21 /
tcp
1142660015 | 2025-03-12T06:59:24.917070
220 ProFTPD Server ready.
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
CWD XCWD CDUP XCUP SMNT* QUIT PORT PASV
EPRT EPSV ALLO RNFR RNTO DELE MDTM RMD
XRMD MKD XMKD PWD XPWD SIZE SYST HELP
NOOP FEAT OPTS HOST CLNT AUTH CCC* CONF*
ENC* MIC* PBSZ PROT TYPE STRU MODE RETR
STOR STOU APPE REST ABOR RANG USER PASS
ACCT* REIN* LIST NLST STAT SITE MLSD MLST
214 Direct comments to root@10.0.102.145
211-Features:
AUTH TLS
CCC
CLNT
CSID
EPRT
EPSV
HOST
LANG zh-CN;zh-TW;bg-BG;en-US;es-ES;fr-FR;it-IT;ja-JP;ko-KR;ru-RU
MDTM
MFF modify;UNIX.group;UNIX.mode;
MFMT
MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
PBSZ
PROT
RANG STREAM
REST STREAM
SIZE
SSCN
TVFS
UTF8
211 End
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c2:3e:b3:51:5d:bc:6e:fe:bd:d9:5f:7e:c1:b5:33:bc:44
Signature Algorithm: ecdsa-with-SHA384
Issuer: C=US, O=Let's Encrypt, CN=E6
Validity
Not Before: Jan 26 10:11:34 2025 GMT
Not After : Apr 26 10:11:33 2025 GMT
Subject: CN=res3008.cloudpanel.it
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:c7:fd:77:88:1b:7b:94:4f:02:35:ff:4e:45:79:
56:5c:64:75:09:8c:dc:f0:69:c8:17:d1:df:fa:df:
ae:fa:51:84:14:ce:57:c1:4d:94:34:80:0c:dd:31:
58:94:fc:5f:f7:5a:df:e9:f6:69:0a:34:4a:65:f0:
54:43:3b:96:56
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
EF:43:F4:A2:0B:2C:B0:B1:4B:6A:25:A8:F1:04:D7:94:13:CB:88:F8
X509v3 Authority Key Identifier:
93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
Authority Information Access:
OCSP - URI:http://e6.o.lencr.org
CA Issuers - URI:http://e6.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:res3008.cloudpanel.it
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Jan 26 11:10:04.491 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:8D:AF:6C:BF:9F:8A:A8:6B:77:F2:57:
E2:CF:4D:69:C4:50:D7:3A:37:F5:37:BD:14:F6:85:AE:
9A:72:18:13:BF:02:20:79:74:7A:DB:33:96:93:66:B8:
E0:AB:FD:6F:4B:4F:32:57:4A:02:7E:B1:BE:BD:A4:1E:
E9:86:DD:11:9C:6D:3B
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
Timestamp : Jan 26 11:10:04.666 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:06:C6:35:BC:89:6C:F4:CF:26:2A:D3:30:
8C:D6:87:C9:20:06:F9:1B:29:25:E2:0A:8C:CD:D9:A9:
AE:72:11:88:02:21:00:E5:83:C9:A5:34:CD:43:5D:4D:
21:8B:15:5E:19:08:40:00:0B:AC:D2:8C:2A:78:AD:E3:
A5:3B:AF:F6:77:49:A5
Signature Algorithm: ecdsa-with-SHA384
Signature Value:
30:65:02:31:00:b0:46:c0:7e:a2:84:12:fb:44:92:12:fd:60:
a7:9a:7b:4d:bf:da:00:1d:e6:01:6f:c8:87:73:53:66:ef:76:
b9:81:b8:0a:7b:0b:4f:28:46:f7:bb:34:9f:6b:04:4e:0f:02:
30:03:84:c2:3d:c9:e9:51:e1:95:be:1e:38:d6:72:7e:c5:34:
83:7a:f0:6b:67:04:f8:94:16:1b:e4:63:6e:b0:ce:e1:35:17:
05:7b:88:64:99:0c:10:fb:ea:00:57:10:b2
23 /
tcp
-80182003 | 2025-03-19T23:42:35.336426
This is an unrestricted telnet server.
Please do not user for production purposes
#
25 /
tcp
351025966 | 2025-03-22T01:56:24.756022
220 ESMTP Postfix (Debian/GNU)
550 5.7.1 Your IP (224.15.97.27) is on the BitNinja server security greylist. This means that we experienced malicious attacks coming from your IP and placed it on our greylist due to security reasons. If you have taken the necessary steps to eliminate its source, you can delist this IP on (http://149.62.187.55:60412/spam_delist?hash=6afffe531d2a980ddee14c32819d6dce) You can only delist this IP a couple of times. It is good idea to warn your service provider about this incident.
79 /
tcp
1964355650 | 2025-03-20T12:00:06.883830
OK [CAPABILITY LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready.
