Hostnames |
mma-research1.com mail.mma-research1.com www.mma-research1.com |
Domains | mma-research1.com |
Country | United States |
City | Miami |
Organization | Aptum Technologies |
ISP | Aptum Technologies |
ASN | AS13768 |
Operating System | Windows |
-370734890 | 2024-09-07T12:25:00.28421321 / tcp
220 Microsoft FTP Service 530 User cannot log in. 214-The following commands are recognized (* ==>'s unimplemented). ABOR ACCT ADAT * ALLO APPE AUTH CCC CDUP CWD DELE ENC * EPRT EPSV FEAT HELP HOST LANG LIST MDTM MIC * MKD MODE NLST NOOP OPTS PASS PASV PBSZ PORT PROT PWD QUIT REIN REST RETR RMD RNFR RNTO SITE SIZE SMNT STAT STOR STOU STRU SYST TYPE USER XCUP XCWD XMKD XPWD XRMD 214 HELP command successful. 211-Extended features supported: LANG EN* UTF8 AUTH TLS;TLS-C;SSL;TLS-P; PBSZ PROT C;P; CCC HOST SIZE MDTM REST STREAM 211 END
Certificate: Data: Version: 3 (0x2) Serial Number: 11:a5:89:a7:e9:8b:3f:a8:4e:a3:66:d6:eb:80:69:44 Signature Algorithm: sha1WithRSAEncryption Issuer: CN=p4577787 Validity Not Before: Feb 23 16:06:31 2024 GMT Not After : Feb 23 00:00:00 2025 GMT Subject: CN=p4577787 Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b9:75:2b:7c:be:18:23:1f:37:11:88:e4:ab:62: 6c:d6:b7:ec:7c:ce:4d:3e:f2:d2:e7:a5:cd:04:d7: 32:e8:76:d0:5b:52:1d:95:77:8c:8a:36:f7:fe:fd: 82:a8:0a:dd:96:e6:04:4f:3f:17:65:bc:b3:03:c6: db:e9:14:d4:08:c6:e0:57:d6:c2:68:89:aa:ea:74: d4:f5:bf:50:a1:77:b2:bd:68:89:60:c0:51:b6:e5: d4:f6:be:cd:3f:b0:28:ce:91:51:03:83:ce:a5:fe: 3c:7b:42:05:b7:f2:4d:6e:e7:7b:5c:e5:04:9f:df: 5b:10:9c:64:2c:1c:6c:ff:ff:02:18:d5:f4:29:15: 75:6a:f6:4c:90:8f:b6:7a:60:6d:50:bb:9d:6e:34: 58:d9:0c:38:b5:03:7c:78:64:68:89:4d:41:1b:7f: c6:cc:4f:fa:5a:a6:1d:23:47:4c:4e:81:47:e6:92: ed:db:01:1d:a2:5c:3e:c7:9a:4e:2c:93:83:75:c3: bf:ab:ab:c7:5d:d3:46:72:05:8b:5d:1d:ff:c7:d6: a0:4d:08:ee:aa:b4:0d:cb:1c:f4:12:fd:7c:bc:d1: 4f:5e:07:bb:48:55:43:ac:53:9c:12:3e:60:0b:b1: e2:6b:bd:ad:5d:4a:23:59:d4:01:3d:b4:68:bc:50: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: Key Encipherment, Data Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication Signature Algorithm: sha1WithRSAEncryption Signature Value: 54:67:6f:b4:65:50:2c:53:41:32:8e:ad:a8:0d:41:bb:cb:42: d4:8a:ef:59:a4:73:30:d6:12:24:8a:b8:2f:f3:2b:f8:02:fc: 07:cc:d5:40:1d:53:df:60:cf:b0:96:cf:46:71:5a:43:d9:64: 26:6f:42:c5:83:ba:12:4f:c1:8c:77:0f:49:41:a8:86:ea:05: 96:77:6d:7f:0a:d9:3a:bb:17:8b:34:3e:88:36:26:b5:d8:91: 78:c9:ad:c5:d0:5a:9a:bc:a9:0d:84:58:ab:4e:6e:37:60:fd: fa:b0:30:3c:fd:c4:ef:0f:96:6d:f0:23:e3:57:a2:c2:17:8e: b0:c5:7b:2e:b0:20:25:30:b8:73:75:83:ce:49:99:66:8c:b0: 96:94:ac:1d:02:8c:c4:1a:29:f3:71:83:ee:07:21:7e:c4:17: 89:9d:9d:42:25:40:2c:d2:24:b9:66:80:69:53:2e:56:ab:88: 38:f2:2d:cf:f7:ff:76:3e:cf:7c:0b:a9:f8:e3:64:4d:0f:25: 67:d5:e4:52:5c:aa:ab:2e:8f:cd:a8:3c:75:d9:0e:35:84:88: 2e:ca:6e:41:8c:1d:12:bf:02:ee:d0:3c:28:d9:e8:52:58:90: 25:07:57:b3:c6:99:03:5e:3c:16:6d:4d:27:12:ac:dd:07:56: 1c:c7:db:07
1586951708 | 2024-09-21T15:08:13.55090925 / tcp
