21 /
tcp
354827306 | 2025-01-08T18:44:38.482985
220 FTP Server ready.
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
CWD XCWD CDUP XCUP SMNT* QUIT PORT PASV
EPRT EPSV ALLO* RNFR RNTO DELE MDTM RMD
XRMD MKD XMKD PWD XPWD SIZE SYST HELP
NOOP FEAT OPTS AUTH CCC* CONF* ENC* MIC*
PBSZ PROT TYPE STRU MODE RETR STOR STOU
APPE REST ABOR USER PASS ACCT* REIN* LIST
NLST STAT SITE MLSD MLST
214 Direct comments to root@localhost
211-Features:
MDTM
MFMT
TVFS
UTF8
AUTH TLS
MFF modify;UNIX.group;UNIX.mode;
MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*;
LANG ko-KR;zh-TW;en-US*;fr-FR;ru-RU;zh-CN;it-IT;bg-BG;ja-JP
PBSZ
PROT
REST STREAM
SIZE
211 End
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9c:23:8f:5a:ee:6a:f5:e8
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=example.com/emailAddress=root@37-140-195-188.xen.vps.regruhosting.ru
Validity
Not Before: Jun 2 22:28:20 2017 GMT
Not After : May 31 22:28:20 2027 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=example.com/emailAddress=root@37-140-195-188.xen.vps.regruhosting.ru
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:fe:85:72:a4:bf:af:dc:f7:fe:28:23:07:5c:87:
0a:af:7b:33:a2:1a:d1:ee:d5:51:a1:93:63:fb:0a:
58:15:5e:93:6a:b8:b4:68:07:60:ea:3c:e1:7e:21:
5d:40:3c:f9:11:08:02:38:05:5e:5d:3a:78:d3:4d:
56:25:46:9d:29:e8:1e:31:d4:ed:6d:c0:1c:a1:cb:
0a:32:21:a5:07:7f:b4:58:0f:0f:b5:2e:ad:75:8f:
45:58:8d:81:d2:08:af:c8:7e:73:c9:15:35:31:02:
ef:4d:39:a8:2a:9c:38:bc:13:2c:e3:3e:4e:96:31:
ae:dd:b3:d4:b9:bb:75:99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E5:25:31:22:C9:AA:49:F4:31:65:07:26:37:2B:F0:E7:5C:3A:34
X509v3 Authority Key Identifier:
22:E5:25:31:22:C9:AA:49:F4:31:65:07:26:37:2B:F0:E7:5C:3A:34
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
55:04:cd:dc:7c:fd:80:df:0e:ea:02:ce:ac:98:b1:c5:42:7f:
ec:d8:32:2d:6c:7e:e1:65:0c:3b:45:04:86:f7:92:fd:14:ae:
bc:7e:d6:4c:11:5c:61:e8:a0:1e:b4:97:d5:16:6b:36:b6:75:
85:55:fe:4e:31:d5:9a:d3:21:c8:82:92:55:d0:70:4e:1c:90:
63:8a:d3:33:f0:4c:b3:de:52:de:69:a9:7a:07:66:e6:99:3c:
53:c3:10:e2:ad:46:b3:67:ea:6c:a6:a8:d1:94:b5:d0:d5:dd:
59:16:ee:06:6d:18:b1:28:3e:18:02:f1:5b:5e:c6:83:2b:92:
8e:af
53 /
udp
-502151846 | 2025-01-18T13:45:07.269460
9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.2
Resolver name: korsazh55.ru
-1122444209 | 2025-01-06T20:54:30.206808
HTTP/1.1 301 Moved Permanently
Server: nginx/1.10.2
Date: Mon, 06 Jan 2025 20:54:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://31.31.201.251:443/
110 /
tcp
