5.134.122.27

As of: Nov 30, 2022 1:45pm UTC | Latest

Basic Information

Reverse DNS: server.dominiopertepro.com
OS: linux
Network: ASN-ITNET (IT)
Routing: 5.134.120.0/21 via AS3242
Protocols: 21/FTP , 25/SMTP , 53/DNS , 80/HTTP , 110/POP3 , 143/IMAP , 443/HTTP , 465/SMTP , 587/SMTP , 993/IMAP , 3306/MYSQL , 5599/SSH , 8443/HTTP , 8880/HTTP

21/FTP TCP
Observed Nov 30, 2022 at 6:37am UTC

View All Data

Software

ProFTPD Project ProFTPD

linux

Details

Banner

220 ProFTPD Server (ProFTPD) [5.134.122.27]

Auth TLS Response

234 AUTH TLS successful

Status Code

220

Status Meaning

Service ready for new user.

TLS

JA3S: 303951d4c50efb2e991652225a6f02b1
Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

25/SMTP TCP
Observed Nov 30, 2022 at 12:11am UTC

View All Data

Software

linux

Postfix

Details

Banner

220 server.dominiopertepro.com ESMTP Postfix

EHLO

250-server.dominiopertepro.com
250-PIPELINING
250-SIZE 182400000
250-ETRN
250-STARTTLS
250-AUTH DIGEST-MD5 CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

Start TLS

220 2.0.0 Ready to start TLS

TLS

JA3S: 303951d4c50efb2e991652225a6f02b1
Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

53/DNS UDP
Observed Nov 30, 2022 at 1:45pm UTC

View All Data

Details

Server Type: AUTHORITATIVE
R Code: REFUSED

80/HTTP TCP
Observed Nov 30, 2022 at 5:12am UTC

View All Data Go

Software

nginx

Details

http://5.134.122.27

Request

GET /

Protocol

HTTP/1.1

Status Code

200

Status Reason

Body Hash

sha1:daa369c4bf3b2c10273927d74e7acc42c170954e

HTML Title

Web Server's Default Page

Response Body

You see this page because there is no Web site at this address.

110/POP3 TCP
Observed Nov 30, 2022 at 7:17am UTC

View All Data

Software

linux

Dovecot

Details

Banner

+OK Dovecot ready. <243aff.3229.6387036f.XXLiazyGi+84jwpH4PWX/[email protected]>

Start TLS

+OK Begin TLS negotiation now.

TLS

JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

143/IMAP TCP
Observed Nov 30, 2022 at 1:45pm UTC

View All Data

Software

linux

Details

Banner

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

Start TLS

a001 OK Begin TLS negotiation now.

TLS

JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

443/HTTP TCP
Observed Nov 30, 2022 at 12:29pm UTC

View All Data Go

Software

nginx

Details

https://5.134.122.27

Request

GET /login_up.php

Protocol

HTTP/1.1

Status Code

200

Status Reason

Body Hash

sha1:69e74a43fb58334e638e4ee98a45ec4207253ffb

HTML Title

Plesk Obsidian 18.0.48

Response Body

TLS

JARM: 29d29d00029d29d21c42d42d0000008a5941c13f67e0c0a2c8a36bfeef6920
JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

465/SMTP TCP
Observed Nov 29, 2022 at 9:39pm UTC

View All Data

Software

linux

Postfix

Details

Banner

220 server.dominiopertepro.com ESMTP Postfix

EHLO

250-server.dominiopertepro.com
250-PIPELINING
250-SIZE 182400000
250-ETRN
250-AUTH DIGEST-MD5 CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

TLS

JA3S: 303951d4c50efb2e991652225a6f02b1
Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

587/SMTP TCP
Observed Nov 30, 2022 at 12:53pm UTC

View All Data

Software

linux

Postfix

Details

Banner

220 server.dominiopertepro.com ESMTP Postfix

EHLO

250-server.dominiopertepro.com
250-PIPELINING
250-SIZE 182400000
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

Start TLS

220 2.0.0 Ready to start TLS

TLS

JA3S: 303951d4c50efb2e991652225a6f02b1
Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

993/IMAP TCP
Observed Nov 29, 2022 at 5:45pm UTC

View All Data

Software

linux

Details

Banner

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

TLS

JARM: 29d29d15d29d29d21c42d42d000000dc2b105e4dda975fa70719c0cae5d0ce
JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

