257411409 | 2024-11-02T00:06:11.294175
21 /
tcp
220 ProFTPD Server (ProFTPD) [138.201.33.188]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
CWD XCWD CDUP XCUP SMNT* QUIT PORT PASV
EPRT EPSV ALLO RNFR RNTO DELE MDTM RMD
XRMD MKD XMKD PWD XPWD SIZE SYST HELP
NOOP FEAT OPTS HOST CLNT AUTH CCC* CONF*
ENC* MIC* PBSZ PROT TYPE STRU MODE RETR
STOR STOU APPE REST ABOR RANG USER PASS
ACCT* REIN* LIST NLST STAT SITE MLSD MLST
214 Direct comments to root@0.0.0.0
211-Features:
AUTH TLS
CCC
CLNT
CSID
EPRT
EPSV
HOST
LANG en-US.UTF-8*
MDTM
MFF modify;UNIX.group;UNIX.mode;
MFMT
MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
PBSZ
PROT
RANG STREAM
REST STREAM
SIZE
SSCN
TVFS
UTF8
211 End
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9d:0e:1f:4a:22:cd:46:6d:ec:a8:dd:4e:35:6d:a1:9e:2a
Signature Algorithm: ecdsa-with-SHA384
Issuer: C=US, O=Let's Encrypt, CN=E6
Validity
Not Before: Sep 21 10:32:37 2024 GMT
Not After : Dec 20 10:32:36 2024 GMT
Subject: CN=s117.canagon.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:06:6c:b1:18:c9:1b:14:db:15:29:1f:04:6f:8e:
69:e5:68:f9:1e:7f:cb:df:77:38:33:53:0e:24:df:
1d:89:fa:09:52:da:96:42:43:be:1d:41:bc:5b:b9:
1c:1c:d7:9d:b5:06:eb:51:f6:c6:53:92:ab:e1:79:
a7:ed:d8:7f:a7
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
F3:A1:9E:94:66:1D:36:38:B1:95:18:90:93:95:15:FF:02:6C:FE:82
X509v3 Authority Key Identifier:
93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
Authority Information Access:
OCSP - URI:http://e6.o.lencr.org
CA Issuers - URI:http://e6.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:s117.canagon.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Sep 21 11:31:07.940 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:1D:06:55:7B:F9:BC:22:ED:33:E1:0F:2E:
4A:87:93:4A:A2:FA:2D:E3:D0:5F:91:A3:13:CA:3E:A8:
E7:1A:59:FB:02:20:43:01:7D:DE:F8:9C:9C:66:CB:45:
00:69:E0:A6:CE:93:4F:F0:E5:63:4D:10:C0:54:54:45:
18:14:B8:80:34:5E
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : Sep 21 11:31:07.999 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:3D:52:08:C1:8F:E4:80:22:66:E9:42:7E:
8D:A7:59:02:6A:E6:E1:2A:73:00:2F:16:88:E0:22:0D:
77:35:28:52:02:20:6E:67:2D:6D:62:D5:45:A3:00:7F:
F1:A5:D0:2D:44:B7:69:FE:E6:C0:84:2D:1B:DA:13:45:
EC:92:F4:61:DA:CC
Signature Algorithm: ecdsa-with-SHA384
Signature Value:
30:64:02:30:37:51:1a:75:ae:8d:07:29:07:d7:ad:1a:c7:8a:
77:88:a1:79:57:76:ab:7c:1a:2f:83:84:8d:69:b0:9e:1f:02:
e7:71:5f:f8:99:28:cb:f1:41:82:b4:22:7a:05:06:c9:02:30:
6a:f3:c1:04:f9:f7:cb:fb:56:ed:87:00:4d:d8:9e:77:65:8c:
e0:42:84:8d:11:cd:4a:c7:1e:ec:3f:e2:af:dc:ec:3a:84:16:
29:c4:96:e4:72:dd:89:ab:dd:cc:3b:c9
-402835010 | 2024-10-25T08:22:37.114953
22 /
tcp
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQC6KUVO/3eyTEkE5rbQkp/k6sCAu2scUqyQ6SQ8u1rxd3WH
m66gd2buuGjuQqjteLyi+juadJpS6HUcwoIhZ78m2ow8+kgZtPcxg5GcwZ4CDSfEUFxoDQbaHWSM
nOGjVjZMWedRbeMYnISRGf1R35a3hE+rtHPkqgwGsyS51GZqITjSQrUueRf8frfcP7jwXSxxGpSs
qU4lSheW+u9WizffCAqoKC1bdoilpKY0KDL1Yoq5XGbJKQABoMu8v86UN8v1SSmwbCYV4ij80xP6
sGlLm8krqy2KymwJZqeN+/7jXhRGltzAB/5DhI3t0QNrxkbut5ajc2AsgVrZwMcBYSt5zAjoyFHR
QfKgZOS99NcOAEjXHCV7AokSELaaOn5wiaKj+4c1ng+BSfsSy1XR+uwJ9ifhcCQwxEcu2uD66ZnV
wbFKzj7NP5/xCIDN8HlZBqpxwFgS20qIa7YHhtEnIsww7yemcCxm5yQdLdSX8Fb49qqporMYS+Ac