1685649979 | 2025-01-08T20:21:47.905582
123 /
udp
-1151655647 | 2025-01-07T05:08:11.408315
NTP
protocolversion: 3
stratum: 3
leap: 0
precision: -19
rootdelay: 0.00590515136719
rootdisp: 0.0471038818359
refid: 1427459675
reftime: 3945213408.0
poll: 3
-1071861867 | 2025-01-23T09:14:21.223718
HTTP/1.1 400 Bad Request
Server: nginx/1.10.2
Date: Thu, 23 Jan 2025 09:14:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
10f
<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body bgcolor="white">
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.10.2</center>
</body>
</html>
0
587 /
tcp
967119873 | 2025-01-08T22:23:30.755973
220 korsazh55.ru ESMTP Exim 4.84_2 Thu, 09 Jan 2025 01:22:34 +0300
250-korsazh55.ru Hello 224.179.109.20 [224.179.109.20]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN CRAM-MD5
250-STARTTLS
250 HELP
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8b:19:9c:22:a6:1e:23:73
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=37-140-195-188.xen.vps.regruhosting.ru/emailAddress=root@37-140-195-188.xen.vps.regruhosting.ru
Validity
Not Before: Jun 2 22:23:05 2017 GMT
Not After : May 31 22:23:05 2027 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=37-140-195-188.xen.vps.regruhosting.ru/emailAddress=root@37-140-195-188.xen.vps.regruhosting.ru
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:b6:9e:53:1f:3e:0e:27:3a:3f:df:64:f7:12:10:
22:e5:74:e6:6e:e0:15:08:ee:90:2b:16:23:2f:ca:
16:39:98:15:c2:db:08:14:4a:e6:46:15:2e:c8:44:
61:22:02:ee:52:3a:eb:2e:5f:3f:61:33:69:c6:29:
84:43:06:5e:e2:d0:d4:d0:20:26:b1:de:0f:5c:28:
05:1b:25:96:61:4e:c6:84:9d:3a:73:29:7d:02:f6:
5f:ad:fa:16:df:42:fa:1d:13:c6:97:bf:88:96:e0:
a3:d6:b1:1c:44:43:5e:a5:67:72:45:2b:cf:0f:c9:
22:e9:16:7d:2e:3d:f2:92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:04:CF:A8:7F:8C:51:1E:F8:88:E1:86:E2:07:7F:82:00:3C:F5
X509v3 Authority Key Identifier:
DC:74:04:CF:A8:7F:8C:51:1E:F8:88:E1:86:E2:07:7F:82:00:3C:F5
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
2f:e0:7d:d1:cc:6a:ca:67:49:ce:c7:3a:76:dc:6f:38:77:d0:
d2:e0:0f:5b:af:f9:be:c5:76:4c:9a:44:98:bc:a0:64:46:df:
2d:c0:e0:ba:e4:67:ff:dc:cd:4c:92:1d:5a:10:c7:9f:bb:90:
77:79:b3:d6:b5:92:59:a5:50:bd:99:0b:17:a0:7d:de:4e:88:
dd:39:38:da:30:e6:30:c0:3f:1e:5b:51:04:b2:56:7f:00:68:
31:17:02:9f:3a:7f:15:42:97:96:de:6c:d3:40:b4:f8:20:87:
2b:b2:17:cc:c4:a8:5e:86:82:e7:4c:03:9c:d4:c6:07:a8:f2:
c6:80
993 /
tcp
-1948046456 | 2024-12-31T23:08:27.415939
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5
A001 OK Capability completed.
