-869084027 | 2025-01-07T00:38:23.952230
22 /
tcp
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDFYMROeC4ve5jabOUmXQMiuA/6T/B9wmYa28cELAsRWg9O
20oXIPXCrU+zISD6B5YI5sNV/4HOne5KFDAwDwF3IvcmuSC2mRGic/0DY5cdyiaTvZYztsBYZWmj
xIS2WX73+XcTkl/+lQHhbzzNOEnD/uf4nrGUTfVUEd0r4xrBFYMnXvDcMfh97UUrp4qPYp30CQI2
iQWUKD25zIbHpgn1usZAMtredngR5Ebf0qkLyxTvmqvxo4N23Foyctl2f9O7W/KoIWvsbM0+D8qV
ohMDOTORRWhNiLdTzNrClb/C1pRNJyx1G/LKwS5TQP381FPPLrpu5ArSPNAd8uKZOEbY57QAM4k+
JdLmXxVmYt2Usm4Bd1knmIUsOj/xyQYDuVzq1ZJbQoT84nvnbDf3OPtZaGw87DrjR7AHwVclRk26
SevworyPBsrHmyByGV63wq2MlYscdm5sCYfYTQJdZhtv4QIPb1v41B2ZAqFA0ftH8mDksksJQ76S
1UgbKLGQplM=
Fingerprint: ab:51:1c:cb:9f:34:25:57:ac:8b:73:b5:aa:fa:6a:63
Kex Algorithms:
curve25519-sha256
curve25519-sha256@libssh.org
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
diffie-hellman-group-exchange-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group14-sha256
kex-strict-s-v00@openssh.com
Server Host Key Algorithms:
rsa-sha2-512
rsa-sha2-256
ssh-rsa
ecdsa-sha2-nistp256
ssh-ed25519
Encryption Algorithms:
chacha20-poly1305@openssh.com
aes128-ctr
aes192-ctr
aes256-ctr
aes128-gcm@openssh.com
aes256-gcm@openssh.com
MAC Algorithms:
umac-64-etm@openssh.com
umac-128-etm@openssh.com
hmac-sha2-256-etm@openssh.com
hmac-sha2-512-etm@openssh.com
hmac-sha1-etm@openssh.com
umac-64@openssh.com
umac-128@openssh.com
hmac-sha2-256
hmac-sha2-512
hmac-sha1
Compression Algorithms:
none
zlib@openssh.com
-252975176 | 2024-12-24T20:23:14.869098
80 /
tcp
HTTP/1.1 200 OK
Date: Tue, 24 Dec 2024 20:23:14 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Sun, 19 Nov 2023 11:10:25 GMT
ETag: "1443-60a7f6a8cca40"
Accept-Ranges: bytes
Content-Length: 5187
Content-Type: text/html
-711304830 | 2025-01-04T16:30:07.192775
443 /
tcp
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Sat, 04 Jan 2025 16:30:07 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjQ1VytMMWRIdXpMMDZDN2Y5dXhGQ3c9PSIsInZhbHVlIjoibUYvUGtNT0UyMktNNkxkZks0Yld6VWppbzJpUE1Jc1pmNUk0dC9NRE1qSm9rMHRWOHNEenlwZ2g0NzJWakJzM2VXTWZWbVZHb0huNk84bkJlYnNUNDVBTnpmaFlvTGJUSG5TUU1taW52R2dFN3Zxd2VYZDhhb2VIMy9nNDZvWEkiLCJtYWMiOiIwMDVjOWQ2NmU4ZWFmMWVmMWMzM2FiYzE2YWQyNjY4ZGEwMDAxZGIzMzc3ZTcyYWY1ZTg2ZWQzNDViMjAzZjZlIiwidGFnIjoiIn0%3D; expires=Sun, 05 Jan 2025 04:30:07 GMT; Max-Age=43200; path=/; secure; samesite=lax
Set-Cookie: pterodactyl_session=eyJpdiI6IlBDbDUydlhwZWpqVVYvRHlLWkFzeEE9PSIsInZhbHVlIjoiK0ZPek4vejN3b1ZZbEJwQWt0NGxubjlDalJ6cGM2TzJ5RXFaUkp0NlNWTDlWa20vTUhweEFPTnhmaWg5MXVXNS9Yc2RiQUc3L2pUSkxRa1lOTCtmTWI3cGJWbGN6RzhEL3pNTlRJWDZ6ZTRmMURjbXhEdlJxWUl0Tmk1YWNqQ3ciLCJtYWMiOiJmZjQ2NTZlZWUyYjYxZjNhODVlZTdjYjg4Y2I4ZGU3MTU0NGYwM2U5YTgwNDZmMzcxNzAyNmEzM2ViNjIyNTFhIiwidGFnIjoiIn0%3D; expires=Sun, 05 Jan 2025 04:30:07 GMT; Max-Age=43200; path=/; secure; httponly; samesite=lax
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8b:fc:45:95:12:4f:6b:87:ee:52:d5:fa:37:31:bf:0e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R10
Validity
Not Before: Jan 4 07:01:39 2025 GMT
Not After : Apr 4 07:01:38 2025 GMT
Subject: CN=evergreen.rarahun.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d5:d5:ec:2c:44:b8:a5:b1:45:d1:5e:3b:2e:91:
49:c1:c4:f0:4f:a1:f6:44:79:ae:8c:97:4d:8a:39:
22:e1:72:5b:1d:da:88:a9:82:70:49:e6:bb:05:fc:
00:25:2e:7f:2d:4d:09:e2:b3:a9:5f:fb:9e:08:a4:
63:d5:8d:75:3c:7f:f0:8a:96:c5:83:16:13:1a:4c:
87:9e:ba:41:18:da:a9:76:55:6e:6a:c4:b9:6b:f3:
ca:61:c4:7b:5a:59:ee:af:22:72:15:3f:05:9d:a1:
69:d6:69:9a:94:21:d1:ad:d2:91:94:a3:84:f0:a8:
3d:79:6f:86:34:6d:c8:4b:ec:a8:e4:0f:98:b8:54:
45:49:35:98:5c:9c:96:88:cf:13:03:4d:94:22:c2:
c2:9e:49:f1:af:df:5e:c4:d6:db:a4:7a:32:b8:90:
fe:2d:4b:fc:ee:30:14:9c:8b:42:c1:c5:80:3f:83:
13:3a:83:df:38:8f:9f:fd:19:83:f8:ee:1d:15:f1:
4b:12:aa:e3:f2:80:fd:0d:25:65:4f:35:17:26:d8:
f4:20:d2:f5:e3:ea:ae:ff:7d:3c:54:50:58:2c:a5:
e0:dd:10:fd:a3:a2:89:ad:9d:8e:a0:80:83:52:f0:
1a:1f:ec:12:95:bb:5d:43:79:ee:a2:82:7c:4e:16:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
19:83:7A:F1:81:7C:73:5A:2B:D0:19:2B:3D:26:08:2B:26:B3:EC:BB
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:evergreen.rarahun.org
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Jan 4 08:00:09.134 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:ED:F3:33:7C:7F:45:F8:60:A3:57:B8:
A6:36:A7:65:60:BA:6C:1C:F8:C3:D8:B6:C7:D5:70:DB:
BF:E1:6F:A3:69:02:21:00:E6:95:A0:E5:79:95:5C:D8:
99:13:07:7E:9C:68:F0:92:0D:21:F0:FC:2E:49:0A:8D:
93:2E:55:34:88:AA:FD:1D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Jan 4 08:00:09.119 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:07:DA:7A:7D:47:29:4E:1C:25:86:54:11:
D3:D8:5B:88:66:51:4C:B3:C5:95:65:90:89:73:9C:0E:
DC:4E:D9:A2:02:20:78:2C:CB:0D:14:E8:AB:C0:8D:55:
8B:0C:05:A7:24:CD:2C:E9:75:82:20:B3:5C:44:5D:94:
1A:C3:73:4E:EA:96
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
ac:1d:b6:95:ff:db:35:94:d0:2e:f7:61:31:60:e0:ca:73:77:
21:f1:c5:4d:56:1d:70:88:07:17:28:8b:7a:69:ef:91:c4:79:
9f:c5:90:22:bd:95:2d:46:6d:1b:06:24:ba:80:57:b6:c9:7f:
55:5a:70:7a:23:c8:c5:a8:e4:84:2c:37:9e:e0:7b:52:b6:a1:
46:16:d3:4b:42:1e:69:99:c8:f6:1c:aa:49:bd:a8:30:75:e9:
6f:ed:90:e8:69:5e:3b:40:d5:d1:e4:ab:80:17:a5:e1:d5:68:
3d:62:82:6a:85:1a:1b:ac:bb:b4:7a:5c:a0:4e:15:ef:42:d0:
89:ae:20:7e:09:a2:e7:bc:22:a5:2e:01:20:6b:e3:9e:38:58:
8c:34:be:f2:90:05:5c:53:9a:a9:97:50:df:c1:36:d5:00:ba:
a1:db:5c:36:06:a8:90:50:a8:18:81:e9:2f:ec:05:21:4a:7c:
a5:a8:a0:00:5f:c1:04:be:12:92:96:be:f0:d1:73:74:38:0a:
3d:1a:6e:d5:6e:09:bc:58:bf:6c:34:4b:49:00:6a:b7:86:e9:
ea:a2:13:29:54:b3:57:ca:3a:6f:3d:b9:c0:b8:53:5c:fb:3a:
cf:ef:8a:6c:b1:d7:bd:63:0d:2b:b0:70:8d:c8:0a:fa:bb:21:
43:f2:0a:1d