220 mail.mma-research1.com ESMTP MailEnable Service, Version: 10.47-- ready at 09/21/24 11:07:32 250-mma-research1.com [224.27.52.141], this server offers 5 extensions 250-AUTH LOGIN 250-SIZE 40960000 250-HELP 250-AUTH=LOGIN 250 STARTTLS
Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1a:99:e9:38:ae:78:53:b5:fe:cc:ca:ad:a1:1e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1 Validity Not Before: Nov 2 00:00:00 2023 GMT Not After : Nov 3 23:59:59 2024 GMT Subject: CN=mail.mma-research1.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:be:9e:c6:bc:2c:ab:9a:73:49:f0:9d:1c:01:f7: f8:9a:78:00:60:a3:3f:4c:77:ee:67:4b:c9:a6:bc: d1:01:9c:68:b2:84:4f:15:84:1a:b9:41:35:69:7e: d8:18:2c:e1:50:57:0c:f2:32:15:8e:3e:95:c7:df: fd:93:d4:5a:2f:7f:02:0a:e3:ba:02:d3:0d:91:fa: 1c:d4:ef:18:ca:41:3f:3a:8a:39:f1:ad:3e:76:46: ff:6f:03:b1:7f:17:be:40:d8:e9:3e:68:24:ac:06: 46:0e:b2:39:c8:ec:db:62:df:28:f7:ca:2c:5b:f3: bb:34:96:80:7e:a4:54:39:4a:fd:07:aa:3b:04:66: e0:b0:88:11:c0:02:55:1c:df:7b:2d:80:ea:2b:1f: 2a:19:d3:35:a3:c7:7c:b7:50:d0:18:3a:2b:11:48: 2e:27:36:1f:c3:a5:6c:bc:85:24:66:25:99:c8:0f: a9:7d:58:d4:1c:8e:53:a9:21:b1:a1:05:5e:2f:c8: bc:aa:60:e2:15:70:0c:cf:36:4c:99:71:c6:12:c1: fe:f0:7c:9a:3b:0b:14:29:de:64:7b:e5:a4:cc:a7: 31:38:c3:6f:f4:d1:d3:30:1d:8f:0c:77:f1:77:e1: e5:5f:d4:3a:1c:70:5c:29:94:b3:b0:1d:57:78:3a: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57 X509v3 Subject Key Identifier: 30:98:28:C9:F3:E1:4D:AE:BF:BE:B1:B0:9C:42:52:91:D9:BE:A7:05 X509v3 Subject Alternative Name: DNS:mail.mma-research1.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 CRL Distribution Points: Full Name: URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl Authority Information Access: OCSP - URI:http://status.geotrust.com CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt X509v3 Basic Constraints: critical CA:FALSE CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Nov 2 17:14:37.167 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DA:A1:00:ED:76:FC:88:B3:2B:AE:8C: 0B:EB:A3:DF:DF:D0:C5:43:48:C3:03:3E:BE:E6:AF:76: 58:F3:7D:8C:93:02:20:39:33:CE:51:FA:B2:0D:81:89: 21:4A:53:C6:D5:8E:D2:56:2B:A2:07:7D:2B:A1:CD:38: D3:0C:B6:AB:9B:DF:0F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB: 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73 Timestamp : Nov 2 17:14:37.200 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:0A:E6:AA:B5:D8:76:4F:D6:06:57:71:44: E9:27:11:21:CF:9F:E4:EA:0E:AD:F7:BA:8F:B2:4E:16: FD:EF:6A:68:02:21:00:C7:26:42:2E:E3:4D:CB:09:ED: 0E:18:39:2E:5A:48:77:B8:DE:93:64:17:3A:AB:D3:FC: 35:77:50:75:10:4B:3B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12: ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E Timestamp : Nov 2 17:14:37.271 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F7:9A:10:2D:B0:CD:08:50:E8:9A:43: 29:E1:0C:40:A7:2A:AA:FC:0C:A8:80:51:49:25:7C:D1: E5:E7:13:AD:5D:02:21:00:94:F4:18:63:1E:0B:3D:73: 80:55:78:75:07:95:07:81:50:14:4C:94:43:48:40:87: 02:A3:D5:F6:37:E9:F3:B7 Signature Algorithm: sha256WithRSAEncryption Signature