185.104.29.40

As of: Dec 02, 2022 9:30am UTC | Latest

Basic Information

Reverse DNS
web0097.zxcs.nl
OS
CloudLinux Linux
Network
AS-ZXCS (NL)
Routing
185.104.29.0/24  via  AS206281
Protocols
21/FTP , 25/SMTP , 80/HTTP , 110/POP3 , 143/IMAP , 443/HTTP , 465/SMTP , 587/SMTP , 993/IMAP , 995/POP3 , 2222/HTTP , 3306/MYSQL

21/FTP TCP
Observed Dec 01, 2022 at 12:27pm UTC


View All Data

Software

ProFTPD Project ProFTPD

Details

Banner
220 ProFTPD Server ready.
Auth TLS Response
234 AUTH TLS successful
Status Code
220
Status Meaning
Service ready for new user.

TLS

Fingerprint
JA3S
0debd3853f330c574b05e0b6d882dc27
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Leaf Certificate
38db8c253614f4f120a2c9b09ff34b091d3154c822b994c71664f6dfe2dd1a70
CN=*.zxcs.nl
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA

25/SMTP TCP
Observed Dec 01, 2022 at 2:21am UTC


View All Data

Software

exim 4.95

Details

Banner
220 web0097.zxcs.nl ESMTP Exim 4.95 Thu, 01 Dec 2022 03:21:22 +0100
EHLO
250-web0097.zxcs.nl Hello www.censys.io [167.94.146.57]
250-SIZE 104857600
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP
Start TLS
220 TLS go ahead

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
38db8c253614f4f120a2c9b09ff34b091d3154c822b994c71664f6dfe2dd1a70
CN=*.zxcs.nl
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA

80/HTTP TCP
Observed Dec 01, 2022 at 7:45pm UTC


View All Data Go

Software

Apache HTTPD

Details

http://185.104.29.40
Request
GET /
Protocol
HTTP/1.1
Status Code
200
Status Reason
OK
Body Hash
sha1:315d1347f4b707e4ed8a73f22de8235f189ef18b
Response Body
Apache is functioning normally

110/POP3 TCP
Observed Dec 02, 2022 at 12:15am UTC


View All Data

Details

Banner
+OK ZXCS ready.
Start TLS
-ERR TLS support isn't enabled.

143/IMAP TCP
Observed Dec 02, 2022 at 12:58am UTC


View All Data

Details

Banner
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] ZXCS ready.
Start TLS
a001 BAD TLS support isn't enabled.

443/HTTP TCP
Observed Dec 01, 2022 at 8:45pm UTC


View All Data Go

Software

Apache HTTPD

Details

https://185.104.29.40
Request
GET /
Protocol
HTTP/1.1
Status Code
200
Status Reason
OK
Body Hash
sha1:315d1347f4b707e4ed8a73f22de8235f189ef18b
Response Body
Apache is functioning normally

TLS

Fingerprint
JARM
2ad2ad0002ad2ad00041d41d0000000464fb8c6842ac133bede81390a48134
JA3S
475c9302dc42b2751db9edcac3b74891
Handshake
Version Selected
TLSv1_3
Cipher Selected
TLS_CHACHA20_POLY1305_SHA256
Leaf Certificate
38db8c253614f4f120a2c9b09ff34b091d3154c822b994c71664f6dfe2dd1a70
CN=*.zxcs.nl
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

465/SMTP TCP
Observed Dec 02, 2022 at 5:22am UTC


View All Data

Software

exim 4.95

Details

Banner
220 web0097.zxcs.nl ESMTP Exim 4.95 Fri, 02 Dec 2022 06:22:23 +0100
EHLO
250-web0097.zxcs.nl Hello scanner-25.ch1.censys-scanner.com [162.142.125.219]
250-SIZE 104857600
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN
250 HELP

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
38db8c253614f4f120a2c9b09ff34b091d3154c822b994c71664f6dfe2dd1a70
CN=*.zxcs.nl
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA

587/SMTP TCP
Observed Dec 02, 2022 at 9:30am UTC


View All Data

Software

exim 4.95

Details

Banner
220 web0097.zxcs.nl ESMTP Exim 4.95 Fri, 02 Dec 2022 10:30:31 +0100
EHLO
250-web0097.zxcs.nl Hello scanner-25.ch1.censys-scanner.com [162.142.125.220]
250-SIZE 104857600
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP
Start TLS
220 TLS go ahead

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
38db8c253614f4f120a2c9b09ff34b091d3154c822b994c71664f6dfe2dd1a70
CN=*.zxcs.nl
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA

993/IMAP TCP
Observed Dec 01, 2022 at 3:52pm UTC


View All Data

Details

Banner
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] ZXCS ready.

TLS

Fingerprint
JARM
3fd21b20d3fd3fd21c3fd21b21b3fd09a00b24483586e69e1b2e49cc2ece92
JA3S
d25619cb77d3219fc9fc14cb6b35eacc
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
Leaf Certificate
38db8c253614f4f120a2c9b09ff34b091d3154c822b994c71664f6dfe2dd1a70
CN=*.zxcs.nl
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

995/POP3 TCP
Observed Dec 01, 2022 at 2:37pm UTC


View All Data

Details

Banner
+OK ZXCS ready.

TLS

Fingerprint
JA3S
d25619cb77d3219fc9fc14cb6b35eacc
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
Leaf Certificate
38db8c253614f4f120a2c9b09ff34b091d3154c822b994c71664f6dfe2dd1a70
CN=*.zxcs.nl
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

2222/HTTP TCP
Observed Dec 01, 2022 at 9:51am UTC


View All Data Go

Details

https://185.104.29.40:2222
Request
GET /
Protocol
HTTP/1.1
Status Code
200
Status Reason
OK
Body Hash
sha1:9fa725ed690751ad778bd2b702e2a1181a3b8158
HTML Title
DirectAdmin Login
Response Body
  
  
  
  

# DirectAdmin Login Page

Please enter your Username and Password  
---  
Username:|  
Password:|  
  
Thu Dec 1 10:51:44 2022

yes

TLS

Fingerprint
JARM
3fd3fd20d00000000043d3fd3fd43da936ab0256fab25eca082941d14e3ece
JA3S
475c9302dc42b2751db9edcac3b74891
Handshake
Version Selected
TLSv1_3
Cipher Selected
TLS_CHACHA20_POLY1305_SHA256
Leaf Certificate
38db8c253614f4f120a2c9b09ff34b091d3154c822b994c71664f6dfe2dd1a70
CN=*.zxcs.nl
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

3306/MYSQL TCP
Observed Dec 01, 2022 at 7:44pm UTC


View All Data

Software

CloudLinux Linux
MariaDB 10.3.24

Details

Protocol Version
10
Character Set
8

Geographic Location

Country
Netherlands (NL)
Coordinates
52.3824, 4.8995
Timezone
Europe/Amsterdam