* ID NIL
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8b:19:9c:22:a6:1e:23:73
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=37-140-195-188.xen.vps.regruhosting.ru/emailAddress=root@37-140-195-188.xen.vps.regruhosting.ru
Validity
Not Before: Jun 2 22:23:05 2017 GMT
Not After : May 31 22:23:05 2027 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=37-140-195-188.xen.vps.regruhosting.ru/emailAddress=root@37-140-195-188.xen.vps.regruhosting.ru
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:b6:9e:53:1f:3e:0e:27:3a:3f:df:64:f7:12:10:
22:e5:74:e6:6e:e0:15:08:ee:90:2b:16:23:2f:ca:
16:39:98:15:c2:db:08:14:4a:e6:46:15:2e:c8:44:
61:22:02:ee:52:3a:eb:2e:5f:3f:61:33:69:c6:29:
84:43:06:5e:e2:d0:d4:d0:20:26:b1:de:0f:5c:28:
05:1b:25:96:61:4e:c6:84:9d:3a:73:29:7d:02:f6:
5f:ad:fa:16:df:42:fa:1d:13:c6:97:bf:88:96:e0:
a3:d6:b1:1c:44:43:5e:a5:67:72:45:2b:cf:0f:c9:
22:e9:16:7d:2e:3d:f2:92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:04:CF:A8:7F:8C:51:1E:F8:88:E1:86:E2:07:7F:82:00:3C:F5
X509v3 Authority Key Identifier:
DC:74:04:CF:A8:7F:8C:51:1E:F8:88:E1:86:E2:07:7F:82:00:3C:F5
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
2f:e0:7d:d1:cc:6a:ca:67:49:ce:c7:3a:76:dc:6f:38:77:d0:
d2:e0:0f:5b:af:f9:be:c5:76:4c:9a:44:98:bc:a0:64:46:df:
2d:c0:e0:ba:e4:67:ff:dc:cd:4c:92:1d:5a:10:c7:9f:bb:90:
77:79:b3:d6:b5:92:59:a5:50:bd:99:0b:17:a0:7d:de:4e:88:
dd:39:38:da:30:e6:30:c0:3f:1e:5b:51:04:b2:56:7f:00:68:
31:17:02:9f:3a:7f:15:42:97:96:de:6c:d3:40:b4:f8:20:87:
2b:b2:17:cc:c4:a8:5e:86:82:e7:4c:03:9c:d4:c6:07:a8:f2:
c6:80
995 /
tcp
707425161 | 2025-01-06T23:35:10.935023
+OK Dovecot ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
USER
SASL PLAIN LOGIN DIGEST-MD5 CRAM-MD5
.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8b:19:9c:22:a6:1e:23:73
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=37-140-195-188.xen.vps.regruhosting.ru/emailAddress=root@37-140-195-188.xen.vps.regruhosting.ru
Validity
Not Before: Jun 2 22:23:05 2017 GMT
Not After : May 31 22:23:05 2027 GMT
Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=37-140-195-188.xen.vps.regruhosting.ru/emailAddress=root@37-140-195-188.xen.vps.regruhosting.ru
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:b6:9e:53:1f:3e:0e:27:3a:3f:df:64:f7:12:10:
22:e5:74:e6:6e:e0:15:08:ee:90:2b:16:23:2f:ca:
16:39:98:15:c2:db:08:14:4a:e6:46:15:2e:c8:44:
61:22:02:ee:52:3a:eb:2e:5f:3f:61:33:69:c6:29:
84:43:06:5e:e2:d0:d4:d0:20:26:b1:de:0f:5c:28:
05:1b:25:96:61:4e:c6:84:9d:3a:73:29:7d:02:f6:
5f:ad:fa:16:df:42:fa:1d:13:c6:97:bf:88:96:e0:
a3:d6:b1:1c:44:43:5e:a5:67:72:45:2b:cf:0f:c9:
22:e9:16:7d:2e:3d:f2:92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:04:CF:A8:7F:8C:51:1E:F8:88:E1:86:E2:07:7F:82:00:3C:F5
X509v3 Authority Key Identifier:
DC:74:04:CF:A8:7F:8C:51:1E:F8:88:E1:86:E2:07:7F:82:00:3C:F5
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
2f:e0:7d:d1:cc:6a:ca:67:49:ce:c7:3a:76:dc:6f:38:77:d0:
d2:e0:0f:5b:af:f9:be:c5:76:4c:9a:44:98:bc:a0:64:46:df:
2d:c0:e0:ba:e4:67:ff:dc:cd:4c:92:1d:5a:10:c7:9f:bb:90:
77:79:b3:d6:b5:92:59:a5:50:bd:99:0b:17:a0:7d:de:4e:88:
dd:39:38:da:30:e6:30:c0:3f:1e:5b:51:04:b2:56:7f:00:68:
31:17:02:9f:3a:7f:15:42:97:96:de:6c:d3:40:b4:f8:20:87:
2b:b2:17:cc:c4:a8:5e:86:82:e7:4c:03:9c:d4:c6:07:a8:f2:
c6:80
0 | 2025-01-23T15:59:22.753435
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Location: https://31.31.201.251/
Date: Thu, 23 Jan 2025 15:59:22 GMT
3306 /
tcp
-998406261 | 2025-01-10T17:52:42.766620
MySQL:
Error Message: Host '224.251.49.25' is not allowed to connect to this MySQL server
Error Code: 1130