153.122.85.13

Basic Information

Network
GMOCL GMO GlobalSign Holdings K.K. (JP)
Routing
153.122.80.0/20 via AS11164 , AS2497 , AS131921
Protocols
80/HTTP, 3306/MYSQL, 993/IMAPS, 465/SMTP, 995/POP3S, 25/SMTP, 110/POP3, 21/FTP, 143/IMAP, 53/DNS, 443/HTTPS, 22/SSH, 4190/BANNER, 7080/BANNER, 7081/BANNER, 8443/BANNER, 8880/BANNER
Tags
ftp http https database pop3s smtp imaps pop3 ssh dns mysql imap

80/HTTP


Details Go

GET /

Server
nginx
Status Line
403 Forbidden
Page Title
403 Forbidden
GET /
[view page]

443/HTTPS


Details Go

GET /

Server
nginx
Status Line
403 Forbidden
Page Title
403 Forbidden
GET /
[view page]

Chrome TLS Handshake

Version
TLSv1.2
Cipher Suite
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F)
Browser Trusted
True

Heartbleed

Heartbleed
Heartbeat Disabled (OK)

Cryptographic Configuration

Export DHE
False
Export RSA
False
DHE Support
False

Certificate Chain

b863dfb31bbc9b87d782fd44b6efc98c649eb9e80da63335c3c856d39f2e5384
CN=ero-nuki.net
C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3
25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3
O=Digital Signature Trust Co., CN=DST Root CA X3

21/FTP


Details

Banner Grab

Banner:
220 ProFTPD Server (ProFTPD) [153.122.85.13]

22/SSH


Details

SSHv2 Handshake

Server
OpenSSH 7.4
Banner
SSH-2.0-OpenSSH_7.4

Host Key

Algorithm
ecdsa-sha2-nistp256
Fingerprint
ae59b6ed250151f3c01755561ca55634446641cd98ccd0b0696b97c82a5740c8

Negotiated Algorithm

Key Exchange
[email protected]
Symmetric Cipher
aes128-ctr [] | aes128-ctr []
MAC
hmac-sha2-256 [] | hmac-sha2-256 []

25/SMTP


Details

Banner Grab and StartTLS Initiation

Server
Postfix
Banner
220 sub0000545247.localdomain ESMTP Postfix
EHLO
250-sub0000545247.localdomain
250-PIPELINING
250-SIZE 10240000
250-ETRN
250-STARTTLS
250-AUTH DIGEST-MD5 CRAM-MD5 PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING
STARTTLS
220 2.0.0 Ready to start TLS

TLS Handshake

Version
TLSv1.2
Cipher Suite
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F)

Certificate Chain

de252ce4b3c177c4d37545fba64fb3d88cc99571b1bae34332ef93c757004da8
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]

465/SMTP


Details

Banner Grab

Banner
220 sub0000545247.localdomain ESMTP Postfix

TLS Handshake

Version
TLSv1.2
Cipher Suite
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F)

Certificate Chain

de252ce4b3c177c4d37545fba64fb3d88cc99571b1bae34332ef93c757004da8
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]

53/DNS


Details

Open Resolver Query

Open Resolver
False

110/POP3


Details

Banner Grab and StartTLS Initiation

Server
Dovecot
Banner
+OK Dovecot ready. <[email protected]>
STARTTLS
+OK Begin TLS negotiation now.

TLS Handshake

Version
TLSv1.2
Cipher Suite
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F)

Certificate Chain

de252ce4b3c177c4d37545fba64fb3d88cc99571b1bae34332ef93c757004da8
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]

143/IMAP


Details

Banner Grab and StartTLS Initiation

Server
Dovecot
Banner
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
STARTTLS
a001 OK Begin TLS negotiation now.

TLS Handshake

Version
TLSv1.2
Cipher Suite
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F)

Certificate Chain

de252ce4b3c177c4d37545fba64fb3d88cc99571b1bae34332ef93c757004da8
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]

993/IMAPS


Details

Banner Grab

Banner
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

TLS Handshake

Version
TLSv1.2
Cipher Suite
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F)

Certificate Chain

de252ce4b3c177c4d37545fba64fb3d88cc99571b1bae34332ef93c757004da8
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]

995/POP3S


Details

Banner Grab

Banner
+OK Dovecot ready. <[email protected]>

TLS Handshake

Version
TLSv1.2
Cipher Suite
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F)

Certificate Chain

de252ce4b3c177c4d37545fba64fb3d88cc99571b1bae34332ef93c757004da8
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]
C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, [email protected]

3306/MySQL


Details

Banner Grab

Version
5.5.5-10.3.27-MariaDB
Protocol Version
10

4190/BANNER View Only


Details

Banner Info

Port
4190
Protocol
TCP
Decoded Banner
"IMPLEMENTATION" "Dovecot Pigeonhole"
"SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify"
"NOTIFY" "mailto"
"SASL" "PLAIN LOGIN DIGEST-MD5 CRAM-MD5"
"STARTTLS"
"VERSION" "1.0"
OK "Dovecot ready."
NO "Error in MANAGESIEVE command received by server."

7080/BANNER View Only


Details

Banner Info

Port
7080
Protocol
TCP
Decoded Banner
HTTP/1.1 301 Moved Permanently
Date: Wed, 02 Dec 2020 03:30:29 GMT
Server: Apache
X-Powered-By: PHP/7.4.13
Location: https://ero-nuki.net/
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

0

7081/BANNER View Only


Details

Banner Info

Port
7081
Protocol
TCP
Decoded Banner
HTTP/1.1 400 Bad Request
Date: Wed, 02 Dec 2020 03:30:29 GMT
Server: Apache
Last-Modified: Thu, 27 Jul 2017 14:52:01 GMT
ETag: "436-5554db507c1f2"
Accept-Ranges: bytes
Content-Length: 1078
Connection: close
Content-Type: text/html

<HTML>
<HEAD>
<TITLE>400 Bad Request</TITLE>
<BASE href="/error_docs/"><!--[if lte IE 6]></BASE><![endif]-->
</HEAD>
<BODY>
<H1>Bad Request</H1>
Your browser sent a request that this server could not understand.
<P>
Client sent malformed Host header
<P>
<HR>
<ADDRESS>
Web Server at ero-nuki.net
</ADDRESS>
</BODY>
</HTML>

<!--
   - Unfortunately, Microsoft has added a clever new
   - "feature" to Internet Explorer. If the text of
   - an error's message is "too small", specifically
   - less than 512 bytes, Internet Explorer returns
   - its own error message. You can turn that off,
   - but it's pretty tricky to find switch called
   - "smart error messages". That means, of course,
   - that short error messages are censored by default.
   - IIS always returns error mess

8443/BANNER View Only


Details

Banner Info

Port
8443
Protocol
TCP
Decoded Banner
HTTP/1.1 302 Moved Temporarily
Server: sw-cp-server
Date: Wed, 02 Dec 2020 03:30:29 GMT
Content-Type: text/html
Content-Length: 138
Connection: close
Location: https://153.122.85.13:8443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx</center>
</body>
</html>

8880/BANNER View Only


Details

Banner Info

Port
8880
Protocol
TCP
Decoded Banner
HTTP/1.1 303 See Other
Server: sw-cp-server
Date: Fri, 04 Dec 2020 20:25:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Fri, 04 Dec 2020 20:25:29 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Location: http://153.122.85.13:8880/login.php?success_redirect_url=http%3A%2F%2F153.122.85.13%3A8880%2F

0

Geographic Location

Country
Japan (JP)
Lat/Long
35.69, 139.69
Timezone
Asia/Tokyo