-455162815 | 2024-10-24T04:51:03.406232
389 /
tcp
LDAP:
NamingContexts: fn=ContactRoot
DefaultNamingContext: fn=ContactRoot
SupportedControl:
1.2.840.113556.1.4.319
1.2.840.113556.1.4.473
1.2.840.113556.1.4.474
-479138984 | 2024-10-29T18:14:32.127303
443 /
tcp
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: Close
Content-Length: 5492
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' *.kerio.com; img-src * http: https: data:;
Content-Type: text/html; charset=utf-8
Date: Tue, 29 Oct 2024 18:14:03 GMT
Expires: Wed, 4 Jun 1980 06:02:09 GMT
Pragma: no-cache
Server: Kerio Connect 9.4.1 patch 1
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-XSS-Protection: 1; mode=block
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fc:66:82:e3:0a:f4:da:e5:71:b7:84:ef:71:dd:66:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: Apr 15 00:00:00 2024 GMT
Not After : Apr 13 23:59:59 2025 GMT
Subject: CN=mail.avrn.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a0:10:fc:e3:b6:a9:54:ee:37:b7:37:47:86:f4:
e6:09:35:53:fa:07:60:13:8d:8f:3b:02:6e:fd:eb:
08:3a:b8:7e:d5:e0:d4:4b:f0:37:67:af:fd:82:a7:
cc:83:d6:53:b8:7e:d5:42:d9:fb:0f:a7:3f:38:43:
df:07:4c:14:08:84:42:1b:ab:39:ae:60:83:d4:fa:
01:e0:b3:1c:11:6b:e3:d5:5d:7e:5b:ba:38:40:eb:
07:f2:b7:ac:e0:a6:97:50:d6:22:0a:1c:ca:fd:09:
71:92:d7:29:90:f8:af:9e:f1:a0:f6:a4:9a:01:ea:
76:47:23:9c:59:23:03:e3:96:d8:08:66:c7:ee:77:
88:0a:d6:eb:ef:71:2f:26:ae:35:d3:18:f4:a2:7f:
b2:de:3c:87:65:38:3b:f5:1a:0c:c4:de:c8:c9:23:
cc:1a:bd:91:c2:b7:c8:56:43:60:19:df:25:60:56:
4a:b6:37:a0:d3:8a:6a:08:32:82:9f:cc:ac:02:5e:
14:bf:78:31:47:8e:0b:0c:c5:f1:e3:7c:e7:5e:80:
4c:16:62:cb:33:4c:e6:8d:e5:bc:4c:b7:9d:7e:fc:
47:8f:7f:b6:24:59:2e:7d:4c:f5:23:f0:23:47:3c:
f0:57:45:3c:b3:b3:98:1b:5a:cb:98:f3:81:80:a4:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
66:0F:3F:B5:42:78:59:D1:F7:8D:D2:33:57:98:6E:CC:85:6A:E2:74
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
X509v3 Subject Alternative Name:
DNS:mail.avrn.com, DNS:www.mail.avrn.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Apr 15 12:07:48.040 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:F4:1A:B6:77:68:A9:E2:CE:A5:32:F3:
92:E7:F0:08:7A:25:89:B0:C6:2A:47:13:4D:24:D2:D7:
4C:8B:06:AE:7B:02:20:4B:5A:5D:AD:3F:17:16:CA:09:
18:7C:B2:3F:D6:44:E9:1A:71:EC:82:3F:7A:C5:85:74:
6B:C9:E4:EE:C6:1D:25
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Apr 15 12:07:47.964 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:18:29:04:2B:6D:47:C0:8D:2B:D3:FA:1E:
84:E9:F5:15:A4:9D:40:24:48:AE:85:D2:42:BB:33:7F:
04:0C:3A:EB:02:21:00:E8:40:D8:B8:65:C6:D8:A2:A3:
16:71:9F:49:DA:F5:B8:F5:5F:56:C5:C5:22:C7:32:03:
C0:AE:42:01:7B:8B:6C
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Apr 15 12:07:47.932 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:97:4C:53:84:61:F4:6A:52:51:B4:EC:
F8:8C:FD:C0:38:D7:A6:CC:89:DA:FE:DE:27:55:AC:78:
5D:78:64:E9:0A:02:21:00:FA:ED:33:80:A5:2A:77:B3:
4B:41:B2:D3:2A:D1:9A:FD:38:C5:C5:E5:0A:38:A3:13:
03:73:1D:C4:1B:E1:4F:72
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
a3:c3:40:7d:67:a8:01:ff:e5:39:43:65:77:33:0a:f4:76:ca:
78:bf:72:4b:4f:e4:24:3b:1a:71:80:21:66:4b:51:65:e1:29:
4c:2a:41:54:c8:ed:d5:10:33:1b:d6:68:ad:1e:bf:e2:78:f7:
20:41:68:18:dd:34:cb:45:5b:bc:93:b0:ba:36:4a:8e:ad:ac:
3e:62:55:f1:d5:3f:50:27:65:1a:59:1c:fb:f7:e6:40:b5:c2:
b6:af:2d:8e:38:5c:ef:85:c9:a1:3f:e3:89:b5:8a:3f:c0:b0:
aa:60:51:b7:01:02:83:64:9b:f3:62:b7:16:86:6b:42:41:24:
d6:5c:43:ab:f1:b5:0a:aa:13:40:2a:45:d2:86:7d:a9:60:fb:
91:e0:23:b3:68:4e:dc:fe:17:fd:1f:85:72:3a:a9:da:21:32:
1e:04:b5:f1:d9:38:43:0c:86:b7:46:04:d1:27:28:e4:5a:ef:
a7:d0:68:3f:a3:4d:8c:43:29:47:3a:8b:6e:3f:40:ad:36:3b:
35:30:90:b0:6c:b0:f5:2c:84:ba:ef:55:9b:50:70:1b:6e:78:
e2:d4:cd:ae:f2:50:b3:03:4e:67:ed:74:ea:f7:38:89:37:02:
a0:c3:7e:3a:f9:95:99:5b:03:9d:26:c1:36:94:66:2c:1c:5d:
ff:97:5d:71
1779146579 | 2024-10-31T16:28:08.690450
587 /
tcp
220 mail.avrn.com Kerio Connect 9.4.1 patch 1 ESMTP ready
250-mail.avrn.com
250-AUTH CRAM-MD5 DIGEST-MD5 NTLM
250-SIZE 31457280
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-PIPELINING
250-ETRN
250-DSN
250 HELP
SMTP NTLM Info:
OS: Windows 8.1/Windows Server 2012 R2
OS Build: 6.3.9600
Target Name: KM-SRV
NetBIOS Domain Name: KM-SRV
NetBIOS Computer Name: KM-SRV
DNS Domain Name: KM-SRV
FQDN: KM-SRV
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fc:66:82:e3:0a:f4:da:e5:71:b7:84:ef:71:dd:66:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: Apr 15 00:00:00 2024 GMT
Not After : Apr 13 23:59:59 2025 GMT
Subject: CN=mail.avrn.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a0:10:fc:e3:b6:a9:54:ee:37:b7:37:47:86:f4:
e6:09:35:53:fa:07:60:13:8d:8f:3b:02:6e:fd:eb:
08:3a:b8:7e:d5:e0:d4:4b:f0:37:67:af:fd:82:a7:
cc:83:d6:53:b8:7e:d5:42:d9:fb:0f:a7:3f:38:43:
df:07:4c:14:08:84:42:1b:ab:39:ae:60:83:d4:fa:
01:e0:b3:1c:11:6b:e3:d5:5d:7e:5b:ba:38:40:eb:
07:f2:b7:ac:e0:a6:97:50:d6:22:0a:1c:ca:fd:09:
71:92:d7:29:90:f8:af:9e:f1:a0:f6:a4:9a:01:ea:
76:47:23:9c:59:23:03:e3:96:d8:08:66:c7:ee:77:
88:0a:d6:eb:ef:71:2f:26:ae:35:d3:18:f4:a2:7f:
b2:de:3c:87:65:38:3b:f5:1a:0c:c4:de:c8:c9:23:
cc:1a:bd:91:c2:b7:c8:56:43:60:19:df:25:60:56:
4a:b6:37:a0:d3:8a:6a:08:32:82:9f:cc:ac:02:5e:
14:bf:78:31:47:8e:0b:0c:c5:f1:e3:7c:e7:5e:80:
4c:16:62:cb:33:4c:e6:8d:e5:bc:4c:b7:9d:7e:fc:
47:8f:7f:b6:24:59:2e:7d:4c:f5:23:f0:23:47:3c:
f0:57:45:3c:b3:b3:98:1b:5a:cb:98:f3:81:80:a4:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
66:0F:3F:B5:42:78:59:D1:F7:8D:D2:33:57:98:6E:CC:85:6A:E2:74
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
X509v3 Subject Alternative Name:
DNS:mail.avrn.com, DNS:www.mail.avrn.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Apr 15 12:07:48.040 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:F4:1A:B6:77:68:A9:E2:CE:A5:32:F3:
92:E7:F0:08:7A:25:89:B0:C6:2A:47:13:4D:24:D2:D7:
4C:8B:06:AE:7B:02:20:4B:5A:5D:AD:3F:17:16:CA:09:
18:7C:B2:3F:D6:44:E9:1A:71:EC:82:3F:7A:C5:85:74:
6B:C9:E4:EE:C6:1D:25
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Apr 15 12:07:47.964 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:18:29:04:2B:6D:47:C0:8D:2B:D3:FA:1E:
84:E9:F5:15:A4:9D:40:24:48:AE:85:D2:42:BB:33:7F:
04:0C:3A:EB:02:21:00:E8:40:D8:B8:65:C6:D8:A2:A3:
16:71:9F:49:DA:F5:B8:F5:5F:56:C5:C5:22:C7:32:03:
C0:AE:42:01:7B:8B:6C
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Apr 15 12:07:47.932 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:97:4C:53:84:61:F4:6A:52:51:B4:EC:
F8:8C:FD:C0:38:D7:A6:CC:89:DA:FE:DE:27:55:AC:78:
5D:78:64:E9:0A:02:21:00:FA:ED:33:80:A5:2A:77:B3:
4B:41:B2:D3:2A:D1:9A:FD:38:C5:C5:E5:0A:38:A3:13:
03:73:1D:C4:1B:E1:4F:72
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
a3:c3:40:7d:67:a8:01:ff:e5:39:43:65:77:33:0a:f4:76:ca:
78:bf:72:4b:4f:e4:24:3b:1a:71:80:21:66:4b:51:65:e1:29:
4c:2a:41:54:c8:ed:d5:10:33:1b:d6:68:ad:1e:bf:e2:78:f7:
20:41:68:18:dd:34:cb:45:5b:bc:93:b0:ba:36:4a:8e:ad:ac:
3e:62:55:f1:d5:3f:50:27:65:1a:59:1c:fb:f7:e6:40:b5:c2:
b6:af:2d:8e:38:5c:ef:85:c9:a1:3f:e3:89:b5:8a:3f:c0:b0:
aa:60:51:b7:01:02:83:64:9b:f3:62:b7:16:86:6b:42:41:24:
d6:5c:43:ab:f1:b5:0a:aa:13:40:2a:45:d2:86:7d:a9:60:fb:
91:e0:23:b3:68:4e:dc:fe:17:fd:1f:85:72:3a:a9:da:21:32:
1e:04:b5:f1:d9:38:43:0c:86:b7:46:04:d1:27:28:e4:5a:ef:
a7:d0:68:3f:a3:4d:8c:43:29:47:3a:8b:6e:3f:40:ad:36:3b:
35:30:90:b0:6c:b0:f5:2c:84:ba:ef:55:9b:50:70:1b:6e:78:
e2:d4:cd:ae:f2:50:b3:03:4e:67:ed:74:ea:f7:38:89:37:02:
a0:c3:7e:3a:f9:95:99:5b:03:9d:26:c1:36:94:66:2c:1c:5d:
ff:97:5d:71
-455162815 | 2024-11-02T02:46:32.498516
636 /
tcp
LDAP:
NamingContexts: fn=ContactRoot
DefaultNamingContext: fn=ContactRoot
