185.253.217.102

As of: Feb 05, 2023 10:35pm UTC | Latest

Basic Information

OS
linux
Network
PINDC-AS (RU)
Routing
185.253.217.0/24  via  AS34665
Protocols
21/FTP , 22/SSH , 25/SMTP , 80/HTTP , 110/POP3 , 123/NTP , 143/IMAP , 443/HTTP , 465/SMTP , 587/SMTP , 993/IMAP , 3306/MYSQL , 8000/HTTP

21/FTP TCP
Observed Feb 05, 2023 at 2:49pm UTC

View All Data

Software

linux
PureFTPd Pure-FTPd

Details

Banner
220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 17:49. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
Auth TLS Response
234 AUTH TLS OK.
Status Code
220
Status Meaning
Service ready for new user.

TLS

Fingerprint
JA3S
0debd3853f330c574b05e0b6d882dc27
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Leaf Certificate
0a5abe7f127ca5650b588ace4f8218d6d07d2bde72599eec23ae933d211fafb7
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest

22/SSH TCP
Observed Feb 05, 2023 at 12:05pm UTC

View All Data

Software

linux
OpenBSD OpenSSH 7.4

Details

Host Key
Algorithm
ecdsa-sha2-nistp256
Fingerprint
37fb7dab25b1dc26c626d17718edd4cbd3b73aa422ebbe347e0e33d48f518e5b
Negotiated
Key Exchange
[email protected]
Symmetric Cipher
aes128-ctr [] aes128-ctr []
MAC
hmac-sha2-256 [] hmac-sha2-256 []

25/SMTP TCP
Observed Feb 05, 2023 at 11:06am UTC

View All Data

Software

linux
exim 4.94.2

Details

Banner
220 2969.ru, ESMTP EXIM 4.94.2
EHLO
250-2969.ru Hello scanner-04.ch1.censys-scanner.com [162.142.125.9]
250-SIZE 67108864
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN CRAM-MD5
250-CHUNKING
250-STARTTLS
250 HELP
Start TLS
220 TLS go ahead

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
322d1ac9160d80b464a4c32fd036804c7e371fcc3fa61cee03a4d9399f3895cc
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest

80/HTTP TCP
Observed Feb 04, 2023 at 4:38pm UTC

View All Data Go

Software

Apache HTTPD

Details

http://185.253.217.102
Request
GET /
Protocol
HTTP/1.1
Status Code
301
Status Reason
Moved Permanently
Body Hash
sha1:2b3832f66dfe601d741bb0aaf3cb3d5f5b00d810
HTML Title
301 Moved Permanently
Response Body
# Moved Permanently

The document has moved [here](https://185.253.217.102/).

110/POP3 TCP
Observed Feb 05, 2023 at 2:51am UTC

View All Data

Software

linux
Dovecot

Details

Banner
+OK Dovecot ready.
Start TLS
+OK Begin TLS negotiation now.

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
32e559737861707acbc1c951baffcd03e1d5bc349dbcdc68d36a974d3f072ae7
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest

123/NTP UDP
Observed Feb 05, 2023 at 8:19am UTC

View All Data

Details

Time Header
Version
3
Mode
4
Stratum
2
Poll
3
Precision
-23
Reference ID
�$��

143/IMAP TCP
Observed Feb 05, 2023 at 8:07pm UTC

View All Data

Software

linux

Details

Banner
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
Start TLS
a001 OK Begin TLS negotiation now.

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
32e559737861707acbc1c951baffcd03e1d5bc349dbcdc68d36a974d3f072ae7
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest

443/HTTP TCP
Observed Feb 04, 2023 at 4:38pm UTC

View All Data Go

Software

PHP 7.3.33
Apache HTTPD

Details

https://185.253.217.102
Request
GET /
Protocol
HTTP/1.1
Status Code
200
Status Reason
OK
Body Hash
sha1:8f63de97a4cad8e148d12e9177c8fc69bc03b25c
HTML Title
2969.ru | Welcome
Response Body
Toggle navigation [ 2969.ru ](/ "2969.ru")

  * [ Login ](/customer/guest/index "Login")

![Email marketing](/frontend/assets/img/bg_image_welcome_2.jpg)

# Email marketing.Made easy, finally.

Using 2969.ru you will easily grow your lists, increase conversions, and
optimise your audience engagement with beautiful emails and autoresponders,
high-converting web forms, list segmentation, and unique delivery tools.

