21 /
tcp
-893667222 | 2025-03-29T20:05:53.040311
220 ProFTPD Server (ProFTPD) [194.163.180.192]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
CWD XCWD CDUP XCUP SMNT* QUIT PORT PASV
EPRT EPSV ALLO RNFR RNTO DELE MDTM RMD
XRMD MKD XMKD PWD XPWD SIZE SYST HELP
NOOP FEAT OPTS HOST CLNT AUTH CCC* CONF*
ENC* MIC* PBSZ PROT TYPE STRU MODE RETR
STOR STOU APPE REST ABOR RANG USER PASS
ACCT* REIN* LIST NLST STAT SITE MLSD MLST
214 Direct comments to root@0.0.0.0
211-Features:
AUTH TLS
CCC
CLNT
CSID
EPRT
EPSV
HOST
LANG en-US.UTF-8*
MDTM
MFF modify;UNIX.group;UNIX.mode;
MFMT
MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
PBSZ
PROT
RANG STREAM
REST STREAM
SIZE
SSCN
TVFS
UTF8
211 End
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:74:45:37:35:3d:23:8a:ed:fb:87:c0:f2:3c:01:9d:81:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R10
Validity
Not Before: Feb 24 06:58:08 2025 GMT
Not After : May 25 06:58:07 2025 GMT
Subject: CN=vmi1503664.contaboserver.net
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:8d:9b:0d:75:17:26:a9:87:5a:b5:55:79:10:de:
62:8b:19:59:a9:0d:69:94:16:38:15:72:d6:34:ab:
6d:7b:b0:b3:d3:66:a2:dc:03:25:73:fe:9b:54:d4:
34:68:08:6c:f5:98:f6:32:e5:b0:d5:79:3a:7b:af:
85:9a:53:e7:49:f5:24:4b:2f:32:f3:3d:82:f8:c9:
a9:8d:46:58:c1:2d:70:b2:42:c3:11:97:77:ef:67:
2e:e9:3a:74:c7:06:aa:89:64:6d:6f:4c:a8:d8:b9:
90:42:db:83:79:bf:d0:c5:51:eb:f2:e4:99:a1:54:
d9:0e:62:3e:eb:1e:02:e2:16:b4:5d:73:d6:2d:20:
30:33:f2:87:33:74:dc:4d:c7:b6:70:94:dc:35:d9:
16:e3:d9:2b:f6:25:ae:76:20:ea:c7:25:38:09:f9:
d0:04:94:2e:80:48:49:ea:67:a9:47:17:9c:7d:19:
a8:30:fa:71:d1:01:e2:64:d1:83:61:fb:5a:3d:99:
c1:b3:89:26:2d:95:c7:ca:a0:a8:38:d9:eb:a4:03:
84:e9:1a:59:61:6b:91:15:21:e6:94:3c:24:5f:92:
28:55:83:e6:c7:35:bd:05:ce:03:f1:a5:9d:69:d6:
f1:5c:d1:32:3d:6e:2f:4d:22:8d:bf:1c:d9:b3:2e:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
00:A3:FD:EF:C3:F6:A0:59:88:B4:04:3A:4A:C3:66:98:84:79:82:6F
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:vmi1503664.contaboserver.net
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 73:20:22:0F:08:16:8A:F9:F3:C4:A6:8B:0A:B2:6A:9A:
4A:00:EE:F5:77:85:8A:08:4D:05:00:D4:A5:42:44:59
Timestamp : Feb 24 07:56:38.993 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:F0:66:05:FA:EE:0A:BB:CD:BB:09:2E:
E2:EE:BB:9F:CC:E5:52:61:48:84:95:0B:30:2A:86:18:
6A:F1:48:59:DF:02:21:00:DB:5D:85:80:78:25:D4:5A:
09:2E:DE:70:A8:02:5B:7A:4A:A1:16:31:79:7C:C8:DA:
C7:5F:2D:58:C3:35:0F:F8
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Feb 24 07:56:39.004 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:38:8C:B4:D9:91:0B:91:72:0D:1E:83:DE:
E3:74:17:B1:16:63:1F:F2:5E:F3:96:14:D7:65:4B:5D:
45:77:6B:2E:02:20:79:93:BD:66:68:57:E9:91:38:8E:
9A:16:AA:32:51:43:7F:1A:92:76:01:86:4C:A9:B1:FB:
79:05:C4:7E:E1:16
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
af:28:13:d9:2c:13:8f:c8:bf:9a:00:a3:d7:fb:29:23:b5:d7:
8f:85:6a:c9:1d:07:b1:b7:20:c9:b3:49:54:63:7c:18:56:a0:
a5:56:d9:ad:57:58:02:6b:15:05:60:d2:82:ae:4e:9c:00:00:
48:61:07:58:a6:df:97:2e:60:df:d3:47:c5:ef:84:e9:80:39:
84:a6:31:2b:d8:13:8b:26:21:7c:be:24:4b:bb:12:8d:30:94:
e4:02:1e:98:29:78:e9:10:4d:17:d1:1a:b9:7f:56:8f:ad:13:
59:f9:23:1a:66:c9:04:e9:1b:27:de:0b:2a:22:39:71:c1:59:
16:d2:de:0b:c6:42:37:6d:1e:29:75:9c:e1:c3:d3:9b:2f:8b:
1f:5c:c8:b4:21:58:11:c4:74:56:49:bf:e8:e4:71:2e:a6:58:
68:eb:38:33:28:d5:61:4f:20:be:e7:17:09:21:fd:60:81:9d:
f5:79:e7:85:23:9c:be:6f:31:44:e6:26:7e:67:32:da:bd:5e:
52:75:37:3b:18:12:0d:ba:22:2b:01:4d:70:7f:70:6e:14:aa:
47:ee:e1:53:b3:31:74:19:85:dc:89:bc:3e:be:da:6d:8b:88:
89:11:94:90:24:67:6e:e8:d2:8f:82:19:cc:de:fb:09:aa:da:
26:fc:7e:8c
22 /
tcp
-1762637665 | 2025-03-27T13:57:22.789469
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAACAQDSYTvKinonaLCxoL3AbmnMgTvjhNpDCuRxed7fAtkTwMo+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Fingerprint: 61:cd:bc:fb:18:9b:68:fa:70:ec:1c:df:76:a0:56:ec
Kex Algorithms:
curve25519-sha256
curve25519-sha256@libssh.org
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
sntrup761x25519-sha512@openssh.com
diffie-hellman-group-exchange-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group14-sha256
kex-strict-s-v00@openssh.com
Server Host Key Algorithms:
rsa-sha2-512
rsa-sha2-256
ssh-rsa
ecdsa-sha2-nistp256
ssh-ed25519
Encryption Algorithms:
chacha20-poly1305@openssh.com
aes128-ctr
aes192-ctr
aes256-ctr
aes128-gcm@openssh.com
aes256-gcm@openssh.com
MAC Algorithms:
umac-64-etm@openssh.com
umac-128-etm@openssh.com
hmac-sha2-256-etm@openssh.com
hmac-sha2-512-etm@openssh.com
hmac-sha1-etm@openssh.com
umac-64@openssh.com
umac-128@openssh.com
hmac-sha2-256
hmac-sha2-512
hmac-sha1
Compression Algorithms:
none
zlib@openssh.com
53 /
tcp
1416213380 | 2025-04-12T06:48:58.616450
none
Resolver name: vmi1503664.contaboserver.net
53 /
udp
1416213380 | 2025-03-22T05:26:40.704401
none
Resolver name: vmi1503664.contaboserver.net
-139573974 | 2025-03-17T23:45:00.911662
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 17 Mar 2025 23:45:00 GMT
Content-Type: text/html
Content-Length: 1656
Connection: keep-alive
Last-Modified: Tue, 19 Sep 2023 07:44:15 GMT
ETag: "678-605b16cebb1c0"
Accept-Ranges: bytes
Vary: Accept-Encoding
-731556308 | 2025-03-26T15:06:24.703394
HTTP/1.1 200 OK
Server: sw-cp-server
Date: Wed, 26 Mar 2025 15:06:24 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Wed, 26 Mar 2025 15:06:24 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:74:45:37:35:3d:23:8a:ed:fb:87:c0:f2:3c:01:9d:81:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R10
Validity
Not Before: Feb 24 06:58:08 2025 GMT
Not After : May 25 06:58:07 2025 GMT
Subject: CN=vmi1503664.contaboserver.net
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:8d:9b:0d:75:17:26:a9:87:5a:b5:55:79:10:de:
62:8b:19:59:a9:0d:69:94:16:38:15:72:d6:34:ab:
6d:7b:b0:b3:d3:66:a2:dc:03:25:73:fe:9b:54:d4:
34:68:08:6c:f5:98:f6:32:e5:b0:d5:79:3a:7b:af:
85:9a:53:e7:49:f5:24:4b:2f:32:f3:3d:82:f8:c9:
a9:8d:46:58:c1:2d:70:b2:42:c3:11:97:77:ef:67:
2e:e9:3a:74:c7:06:aa:89:64:6d:6f:4c:a8:d8:b9:
90:42:db:83:79:bf:d0:c5:51:eb:f2:e4:99:a1:54:
d9:0e:62:3e:eb:1e:02:e2:16:b4:5d:73:d6:2d:20:
30:33:f2:87:33:74:dc:4d:c7:b6:70:94:dc:35:d9:
16:e3:d9:2b:f6:25:ae:76:20:ea:c7:25:38:09:f9:
d0:04:94:2e:80:48:49:ea:67:a9:47:17:9c:7d:19:
a8:30:fa:71:d1:01:e2:64:d1:83:61:fb:5a:3d:99:
c1:b3:89:26:2d:95:c7:ca:a0:a8:38:d9:eb:a4:03:
84:e9:1a:59:61:6b:91:15:21:e6:94:3c:24:5f:92:
28:55:83:e6:c7:35:bd:05:ce:03:f1:a5:9d:69:d6:
f1:5c:d1:32:3d:6e:2f:4d:22:8d:bf:1c:d9:b3:2e:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
00:A3:FD:EF:C3:F6:A0:59:88:B4:04:3A:4A:C3:66:98:84:79:82:6F
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:vmi1503664.contaboserver.net
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 73:20:22:0F:08:16:8A:F9:F3:C4:A6:8B:0A:B2:6A:9A:
4A:00:EE:F5:77:85:8A:08:4D:05:00:D4:A5:42:44:59
Timestamp : Feb 24 07:56:38.993 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:F0:66:05:FA:EE:0A:BB:CD:BB:09:2E:
E2:EE:BB:9F:CC:E5:52:61:48:84:95:0B:30:2A:86:18:
6A:F1:48:59:DF:02:21:00:DB:5D:85:80:78:25:D4:5A:
09:2E:DE:70:A8:02:5B:7A:4A:A1:16:31:79:7C:C8:DA:
C7:5F:2D:58:C3:35:0F:F8
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Feb 24 07:56:39.004 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:38:8C:B4:D9:91:0B:91:72:0D:1E:83:DE:
E3:74:17:B1:16:63:1F:F2:5E:F3:96:14:D7:65:4B:5D:
45:77:6B:2E:02:20:79:93:BD:66:68:57:E9:91:38:8E:
9A:16:AA:32:51:43:7F:1A:92:76:01:86:4C:A9:B1:FB:
79:05:C4:7E:E1:16
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
af:28:13:d9:2c:13:8f:c8:bf:9a:00:a3:d7:fb:29:23:b5:d7:
8f:85:6a:c9:1d:07:b1:b7:20:c9:b3:49:54:63:7c:18:56:a0:
a5:56:d9:ad:57:58:02:6b:15:05:60:d2:82:ae:4e:9c:00:00:
48:61:07:58:a6:df:97:2e:60:df:d3:47:c5:ef:84:e9:80:39:
84:a6:31:2b:d8:13:8b:26:21:7c:be:24:4b:bb:12:8d:30:94:
e4:02:1e:98:29:78:e9:10:4d:17:d1:1a:b9:7f:56:8f:ad:13:
59:f9:23:1a:66:c9:04:e9:1b:27:de:0b:2a:22:39:71:c1:59:
16:d2:de:0b:c6:42:37:6d:1e:29:75:9c:e1:c3:d3:9b:2f:8b:
1f:5c:c8:b4:21:58:11:c4:74:56:49:bf:e8:e4:71:2e:a6:58:
68:eb:38:33:28:d5:61:4f:20:be:e7:17:09:21:fd:60:81:9d:
f5:79:e7:85:23:9c:be:6f:31:44:e6:26:7e:67:32:da:bd:5e:
52:75:37:3b:18:12:0d:ba:22:2b:01:4d:70:7f:70:6e:14:aa:
47:ee:e1:53:b3:31:74:19:85:dc:89:bc:3e:be:da:6d:8b:88:
89:11:94:90:24:67:6e:e8:d2:8f:82:19:cc:de:fb:09:aa:da:
26:fc:7e:8c
-1624851756 | 2025-04-15T05:49:56.700040
HTTP/1.1 303 See Other
Server: sw-cp-server
Date: Tue, 15 Apr 2025 05:49:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Tue, 15 Apr 2025 05:49:56 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Location: http://194.163.180.192/login.php
X-Content-Type-Options: nosniff
0