88:6a:11:
69:62:99:c2:e5:c3:2c:73:ef:a8:ed:11:1a:40:4d:be:9a:d8:
a8:3f:e5:7d:63:03:e9:50:0a:61:e1:e2:33:46:28:2f:a6:cd:
36:7b:52:15:06:fc:d7:90:be:d3:b2:c8:08:36:e6:a3:90:6a:
6a:14:b2:f1:c3:80:e4:12:6d:22:ca:a1:54:db:e7:63:35:6f:
b8:e7:2f:21:3d:79:b5:c8:59:c4:80:f0:53:cc:bc:96:97:8d:
d6:90:96:5d:d7:27:32:34:be:32:b0:45:5a:ee:9f:ea:59:06:
76:4b:56:77:90:05:9e:24:32:1a:48:77:3f:08:d2:58:6b:b4:
98:dd:af:52
