Subj : Re: 466/0
To   : Stas Mishchenkov
From : Wilfred van Velzen
Date : Wed May 28 2025 09:42:46

Hi Stas,

On 2025-05-28 03:22:00, you wrote to me:

 WvV>> 2:466/4 fido.snake.mk.ua:24554  88.99.13.226  Ok.

 SM> [03:21:05 brorabbit logs]$ whois 88.99.13.226|grep -i country
 SM> country:        DE
 SM> country:        DE
 SM> country:        DE

It's an ip range of Hetzner, a well known hoster.

 SM> [03:22:57 brorabbit logs]$ ping fido.snake.mk.ua
 SM> PING fido.snake.mk.ua(fido.snake.mk.ua (2a01:4f8:c17:5f5b::2)) 56 data bytes
 SM> 64 bytes from fido.snake.mk.ua (2a01:4f8:c17:5f5b::2): icmp_seq=1 ttl=49
 SM> time=102 ms 64 bytes from fido.snake.mk.ua (2a01:4f8:c17:5f5b::2): icmp_seq=2
 SM> ttl=49 time=184 ms

 SM> [03:24:32 brorabbit logs]$ ping -c 4 88.99.13.226
 SM> PING 88.99.13.226 (88.99.13.226) 56(84) bytes of data.
 SM> 64 bytes from 88.99.13.226: icmp_seq=1 ttl=51 time=77.1 ms
 SM> 64 bytes from 88.99.13.226: icmp_seq=2 ttl=51 time=75.7 ms
 SM> 64 bytes from 88.99.13.226: icmp_seq=3 ttl=51 time=75.9 ms
 SM> 64 bytes from 88.99.13.226: icmp_seq=4 ttl=51 time=74.9 ms

Ping doesn't say much. This is more interesting:

# nmap -A fido.snake.mk.ua

Starting Nmap 6.47 ( http://nmap.org ) at 2025-05-28 09:34 CEST
Nmap scan report for fido.snake.mk.ua (88.99.13.226)
Host is up (0.027s latency).
rDNS record for 88.99.13.226: snake.mk.ua
Not shown: 994 closed ports
PORT     STATE    SERVICE      VERSION
80/tcp   open     http         nginx 1.16.1
|_http-methods: No Allow or Public header in OPTIONS response (status code 301)
|_http-title: Did not follow redirect to https://fido.snake.mk.ua/
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
443/tcp  open     http         nginx 1.16.1
|_http-methods: No Allow or Public header in OPTIONS response (status code 400)
|_http-title: 400 The plain HTTP request was sent to HTTPS port
| ssl-cert: Subject: commonName=fido.snake.mk.ua
| Not valid before: 2025-02-20T07:04:58+00:00
|_Not valid after:  2025-05-21T06:04:57+00:00
445/tcp  filtered microsoft-ds
3306/tcp open     mysql        MySQL (unauthorized)
....

So the website is still up, but has an expired (lets encrypt) certificate. (Bad sign)

When I look at the website there is a login page for fidonet points.
So there is some live, but the system seems abandoned by the sysop.


Bye, Wilfred.

--- FMail-lnx64 2.3.2.4-B20240523
 * Origin: NPC Station (2:280/464)

.