23.229.204.1:587 (tcp/smtp/tls) - last seen on 2024-11-21 at 08:57:23 UTC
-
- IP
- 23.229.204.1
- Network
- 23.229.128.0/17
- Domain(s)
- secureserver.net
- Device
-
<enterprise field>: device.class
- Operating System
- Linux Linux Kernel
- Reverse DNS
- 1.204.229.23.host.secureserver.net
- ASN
- AS398101
- Organization
- GO-DADDY-COM-LLC
- Protocol
- smtp Cert not expired smtp
- Source
- datascan
-
- Operating System
- Linux Linux Kernel
- Product
- Exim Exim 4.96.2
- CPE(s)
-
<enterprise field>: cpe
-
- Issuer Common Name
- Starfield Secure Certificate Authority - G2
- Issuer Organization
- Starfield Technologies, Inc.
- Subject Common Name
- *.prod.phx3.secureserver.net
- Subject Alt Name
- *.prod.phx3.secureserver.net prod.phx3.secureserver.net
- SHA256 Fingerprint
- d53a2eeb58dc99df4a623b606a967bae6d8dc40c46407be617a96a9a141d0346
- Validity Not Before
- 2024-02-15T21:45:33Z
- Validity Not After
- 2025-03-18T21:45:33Z
This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.
-
- Data MD5
- 7d9ed5e4898524dcf8ac5017b3dd2a73
-
220-p3plzcpnl505666.prod.phx3.secureserver.net ESMTP Exim 4.96.2 #2 Thu, 21 Nov 2024 01:57:12 -0700 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail. 250-p3plzcpnl505666.prod.phx3.secureserver.net Hello <hostname> [<srcip>] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP 220 TLS go ahead -
{ "@category" : "datascan", "@timestamp" : "2024-11-21T08:57:23.000Z", "app" : { "length" : 405 }, "asn" : "AS398101", "basicconstraints" : "critical", "ca" : "false", "country" : "US", "cpe" : "<enterprise field>: cpe", "cpecount" : "<enterprise field>: cpecount", "data" : "220-p3plzcpnl505666.prod.phx3.secureserver.net ESMTP Exim 4.96.2 #2 Thu, 21 Nov 2024 01:57:12 -0700 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n250-p3plzcpnl505666.prod.phx3.secureserver.net Hello <hostname> [<srcip>]\r\n250-SIZE 52428800\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250-STARTTLS\r\n250 HELP\r\n220 TLS go ahead", "datamd5" : "7d9ed5e4898524dcf8ac5017b3dd2a73", "datammh3" : -1026544023, "device" : { "class" : "<enterprise field>: device.class" }, "domain" : [ "secureserver.net" ], "extkeyusage" : [ "serverAuth", "clientAuth" ], "fingerprint" : { "md5" : "8f2c6fb954159534174d537ca1bd989d", "sha1" : "6b61301cf7cce6a63cfbe37a4cff59d4a77cde5d", "sha256" : "d53a2eeb58dc99df4a623b606a967bae6d8dc40c46407be617a96a9a141d0346" }, "geolocus" : { "asn" : "AS398101", "continent" : "NA", "continentname" : "North America", "country" : "US", "countryname" : "United States", "domain" : [ "godaddy.com", "secureserver.net" ], "isineu" : "false", "latitude" : "37.09024", "location" : "37.09024,-95.712891", "longitude" : "-95.712891", "netname" : "GO-DADDY-COM-LLC", "organization" : "GoDaddy.com, LLC", "subnet" : "23.229.128.0/17" }, "host" : [ 1, "prod" ], "hostname" : [ "1.204.229.23.host.secureserver.net", "prod.phx3.secureserver.net" ], "ip" : "23.229.204.1", "ipv6" : "false", "issuer" : { "city" : "Scottsdale", "commonname" : "Starfield Secure Certificate Authority - G2", "country" : "US", "organization" : "Starfield Technologies, Inc.", "organizationalunit" : "http://certs.starfieldtech.com/repository/" }, "keyusage" : [ "digitalSignature", "keyEncipherment" ], "latitude" : "37.7510", "location" : "37.7510,-97.8220", "longitude" : "-97.8220", "node" : { "country" : "<enterprise field>: node.country", "groupid" : "<enterprise field>: node.groupid", "id" : "<enterprise field>: node.id", "physicalcountry" : "<enterprise field>: node.physicalcountry" }, "organization" : "GO-DADDY-COM-LLC", "os" : "Linux Kernel", "osvendor" : "Linux", "port" : 587, "product" : "Exim", "productvendor" : "Exim", "productversion" : "4.96.2", "protocol" : "smtp", "publickey" : { "algorithm" : "rsaEncryption", "length" : 2048 }, "reverse" : [ "1.204.229.23.host.secureserver.net" ], "seen_date" : "2024-11-21", "serial" : "09:63:b0:73:d6:70:b9:ef", "signature" : { "algorithm" : "sha256WithRSAEncryption" }, "source" : "datascan", "subdomains" : [ "204.229.23.host.secureserver.net", "229.23.host.secureserver.net", "23.host.secureserver.net", "host.secureserver.net", "phx3.secureserver.net", "prod.phx3.secureserver.net" ], "subject" : { "altname" : [ "*.prod.phx3.secureserver.net", "prod.phx3.secureserver.net" ], "commonname" : "*.prod.phx3.secureserver.net" }, "subnet" : "23.229.128.0/17", "tag" : "<enterprise field>: tag", "tld" : [ "net" ], "tls" : "true", "transport" : "tcp", "validity" : { "notafter" : "2025-03-18T21:45:33Z", "notbefore" : "2024-02-15T21:45:33Z" }, "version" : "v3", "wildcard" : "true" }