3306/MYSQL TCP
Observed Nov 30, 2022 at 10:10am UTC

View All Data

Software

linux

MariaDB 10.3.35

Details

Protocol Version: 10
Character Set: 8

5599/SSH TCP
Observed Nov 30, 2022 at 1:45pm UTC

View All Data

Software

OpenBSD OpenSSH 8.0

Details

Algorithm: ecdsa-sha2-nistp256
Fingerprint: 5c9d980ec04242e80d6739b40ffdb1a1b6e4bd48eb5eb040d75c7c2492aa95c7
Key Exchange: [email protected]
Symmetric Cipher: aes128-ctr [] aes128-ctr []
MAC: hmac-sha2-256 [] hmac-sha2-256 []

8443/HTTP TCP
Observed Nov 30, 2022 at 12:40pm UTC

View All Data Go

Software

Parallels Plesk Panel

Parallels Plesk

Details

https://5.134.122.27:8443

Request

GET /login_up.php

Protocol

HTTP/1.1

Status Code

200

Status Reason

Body Hash

sha1:09de31a48b6903836a5b2afd0ce70ac8319cfe0e

HTML Title

Plesk Obsidian 18.0.48

Response Body

TLS

JARM: 29d29d00029d29d21c42d42d0000008a5941c13f67e0c0a2c8a36bfeef6920
JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

8880/HTTP TCP
Observed Nov 29, 2022 at 11:36pm UTC

View All Data Go

Software

Parallels Plesk Panel

Parallels Plesk

Details

http://5.134.122.27:8880

Request

GET /login_up.php

Protocol

HTTP/1.1

Status Code

200

Status Reason

Body Hash

sha1:3bae6575b61fe0555663a39ee57b4522969e203a

HTML Title

Plesk Obsidian 18.0.48

Response Body

Geographic Location

City: Turin
Province: Piedmont
Country: Italy (IT)
Coordinates: 45.0914, 7.6639
Timezone: Europe/Rome

5.134.122.27

Basic Information

21/FTP TCP Observed Nov 30, 2022 at 6:37am UTC

Software

ProFTPD Project ProFTPD

linux

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

25/SMTP TCP Observed Nov 30, 2022 at 12:11am UTC

Software

linux

Postfix

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

53/DNS UDP Observed Nov 30, 2022 at 1:45pm UTC

Details

80/HTTP TCP Observed Nov 30, 2022 at 5:12am UTC

Software

nginx

Details

http://5.134.122.27

110/POP3 TCP Observed Nov 30, 2022 at 7:17am UTC

Software

linux

Dovecot

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

143/IMAP TCP Observed Nov 30, 2022 at 1:45pm UTC

Software

linux

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

443/HTTP TCP Observed Nov 30, 2022 at 12:29pm UTC

Software

nginx

Details

https://5.134.122.27

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

465/SMTP TCP Observed Nov 29, 2022 at 9:39pm UTC

Software

linux

Postfix

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

587/SMTP TCP Observed Nov 30, 2022 at 12:53pm UTC

Software

linux

Postfix

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

993/IMAP TCP Observed Nov 29, 2022 at 5:45pm UTC

Software

21/FTP TCP
Observed Nov 30, 2022 at 6:37am UTC

25/SMTP TCP
Observed Nov 30, 2022 at 12:11am UTC

53/DNS UDP
Observed Nov 30, 2022 at 1:45pm UTC

80/HTTP TCP
Observed Nov 30, 2022 at 5:12am UTC

110/POP3 TCP
Observed Nov 30, 2022 at 7:17am UTC

143/IMAP TCP
Observed Nov 30, 2022 at 1:45pm UTC

443/HTTP TCP
Observed Nov 30, 2022 at 12:29pm UTC

465/SMTP TCP
Observed Nov 29, 2022 at 9:39pm UTC

587/SMTP TCP
Observed Nov 30, 2022 at 12:53pm UTC

993/IMAP TCP
Observed Nov 29, 2022 at 5:45pm UTC

3306/MYSQL TCP
Observed Nov 30, 2022 at 10:10am UTC

5599/SSH TCP
Observed Nov 30, 2022 at 1:45pm UTC

8443/HTTP TCP
Observed Nov 30, 2022 at 12:40pm UTC

8880/HTTP TCP
Observed Nov 29, 2022 at 11:36pm UTC