1945339837 | 2025-03-21T20:43:00.899490
HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Server: BitNinja Captcha Server
Date: Fri, 21 Mar 2025 20:37:20 GMT
Content-Length: 127423
Connection: close
Vulnerabilities
111 /
tcp
-1333675938 | 2025-03-21T12:03:49.773183
Portmap
Program Version Protocol Port
1702000229 1915620618 1349281121 1936007268
1948284275 1701978214 1869750384 1919902837
1847619701 1919971187 1702038794 218768160
119 /
tcp
1879268703 | 2025-03-20T20:34:44.509228
This is an unrestricted telnet server.\r\nPlease do not user for production purposes\r\n\r\n#
1561395536 | 2025-03-22T21:09:59.877695
HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Server: BitNinja Captcha Server
Date: Sat, 22 Mar 2025 21:09:59 GMT
Content-Length: 127423
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c2:3e:b3:51:5d:bc:6e:fe:bd:d9:5f:7e:c1:b5:33:bc:44
Signature Algorithm: ecdsa-with-SHA384
Issuer: C=US, O=Let's Encrypt, CN=E6
Validity
Not Before: Jan 26 10:11:34 2025 GMT
Not After : Apr 26 10:11:33 2025 GMT
Subject: CN=res3008.cloudpanel.it
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:c7:fd:77:88:1b:7b:94:4f:02:35:ff:4e:45:79:
56:5c:64:75:09:8c:dc:f0:69:c8:17:d1:df:fa:df:
ae:fa:51:84:14:ce:57:c1:4d:94:34:80:0c:dd:31:
58:94:fc:5f:f7:5a:df:e9:f6:69:0a:34:4a:65:f0:
54:43:3b:96:56
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
EF:43:F4:A2:0B:2C:B0:B1:4B:6A:25:A8:F1:04:D7:94:13:CB:88:F8
X509v3 Authority Key Identifier:
93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
Authority Information Access:
OCSP - URI:http://e6.o.lencr.org
CA Issuers - URI:http://e6.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:res3008.cloudpanel.it
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Jan 26 11:10:04.491 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:8D:AF:6C:BF:9F:8A:A8:6B:77:F2:57:
E2:CF:4D:69:C4:50:D7:3A:37:F5:37:BD:14:F6:85:AE:
9A:72:18:13:BF:02:20:79:74:7A:DB:33:96:93:66:B8:
E0:AB:FD:6F:4B:4F:32:57:4A:02:7E:B1:BE:BD:A4:1E:
E9:86:DD:11:9C:6D:3B
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
Timestamp : Jan 26 11:10:04.666 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:06:C6:35:BC:89:6C:F4:CF:26:2A:D3:30:
8C:D6:87:C9:20:06:F9:1B:29:25:E2:0A:8C:CD:D9:A9:
AE:72:11:88:02:21:00:E5:83:C9:A5:34:CD:43:5D:4D:
21:8B:15:5E:19:08:40:00:0B:AC:D2:8C:2A:78:AD:E3:
A5:3B:AF:F6:77:49:A5
Signature Algorithm: ecdsa-with-SHA384
Signature Value:
30:65:02:31:00:b0:46:c0:7e:a2:84:12:fb:44:92:12:fd:60:
a7:9a:7b:4d:bf:da:00:1d:e6:01:6f:c8:87:73:53:66:ef:76:
b9:81:b8:0a:7b:0b:4f:28:46:f7:bb:34:9f:6b:04:4e:0f:02:
30:03:84:c2:3d:c9:e9:51:e1:95:be:1e:38:d6:72:7e:c5:34:
83:7a:f0:6b:67:04:f8:94:16:1b:e4:63:6e:b0:ce:e1:35:17:
05:7b:88:64:99:0c:10:fb:ea:00:57:10:b2
Vulnerabilities
666 /
tcp
-574194718 | 2025-03-21T22:10:35.135196
220 ESMTP Postfix (Debian/GNU)
1063 /
tcp
-47219067 | 2025-03-22T04:15:15.327001
220 ProFTPD 1.3.1 Server (ProFTPD)\r\n
Vulnerabilities
1433 /
tcp
-1198995689 | 2025-03-21T19:32:16.012132
OK [CAPABILITY LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready.\r\n
1521 /
tcp
1879268703 | 2025-03-20T09:53:50.252155
This is an unrestricted telnet server.\r\nPlease do not user for production purposes\r\n\r\n#
2000 /
tcp
887219762 | 2025-03-22T01:04:55.662042
220 ESMTP Postfix (Debian/GNU)\r\n
6667 /
tcp
704796380 | 2025-03-20T17:47:37.271984
7443 /
tcp
-80182003 | 2025-03-21T14:24:19.638814
This is an unrestricted telnet server.
Please do not user for production purposes
#
31337 /
tcp
1964355650 | 2025-03-20T05:40:11.299702
OK [CAPABILITY LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready.