5.134.122.27

As of: Feb 06, 2023 2:03am UTC | Latest

Basic Information

Reverse DNS: server.dominiopertepro.com
OS: linux
Network: ASN-ITNET (IT)
Routing: 5.134.120.0/21 via AS3242
Protocols: 21/FTP , 25/SMTP , 53/DNS , 80/HTTP , 110/POP3 , 143/IMAP , 443/HTTP , 465/SMTP , 587/SMTP , 993/IMAP , 995/POP3 , 3306/MYSQL , 5599/SSH , 8443/HTTP , 8880/HTTP

21/FTP TCP
Observed Feb 05, 2023 at 1:14pm UTC

View All Data

Software

ProFTPD Project ProFTPD

linux

Details

Banner

220 ProFTPD Server (ProFTPD) [5.134.122.27]

Auth TLS Response

234 AUTH TLS successful

Status Code

220

Status Meaning

Service ready for new user.

TLS

JA3S: 303951d4c50efb2e991652225a6f02b1
Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

25/SMTP TCP
Observed Feb 05, 2023 at 6:00am UTC

View All Data

Software

linux

Postfix

Details

Banner

220 server.dominiopertepro.com ESMTP Postfix

EHLO

250-server.dominiopertepro.com
250-PIPELINING
250-SIZE 182400000
250-ETRN
250-STARTTLS
250-AUTH DIGEST-MD5 CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

Start TLS

220 2.0.0 Ready to start TLS

TLS

JA3S: 303951d4c50efb2e991652225a6f02b1
Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

53/DNS UDP
Observed Feb 05, 2023 at 4:18pm UTC

View All Data

Details

Server Type: AUTHORITATIVE
R Code: REFUSED

80/HTTP TCP
Observed Feb 04, 2023 at 5:57pm UTC

View All Data Go

Software

nginx

Details

http://5.134.122.27

Request

GET /

Protocol

HTTP/1.1

Status Code

200

Status Reason

Body Hash

sha1:daa369c4bf3b2c10273927d74e7acc42c170954e

HTML Title

Web Server's Default Page

Response Body

You see this page because there is no Web site at this address.

110/POP3 TCP
Observed Feb 05, 2023 at 4:18pm UTC

View All Data

Software

linux

Dovecot

Details

Banner

+OK Dovecot ready. <[email protected]pro.com>

Start TLS

+OK Begin TLS negotiation now.

TLS

JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

143/IMAP TCP
Observed Feb 05, 2023 at 4:20pm UTC

View All Data

Software

linux

Details

Banner

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

Start TLS

a001 OK Begin TLS negotiation now.

TLS

JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

443/HTTP TCP
Observed Feb 05, 2023 at 11:55pm UTC

View All Data Go

Software

nginx

Details

Request: GET /login.php
Protocol: HTTP/1.1
Status Code: 303
Status Reason: See Other

TLS

JARM: 29d29d00029d29d21c42d42d0000008a5941c13f67e0c0a2c8a36bfeef6920
JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

465/SMTP TCP
Observed Feb 04, 2023 at 11:44pm UTC

View All Data

Software

linux

Postfix

Details

Banner

220 server.dominiopertepro.com ESMTP Postfix

EHLO

250-server.dominiopertepro.com
250-PIPELINING
250-SIZE 182400000
250-ETRN
250-AUTH DIGEST-MD5 CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

TLS

JA3S: 303951d4c50efb2e991652225a6f02b1
Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

587/SMTP TCP
Observed Feb 05, 2023 at 4:43pm UTC

View All Data

Software

linux

Postfix

Details

Banner

220 server.dominiopertepro.com ESMTP Postfix

EHLO

250-server.dominiopertepro.com
250-PIPELINING
250-SIZE 182400000
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

Start TLS

220 2.0.0 Ready to start TLS

TLS

JA3S: 303951d4c50efb2e991652225a6f02b1
Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

993/IMAP TCP
Observed Feb 05, 2023 at 4:20pm UTC

View All Data

Software

linux

Details

Banner

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

TLS

JARM: 29d29d15d29d29d21c42d42d000000dc2b105e4dda975fa70719c0cae5d0ce
JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