Value: 86:5d:01:12:a0:20:20:d8:bd:09:57:a0:81:94:4c:fd:f6:3b: 62:12:ca:72:b1:45:4e:0b:80:0a:ef:cf:f4:ce:40:76:7a:4f: d5:ff:86:ad:df:94:b0:4e:05:3d:06:82:0d:3e:ba:60:30:ee: 6b:e1:c2:9d:cf:e1:07:01:0f:f2:62:65:03:16:27:e9:46:8e: b8:a7:4a:44:2d:58:97:c9:49:f2:f6:42:1a:e2:2f:97:a9:15: d0:72:6d:e9:3d:f5:24:90:6d:9f:f8:7f:36:90:35:34:32:ea: a9:40:c9:7b:57:e0:07:a7:24:5e:fc:97:32:fa:49:55:19:ec: ab:f3:3e:15:8c:0c:66:54:cf:82:a0:44:d1:92:9a:94:44:4a: 8f:68:a6:7f:8b:5d:23:8a:c5:3a:35:b0:44:ae:88:82:aa:2c: 13:42:c5:74:ef:19:c8:9b:5d:ff:86:9c:57:0e:87:41:ea:fc: c0:69:4f:c1:ad:99:ec:6d:d2:79:7a:e6:de:9d:6d:4c:0e:25: cd:70:a8:90:55:2b:52:8c:c1:19:3b:74:24:d7:50:f9:35:58: cb:b9:49:65:b5:44:c2:91:1a:01:37:0d:18:bc:9a:f3:2c:b4: f9:33:1d:ca:71:4b:7d:08:86:ec:89:77:cd:83:d5:20:29:90: 86:ff:a4:dc
-634181462 | 2024-09-20T17:27:06.03561280 / tcp
HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://69.0.166.130/ Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Fri, 20 Sep 2024 17:27:05 GMT Content-Length: 144
-471102630 | 2024-09-21T21:08:03.892253110 / tcp
+OK Welcome to MailEnable POP3 Server +OK Capability list follows TOP USER UIDL .
1048243426 | 2024-09-21T03:35:51.644203143 / tcp
* OK IMAP4rev1 server ready at 09/20/24 23:35:49 * CAPABILITY IMAP4rev1 IMAP4 AUTH=LOGIN AUTH=CRAM-MD5 IDLE CHILDREN UIDPLUS A001 OK CAPABILITY completed A002 BAD UNKNOWN Command A003 BAD UNKNOWN Command * BYE IMAP4rev1 server terminating connection A004 OK LOGOUT Initiated
1565499235 | 2024-09-21T20:26:24.949239443 / tcp
HTTP/1.1 302 Object moved Cache-Control: private Content-Type: text/html Location: http://www.mma-research.com Server: Microsoft-IIS/8.5 Set-Cookie: ASPSESSIONIDAEQCARSR=HCBEMIGDBHAIOJEAGLCDCAEM; secure; path=/ X-Powered-By: ASP.NET Date: Sat, 21 Sep 2024 20:26:23 GMT Content-Length: 148
Certificate: Data: Version: 3 (0x2) Serial Number: 06:fe:80:72:8a:e9:d4:5d:65:44:11:8e:5b:89:b7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1 Validity Not Before: Nov 2 00:00:00 2023 GMT Not After : Nov 3 23:59:59 2024 GMT Subject: CN=www.mma-research1.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:a8:0e:ec:5c:8f:11:36:aa:13:b8:01:fc:1e:95: 72:a5:a2:95:12:a9:99:61:16:4e:b4:bc:64:42:20: 30:9f:8b:22:a6:a1:84:47:bf:92:0b:38:7e:f7:47: d0:e7:2c:38:46:50:6a:4e:44:47:63:20:a8:ff:9c: e8:28:4d:5a:aa:70:6b:f7:9e:22:f7:3f:05:2c:55: 9a:9c:a7:19:fd:b8:e0:0b:9e:85:9b:b6:0e:a5:01: 42:b4:54:9a:b8:f4:52:d6:a6:92:c4:ec:d6:0a:e3: c7:01:15:7e:20:31:0b:f8:dc:54:f7:99:7e:cf:b5: 21:6f:09:5b:32:6f:4a:6f:61:41:56:ab:ef:b3:d4: 17:80:59:93:35:0f:47:d2:80:0a:37:95:5e:2d:14: d8:d0:d3:5f:e4:a1:b4:a2:99:44:58:3d:c8:4e:5c: 36:79:cd:36:ba:56:ea:98:5c:ef:92:94:99:5b:0e: 1c:33:5a:79:85:22:47:61:30:c4:d6:e3:f0:c7:58: bf:50:50:d1:b9:a1:a8:87:8c:b8:ce:5f:44:d1:40: a0:e5:62:0e:73:d1:31:ae:23:73:1f:d9:7d:87:d1: 74:b1:fd:f1:a5:ed:77:75:ca:60:37:1e:d1:e2:43: 63:03:1d:b8:1f:f5:7c:f9:5b:35:4f:32:24:38:4e: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57 X509v3 Subject Key Identifier: AA:43:0C:46:0A:BE:7D:20:09:62:F2:A3:B7:18:40:63:9D:2F:20:D0 X509v3 Subject Alternative Name: DNS:www.mma-research1.com, DNS:mma-research1.