80.74.142.130

As of: Nov 29, 2023 9:58am UTC | Latest

Basic Information

Reverse DNS: decimus.sui-inter.net
Forward DNS: www.xn--haarstbli-v9a.ch, www.metallbau-christen.ch, webmail.herzog-bagger.ch, mail.finanzkompetenz-ch.ch, hausergubser.ch, ...
Routing: 80.74.128.0/20 via ASN-METANET Routingpeering issues: [email protected], CH (AS21069)
OS: linux
Services (14): 21/FTP, 25/SMTP, 53/DNS, 80/HTTP, 110/POP3, 143/IMAP, 443/HTTP, 465/SMTP, 587/SMTP, 993/IMAP, 995/POP3, 2121/SSH, 3306/MYSQL, 8443/HTTP
Labels: Database Email File Sharing Prototype Remote Access Requirejs Web.Control Panel.Hosting

FTP 21/TCP

11/28/2023 05:15 UTC

File Sharing

View All Data

Software

ProFTPD Project ProFTPD

linux

Details

Banner

220 ProFTPD Server (ProFTPD) [80.74.142.130]

Auth TLS Response

234 AUTH TLS successful

Status Code

220

Status Meaning

Service ready for new user.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JA3S: 0debd3853f330c574b05e0b6d882dc27

SMTP 25/TCP

11/28/2023 21:06 UTC

View All Data

Software

linux

Postfix

Details

Banner

220 decimus.sui-inter.net ESMTP Postfix

EHLO

250-decimus.sui-inter.net
250-PIPELINING
250-SIZE 52428800
250-ETRN
250-STARTTLS
250-AUTH CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

Start TLS

220 2.0.0 Ready to start TLS

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JA3S: d25619cb77d3219fc9fc14cb6b35eacc

DNS 53/UDP

11/28/2023 16:03 UTC

View All Data

Details

Server Type: AUTHORITATIVE
R Code: REFUSED

HTTP 80/TCP

11/28/2023 15:10 UTC

View All Data Go

Software

nginx

Details

http://80.74.142.130/

Status

200 OK

Body Hash

sha1:1d723ba8cedca5402e5935892003d19f9bee09a2

HTML Title

[]

Response Body

      

### Site Temporarily Closed

For further information please contact the webmaster.  
  
---

POP3 110/TCP

11/29/2023 07:27 UTC

View All Data

Software

linux

Dovecot

Details

Banner

+OK Dovecot ready. <74f6.2.6566e7e7.8uj9dFXv/[email protected]>

Start TLS

+OK Begin TLS negotiation now.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JA3S: 0debd3853f330c574b05e0b6d882dc27

IMAP 143/TCP

11/29/2023 01:56 UTC

View All Data

Software

linux

Dovecot

Details

Banner

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

Start TLS

a001 OK Begin TLS negotiation now.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JA3S: 0debd3853f330c574b05e0b6d882dc27

HTTP 443/TCP

11/29/2023 02:11 UTC

View All Data Go

Software

nginx

Details

https://80.74.142.130/

Status

200 OK

Body Hash

sha1:1d723ba8cedca5402e5935892003d19f9bee09a2

HTML Title

[]

Response Body

      

### Site Temporarily Closed

For further information please contact the webmaster.  
  
---

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JARM: 15d3fd16d29d29d00042d43d00000071784fa9f8305ba9220d0a7894b6ff2c
JA3S: 475c9302dc42b2751db9edcac3b74891

SMTP 465/TCP

11/29/2023 02:48 UTC

View All Data

Software

linux

Postfix

Details

Banner

220 decimus.sui-inter.net ESMTP Postfix

EHLO

250-decimus.sui-inter.net
250-PIPELINING
250-SIZE 52428800
250-ETRN
250-AUTH CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JARM: 07d19d1ad21d21d07c07d19d07d21d23aeefb38b723c523befb314af6e95ac
JA3S: d25619cb77d3219fc9fc14cb6b35eacc

SMTP 587/TCP

11/28/2023 05:16 UTC

View All Data

Software

linux

Postfix

Details

Banner

220 decimus.sui-inter.net ESMTP Postfix

EHLO

250-decimus.sui-inter.net
250-PIPELINING
250-SIZE 52428800
250-ETRN
250-STARTTLS
250-AUTH CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

Start TLS

220 2.0.0 Ready to start TLS

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JA3S: d25619cb77d3219fc9fc14cb6b35eacc

IMAP 993/TCP

11/28/2023 05:05 UTC

View All Data

Software

linux

Dovecot

Details

Banner

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JARM: 2ad2ad16d2ad2ad22c2ad2ad2ad2ad579b2ec9bfaf00aff9d6fe780b7932ae
JA3S: 0debd3853f330c574b05e0b6d882dc27

