797162070 | 2025-01-14T13:46:24.986026
25 /
tcp
220 Exchange2016.hanovic.com Microsoft ESMTP MAIL Service ready at Tue, 14 Jan 2025 21:43:29 +0800
250-Exchange2016.hanovic.com Hello [224.98.24.192]
250-SIZE 52428800
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-X-ANONYMOUSTLS
250-AUTH NTLM
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250 XRDST
SMTP NTLM Info:
OS: Windows 10 (version 1607)/Windows Server 2016 (version 1607)
OS Build: 10.0.14393
Target Name: HANOVIC
NetBIOS Domain Name: HANOVIC
NetBIOS Computer Name: EXCHANGE2016
DNS Domain Name: hanovic.com
DNS Tree Name: hanovic.com
FQDN: Exchange2016.hanovic.com
-1190534895 | 2025-01-03T13:37:33.891868
80 /
tcp
HTTP/1.1 403 Forbidden
Server: Microsoft-IIS/10.0
Date: Fri, 03 Jan 2025 13:34:46 GMT
Content-Length: 0
-2126211945 | 2024-12-28T12:56:40.027995
110 /
tcp
+OK The Microsoft Exchange POP3 service is ready.
+OK
TOP
UIDL
STLS
.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:de:ee:4c:82:3e:bd:b5:a2:27:15:7c:7f:53:54:aa:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R10
Validity
Not Before: Dec 7 15:44:18 2024 GMT
Not After : Mar 7 15:44:17 2025 GMT
Subject: CN=exchange2016.hanovic.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:e2:ac:3d:6f:04:f0:71:04:cf:1c:5e:51:7f:ce:
a9:99:87:3f:27:6c:7e:70:df:72:c9:e3:a2:a9:aa:
d0:62:35:93:b6:f9:43:2f:00:39:43:dd:4a:ee:f1:
f7:f2:7d:c8:de:ac:8a:44:d6:c9:c9:d4:d7:53:2b:
2b:f0:75:f2:62:88:74:a8:22:f4:66:b9:8e:11:8b:
d3:d9:11:be:55:74:1b:4d:bc:9a:3b:d5:3a:6d:e4:
d8:9a:00:2f:a9:6a:eb:6e:e1:ea:c9:b5:63:64:6f:
a8:ce:a0:3e:e7:c2:42:47:a2:2a:cc:f1:13:f2:45:
7d:e0:8a:01:fb:f6:3c:68:b7:85:55:56:31:d1:8c:
7d:0d:a4:5d:68:05:d3:e6:cc:10:f0:69:dd:a0:74:
77:e5:39:29:b0:16:77:7d:9c:b1:bc:54:8c:85:a3:
af:6d:61:2d:98:53:2f:91:a6:d9:dd:22:49:2f:c4:
ef:66:23:76:89:26:df:71:77:20:01:7e:1c:d4:c9:
94:e2:46:f2:1c:62:63:ab:20:09:7d:c5:a8:4d:7b:
b7:a6:91:4c:30:38:3a:79:99:9b:02:57:eb:01:6c:
6b:2a:21:54:5a:20:09:b2:d4:df:e9:ba:aa:44:39:
a6:b5:9f:c2:1d:b6:5c:a4:1b:25:d7:90:42:da:a4:
5d:ad:5b:63:48:a1:c8:07:9b:dc:c0:15:1b:63:ca:
b8:60:97:a8:cf:e4:ca:ce:b2:fb:44:53:03:91:f8:
d3:75:f5:57:d9:62:3a:af:da:c5:22:ce:77:f1:b5:
68:bd:39:bd:a7:2c:17:cf:5b:e1:78:a2:91:b1:18:
5d:da:e0:ca:d2:1a:60:01:31:22:81:c9:8d:23:98:
ea:97:15:48:99:90:9b:bd:ae:32:e3:ff:fb:74:cc:
f3:37:86:81:0b:d9:1e:48:90:d6:d5:94:d8:5f:6c:
fa:e7:76:f4:af:8d:bd:e1:15:3e:97:5f:0b:20:d3:
6f:2d:8c:17:67:37:b8:f5:e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
4A:C7:C3:EE:7F:05:6E:78:3D:2D:35:57:05:87:87:8A:9D:FD:AD:8B
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:exchange2016.hanovic.com, DNS:hanovic.com, DNS:mail.hanovic.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Dec 7 16:42:48.953 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:48:F2:B2:C7:A5:DE:CC:44:2A:2F:66:39:
43:39:BB:3D:23:04:4B:CB:A9:92:CF:92:EA:46:CB:CA:
95:08:8F:F0:02:21:00:B4:35:E2:FA:3F:20:E6:9C:68:
5E:24:2A:9C:10:89:63:51:35:F8:0F:F5:15:B7:0B:3E:
96:68:10:C3:E7:99:65
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Dec 7 16:42:48.993 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:5F:04:0E:D0:01:45:C0:E7:30:BB:B7:1D:
21:30:4F:4C:F7:CF:1D:2A:9E:92:05:EA:DF:61:54:00:
30:49:AB:B6:02:20:5D:6A:E8:6D:A6:82:9D:E0:01:E2:
51:AA:A0:6D:CC:56:07:57:14:FB:66:89:7A:44:C3:73:
F5:16:92:9E:96:57
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
2a:e1:cc:45:b0:a2:fc:8f:ee:8f:7b:8e:01:fe:18:b3:59:10:
c5:0c:af:13:09:77:05:43:d5:c6:cf:a5:5e:21:8b:0a:03:18:
af:1a:f3:ac:85:09:51:d2:80:f8:d3:6f:b8:92:01:33:69:7e:
a8:ba:fc:56:97:6f:31:28:94:71:fd:c6:e8:f2:a3:09:a3:9d:
4d:01:ec:e4:a7:8a:30:74:91:79:02:1e:35:4e:c2:2c:bf:7b:
66:81:f5:bf:90:f0:f9:44:06:cd:00:00:45:14:d3:f0:d5:14:
50:43:7c:87:4f:54:32:82:f5:4c:86:8a:2f:fa:52:4a:c3:3e:
ee:e6:87:e0:a1:2a:a5:c2:aa:bd:ba:32:cd:7a:39:c0:59:9b:
bb:8d:4a:20:e3:7a:c1:90:82:6b:14:a9:47:2c:04:e2:f5:49:
33:4a:ee:86:7f:bd:4a:0e:df:89:a0:88:d9:5f:a9:a1:59:0e:
78:10:54:5d:3c:3e:fc:2a:46:3b:d1:2f:bc:52:4d:42:d6:58:
aa:2f:51:ac:55:ae:59:41:52:e1:33:27:46:0d:9d:bb:d1:65:
38:f5:0c:0b:5c:5d:3e:e7:c5:80:fd:bc:3e:74:00:c3:13:92:
4a:87:e7:1e:d9:10:75:6c:4a:6e:a9:55:cb:f4:65:77:ba:9d:
5f:c9:80:21
-40809136 | 2025-01-12T20:16:19.014180
143 /
tcp
* OK The Microsoft Exchange IMAP4 service is ready.
* CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS MOVE ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+
A001 OK CAPABILITY completed.
* ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.1")
A002 OK ID completed
A003 BAD Command Error. 12
* BYE Microsoft Exchange Server 2016 IMAP4 server signing off.
A004 OK LOGOUT completed.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:de:ee:4c:82:3e:bd:b5:a2:27:15:7c:7f:53:54:aa:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R10
Validity
Not Before: Dec 7 15:44:18 2024 GMT
Not After : Mar 7 15:44:17 2025 GMT
Subject: CN=exchange2016.hanovic.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:e2:ac:3d:6f:04:f0:71:04:cf:1c:5e:51:7f:ce:
a9:99:87:3f:27:6c:7e:70:df:72:c9:e3:a2:a9:aa:
d0:62:35:93:b6:f9:43:2f:00:39:43:dd:4a:ee:f1:
f7:f2:7d:c8:de:ac:8a:44:d6:c9:c9:d4:d7:53:2b:
2b:f0:75:f2:62:88:74:a8:22:f4:66:b9:8e:11:8b:
d3:d9:11:be:55:74:1b:4d:bc:9a:3b:d5:3a:6d:e4:
d8:9a:00:2f:a9:6a:eb:6e:e1:ea:c9:b5:63:64:6f:
a8:ce:a0:3e:e7:c2:42:47:a2:2a:cc:f1:13:f2:45:
7d:e0:8a:01:fb:f6:3c:68:b7:85:55:56:31:d1:8c:
7d:0d:a4:5d:68:05:d3:e6:cc:10:f0:69:dd:a0:74:
77:e5:39:29:b0:16:77:7d:9c:b1:bc:54:8c:85:a3:
af:6d:61:2d:98:53:2f:91:a6:d9:dd:22:49:2f:c4:
ef:66:23:76:89:26:df:71:77:20:01:7e:1c:d4:c9:
94:e2:46:f2:1c:62:63:ab:20:09:7d:c5:a8:4d:7b:
b7:a6:91:4c:30:38:3a:79:99:9b:02:57:eb:01:6c:
6b:2a:21:54:5a:20:09:b2:d4:df:e9:ba:aa:44:39:
a6:b5:9f:c2:1d:b6:5c:a4:1b:25:d7:90:42:da:a4:
5d:ad:5b:63:48:a1:c8:07:9b:dc:c0:15:1b:63:ca:
b8:60:97:a8:cf:e4:ca:ce:b2:fb:44:53:03:91:f8:
d3:75:f5:57:d9:62:3a:af:da:c5:22:ce:77:f1:b5:
68:bd:39:bd:a7:2c:17:cf:5b:e1:78:a2:91:b1:18:
5d:da:e0:ca:d2:1a:60:01:31:22:81:c9:8d:23:98:
ea:97:15:48:99:90:9b:bd:ae:32:e3:ff:fb:74:cc:
f3:37:86:81:0b:d9:1e:48:90:d6:d5:94:d8:5f:6c:
fa:e7:76:f4:af:8d:bd:e1:15:3e:97:5f:0b:20:d3:
6f:2d:8c:17:67:37:b8:f5:e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