-629368106 | 2025-01-09T13:07:07.371030
3306 /
tcp
MariaDB:
Error Message: Host '224.142.19.19' is not allowed to connect to this MariaDB server
Error Code: 1130
-358435013 | 2024-12-26T07:46:43.584281
3389 /
tcp
Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
OS: Windows Server 2022
OS Build: 10.0.20348
Target Name: WIN-ROPAIEAS46Q
NetBIOS Domain Name: WIN-ROPAIEAS46Q
NetBIOS Computer Name: WIN-ROPAIEAS46Q
DNS Domain Name: WIN-ROPAIEAS46Q
FQDN: WIN-ROPAIEAS46Q
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d7:a9:21:95:07:a5:91:40:62:6a:cc:53:2b:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=WIN-ROPAIEAS46Q
Validity
Not Before: Nov 29 15:48:35 2024 GMT
Not After : May 31 15:48:35 2025 GMT
Subject: CN=WIN-ROPAIEAS46Q
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d9:da:22:dc:b5:4d:12:77:c8:e6:ef:0c:eb:33:
4d:8c:54:cd:31:f1:73:c1:c2:72:8a:fe:94:4f:8f:
9e:a3:1f:dd:0c:f5:3c:fd:21:af:ca:d9:e3:4e:35:
14:b8:01:94:72:9c:48:95:92:c8:9c:26:96:f3:41:
c7:f7:9b:87:cd:bd:fa:20:17:a9:2a:15:cf:d7:19:
10:b6:68:59:ea:36:97:dc:37:66:b5:ef:6f:d8:e3:
f2:12:48:84:dd:4f:7f:c0:57:5b:38:b5:8e:4f:45:
38:48:a7:38:97:8a:73:17:1f:30:8c:30:7e:1b:4b:
d9:34:76:29:e6:b0:a2:0a:75:c4:b2:68:36:3b:a9:
0a:cb:3c:29:96:89:5d:24:04:b6:83:68:3e:81:52:
db:f1:82:fb:f2:66:16:2f:5c:97:db:23:6a:f5:eb:
80:ab:28:31:32:34:0f:0b:7f:cf:5d:8a:db:6d:8d:
41:45:76:96:df:4b:6d:59:41:f5:66:9b:35:03:39:
0d:f9:a0:79:b6:ea:50:ce:8d:e0:8d:18:04:e1:29:
8b:dc:ea:f0:a8:cc:f8:27:c5:6e:58:a6:12:ad:15:
d9:db:96:9a:ca:b1:23:ab:7e:43:29:ab:dd:47:76:
19:90:57:4f:51:f8:59:d3:dd:aa:7d:eb:46:ad:d3:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
c3:58:b1:c3:32:6f:77:32:9f:64:de:87:c2:1a:99:16:9f:f0:
41:19:8f:0f:0e:69:4d:b3:ce:3b:ca:a0:da:ca:41:15:a5:63:
a1:ac:c9:d8:a3:b7:82:5d:a7:5b:83:16:8a:b8:18:a7:df:94:
7d:be:c3:02:2f:0b:01:cc:21:26:fc:14:6e:7f:f4:b8:37:e5:
a3:56:11:ad:e3:38:52:bc:d4:b8:22:e6:f6:a6:e3:96:84:05:
be:b0:85:05:df:8b:b4:5c:84:40:c1:ef:c3:5b:6a:33:37:5f:
f6:e7:d2:98:11:7b:84:9d:1f:e4:60:3a:b3:87:b4:7b:e0:2d:
06:d6:56:9d:cd:f1:63:38:71:d4:a9:23:b6:81:91:e8:06:2b:
45:59:15:5d:56:2a:0f:7c:47:a1:7b:fe:92:d1:c9:49:4e:d0:
94:61:c7:7c:9d:95:65:fe:cb:be:0c:a0:55:b9:51:73:69:d5:
ab:16:26:a2:05:e8:69:57:7d:3c:a7:cd:1d:66:69:17:0a:da:
ae:41:30:4a:70:b8:d0:a5:21:12:80:9c:91:d3:fd:ce:06:13:
11:9f:38:6c:7f:32:d3:31:88:fb:90:4a:30:bd:12:dd:5a:b1:
61:a8:74:bc:1e:a1:b9:3f:13:44:5a:8e:a1:b2:47:c5:e6:ff:
66:83:1c:e8
1489525118 | 2024-12-26T18:20:27.716849
5985 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Thu, 26 Dec 2024 18:20:27 GMT
Connection: close
Content-Length: 315
WinRM NTLM Info:
OS: Windows Server 2022
OS Build: 10.0.20348
Target Name: WIN-ROPAIEAS46Q
NetBIOS Domain Name: WIN-ROPAIEAS46Q
NetBIOS Computer Name: WIN-ROPAIEAS46Q
DNS Domain Name: WIN-ROPAIEAS46Q
FQDN: WIN-ROPAIEAS46Q