dQaB5mbxlCs=
Fingerprint: f0:45:db:7d:5a:3f:8a:fd:3a:64:29:36:d6:29:d1:56
Kex Algorithms:
curve25519-sha256
curve25519-sha256@libssh.org
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
diffie-hellman-group-exchange-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group14-sha256
kex-strict-s-v00@openssh.com
Server Host Key Algorithms:
rsa-sha2-512
rsa-sha2-256
ssh-rsa
ecdsa-sha2-nistp256
ssh-ed25519
Encryption Algorithms:
chacha20-poly1305@openssh.com
aes128-ctr
aes192-ctr
aes256-ctr
aes128-gcm@openssh.com
aes256-gcm@openssh.com
MAC Algorithms:
umac-64-etm@openssh.com
umac-128-etm@openssh.com
hmac-sha2-256-etm@openssh.com
hmac-sha2-512-etm@openssh.com
hmac-sha1-etm@openssh.com
umac-64@openssh.com
umac-128@openssh.com
hmac-sha2-256
hmac-sha2-512
hmac-sha1
Compression Algorithms:
none
zlib@openssh.com
-898638063 | 2024-11-05T10:23:08.385386
80 /
tcp
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Nov 2024 10:23:08 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 11:49:55 GMT
ETag: "8f-5d278db0316de"
Accept-Ranges: bytes
Vary: Accept-Encoding
-466028073 | 2024-11-05T01:51:14.610381
443 /
tcp
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Nov 2024 01:51:14 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Tue, 05 Nov 2024 01:51:14 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9d:0e:1f:4a:22:cd:46:6d:ec:a8:dd:4e:35:6d:a1:9e:2a
Signature Algorithm: ecdsa-with-SHA384
Issuer: C=US, O=Let's Encrypt, CN=E6
Validity
Not Before: Sep 21 10:32:37 2024 GMT
Not After : Dec 20 10:32:36 2024 GMT
Subject: CN=s117.canagon.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:06:6c:b1:18:c9:1b:14:db:15:29:1f:04:6f:8e:
69:e5:68:f9:1e:7f:cb:df:77:38:33:53:0e:24:df:
1d:89:fa:09:52:da:96:42:43:be:1d:41:bc:5b:b9:
1c:1c:d7:9d:b5:06:eb:51:f6:c6:53:92:ab:e1:79:
a7:ed:d8:7f:a7
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
F3:A1:9E:94:66:1D:36:38:B1:95:18:90:93:95:15:FF:02:6C:FE:82
X509v3 Authority Key Identifier:
93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
Authority Information Access:
OCSP - URI:http://e6.o.lencr.org
CA Issuers - URI:http://e6.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:s117.canagon.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Sep 21 11:31:07.940 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:1D:06:55:7B:F9:BC:22:ED:33:E1:0F:2E:
4A:87:93:4A:A2:FA:2D:E3:D0:5F:91:A3:13:CA:3E:A8:
E7:1A:59:FB:02:20:43:01:7D:DE:F8:9C:9C:66:CB:45:
00:69:E0:A6:CE:93:4F:F0:E5:63:4D:10:C0:54:54:45:
18:14:B8:80:34:5E
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : Sep 21 11:31:07.999 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:3D:52:08:C1:8F:E4:80:22:66:E9:42:7E:
8D:A7:59:02:6A:E6:E1:2A:73:00:2F:16:88:E0:22:0D:
77:35:28:52:02:20:6E:67:2D:6D:62:D5:45:A3:00:7F:
F1:A5:D0:2D:44:B7:69:FE:E6:C0:84:2D:1B:DA:13:45:
EC:92:F4:61:DA:CC
Signature Algorithm: ecdsa-with-SHA384
Signature Value:
30:64:02:30:37:51:1a:75:ae:8d:07:29:07:d7:ad:1a:c7:8a:
77:88:a1:79:57:76:ab:7c:1a:2f:83:84:8d:69:b0:9e:1f:02:
e7:71:5f:f8:99:28:cb:f1:41:82:b4:22:7a:05:06:c9:02:30:
6a:f3:c1:04:f9:f7:cb:fb:56:ed:87:00:4d:d8:9e:77:65:8c:
e0:42:84:8d:11:cd:4a:c7:1e:ec:3f:e2:af:dc:ec:3a:84:16:
29:c4:96:e4:72:dd:89:ab:dd:cc:3b:c9
-547719699 | 2024-10-28T10:20:10.309241
3306 /
tcp
MySQL:
Protocol Version: 10
Version: 8.0.37-29
Capabilities: 65535
Server Language: 255
Server Status: 2
Extended Server Capabilities: 57343
Authentication Plugin: caching_sha2_password
-62862877 | 2024-10-19T21:12:01.978046
7081 /
tcp
HTTP/1.1 400 Bad Request
Date: Sat, 19 Oct 2024 21:12:01 GMT
Server: Apache
Content-Length: 434
Connection: close
Content-Type: text/html; charset=iso-8859-1
-1234984171 | 2024-10-29T06:09:06.679886
8443 /
tcp
HTTP/1.1 200 OK
Server: sw-cp-server
Date: Tue, 29 Oct 2024 06:09:06 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Tue, 29 Oct 2024 06:09:06 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9d:0e:1f:4a:22:cd:46:6d:ec:a8:dd:4e:35:6d:a1:9e:2a
Signature Algorithm: ecdsa-with-SHA384
Issuer: C=US, O=Let's Encrypt, CN=E6
Validity
Not Before: Sep 21 10:32:37 2024 GMT
Not After : Dec 20 10:32:36 2024 GMT
Subject: CN=s117.canagon.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:06:6c:b1:18:c9:1b:14:db:15:29:1f:04:6f:8e:
69:e5:68:f9:1e:7f:cb:df:77:38:33:53:0e:24:df:
1d:89:fa:09:52:da:96:42:43:be:1d:41:bc:5b:b9:
1c:1c:d7:9d:b5:06:eb:51:f6:c6:53:92:ab:e1:79:
a7:ed:d8:7f:a7
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
F3:A1:9E:94:66:1D:36:38:B1:95:18:90:93:95:15:FF:02:6C:FE:82
X509v3 Authority Key Identifier:
93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
Authority Information Access:
OCSP - URI:http://e6.o.lencr.org
CA Issuers - URI:http://e6.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:s117.canagon.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Sep 21 11:31:07.940 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:1D:06:55:7B:F9:BC:22:ED:33:E1:0F:2E:
4A:87:93:4A:A2:FA:2D:E3:D0:5F:91:A3:13:CA:3E:A8:
E7:1A:59:FB:02:20:43:01:7D:DE:F8:9C:9C:66:CB:45:
00:69:E0:A6:CE:93:4F:F0:E5:63:4D:10:C0:54:54:45:
18:14:B8:80:34:5E
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : Sep 21 11:31:07.999 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:3D:52:08:C1:8F:E4:80:22:66:E9:42:7E:
8D:A7:59:02:6A:E6:E1:2A:73:00:2F:16:88:E0:22:0D:
77:35:28:52:02:20:6E:67:2D:6D:62:D5:45:A3:00:7F:
F1:A5:D0:2D:44:B7:69:FE:E6:C0:84:2D:1B:DA:13:45:
EC:92:F4:61:DA:CC
Signature Algorithm: ecdsa-with-SHA384
Signature Value:
30:64:02:30:37:51:1a:75:ae:8d:07:29:07:d7:ad:1a:c7:8a:
77:88:a1:79:57:76:ab:7c:1a:2f:83:84:8d:69:b0:9e:1f:02:
e7:71:5f:f8:99:28:cb:f1:41:82:b4:22:7a:05:06:c9:02:30:
6a:f3:c1:04:f9:f7:cb:fb:56:ed:87:00:4d:d8:9e:77:65:8c:
e0:42:84:8d:11:cd:4a:c7:1e:ec:3f:e2:af:dc:ec:3a:84:16:
29:c4:96:e4:72:dd:89:ab:dd:cc:3b:c9
-1702857543 | 2024-10-25T04:51:43.113622
8880 /
tcp
HTTP/1.1 303 See Other
Server: sw-cp-server
Date: Fri, 25 Oct 2024 04:51:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Fri, 25 Oct 2024 04:51:43 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Location: http://138.201.33.188/login.php
X-Content-Type-Options: nosniff
0
-795948505 | 2024-10-26T09:22:12.449030
33060 /
tcp
MySQL X Protocol:
tls: False
authentication.mechanisms:
MYSQL41
SHA256_MEMORY
doc.formats: text
client.interactive: False
compression:
algorithm:
deflate_stream
lz4_message
zstd_stream
node_type: mysql
client.pwd_expire_ok: False
