5.61.48.77

As of: Jul 17, 2025 5:36pm UTC | Latest

Basic Information

Forward DNS: aacs2008.com, vip03.aofhashix.com, c21.tikkuo5.com, wap.lxhot.com, vip03.lafhevxsa8.com, ...
Routing: 5.61.48.0/22 via SCALAXY-AS, LV (AS58061)
OS: Ubuntu Linux
Services (13): 21/FTP, 22/SSH, 25/SMTP, 80/HTTP, 110/POP3, 143/IMAP, 443/HTTP, 465/SMTP, 587/SMTP, 993/IMAP, 995/POP3, 7777/HTTP, 8888/HTTP
Labels: Email File Sharing Remote Access

FTP 21/TCP

07/17/2025 12:34 UTC

File Sharing

View All Data

Software

ProFTPD Project ProFTPD

Details

Banner

220 ProFTPD Server (Debian) [::ffff:5.61.48.77]

Auth TLS Response

500 AUTH not understood

Auth SSL Response

500 AUTH not understood

Status Code

220

Status Meaning

Service ready for new user.

SSH 22/TCP

07/17/2025 01:32 UTC

Remote Access

View All Data

Software

Ubuntu Linux

OpenBSD OpenSSH 8.9p1

Details

Host Key

Algorithm: ecdsa-sha2-nistp256
Fingerprint: 9e9185612ef175e316bcc51e87d5603779f5b2a08a775fd8b838bfbfdf6e45db

Negotiated

Key Exchange: [email protected]
Symmetric Cipher: aes128-ctr [] aes128-ctr []
MAC: hmac-sha2-256 [] hmac-sha2-256 []

SMTP 25/TCP

07/17/2025 15:16 UTC

View All Data

Software

Ubuntu Linux

exim 4.95

Details

Banner

220 v759674990.local ESMTP Exim 4.95 Ubuntu Thu, 17 Jul 2025 15:16:23 +0000

EHLO

250-v759674990.local Hello www.censys.io [167.94.146.50]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH LOGIN PLAIN
250-CHUNKING
250-STARTTLS
250-SMTPUTF8
250 HELP

Start TLS

220 TLS go ahead

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: e37dbbb12e44d274dfadad9f2b97a05f8991e2ea20d56787eeec6d7de9b1c8b9
Subject: CN=server.domain.com
Issuer: CN=server.domain.com
Names: server.domain.com

Fingerprint

JA3S: d75f9129bb5d05492a65ff78e081bcb2
JA4S: t130200_1303_234ea6891581

HTTP 80/TCP

07/17/2025 00:15 UTC

View All Data Go

Software

nginx 1.24.0

Details

http://5.61.48.77/

Status

200 OK

Body Hash

sha1:ef160ebdf82a6cadd27197fb589a3786e58e3fa5

HTML Title

FASTPANEL

Response Body

      # Why am I seeing this page?

Here are some common issues that cause you to see this page:

  * Your domain is pointed to the server, but there is no site with that domain name on the server.
  * You are accessing the site via HTTPS, but the site does not have an SSL certificate installed.
  * Your domain has an AAAA record, but the site only works with IPv4 on the server.

[View more possible reasons](https://kb.fastpanel.direct/troubleshoot/)

POP3 110/TCP

07/16/2025 21:34 UTC

View All Data

Software

Dovecot

Ubuntu Linux

Details

Banner

+OK Dovecot (Ubuntu) ready.

Start TLS

+OK Begin TLS negotiation now.

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 47d212562ae508b6fec881b69aa0412d26b2283c2d2cd147416fe4ead58c8e35
Subject: CN=server.domain.com
Issuer: CN=server.domain.com
Names: server.domain.com

Fingerprint

JA3S: 475c9302dc42b2751db9edcac3b74891
JA4S: t130200_1303_a56c5b993250

IMAP 143/TCP

07/17/2025 15:34 UTC

View All Data

Software

Dovecot

Ubuntu Linux

Details

Banner

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready.

Start TLS

a001 OK Begin TLS negotiation now.