SupportedControl:
1.2.840.113556.1.4.319
1.2.840.113556.1.4.473
1.2.840.113556.1.4.474SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fc:66:82:e3:0a:f4:da:e5:71:b7:84:ef:71:dd:66:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: Apr 15 00:00:00 2024 GMT
Not After : Apr 13 23:59:59 2025 GMT
Subject: CN=mail.avrn.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a0:10:fc:e3:b6:a9:54:ee:37:b7:37:47:86:f4:
e6:09:35:53:fa:07:60:13:8d:8f:3b:02:6e:fd:eb:
08:3a:b8:7e:d5:e0:d4:4b:f0:37:67:af:fd:82:a7:
cc:83:d6:53:b8:7e:d5:42:d9:fb:0f:a7:3f:38:43:
df:07:4c:14:08:84:42:1b:ab:39:ae:60:83:d4:fa:
01:e0:b3:1c:11:6b:e3:d5:5d:7e:5b:ba:38:40:eb:
07:f2:b7:ac:e0:a6:97:50:d6:22:0a:1c:ca:fd:09:
71:92:d7:29:90:f8:af:9e:f1:a0:f6:a4:9a:01:ea:
76:47:23:9c:59:23:03:e3:96:d8:08:66:c7:ee:77:
88:0a:d6:eb:ef:71:2f:26:ae:35:d3:18:f4:a2:7f:
b2:de:3c:87:65:38:3b:f5:1a:0c:c4:de:c8:c9:23:
cc:1a:bd:91:c2:b7:c8:56:43:60:19:df:25:60:56:
4a:b6:37:a0:d3:8a:6a:08:32:82:9f:cc:ac:02:5e:
14:bf:78:31:47:8e:0b:0c:c5:f1:e3:7c:e7:5e:80:
4c:16:62:cb:33:4c:e6:8d:e5:bc:4c:b7:9d:7e:fc:
47:8f:7f:b6:24:59:2e:7d:4c:f5:23:f0:23:47:3c:
f0:57:45:3c:b3:b3:98:1b:5a:cb:98:f3:81:80:a4:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
66:0F:3F:B5:42:78:59:D1:F7:8D:D2:33:57:98:6E:CC:85:6A:E2:74
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
X509v3 Subject Alternative Name:
DNS:mail.avrn.com, DNS:www.mail.avrn.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Apr 15 12:07:48.040 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:F4:1A:B6:77:68:A9:E2:CE:A5:32:F3:
92:E7:F0:08:7A:25:89:B0:C6:2A:47:13:4D:24:D2:D7:
4C:8B:06:AE:7B:02:20:4B:5A:5D:AD:3F:17:16:CA:09:
18:7C:B2:3F:D6:44:E9:1A:71:EC:82:3F:7A:C5:85:74:
6B:C9:E4:EE:C6:1D:25
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Apr 15 12:07:47.964 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:18:29:04:2B:6D:47:C0:8D:2B:D3:FA:1E:
84:E9:F5:15:A4:9D:40:24:48:AE:85:D2:42:BB:33:7F:
04:0C:3A:EB:02:21:00:E8:40:D8:B8:65:C6:D8:A2:A3:
16:71:9F:49:DA:F5:B8:F5:5F:56:C5:C5:22:C7:32:03:
C0:AE:42:01:7B:8B:6C
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Apr 15 12:07:47.932 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:97:4C:53:84:61:F4:6A:52:51:B4:EC:
F8:8C:FD:C0:38:D7:A6:CC:89:DA:FE:DE:27:55:AC:78:
5D:78:64:E9:0A:02:21:00:FA:ED:33:80:A5:2A:77:B3:
4B:41:B2:D3:2A:D1:9A:FD:38:C5:C5:E5:0A:38:A3:13:
03:73:1D:C4:1B:E1:4F:72
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
a3:c3:40:7d:67:a8:01:ff:e5:39:43:65:77:33:0a:f4:76:ca:
78:bf:72:4b:4f:e4:24:3b:1a:71:80:21:66:4b:51:65:e1:29:
4c:2a:41:54:c8:ed:d5:10:33:1b:d6:68:ad:1e:bf:e2:78:f7:
20:41:68:18:dd:34:cb:45:5b:bc:93:b0:ba:36:4a:8e:ad:ac:
3e:62:55:f1:d5:3f:50:27:65:1a:59:1c:fb:f7:e6:40:b5:c2:
b6:af:2d:8e:38:5c:ef:85:c9:a1:3f:e3:89:b5:8a:3f:c0:b0:
aa:60:51:b7:01:02:83:64:9b:f3:62:b7:16:86:6b:42:41:24:
d6:5c:43:ab:f1:b5:0a:aa:13:40:2a:45:d2:86:7d:a9:60:fb:
91:e0:23:b3:68:4e:dc:fe:17:fd:1f:85:72:3a:a9:da:21:32:
1e:04:b5:f1:d9:38:43:0c:86:b7:46:04:d1:27:28:e4:5a:ef:
a7:d0:68:3f:a3:4d:8c:43:29:47:3a:8b:6e:3f:40:ad:36:3b:
35:30:90:b0:6c:b0:f5:2c:84:ba:ef:55:9b:50:70:1b:6e:78:
e2:d4:cd:ae:f2:50:b3:03:4e:67:ed:74:ea:f7:38:89:37:02:
a0:c3:7e:3a:f9:95:99:5b:03:9d:26:c1:36:94:66:2c:1c:5d:
ff:97:5d:71
1475644212 | 2024-11-03T13:56:50.118795
993 /
tcp
* OK Kerio Connect 9.4.1 patch 1 IMAP4rev1 server ready
* CAPABILITY IMAP4 IMAP4rev1 IDLE ACL LITERAL+ UIDPLUS QUOTA ID SORT ANNOTATE ANNOTATEMORE STATUS-COUNTERS UNSELECT LISTEXT NAMESPACE XLIST SPECIAL-USE XAPPLEPUSHSERVICE AUTH=CRAM-MD5 AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=NTLM
A001 OK CAPABILITY completed
* ID ("name" "Kerio Connect" "version" " 9.4.1 patch 1 ")
A002 OK ID completed
A003 BAD Unknown command 'unknowncmd'
* BYE logging out
A004 OK LOGOUT completed
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fc:66:82:e3:0a:f4:da:e5:71:b7:84:ef:71:dd:66:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: Apr 15 00:00:00 2024 GMT
Not After : Apr 13 23:59:59 2025 GMT
Subject: CN=mail.avrn.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a0:10:fc:e3:b6:a9:54:ee:37:b7:37:47:86:f4:
e6:09:35:53:fa:07:60:13:8d:8f:3b:02:6e:fd:eb:
08:3a:b8:7e:d5:e0:d4:4b:f0:37:67:af:fd:82:a7:
cc:83:d6:53:b8:7e:d5:42:d9:fb:0f:a7:3f:38:43:
df:07:4c:14:08:84:42:1b:ab:39:ae:60:83:d4:fa:
01:e0:b3:1c:11:6b:e3:d5:5d:7e:5b:ba:38:40:eb:
07:f2:b7:ac:e0:a6:97:50:d6:22:0a:1c:ca:fd:09:
71:92:d7:29:90:f8:af:9e:f1:a0:f6:a4:9a:01:ea:
76:47:23:9c:59:23:03:e3:96:d8:08:66:c7:ee:77:
88:0a:d6:eb:ef:71:2f:26:ae:35:d3:18:f4:a2:7f:
b2:de:3c:87:65:38:3b:f5:1a:0c:c4:de:c8:c9:23:
cc:1a:bd:91:c2:b7:c8:56:43:60:19:df:25:60:56:
4a:b6:37:a0:d3:8a:6a:08:32:82:9f:cc:ac:02:5e:
14:bf:78:31:47:8e:0b:0c:c5:f1:e3:7c:e7:5e:80:
4c:16:62:cb:33:4c:e6:8d:e5:bc:4c:b7:9d:7e:fc:
47:8f:7f:b6:24:59:2e:7d:4c:f5:23:f0:23:47:3c:
f0:57:45:3c:b3:b3:98:1b:5a:cb:98:f3:81:80:a4:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
66:0F:3F:B5:42:78:59:D1:F7:8D:D2:33:57:98:6E:CC:85:6A:E2:74
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