4A:C7:C3:EE:7F:05:6E:78:3D:2D:35:57:05:87:87:8A:9D:FD:AD:8B
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:exchange2016.hanovic.com, DNS:hanovic.com, DNS:mail.hanovic.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Dec 7 16:42:48.953 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:48:F2:B2:C7:A5:DE:CC:44:2A:2F:66:39:
43:39:BB:3D:23:04:4B:CB:A9:92:CF:92:EA:46:CB:CA:
95:08:8F:F0:02:21:00:B4:35:E2:FA:3F:20:E6:9C:68:
5E:24:2A:9C:10:89:63:51:35:F8:0F:F5:15:B7:0B:3E:
96:68:10:C3:E7:99:65
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Dec 7 16:42:48.993 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:5F:04:0E:D0:01:45:C0:E7:30:BB:B7:1D:
21:30:4F:4C:F7:CF:1D:2A:9E:92:05:EA:DF:61:54:00:
30:49:AB:B6:02:20:5D:6A:E8:6D:A6:82:9D:E0:01:E2:
51:AA:A0:6D:CC:56:07:57:14:FB:66:89:7A:44:C3:73:
F5:16:92:9E:96:57
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
2a:e1:cc:45:b0:a2:fc:8f:ee:8f:7b:8e:01:fe:18:b3:59:10:
c5:0c:af:13:09:77:05:43:d5:c6:cf:a5:5e:21:8b:0a:03:18:
af:1a:f3:ac:85:09:51:d2:80:f8:d3:6f:b8:92:01:33:69:7e:
a8:ba:fc:56:97:6f:31:28:94:71:fd:c6:e8:f2:a3:09:a3:9d:
4d:01:ec:e4:a7:8a:30:74:91:79:02:1e:35:4e:c2:2c:bf:7b:
66:81:f5:bf:90:f0:f9:44:06:cd:00:00:45:14:d3:f0:d5:14:
50:43:7c:87:4f:54:32:82:f5:4c:86:8a:2f:fa:52:4a:c3:3e:
ee:e6:87:e0:a1:2a:a5:c2:aa:bd:ba:32:cd:7a:39:c0:59:9b:
bb:8d:4a:20:e3:7a:c1:90:82:6b:14:a9:47:2c:04:e2:f5:49:
33:4a:ee:86:7f:bd:4a:0e:df:89:a0:88:d9:5f:a9:a1:59:0e:
78:10:54:5d:3c:3e:fc:2a:46:3b:d1:2f:bc:52:4d:42:d6:58:
aa:2f:51:ac:55:ae:59:41:52:e1:33:27:46:0d:9d:bb:d1:65:
38:f5:0c:0b:5c:5d:3e:e7:c5:80:fd:bc:3e:74:00:c3:13:92:
4a:87:e7:1e:d9:10:75:6c:4a:6e:a9:55:cb:f4:65:77:ba:9d:
5f:c9:80:21
705131946 | 2025-01-04T19:20:15.662881
443 /
tcp
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
request-id: 30a48835-2c45-48ec-9a7d-337697a4c709
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 04 Jan 2025 19:17:25 GMT
Content-Length: 58706
Microsoft Exchange:
Name: Exchange Server 2016 CU23 Apr24HU
Build Number: 15.1.2507.39
Build Date: April 23, 2024
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ce:0c:0d:8e:84:98:c1:ce:b4:d3:fb:c6:2b:a6:5a:c2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R10
Validity
Not Before: Dec 7 15:42:54 2024 GMT
Not After : Mar 7 15:42:53 2025 GMT
Subject: CN=hanovic.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:b8:40:38:53:a5:dc:45:af:4c:e7:d3:d3:cb:09:
12:9b:0d:e5:a9:f6:ec:ba:b0:b0:29:f4:b2:7f:96:
8f:21:5b:3a:f0:fa:47:92:43:b1:5b:f5:73:3a:e4:
d9:af:7a:56:bb:66:e8:ee:e9:b6:31:49:95:2e:a8:
87:47:4c:8b:a4:85:ab:3e:43:b4:46:80:cb:6e:5f:
25:e6:9e:bf:ca:82:b8:04:c9:db:6e:5a:41:55:b0:
f2:b8:f0:08:51:ec:ed:fe:28:43:ee:4f:92:91:b9:
7d:91:ed:f7:9a:d4:cf:2b:a3:7c:5c:f4:4f:da:d1:
c7:0f:a4:ac:a7:99:a5:f1:17:82:05:8f:4d:d2:69:
dc:39:e3:71:ab:80:39:b0:a8:01:8d:69:cc:7d:97:
80:bb:7c:62:e2:51:66:fd:90:28:32:1a:d0:f6:41:
b0:6a:55:cb:83:2d:01:c1:86:3d:c4:a3:b3:bb:5a:
30:d1:8e:0f:d0:47:d7:51:ff:1c:6d:67:c4:4d:e6:
06:e0:04:02:5e:1a:d1:6f:79:00:6f:cf:0c:24:ac:
14:0d:cf:07:d0:a5:81:b7:5c:dd:1d:5a:33:80:ca:
69:fb:0f:0b:66:80:87:ed:90:b6:e2:12:be:4d:52:
ae:c5:56:45:ea:af:4d:b0:56:39:f9:14:48:6a:94:
d9:1b:15:a1:8e:c9:b8:60:20:ae:e3:4f:5a:d9:5d:
14:0c:ba:7f:bb:38:1a:c8:d8:ff:01:f3:c1:7f:04:
27:a6:ee:93:60:3b:79:8a:6e:c9:64:c9:3a:5a:30:
6f:8b:9a:42:7c:4f:e0:cd:b5:78:84:11:09:07:d0:
de:b0:2a:b7:4d:d8:7c:03:bc:d5:b4:b8:19:8e:36:
ee:76:9e:40:73:b4:1e:f7:f5:3f:8c:dd:d9:d5:3f:
ab:9c:74:b2:44:dc:52:8d:c3:be:61:4e:4c:e5:cd:
b9:f1:12:3c:aa:67:54:60:fb:bf:45:3e:0f:53:21:
3f:33:bf:94:2a:ec:8d:f5:6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
AF:B7:83:08:EC:25:17:DE:E7:58:D7:6E:C3:B6:43:7F:06:C9:21:68
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:hanovic.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Dec 7 16:41:25.007 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:08:2B:15:A6:DE:9B:9C:60:AC:4D:7B:FC:
3F:DA:95:D1:C4:B1:D9:B8:57:10:DE:EA:F3:66:35:F5:
89:B7:A5:66:02:20:1D:B4:6A:1C:23:ED:66:C7:43:77:
6E:37:BE:39:86:A3:D4:80:41:5D:4C:7A:EE:2C:CE:29:
57:39:2D:D3:78:BE
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
Timestamp : Dec 7 16:41:25.164 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:5D:18:8B:62:D8:46:74:10:F2:D1:14:62:
00:3D:A0:DF:B6:41:04:F9:A3:8E:FD:66:7E:CB:8D:C7:
4D:3B:C7:00:02:21:00:AB:7A:34:74:07:1B:63:EE:3F:
4C:57:61:84:49:53:98:FB:C7:D1:D1:AA:D0:B4:43:7F:
5A:7D:0B:A7:18:56:7B
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
34:27:26:ca:6c:ab:e7:cf:3e:37:77:0b:3f:9c:05:e1:6b:01:
a8:1b:0f:3f:8c:d5:1d:f7:63:06:d0:70:24:9a:86:c7:a3:90:
c9:54:ef:2f:a3:e4:a9:6f:b9:45:28:1e:3f:2e:80:ce:f0:60:
e7:19:ef:f6:e7:63:16:06:e4:77:b6:0b:ef:b5:63:37:67:e4:
51:a9:93:4a:e2:78:d7:dc:ba:4d:35:a6:bf:1d:02:22:02:ee:
59:df:8e:05:41:4b:c1:32:a4:f0:42:9b:51:56:f1:d1:87:81:
62:da:07:13:74:9c:0c:c2:81:59:ae:d6:c1:8d:cd:3f:51:73:
6c:a9:f1:42:79:a4:a6:1d:54:56:55:6c:68:8a:4b:6c:51:5e:
a8:65:64:ba:55:d5:ed:80:d6:15:3f:4d:69:ea:e7:db:d0:b2:
56:de:71:7b:8c:4c:55:72:b6:f9:2f:ca:44:ea:6f:0d:00:c1:
5a:ea:d8:cd:95:3a:ff:6d:eb:37:1d:1f:ce:ec:19:2c:52:13:
91:a6:e0:82:46:b3:fc:2a:0d:a5:8d:c6:d1:21:e8:f4:d7:71:
34:b8:5a:da:2c:19:72:9c:71:cf:64:50:9e:77:fa:5a:42:b9:
89:2a:e3:3f:ff:dc:28:02:6a:24:0b:ae:d9:97:6f:c8:55:c3:
05:fb:88:d6
547446009 | 2025-01-12T17:18:19.253876
465 /
tcp
220 Exchange2016.hanovic.com Microsoft ESMTP MAIL Service ready at Mon, 13 Jan 2025 01:15:35 +0800\r\n
2082160561 | 2025-01-13T10:24:29.505486
587 /
tcp
220 Exchange2016.hanovic.com Microsoft ESMTP MAIL Service ready at Mon, 13 Jan 2025 18:21:36 +0800
250-Exchange2016.hanovic.com Hello [224.251.49.25]
250-SIZE 52428800
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-X-ANONYMOUSTLS
250-AUTH GSSAPI NTLM
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250 XRDST
SMTP NTLM Info:
OS: Windows 10 (version 1607)/Windows Server 2016 (version 1607)
OS Build: 10.0.14393
Target Name: HANOVIC
NetBIOS Domain Name: HANOVIC
NetBIOS Computer Name: EXCHANGE2016
DNS Domain Name: hanovic.com
DNS Tree Name: hanovic.com
FQDN: Exchange2016.hanovic.com
57536076 | 2025-01-16T04:14:35.139160
993 /
tcp
* OK The Microsoft Exchange IMAP4 service is ready.
* CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=NTLM AUTH=GSSAPI SASL-IR UIDPLUS MOVE ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+
A001 OK CAPABILITY completed.
* ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.1")
A002 OK ID completed
A003 BAD Command Error. 12
* BYE Microsoft Exchange Server 2016 IMAP4 server signing off.
A004 OK LOGOUT completed.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:de:ee:4c:82:3e:bd:b5:a2:27:15:7c:7f:53:54:aa:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R10
Validity
Not Before: Dec 7 15:44:18 2024 GMT
Not After : Mar 7 15:44:17 2025 GMT
Subject: CN=exchange2016.hanovic.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:e2:ac:3d:6f:04:f0:71:04:cf:1c:5e:51:7f:ce:
a9:99:87:3f:27:6c:7e:70:df:72:c9:e3:a2:a9:aa:
d0:62:35:93:b6:f9:43:2f:00:39:43:dd:4a:ee:f1:
f7:f2:7d:c8:de:ac:8a:44:d6:c9:c9:d4:d7:53:2b:
2b:f0:75:f2:62:88:74:a8:22:f4:66:b9:8e:11:8b:
d3:d9:11:be:55:74:1b:4d:bc:9a:3b:d5:3a:6d:e4:
d8:9a:00:2f:a9:6a:eb:6e:e1:ea:c9:b5:63:64:6f:
a8:ce:a0:3e:e7:c2:42:47:a2:2a:cc:f1:13:f2:45:
7d:e0:8a:01:fb:f6:3c:68:b7:85:55:56:31:d1:8c:
7d:0d:a4:5d:68:05:d3:e6:cc:10:f0:69:dd:a0:74:
77:e5:39:29:b0:16:77:7d:9c:b1:bc:54:8c:85:a3:
af:6d:61:2d:98:53:2f:91:a6:d9:dd:22:49:2f:c4:
ef:66:23:76:89:26:df:71:77:20:01:7e:1c:d4:c9:
94:e2:46:f2:1c:62:63:ab:20:09:7d:c5:a8:4d:7b:
b7:a6:91:4c:30:38:3a:79:99:9b:02:57:eb:01:6c:
6b:2a:21:54:5a:20:09:b2:d4:df:e9:ba:aa:44:39:
a6:b5:9f:c2:1d:b6:5c:a4:1b:25:d7:90:42:da:a4:
5d:ad:5b:63:48:a1:c8:07:9b:dc:c0:15:1b:63:ca:
b8:60:97:a8:cf:e4:ca:ce:b2:fb:44:53:03:91:f8:
d3:75:f5:57:d9:62:3a:af:da:c5:22:ce:77:f1:b5:
68:bd:39:bd:a7:2c:17:cf:5b:e1:78:a2:91:b1:18:
5d:da:e0:ca:d2:1a:60:01:31:22:81:c9:8d:23:98:
ea:97:15:48:99:90:9b:bd:ae:32:e3:ff:fb:74:cc:
f3:37:86:81:0b:d9:1e:48:90:d6:d5:94:d8:5f:6c:
fa:e7:76:f4:af:8d:bd:e1:15:3e:97:5f:0b:20:d3:
6f:2d:8c:17:67:37:b8:f5:e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
4A:C7:C3:EE:7F:05:6E:78:3D:2D:35:57:05:87:87:8A:9D:FD:AD:8B
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:exchange2016.hanovic.com, DNS:hanovic.com, DNS:mail.hanovic.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Dec 7 16:42:48.953 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:48:F2:B2:C7:A5:DE:CC:44:2A:2F:66:39:
43:39:BB:3D:23:04:4B:CB:A9:92:CF:92:EA:46:CB:CA:
95:08:8F:F0:02:21:00:B4:35:E2:FA:3F:20:E6:9C:68:
5E:24:2A:9C:10:89:63:51:35:F8:0F:F5:15:B7:0B:3E:
96:68:10:C3:E7:99:65
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Dec 7 16:42:48.993 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:5F:04:0E:D0:01:45:C0:E7:30:BB:B7:1D:
21:30:4F:4C:F7:CF:1D:2A:9E:92:05:EA:DF:61:54:00:
30:49:AB:B6:02:20:5D:6A:E8:6D:A6:82:9D:E0:01:E2:
51:AA:A0:6D:CC:56:07:57:14:FB:66:89:7A:44:C3:73:
F5:16:92:9E:96:57
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
2a:e1:cc:45:b0:a2:fc:8f:ee:8f:7b:8e:01:fe:18:b3:59:10:
c5:0c:af:13:09:77:05:43:d5:c6:cf:a5:5e:21:8b:0a:03:18:
af:1a:f3:ac:85:09:51:d2:80:f8:d3:6f:b8:92:01:33:69:7e:
a8:ba:fc:56:97:6f:31:28:94:71:fd:c6:e8:f2:a3:09:a3:9d:
4d:01:ec:e4:a7:8a:30:74:91:79:02:1e:35:4e:c2:2c:bf:7b:
66:81:f5:bf:90:f0:f9:44:06:cd:00:00:45:14:d3:f0:d5:14:
50:43:7c:87:4f:54:32:82:f5:4c:86:8a:2f:fa:52:4a:c3:3e:
ee:e6:87:e0:a1:2a:a5:c2:aa:bd:ba:32:cd:7a:39:c0:59:9b:
bb:8d:4a:20:e3:7a:c1:90:82:6b:14:a9:47:2c:04:e2:f5:49:
33:4a:ee:86:7f:bd:4a:0e:df:89:a0:88:d9:5f:a9:a1:59:0e:
78:10:54:5d:3c:3e:fc:2a:46:3b:d1:2f:bc:52:4d:42:d6:58:
aa:2f:51:ac:55:ae:59:41:52:e1:33:27:46:0d:9d:bb:d1:65:
38:f5:0c:0b:5c:5d:3e:e7:c5:80:fd:bc:3e:74:00:c3:13:92:
4a:87:e7:1e:d9:10:75:6c:4a:6e:a9:55:cb:f4:65:77:ba:9d:
5f:c9:80:21
1107593961 | 2025-01-07T10:58:28.973881
995 /
tcp
+OK The Microsoft Exchange POP3 service is ready.
+OK
TOP
UIDL
SASL PLAIN
USER
.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:de:ee:4c:82:3e:bd:b5:a2:27:15:7c:7f:53:54:aa:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R10
Validity
Not Before: Dec 7 15:44:18 2024 GMT
Not After : Mar 7 15:44:17 2025 GMT
Subject: CN=exchange2016.hanovic.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:e2:ac:3d:6f:04:f0:71:04:cf:1c:5e:51:7f:ce:
a9:99:87:3f:27:6c:7e:70:df:72:c9:e3:a2:a9:aa:
d0:62:35:93:b6:f9:43:2f:00:39:43:dd:4a:ee:f1:
f7:f2:7d:c8:de:ac:8a:44:d6:c9:c9:d4:d7:53:2b:
2b:f0:75:f2:62:88:74:a8:22:f4:66:b9:8e:11:8b:
d3:d9:11:be:55:74:1b:4d:bc:9a:3b:d5:3a:6d:e4:
d8:9a:00:2f:a9:6a:eb:6e:e1:ea:c9:b5:63:64:6f:
a8:ce:a0:3e:e7:c2:42:47:a2:2a:cc:f1:13:f2:45:
7d:e0:8a:01:fb:f6:3c:68:b7:85:55:56:31:d1:8c:
7d:0d:a4:5d:68:05:d3:e6:cc:10:f0:69:dd:a0:74:
77:e5:39:29:b0:16:77:7d:9c:b1:bc:54:8c:85:a3:
af:6d:61:2d:98:53:2f:91:a6:d9:dd:22:49:2f:c4:
ef:66:23:76:89:26:df:71:77:20:01:7e:1c:d4:c9:
94:e2:46:f2:1c:62:63:ab:20:09:7d:c5:a8:4d:7b:
b7:a6:91:4c:30:38:3a:79:99:9b:02:57:eb:01:6c:
6b:2a:21:54:5a:20:09:b2:d4:df:e9:ba:aa:44:39:
a6:b5:9f:c2:1d:b6:5c:a4:1b:25:d7:90:42:da:a4:
5d:ad:5b:63:48:a1:c8:07:9b:dc:c0:15:1b:63:ca:
b8:60:97:a8:cf:e4:ca:ce:b2:fb:44:53:03:91:f8:
d3:75:f5:57:d9:62:3a:af:da:c5:22:ce:77:f1:b5:
68:bd:39:bd:a7:2c:17:cf:5b:e1:78:a2:91:b1:18:
5d:da:e0:ca:d2:1a:60:01:31:22:81:c9:8d:23:98:
ea:97:15:48:99:90:9b:bd:ae:32:e3:ff:fb:74:cc:
f3:37:86:81:0b:d9:1e:48:90:d6:d5:94:d8:5f:6c:
fa:e7:76:f4:af:8d:bd:e1:15:3e:97:5f:0b:20:d3:
6f:2d:8c:17:67:37:b8:f5:e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