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 47d212562ae508b6fec881b69aa0412d26b2283c2d2cd147416fe4ead58c8e35
Subject: CN=server.domain.com
Issuer: CN=server.domain.com
Names: server.domain.com

Fingerprint

JA3S: 475c9302dc42b2751db9edcac3b74891
JA4S: t130200_1303_a56c5b993250

HTTP 443/TCP

07/16/2025 18:49 UTC

View All Data Go

Software

nginx 1.24.0

Details

https://5.61.48.77/

Status

200 OK

Body Hash

sha1:ef160ebdf82a6cadd27197fb589a3786e58e3fa5

HTML Title

FASTPANEL

Response Body

      # Why am I seeing this page?

Here are some common issues that cause you to see this page:

  * Your domain is pointed to the server, but there is no site with that domain name on the server.
  * You are accessing the site via HTTPS, but the site does not have an SSL certificate installed.
  * Your domain has an AAAA record, but the site only works with IPv4 on the server.

[View more possible reasons](https://kb.fastpanel.direct/troubleshoot/)

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 72d8a125da5bfb3653f4e71af78e42fd0da731b4aa0bc11e70422eb1a777a612
Subject: CN=server.domain.com
Issuer: CN=server.domain.com
Names: server.domain.com

Fingerprint

JARM: 3fd3fd0003fd3fd0003fd3fd3fd3fd33c8b328f3568a7c72e1a441e5a1d146
JA3S: a4a4c81b00b746b978f1513c9d74831e
JA4S: t120300_cca8_bec8bdbaef8a

SMTP 465/TCP

07/16/2025 09:41 UTC

Pending Removal Email

View All Data

Software

Ubuntu Linux

exim 4.95

Details

Banner

220 v759674990.local ESMTP Exim 4.95 Ubuntu Wed, 16 Jul 2025 09:41:47 +0000

EHLO

250-v759674990.local Hello www.censys.io [167.94.145.96]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH LOGIN PLAIN
250-CHUNKING
250-SMTPUTF8
250 HELP

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: e37dbbb12e44d274dfadad9f2b97a05f8991e2ea20d56787eeec6d7de9b1c8b9
Subject: CN=server.domain.com
Issuer: CN=server.domain.com
Names: server.domain.com

Fingerprint

JA3S: d75f9129bb5d05492a65ff78e081bcb2
JA4S: t130200_1303_234ea6891581

SMTP 587/TCP

07/16/2025 18:33 UTC

View All Data

Software

Ubuntu Linux

exim 4.95

Details

Banner

220 v759674990.local ESMTP Exim 4.95 Ubuntu Wed, 16 Jul 2025 18:33:40 +0000

EHLO

250-v759674990.local Hello www.censys.io [206.168.34.95]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH LOGIN PLAIN
250-CHUNKING
250-STARTTLS
250-SMTPUTF8
250 HELP

Start TLS

220 TLS go ahead

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: e37dbbb12e44d274dfadad9f2b97a05f8991e2ea20d56787eeec6d7de9b1c8b9
Subject: CN=server.domain.com
Issuer: CN=server.domain.com
Names: server.domain.com

Fingerprint

JA3S: d75f9129bb5d05492a65ff78e081bcb2
JA4S: t130200_1303_234ea6891581

IMAP 993/TCP

07/17/2025 17:34 UTC

View All Data

Software

Dovecot

Ubuntu Linux

Details

Banner

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready.

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 47d212562ae508b6fec881b69aa0412d26b2283c2d2cd147416fe4ead58c8e35
Subject: CN=server.domain.com
Issuer: CN=server.domain.com
Names: server.domain.com

Fingerprint

JARM: 0003fd00021d21d00042d43d000000e1eb348128a1eb0eda1c719dd71f6145
JA3S: 475c9302dc42b2751db9edcac3b74891
JA4S: t130200_1303_a56c5b993250

POP3 995/TCP

07/17/2025 13:36 UTC

View All Data

Software

Dovecot

Ubuntu Linux

Details

Banner

+OK Dovecot (Ubuntu) ready.