X509v3 Subject Alternative Name:
DNS:mail.avrn.com, DNS:www.mail.avrn.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Apr 15 12:07:48.040 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:F4:1A:B6:77:68:A9:E2:CE:A5:32:F3:
92:E7:F0:08:7A:25:89:B0:C6:2A:47:13:4D:24:D2:D7:
4C:8B:06:AE:7B:02:20:4B:5A:5D:AD:3F:17:16:CA:09:
18:7C:B2:3F:D6:44:E9:1A:71:EC:82:3F:7A:C5:85:74:
6B:C9:E4:EE:C6:1D:25
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Apr 15 12:07:47.964 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:18:29:04:2B:6D:47:C0:8D:2B:D3:FA:1E:
84:E9:F5:15:A4:9D:40:24:48:AE:85:D2:42:BB:33:7F:
04:0C:3A:EB:02:21:00:E8:40:D8:B8:65:C6:D8:A2:A3:
16:71:9F:49:DA:F5:B8:F5:5F:56:C5:C5:22:C7:32:03:
C0:AE:42:01:7B:8B:6C
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Apr 15 12:07:47.932 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:97:4C:53:84:61:F4:6A:52:51:B4:EC:
F8:8C:FD:C0:38:D7:A6:CC:89:DA:FE:DE:27:55:AC:78:
5D:78:64:E9:0A:02:21:00:FA:ED:33:80:A5:2A:77:B3:
4B:41:B2:D3:2A:D1:9A:FD:38:C5:C5:E5:0A:38:A3:13:
03:73:1D:C4:1B:E1:4F:72
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
a3:c3:40:7d:67:a8:01:ff:e5:39:43:65:77:33:0a:f4:76:ca:
78:bf:72:4b:4f:e4:24:3b:1a:71:80:21:66:4b:51:65:e1:29:
4c:2a:41:54:c8:ed:d5:10:33:1b:d6:68:ad:1e:bf:e2:78:f7:
20:41:68:18:dd:34:cb:45:5b:bc:93:b0:ba:36:4a:8e:ad:ac:
3e:62:55:f1:d5:3f:50:27:65:1a:59:1c:fb:f7:e6:40:b5:c2:
b6:af:2d:8e:38:5c:ef:85:c9:a1:3f:e3:89:b5:8a:3f:c0:b0:
aa:60:51:b7:01:02:83:64:9b:f3:62:b7:16:86:6b:42:41:24:
d6:5c:43:ab:f1:b5:0a:aa:13:40:2a:45:d2:86:7d:a9:60:fb:
91:e0:23:b3:68:4e:dc:fe:17:fd:1f:85:72:3a:a9:da:21:32:
1e:04:b5:f1:d9:38:43:0c:86:b7:46:04:d1:27:28:e4:5a:ef:
a7:d0:68:3f:a3:4d:8c:43:29:47:3a:8b:6e:3f:40:ad:36:3b:
35:30:90:b0:6c:b0:f5:2c:84:ba:ef:55:9b:50:70:1b:6e:78:
e2:d4:cd:ae:f2:50:b3:03:4e:67:ed:74:ea:f7:38:89:37:02:
a0:c3:7e:3a:f9:95:99:5b:03:9d:26:c1:36:94:66:2c:1c:5d:
ff:97:5d:71
-1839547321 | 2024-10-20T12:38:55.704104
4040 /
tcp
HTTP/1.1 301 Moved permanently
Connection: Close
Content-Length: 312
Content-Type: text/html
Date: Sun, 20 Oct 2024 12:38:37 GMT
Location: https://65.108.76.47:4040/
Server: Kerio Connect 9.4.1 patch 1
X-UA-Compatible: IE=edge
1489525118 | 2024-10-20T02:17:25.915239
5985 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sun, 20 Oct 2024 02:17:13 GMT
Connection: close
Content-Length: 315
WinRM NTLM Info:
OS: Windows Server 2012 R2
OS Build: 6.3.9600
Target Name: KM-SRV
NetBIOS Domain Name: KM-SRV
NetBIOS Computer Name: KM-SRV
DNS Domain Name: KM-SRV
FQDN: KM-SRV
