FOFA Search Engine

IP:

185.244.144.173

Country/Region:

Belgium

City:

Brussels

Organization:

Birbir Internet Teknolojileri Sanayi ve Ticaret Limited Sirketi

ISP:

ASN:

199608

Last update time:

2025-11-18 20:00:00

Port（20）:

3389 80 995 21 143 110 8880 25 993 465 443 8443 53 4190 447 7088 106 6666 2096 2086 -

Protocol（11）:

rdp http pop3s ftp imaps smtps https dns sieve ssh irc -

Domain（0）:

Component Layer:

Unassigned Component:

Port

Protocol

Last update time

ICP备案号

Component

3389

TCP/RDP

2025-11-18

TCP/HTTP

2024-05-27

995

TCP/POP3S

2024-05-27

TCP/FTP

2024-05-27

143

TCP/IMAPS

2024-05-26

110

TCP/POP3S

2024-05-25

8880

TCP/HTTP

2024-05-25

TCP/SMTPS

2024-05-25

993

TCP/IMAPS

2024-05-24

465

TCP/SMTPS

2024-05-24

443

TCP/HTTPS

2024-05-23

8443

TCP/HTTPS

2024-05-23

UDP/DNS

2024-05-21

4190

TCP/SIEVE

2024-05-07

447

TCP/SSH

2024-01-16

7088

TCP/HTTPS

2021-07-04

106

TCP/FTP

2019-04-22

6666

TCP/IRC

2019-03-04

2096

TCP/HTTP

2019-03-02

2086

TCP/HTTP

2019-03-01

185.244.144.173:3389

3389 TCP/RDP

Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x0f\x08\x00\x08\x00\x00\x00 Flag: PROTOCOL_HYBRID_EX Target_Name: WIN-F4DS5FDS78C Product_Version: 6.3.9600 Ntlm 15 OS: Windows 8.1/Windows Server 2012 R2 NetBIOS_Domain_Name: WIN-F4DS5FDS78C NetBIOS_Computer_Name: WIN-F4DS5FDS78C DNS_Domain_Name: WIN-F4DS5FDS78C45 DNS_Computer_Name: WIN-F4DS5FDS78C45 System_Time: 2025-11-18 12:53:27 +0000 UTC

185.244.144.173:80

80 TCP/HTTP

HTTP/1.1 301 Moved Permanently Date: Mon, 27 May 2024 13:52:54 GMT Server: Apache Location: https://www.turksohbet.org.tr/ Content-Length: 238 Content-Type: text/html; charset=iso-8859-1

185.244.144.173:995

995 TCP/POP3S

+OK Dovecot ready. <[email protected]>

185.244.144.173:21

21 TCP/FTP

220 ProFTPD Server (ProFTPD) [185.244.144.173]

185.244.144.173:143

143 TCP/IMAPS

* OK Waiting for authentication process to respond..

185.244.144.173:110

110 TCP/POP3S

+OK Dovecot ready. <[email protected]>

185.244.144.173:8880

8880 TCP/HTTP

HTTP/1.1 303 See Other Server: sw-cp-server Date: Fri, 24 May 2024 21:18:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Fri, 24 May 2024 21:18:03 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: http://185.244.144.173:8880/login.php?success_redirect_url=%2F

185.244.144.173:25

25 TCP/SMTPS

220 websunucu.tatli.net ESMTP Postfix 250-websunucu.tatli.net 250-PIPELINING 250-SIZE 10240000 250-ETRN 250-STARTTLS 250-AUTH DIGEST-MD5 CRAM-MD5 PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING 502 5.5.2 Error: command not recognized

185.244.144.173:993

993 TCP/IMAPS

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

185.244.144.173:465

465 TCP/SMTPS

220 websunucu.tatli.net ESMTP Postfix

185.244.144.173:443

443 TCP/HTTPS

HTTP/1.1 301 Moved Permanently Date: Wed, 22 May 2024 22:55:55 GMT Server: Apache Location: https://www.turksohbet.org.tr/ Content-Length: 238 Content-Type: text/html; charset=iso-8859-1

185.244.144.173:8443

8443 TCP/HTTPS

HTTP/1.1 303 See Other Server: sw-cp-server Date: Wed, 22 May 2024 22:56:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Wed, 22 May 2024 22:56:52 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://185.244.144.173:8443/login.php?success_redirect_url=%2F

185.244.144.173:53

53 UDP/DNS

9 \x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01 \x00\x06\x85\x00\x00\x01\x00\x01\x00\x01\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03\xc0\x00\x10\x00\x03\x00\x00\x00\x00\x00\x05\x04none\xc0\x00\x02\x00\x03\x00\x00\x00\x00\x00\x02\xc0

185.244.144.173:4190

4190 TCP/SIEVE

"IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify" "NOTIFY" "mailto" "SASL" "PLAIN LOGIN DIGEST-MD5 CRAM-MD5" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready."

185.244.144.173:447

447 TCP/SSH

SSH-2.0-OpenSSH_7.4 server_host_key: fingerprint:WTPohIGwPi3tW6X+Og9KBDfOdZfo4qHmYaMVEV0TcWw fingerprint_sha256:5933e88481b03e2ded5ba5fe3a0f4a0437ce7597e8e2a1e661a315115d13716c

185.244.144.173:7088

7088 TCP/HTTPS

HTTP/1.0 302 Found Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1;mode=block Referrer-Policy: same-origin X-Content-Type-Options: nosniff Set-Cookie: LSWSWEBUI=4da063f1d9d65c43873b3c9c05b1a858; path=/; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Pragma: no-cache Set-Cookie: lsws_uid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure Set-Cookie: lsws_pass=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure Set-Cookie: LSWSWEBUI=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure location: /login.php Content-Type: text/html; charset=UTF-8 Content-Length: 0 Date: Fri, 02 Jul 2021 23:16:07 GMT Server: LiteSpeed

185.244.144.173:106

106 TCP/FTP

200 poppassd hello, who are you?

185.244.144.173:6666

6666 TCP/IRC

:irc.GercekSohbet.Net NOTICE AUTH :*** \x034S\x032ohbet \x034S\x032unucumuza \x034H\x032osgeldiniz. :irc.GercekSohbet.Net NOTICE AUTH :*** \x034K\x032eyifli \x034S\x032ohbetler \x034D\x032ileriz.

185.244.144.173:2096

2096 TCP/HTTP

HTTP/1.1 301 Moved Server: cpsrvd/11.56.0.52 Content-length: 121 Location: https://ircsunucu.zirveshell.com:2096 Content-type: text/html; charset="utf-8" Cache-Control: no-cache, must-revalidate Pragma: no-cache

185.244.144.173:2086

2086 TCP/HTTP

HTTP/1.0 401 Access Denied Connection: close Content-Type: text/html; charset="utf-8" Date: Fri, 01 Mar 2019 14:03:50 GMT WWW-Authenticate: Basic realm="Web Host Manager" Set-Cookie: whostmgrrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086 Set-Cookie: whostmgrsession=%3azUZRTYi17Gkjovtb%2cc84a8e312ee85ac720df83bf048d2e72; HttpOnly; path=/; port=2086 Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086 Set-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2086 Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086 Set-Cookie: imp_key=expired; HttpOnly; domain=185.244.144.173; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2086 Set-Cookie: key=expired; HttpOnly; domain=185.244.144.173; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/3rdparty/squirrelmail/; port=2086 Set-Cookie: SQMSESSID=expired; HttpOnly; domain=185.244.144.173; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2086 Cache-Control: no-cache, must-revalidate Pragma: no-cache Content-Length: 38176