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 47d212562ae508b6fec881b69aa0412d26b2283c2d2cd147416fe4ead58c8e35
Subject: CN=server.domain.com
Issuer: CN=server.domain.com
Names: server.domain.com

Fingerprint

JARM: 0003fd00021d21d00042d43d000000e1eb348128a1eb0eda1c719dd71f6145
JA3S: 475c9302dc42b2751db9edcac3b74891
JA4S: t130200_1303_a56c5b993250

HTTP 7777/TCP

07/16/2025 22:04 UTC

View All Data Go

Software

nginx

Details

http://5.61.48.77:7777/

Status

200 OK

Body Hash

sha1:ef160ebdf82a6cadd27197fb589a3786e58e3fa5

HTML Title

FASTPANEL

Response Body

      # Why am I seeing this page?

Here are some common issues that cause you to see this page:

  * Your domain is pointed to the server, but there is no site with that domain name on the server.
  * You are accessing the site via HTTPS, but the site does not have an SSL certificate installed.
  * Your domain has an AAAA record, but the site only works with IPv4 on the server.

[View more possible reasons](https://kb.fastpanel.direct/troubleshoot/)

HTTP 8888/TCP

07/17/2025 17:01 UTC

View All Data Go

Software

nginx

Details

https://5.61.48.77:8888/

Status

200 OK

Body Hash

sha1:ac9141bf0aecfd04601f70bd63cc6c10a124386c

HTML Title

FASTPANEL HOSTING CONTROL

Response Body

      Please enable JavaScript to continue using this application.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 11aec41e07c4c248a17ab541102bc9ca157b4a59eb72bde69efff1f3ed137ec2
Subject: CN=server.domain.com
Issuer: CN=server.domain.com
Names: server.domain.com

Fingerprint

JARM: 21d19d00021d21d00021d19d21d21d63c5be1614c269e705f01d2e17b9a73f
JA3S: a4a4c81b00b746b978f1513c9d74831e
JA4S: t120300_cca8_bec8bdbaef8a

Geographic Location

City: Zwolle
Province: Overijssel
Country: Netherlands (NL)
Coordinates: 52.5549, 6.1556
Timezone: Europe/Amsterdam

5.61.48.77

Basic Information

FTP 21/TCP 07/17/2025 12:34 UTC

Software

ProFTPD Project ProFTPD

Details

SSH 22/TCP 07/17/2025 01:32 UTC

Software

Ubuntu Linux

OpenBSD OpenSSH 8.9p1

Details

Host Key

Negotiated

SMTP 25/TCP 07/17/2025 15:16 UTC

Software

Ubuntu Linux

exim 4.95

Details

TLS

Handshake

Certificate

Fingerprint

HTTP 80/TCP 07/17/2025 00:15 UTC

Software

nginx 1.24.0

Details

http://5.61.48.77/

POP3 110/TCP 07/16/2025 21:34 UTC

Software

Dovecot

Ubuntu Linux

Details

TLS

Handshake

Certificate

Fingerprint

IMAP 143/TCP 07/17/2025 15:34 UTC

Software

Dovecot

Ubuntu Linux

Details

TLS

Handshake

Certificate

Fingerprint

HTTP 443/TCP 07/16/2025 18:49 UTC

Software

nginx 1.24.0

Details

https://5.61.48.77/

TLS

Handshake

Certificate

Fingerprint

SMTP 465/TCP 07/16/2025 09:41 UTC

Software

Ubuntu Linux

exim 4.95

Details

TLS

Handshake

Certificate

Fingerprint

SMTP 587/TCP 07/16/2025 18:33 UTC

Software

Ubuntu Linux

exim 4.95

Details

TLS

Handshake

Certificate

Fingerprint

IMAP 993/TCP 07/17/2025 17:34 UTC

Software

Dovecot

Ubuntu Linux

Details

TLS

Handshake

Certificate

FTP 21/TCP

07/17/2025 12:34 UTC

SSH 22/TCP

07/17/2025 01:32 UTC

SMTP 25/TCP

07/17/2025 15:16 UTC

HTTP 80/TCP

07/17/2025 00:15 UTC

POP3 110/TCP

07/16/2025 21:34 UTC

IMAP 143/TCP

07/17/2025 15:34 UTC

HTTP 443/TCP

07/16/2025 18:49 UTC

SMTP 465/TCP

07/16/2025 09:41 UTC

SMTP 587/TCP

07/16/2025 18:33 UTC

IMAP 993/TCP

07/17/2025 17:34 UTC

POP3 995/TCP

07/17/2025 13:36 UTC

HTTP 7777/TCP

07/16/2025 22:04 UTC

HTTP 8888/TCP

07/17/2025 17:01 UTC