995/POP3 TCP
Observed Feb 05, 2023 at 2:08am UTC

View All Data

Software

linux

Dovecot

Details

Banner

+OK Dovecot ready. <[email protected]pro.com>

TLS

JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

3306/MYSQL TCP
Observed Feb 05, 2023 at 10:33pm UTC

View All Data

Software

linux

MariaDB 10.3.35

Details

Protocol Version: 10
Character Set: 8

5599/SSH TCP
Observed Feb 04, 2023 at 9:39pm UTC

View All Data

Software

OpenBSD OpenSSH 8.0

Details

Algorithm: ecdsa-sha2-nistp256
Fingerprint: 5c9d980ec04242e80d6739b40ffdb1a1b6e4bd48eb5eb040d75c7c2492aa95c7
Key Exchange: [email protected]
Symmetric Cipher: aes128-ctr [] aes128-ctr []
MAC: hmac-sha2-256 [] hmac-sha2-256 []

8443/HTTP TCP
Observed Feb 05, 2023 at 1:56am UTC

View All Data Go

Software

Parallels Plesk Panel

Parallels Plesk

Details

https://5.134.122.27:8443

Request

GET /login_up.php

Protocol

HTTP/1.1

Status Code

200

Status Reason

Body Hash

sha1:b2baac525d204b6fba4428f5db06fa715ac39aec

HTML Title

Plesk Obsidian 18.0.48

Response Body

TLS

JARM: 29d29d00029d29d21c42d42d0000008a5941c13f67e0c0a2c8a36bfeef6920
JA3S: 15af977ce25de452b96affa2addb1036
Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

8880/HTTP TCP
Observed Feb 05, 2023 at 11:19pm UTC

View All Data Go

Software

Parallels Plesk Panel

Parallels Plesk

Details

http://5.134.122.27:8880

Request

GET /login_up.php

Protocol

HTTP/1.1

Status Code

200

Status Reason

Body Hash

sha1:b6a8684518be971d60fb61ed84db65868df12625

HTML Title

Plesk Obsidian 18.0.48

Response Body

Geographic Location

City: Turin
Province: Piedmont
Country: Italy (IT)
Coordinates: 45.0914, 7.6639
Timezone: Europe/Rome

5.134.122.27

Basic Information

21/FTP TCP Observed Feb 05, 2023 at 1:14pm UTC

Software

ProFTPD Project ProFTPD

linux

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

25/SMTP TCP Observed Feb 05, 2023 at 6:00am UTC

Software

linux

Postfix

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

53/DNS UDP Observed Feb 05, 2023 at 4:18pm UTC

Details

80/HTTP TCP Observed Feb 04, 2023 at 5:57pm UTC

Software

nginx

Details

http://5.134.122.27

110/POP3 TCP Observed Feb 05, 2023 at 4:18pm UTC

Software

linux

Dovecot

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

143/IMAP TCP Observed Feb 05, 2023 at 4:20pm UTC

Software

linux

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

443/HTTP TCP Observed Feb 05, 2023 at 11:55pm UTC

Software

nginx

Details

https://5.134.122.27

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

465/SMTP TCP Observed Feb 04, 2023 at 11:44pm UTC

Software

linux

Postfix

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

587/SMTP TCP Observed Feb 05, 2023 at 4:43pm UTC

Software

linux

Postfix

Details

TLS

Fingerprint

Handshake

Leaf Certificate

Issuer Chain

993/IMAP TCP Observed Feb 05, 2023 at 4:20pm UTC

Software

21/FTP TCP
Observed Feb 05, 2023 at 1:14pm UTC

25/SMTP TCP
Observed Feb 05, 2023 at 6:00am UTC

53/DNS UDP
Observed Feb 05, 2023 at 4:18pm UTC

80/HTTP TCP
Observed Feb 04, 2023 at 5:57pm UTC

110/POP3 TCP
Observed Feb 05, 2023 at 4:18pm UTC

143/IMAP TCP
Observed Feb 05, 2023 at 4:20pm UTC

443/HTTP TCP
Observed Feb 05, 2023 at 11:55pm UTC

465/SMTP TCP
Observed Feb 04, 2023 at 11:44pm UTC

587/SMTP TCP
Observed Feb 05, 2023 at 4:43pm UTC

993/IMAP TCP
Observed Feb 05, 2023 at 4:20pm UTC

995/POP3 TCP
Observed Feb 05, 2023 at 2:08am UTC

3306/MYSQL TCP
Observed Feb 05, 2023 at 10:33pm UTC

5599/SSH TCP
Observed Feb 04, 2023 at 9:39pm UTC

8443/HTTP TCP
Observed Feb 05, 2023 at 1:56am UTC

8880/HTTP TCP
Observed Feb 05, 2023 at 11:19pm UTC