4A:C7:C3:EE:7F:05:6E:78:3D:2D:35:57:05:87:87:8A:9D:FD:AD:8B
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:exchange2016.hanovic.com, DNS:hanovic.com, DNS:mail.hanovic.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Dec 7 16:42:48.953 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:48:F2:B2:C7:A5:DE:CC:44:2A:2F:66:39:
43:39:BB:3D:23:04:4B:CB:A9:92:CF:92:EA:46:CB:CA:
95:08:8F:F0:02:21:00:B4:35:E2:FA:3F:20:E6:9C:68:
5E:24:2A:9C:10:89:63:51:35:F8:0F:F5:15:B7:0B:3E:
96:68:10:C3:E7:99:65
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Dec 7 16:42:48.993 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:5F:04:0E:D0:01:45:C0:E7:30:BB:B7:1D:
21:30:4F:4C:F7:CF:1D:2A:9E:92:05:EA:DF:61:54:00:
30:49:AB:B6:02:20:5D:6A:E8:6D:A6:82:9D:E0:01:E2:
51:AA:A0:6D:CC:56:07:57:14:FB:66:89:7A:44:C3:73:
F5:16:92:9E:96:57
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
2a:e1:cc:45:b0:a2:fc:8f:ee:8f:7b:8e:01:fe:18:b3:59:10:
c5:0c:af:13:09:77:05:43:d5:c6:cf:a5:5e:21:8b:0a:03:18:
af:1a:f3:ac:85:09:51:d2:80:f8:d3:6f:b8:92:01:33:69:7e:
a8:ba:fc:56:97:6f:31:28:94:71:fd:c6:e8:f2:a3:09:a3:9d:
4d:01:ec:e4:a7:8a:30:74:91:79:02:1e:35:4e:c2:2c:bf:7b:
66:81:f5:bf:90:f0:f9:44:06:cd:00:00:45:14:d3:f0:d5:14:
50:43:7c:87:4f:54:32:82:f5:4c:86:8a:2f:fa:52:4a:c3:3e:
ee:e6:87:e0:a1:2a:a5:c2:aa:bd:ba:32:cd:7a:39:c0:59:9b:
bb:8d:4a:20:e3:7a:c1:90:82:6b:14:a9:47:2c:04:e2:f5:49:
33:4a:ee:86:7f:bd:4a:0e:df:89:a0:88:d9:5f:a9:a1:59:0e:
78:10:54:5d:3c:3e:fc:2a:46:3b:d1:2f:bc:52:4d:42:d6:58:
aa:2f:51:ac:55:ae:59:41:52:e1:33:27:46:0d:9d:bb:d1:65:
38:f5:0c:0b:5c:5d:3e:e7:c5:80:fd:bc:3e:74:00:c3:13:92:
4a:87:e7:1e:d9:10:75:6c:4a:6e:a9:55:cb:f4:65:77:ba:9d:
5f:c9:80:21
-430728569 | 2024-12-26T15:17:40.503300
1701 /
udp
\xc8\x02\x00b\x00\x00\x00\x00\x00\x00\x00\x01\x80\x08\x00\x00\x00\x00\x00\x02\x80\x08\x00\x00\x00\x02\x01\x00\x80\n\x00\x00\x00\x03\x00\x00\x00\x01\x80\n\x00\x00\x00\x04\x00\x00\x00\x00\x00\x08\x00\x00\x00\x06\x00\x01\x80\x0c\x00\x00\x00\x07HK-201\x00\x0e\x00\x00\x00\x08MikroTik\x80\x08\x00\x00\x00\t\x00N\x80\x08\x00\x00\x00\n\x00\x04
-1538260461 | 2024-12-30T04:23:42.038584
2000 /
tcp
0 | 2025-01-05T05:25:27.754660
4443 /
tcp
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6715063550638736455 (0x5d30b2b8abfec447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=HK, ST=CW, L=CW, O=hanovic.com, CN=hanovic.com
Validity
Not Before: Mar 24 05:28:04 2023 GMT
Not After : Mar 21 05:28:04 2033 GMT
Subject: C=HK, ST=CW, L=CW, O=hanovic.com, CN=hanovic.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a9:82:d1:df:65:2f:dd:f8:a0:03:c9:7e:7a:d9:
49:3c:8b:e8:d5:25:80:9b:eb:e0:10:50:ab:b4:db:
6e:31:b1:5f:7a:42:7d:de:a7:5a:f7:ad:e1:0f:e1:
e3:d5:44:de:96:d9:48:b0:93:c4:cb:cd:95:67:e0:
b4:80:51:f1:5c:44:30:f8:77:58:98:e2:77:30:9e:
84:9f:8a:72:7a:c0:92:08:c4:7c:22:96:88:24:2b:
ed:00:f6:36:ff:48:a3:7e:f9:e5:c0:1f:00:3d:94:
24:24:f1:22:1a:18:d9:9e:33:2f:d5:9d:a8:15:63:
cf:3b:51:6f:12:9b:5f:5a:64:49:b5:09:3b:e0:e0:
d0:ec:e7:af:2c:46:2d:60:74:3a:b6:06:4f:ed:10:
3a:24:18:74:91:23:09:a8:6e:33:c2:64:fc:d2:c3:
e5:3d:26:9e:0b:53:5d:d1:02:c3:3c:86:58:66:fe:
75:b2:1f:16:de:29:c9:ac:80:70:cb:6b:0d:cc:1c:
fd:24:4a:8e:53:5c:3b:24:99:21:71:41:15:b3:c8:
56:9e:75:6d:ce:d6:d4:66:6e:6e:da:ae:7f:3a:52:
a1:1b:7a:a7:37:90:26:31:e0:9a:d8:d1:f9:09:86:
5e:ce:7e:e5:54:6e:c2:0b:c4:af:33:dc:da:56:30:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Digital Signature, Key Encipherment, Data Encipherment, Certificate Sign, CRL Sign
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Subject Key Identifier:
1F:43:54:C6:63:40:35:E6:DB:C1:80:93:64:07:9B:F8:9B:74:47:D8
X509v3 Subject Alternative Name:
DNS:hanovic.com
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
8d:cc:56:60:8b:d3:7b:45:47:20:18:de:6e:14:76:91:04:64:
fa:c3:9e:c3:02:6a:e2:18:12:0a:a9:fb:76:b7:6b:5d:38:09:
95:0a:84:83:af:6c:db:90:05:88:51:a8:2c:b9:b7:af:02:b8:
8a:eb:bf:1b:22:5b:f8:03:8a:32:28:fa:a3:ae:1c:4b:ab:8a:
a8:8d:b9:e5:b0:ac:85:f9:f8:c5:e6:09:f9:d8:64:07:41:d6:
63:96:21:9f:2d:0d:bb:a5:bc:26:c7:c0:ce:54:40:19:85:3d:
83:09:8c:8c:fb:c7:d5:aa:8f:f7:b7:c3:bb:db:e0:e1:75:ae:
75:b4:bd:6b:72:8b:10:7a:51:54:b2:91:14:72:26:3d:1a:69:
3c:13:a6:98:04:30:8e:55:09:41:9a:3c:a5:14:ce:a7:28:08:
6b:c2:32:6a:d5:25:85:94:2e:b6:76:06:39:df:4b:26:9a:38:
9a:c6:6e:af:ce:10:38:83:c1:72:8b:bf:e8:5c:29:5f:b4:82:
9a:92:90:96:0b:c0:86:31:57:46:7d:93:6c:0b:4c:19:c5:ba:
c3:4d:3b:1b:68:c1:0e:a6:15:90:02:48:b5:88:82:75:e2:44:
8f:c6:b8:94:27:38:8a:f5:75:fb:4b:54:8a:6a:dd:94:b6:d1:
32:ec:48:07
1497145140 | 2024-12-24T02:40:18.159313
8021 /
tcp
220 HK-201 FTP server (HANOVIC 7.17rc3) ready\r\n
-1127087533 | 2025-01-04T17:42:16.491258
8080 /
tcp
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Connection: Keep-Alive
Content-Length: 6521
Content-Type: text/html
Date: Sat, 04 Jan 2025 17:42:15 GMT
Expires: Sun, 04 Jan 2026 17:42:15 GMT
X-Frame-Options: sameorigin
1061578269 | 2025-01-15T18:58:17.327206
8291 /
tcp
MikroTik Winbox:
list:
advtool.jg: 7.17rc6
dhcp.jg: 7.17rc6
hotspot.jg: 7.17rc6
icons.png: 7.17rc6
icons24.png:
icons32.png:
ipv6.jg: 7.17rc6
ppp.jg: 7.17rc6
roteros.jg: 7.17rc6
secure.jg: 7.17rc6
wave2.jg: 7.17rc6
wlan6.jg: 7.17rc6
416094345 | 2025-01-06T02:23:43.591867
9000 /
tcp
\x00\x0e@%Vtf\x80\x1e\xabC\x00\x00\x00\x00\x00