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 CRL Distribution Points: Full Name: URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl Authority Information Access: OCSP - URI:http://status.geotrust.com CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt X509v3 Basic Constraints: critical CA:FALSE CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Nov 2 17:15:37.833 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:3D:09:F8:BA:67:D9:C3:95:A3:14:63:D5: 13:9F:62:B9:7D:FE:34:DF:B1:6A:57:F9:CF:3A:2F:73: 60:50:CC:98:02:21:00:A8:23:79:2E:3F:4D:C7:4F:87: 18:7F:0D:63:20:5B:FC:00:42:EF:C3:E3:40:31:0F:8C: 4A:44:88:11:D7:24:0B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB: 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73 Timestamp : Nov 2 17:15:37.780 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:88:E9:21:AE:D8:77:2A:4A:58:DA:4E: 04:9B:37:D0:09:F3:3A:8F:D9:9E:55:97:F3:59:E6:AA: 49:04:38:08:A6:02:21:00:A6:D7:17:9A:86:5E:0F:97: 53:67:DB:74:6E:57:DE:1D:DA:E9:4C:1E:E4:EE:C4:4E: 55:73:C1:40:2D:B4:8F:2C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12: ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E Timestamp : Nov 2 17:15:37.829 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:1E:EF:59:FB:75:4D:0B:87:E0:FC:38:F3: EF:C6:9F:DC:8F:19:41:9B:F9:36:17:28:FA:A7:BA:48: 27:8D:1C:6B:02:20:50:B4:6C:D7:AA:B7:90:8B:74:CC: 99:E0:C8:7E:FB:3E:15:D6:82:C3:B1:97:AA:00:08:40: 12:5F:B4:93:55:5C Signature Algorithm: sha256WithRSAEncryption Signature Value: 60:e3:81:07:22:8f:5b:51:5a:2b:40:bc:3b:45:3d:a0:60:ad: ff:e3:17:9c:76:b7:da:33:cc:d2:d6:bd:d2:09:81:ee:3b:30: a1:49:ee:5c:6e:48:8f:b0:a6:a9:aa:86:dd:7b:7f:86:cf:d5: 09:3a:61:49:65:2b:0c:fd:46:f8:40:22:d7:76:00:32:1d:af: c5:a8:1f:be:96:b4:93:24:a5:3b:6a:33:ef:44:54:72:a8:b6: 1d:1d:27:ed:fb:4f:c6:77:68:e7:74:0e:fc:fd:af:36:7d:08: ee:08:c4:4c:f2:04:f2:63:fc:8f:8d:ed:ef:7c:ca:9c:fc:2f: c1:c0:b9:f7:05:37:70:dc:72:a9:b5:aa:01:f1:f1:db:d6:99: ab:90:68:f9:10:61:9c:09:0b:76:d1:d6:54:7e:0c:23:97:dc: d9:32:b4:88:f8:fe:e8:70:76:5d:e8:0c:db:6e:96:30:8d:b6: ec:bd:9a:bc:13:64:69:af:4f:3d:6b:33:cb:2a:22:a8:18:7a: 05:c4:5c:c3:2a:f8:a4:a5:9f:d1:72:a9:c1:d4:17:ed:39:0a: 93:d6:00:c2:aa:07:0a:fa:81:ba:91:c2:1a:f8:36:d1:49:6f: 34:bc:7d:8d:63:f3:ba:30:88:98:e6:19:eb:fe:60:66:d0:41: 96:05:ab:bc
1152404127 | 2024-09-18T13:10:19.9291163389 / tcp
Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x0f\x08\x00\x02\x00\x00\x00 Remote Desktop Protocol NTLM Info: OS: Windows 8.1/Windows Server 2012 R2 OS Build: 6.3.9600 Target Name: P4577787 NetBIOS Domain Name: P4577787 NetBIOS Computer Name: P4577787 DNS Domain Name: p4577787 FQDN: p4577787 p4577787-69.0.166.130 WARNING: Unauthorized access to this system is forbidden and will be prosecuted by law. By accessing this system, you agree that your actions may be monitored if unauthorized usage is suspected. am Windows Server 2012R2