POP3 995/TCP

11/28/2023 22:11 UTC

View All Data

Software

linux

Dovecot

Details

Banner

+OK Dovecot ready. <36f1.2.6566659a.zuFEnLmE8TdcW/[email protected]>

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JARM: 2ad2ad16d2ad2ad22c2ad2ad2ad2ad579b2ec9bfaf00aff9d6fe780b7932ae
JA3S: 0debd3853f330c574b05e0b6d882dc27

SSH 2121/TCP

11/27/2023 17:53 UTC

Remote Access

View All Data

Software

OpenBSD OpenSSH 7.4

Details

Host Key

Algorithm: ecdsa-sha2-nistp256
Fingerprint: e49f0abc50209344d5e6d1c146eef48e1fb8ee99ca89fb28b785dd151b392cf0

Negotiated

Key Exchange: [email protected]
Symmetric Cipher: aes128-ctr [] aes128-ctr []
MAC: hmac-sha2-256 [] hmac-sha2-256 []

MYSQL 3306/TCP

11/29/2023 09:58 UTC

Database

View All Data

Software

linux

MariaDB 10.6.15

Details

Protocol Version: 10
Character Set: 8

HTTP 8443/TCP

11/29/2023 06:11 UTC

Prototype Requirejs Web.Control Panel.Hosting

View All Data Go

Software

Parallels Plesk Panel

Parallels Plesk

Details

https://80.74.142.130:8443/login_up.php

Status

200 OK

Body Hash

sha1:0d28241940fe1bfed6666184e7ca58d87d15265c

HTML Title

Plesk Obsidian 18.0.56

Response Body

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: 2bed2877c7856f721d090a09289e5062c8da6a4ffb3323ab49537918b6383804
Subject: CN=*.sui-inter.net
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Names: *.sui-inter.net, sui-inter.net

Fingerprint

JARM: 29d29d15d29d29d21c29d29d29d29daff0af16bdb770d788bcc0af03e29f0d
JA3S: ccc514751b175866924439bdbb5bba34

Geographic Location

City: Zürich
Province: Zurich
Country: Switzerland (CH)
Coordinates: 47.36667, 8.55
Timezone: Europe/Zurich

80.74.142.130

Basic Information

FTP 21/TCP 11/28/2023 05:15 UTC

Software

ProFTPD Project ProFTPD

linux

Details

TLS

Handshake

Certificate

Fingerprint

SMTP 25/TCP 11/28/2023 21:06 UTC

Software

linux

Postfix

Details

TLS

Handshake

Certificate

Fingerprint

DNS 53/UDP 11/28/2023 16:03 UTC

Details

HTTP 80/TCP 11/28/2023 15:10 UTC

Software

nginx

Details

http://80.74.142.130/

POP3 110/TCP 11/29/2023 07:27 UTC

Software

linux

Dovecot

Details

TLS

Handshake

Certificate

Fingerprint

IMAP 143/TCP 11/29/2023 01:56 UTC

Software

linux

Dovecot

Details

TLS

Handshake

Certificate

Fingerprint

HTTP 443/TCP 11/29/2023 02:11 UTC

Software

nginx

Details

https://80.74.142.130/

TLS

Handshake

Certificate

Fingerprint

SMTP 465/TCP 11/29/2023 02:48 UTC

Software

linux

Postfix

Details

TLS

Handshake

Certificate

Fingerprint

SMTP 587/TCP 11/28/2023 05:16 UTC

Software

linux

Postfix

Details

TLS

Handshake

Certificate

Fingerprint

IMAP 993/TCP 11/28/2023 05:05 UTC

Software

linux

Dovecot

Details

TLS

Handshake

Certificate

FTP 21/TCP

11/28/2023 05:15 UTC

SMTP 25/TCP

11/28/2023 21:06 UTC

DNS 53/UDP

11/28/2023 16:03 UTC

HTTP 80/TCP

11/28/2023 15:10 UTC

POP3 110/TCP

11/29/2023 07:27 UTC

IMAP 143/TCP

11/29/2023 01:56 UTC

HTTP 443/TCP

11/29/2023 02:11 UTC

SMTP 465/TCP

11/29/2023 02:48 UTC

SMTP 587/TCP

11/28/2023 05:16 UTC

IMAP 993/TCP

11/28/2023 05:05 UTC

POP3 995/TCP

11/28/2023 22:11 UTC

SSH 2121/TCP

11/27/2023 17:53 UTC

MYSQL 3306/TCP

11/29/2023 09:58 UTC

HTTP 8443/TCP

11/29/2023 06:11 UTC