![Send better email](/frontend/assets/img/bg_image_why_2.png)

## Send better email

Whether you need to sell your products, share some big news, or tell a story,
our email template builder makes it easy to create an email marketing campaign
that best suit your target audience.

![Send better email](/frontend/assets/img/home_landing_1.jpg)

![See how you're doing](/frontend/assets/img/bg_image_doing.png)

## See how you're doing

2969.ru reports show you how well you're connecting with your audience. You
get detailed reports for opens, clicks, unsubscribes, bounces, complains and
much more, all shown in a simple and clear way.

![See how you're doing](/frontend/assets/img/home_landing_2.jpg)

©2023 All rights reserved.

  * [Terms and conditions](/page/terms-and-conditions "Terms and conditions")
  * [Privacy policy](/page/privacy-policy "Privacy policy")
  * [Articles](/articles "Articles")
  * [Block my email](/lists/block-address "Block my email")

TLS

Fingerprint
JARM
05d02d20d21d20d05c05d02d05d20d6c5159516bcc0f0e3dea0ccaa4f8b5d0
JA3S
ccc514751b175866924439bdbb5bba34
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
3495d5ffc751aecad4c2acbd450e9b4f858f96bdb1c47094da85fec52ffb77ee
CN=2969.ru
C=US, O=Let's Encrypt, CN=R3
Issuer Chain

465/SMTP TCP
Observed Feb 05, 2023 at 11:12am UTC

View All Data

Software

exim 4.94.2

Details

Banner
220 2969.ru, ESMTP EXIM 4.94.2
EHLO
250-2969.ru Hello scanner-26.ch1.censys-scanner.com [167.248.133.119]
250-SIZE 67108864
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN CRAM-MD5
250-CHUNKING
250 HELP

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
322d1ac9160d80b464a4c32fd036804c7e371fcc3fa61cee03a4d9399f3895cc
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest

587/SMTP TCP
Observed Feb 04, 2023 at 5:56pm UTC

View All Data

Software

linux
exim 4.94.2

Details

Banner
220 2969.ru, ESMTP EXIM 4.94.2
EHLO
250-2969.ru Hello www.censys.io [167.94.145.59]
250-SIZE 67108864
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN CRAM-MD5
250-CHUNKING
250-STARTTLS
250 HELP
Start TLS
220 TLS go ahead

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
322d1ac9160d80b464a4c32fd036804c7e371fcc3fa61cee03a4d9399f3895cc
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest

993/IMAP TCP
Observed Feb 05, 2023 at 12:33pm UTC

View All Data

Software

linux

Details

Banner
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

TLS

Fingerprint
JARM
05d14d20d21d20d05c05d14d05d20da23a7a927f270a23608b3c7a72999cab
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
32e559737861707acbc1c951baffcd03e1d5bc349dbcdc68d36a974d3f072ae7
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest
C=UA, ST=Default, L=Default, O=Brainy, CN=centostest

3306/MYSQL TCP
Observed Feb 05, 2023 at 2:56am UTC

View All Data

Software

linux
MariaDB

Details

Error Code
1130
Error ID
ER_HOST_NOT_PRIVILEGED
Error Message
Host '167.94.145.58' is not allowed to connect to this MariaDB server

8000/HTTP TCP
Observed Feb 05, 2023 at 5:17pm UTC

View All Data Go

Software

nginx

Details

http://185.253.217.102:8000
Request
GET /
Protocol
HTTP/1.1
Status Code
400
Status Reason
Bad Request
Body Hash
sha1:e70b2bdf0abb7fbf695bc27eef3ddf563d36aca1
HTML Title
400 The plain HTTP request was sent to HTTPS port
Response Body
# 400 Bad Request

The plain HTTP request was sent to HTTPS port

* * *

nginx

Geographic Location

City
St Petersburg
Province
St.-Petersburg
Country
Russia (RU)
Coordinates
59.9291, 30.1943
Timezone
Europe/Moscow