80.74.148.70

As of: Feb 07, 2023 7:10am UTC | Latest

Basic Information

Reverse DNS
antiqua.sui-inter.net
OS
linux
Network
ASN-METANET Routingpeering issues: [email protected] (CH)
Routing
80.74.144.0/20  via  AS21069
Protocols
21/FTP , 25/SMTP , 53/DNS , 80/HTTP , 110/POP3 , 143/IMAP , 443/HTTP , 465/SMTP , 587/SMTP , 993/IMAP , 995/POP3 , 2121/SSH , 3306/MYSQL , 8443/HTTP , 8880/HTTP

21/FTP TCP
Observed Feb 06, 2023 at 9:16pm UTC

View All Data

Software

ProFTPD Project ProFTPD
linux

Details

Banner
220 ProFTPD Server (ProFTPD) [80.74.148.70]
Auth TLS Response
234 AUTH TLS successful
Status Code
220
Status Meaning
Service ready for new user.

TLS

Fingerprint
JA3S
0debd3853f330c574b05e0b6d882dc27
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Leaf Certificate
2500cec99b6b74e96273e678c5bfc74d06d25a6e25e819940077f921f43dddcc
CN=*.sui-inter.net
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

25/SMTP TCP
Observed Feb 06, 2023 at 10:44am UTC

View All Data

Software

linux
Postfix

Details

Banner
220 antiqua6.sui-inter.net ESMTP Postfix
EHLO
250-antiqua6.sui-inter.net
250-PIPELINING
250-SIZE 52428800
250-ETRN
250-STARTTLS
250-AUTH CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING
Start TLS
220 2.0.0 Ready to start TLS

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
2500cec99b6b74e96273e678c5bfc74d06d25a6e25e819940077f921f43dddcc
CN=*.sui-inter.net
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

53/DNS UDP
Observed Feb 06, 2023 at 9:32pm UTC

View All Data

Details

Server Type
AUTHORITATIVE
R Code
REFUSED

80/HTTP TCP
Observed Feb 07, 2023 at 12:26am UTC

View All Data Go

Software

nginx

Details

http://80.74.148.70
Request
GET /
Protocol
HTTP/1.1
Status Code
403
Status Reason
Forbidden
Body Hash
sha1:834944ee4464604a6bf6425ff959ddbfe64d7b00
Response Body
No index site defined / uploaded

110/POP3 TCP
Observed Feb 06, 2023 at 8:58pm UTC

View All Data

Software

Dovecot

Details

Banner
+OK Dovecot ready. <bbf0.2.63e16a12.0FZjv/[email protected]>
Start TLS
+OK Begin TLS negotiation now.

TLS

Fingerprint
JA3S
0debd3853f330c574b05e0b6d882dc27
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Leaf Certificate
2500cec99b6b74e96273e678c5bfc74d06d25a6e25e819940077f921f43dddcc
CN=*.sui-inter.net
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

143/IMAP TCP
Observed Feb 06, 2023 at 9:48pm UTC

View All Data

Software

linux

Details

Banner
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
Start TLS
a001 OK Begin TLS negotiation now.

TLS

Fingerprint
JA3S
0debd3853f330c574b05e0b6d882dc27
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Leaf Certificate
2500cec99b6b74e96273e678c5bfc74d06d25a6e25e819940077f921f43dddcc
CN=*.sui-inter.net
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

443/HTTP TCP
Observed Feb 06, 2023 at 9:23pm UTC

View All Data Go

Software

nginx

Details

https://80.74.148.70
Request
GET /
Protocol
HTTP/1.1
Status Code
403
Status Reason
Forbidden
Body Hash
sha1:834944ee4464604a6bf6425ff959ddbfe64d7b00
Response Body
No index site defined / uploaded

TLS

Fingerprint
JARM
15d3fd16d29d29d00042d43d0000009e5d3a316e7cccd6bbfaf756c222effa
JA3S
475c9302dc42b2751db9edcac3b74891
Handshake
Version Selected
TLSv1_3
Cipher Selected
TLS_CHACHA20_POLY1305_SHA256
Leaf Certificate
f1860915622e620bc2810e9f608dba4b33b6211ba9bacbee88b30f50e68287ff
CN=antiqua.sui-inter.net
C=US, O=Let's Encrypt, CN=R3
Issuer Chain

465/SMTP TCP
Observed Feb 07, 2023 at 7:10am UTC

View All Data

Software

linux
Postfix

Details

Banner
220 antiqua6.sui-inter.net ESMTP Postfix
EHLO
250-antiqua6.sui-inter.net
250-PIPELINING
250-SIZE 52428800
250-ETRN
250-AUTH CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
2500cec99b6b74e96273e678c5bfc74d06d25a6e25e819940077f921f43dddcc
CN=*.sui-inter.net
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

587/SMTP TCP
Observed Feb 06, 2023 at 8:59am UTC

View All Data

Software

linux
Postfix

Details

Banner
220 antiqua6.sui-inter.net ESMTP Postfix
EHLO
250-antiqua6.sui-inter.net
250-PIPELINING
250-SIZE 52428800
250-ETRN
250-STARTTLS
250-AUTH CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING
Start TLS
220 2.0.0 Ready to start TLS

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
2500cec99b6b74e96273e678c5bfc74d06d25a6e25e819940077f921f43dddcc
CN=*.sui-inter.net
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

993/IMAP TCP
Observed Feb 06, 2023 at 6:48pm UTC

View All Data

Software

linux

Details

Banner
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

TLS

Fingerprint
JARM
2ad2ad16d2ad2ad22c2ad2ad2ad2ad579b2ec9bfaf00aff9d6fe780b7932ae
JA3S
0debd3853f330c574b05e0b6d882dc27
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Leaf Certificate
2500cec99b6b74e96273e678c5bfc74d06d25a6e25e819940077f921f43dddcc
CN=*.sui-inter.net
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

995/POP3 TCP
Observed Feb 06, 2023 at 6:53am UTC

View All Data

Software

linux
Dovecot

Details

Banner
+OK Dovecot ready. <[email protected]>

TLS

Fingerprint
JA3S
0debd3853f330c574b05e0b6d882dc27
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Leaf Certificate
2500cec99b6b74e96273e678c5bfc74d06d25a6e25e819940077f921f43dddcc
CN=*.sui-inter.net
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

2121/SSH TCP
Observed Feb 06, 2023 at 7:39pm UTC

View All Data

Software

linux
OpenBSD OpenSSH 7.4

Details

Host Key
Algorithm
ecdsa-sha2-nistp256
Fingerprint
7a7c635cb0797cb8b3915f7f55f20e01df621a16a6ba8e399d1c51c5fa2a911f
Negotiated
Key Exchange
[email protected]
Symmetric Cipher
aes128-ctr [] aes128-ctr []
MAC
hmac-sha2-256 [] hmac-sha2-256 []

3306/MYSQL TCP
Observed Feb 07, 2023 at 5:02am UTC

View All Data

Software

linux
MariaDB 10.3.36

Details

Protocol Version
10
Character Set
8

8443/HTTP TCP
Observed Feb 06, 2023 at 8:40pm UTC

View All Data Go

Software

Parallels Plesk Panel
Parallels Plesk

Details

https://80.74.148.70:8443
Request
GET /login_up.php
Protocol
HTTP/1.1
Status Code
200
Status Reason
OK
Body Hash
sha1:46938d167b37ebdf694b5dc32dcf8d35231a043f
HTML Title
Plesk Obsidian 18.0.48
Response Body

TLS

Fingerprint
JARM
29d29d00029d29d21c29d29d29d29d6a7bd8f51d54bfc07e1cd34e5ca50bb3
JA3S
ccc514751b175866924439bdbb5bba34
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
2500cec99b6b74e96273e678c5bfc74d06d25a6e25e819940077f921f43dddcc
CN=*.sui-inter.net
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Issuer Chain

8880/HTTP TCP
Observed Feb 07, 2023 at 6:55am UTC

View All Data Go

Software

Parallels Plesk Panel
Parallels Plesk

Details

http://80.74.148.70:8880
Request
GET /login_up.php
Protocol
HTTP/1.1
Status Code
200
Status Reason
OK
Body Hash
sha1:fdccdfee1139d9f184d3433d304ad21e57afd5ac
HTML Title
Plesk Obsidian 18.0.48
Response Body

Geographic Location

Country
Switzerland (CH)
Coordinates
47.1449, 8.1551
Timezone
Europe/Zurich