31.31.196.199

As of: Dec 08, 2022 7:55pm UTC | Latest

Basic Information

Reverse DNS
sbx42.hosting.reg.ru
OS
linux
Network
AS-REG (RU)
Routing
31.31.196.0/24  via  AS197695
Protocols
21/FTP , 22/SSH , 25/SMTP , 53/DNS , 80/HTTP , 110/POP3 , 111/PORTMAP , 143/IMAP , 443/HTTP , 465/SMTP , 587/SMTP , 993/IMAP , 995/POP3 , 1500/HTTP , 3306/MYSQL , 9443/HTTP

21/FTP TCP
Observed Dec 08, 2022 at 8:58am UTC


View All Data

Software

linux

Details

Banner
220 FTP Server ready.
Auth TLS Response
234 AUTH TLS successful
Status Code
220
Status Meaning
Service ready for new user.

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2

22/SSH TCP
Observed Dec 07, 2022 at 5:14pm UTC


View All Data

Software

linux
Dropbear SSH Project Dropbear SSH 2022.82

Details

Host Key
Algorithm
ecdsa-sha2-nistp256
Fingerprint
774a461600fc0830d76b45163dd78936b6f42872f08ef1eed67f2b81cd20f33e
Negotiated
Key Exchange
[email protected]
Symmetric Cipher
aes128-ctr [] aes128-ctr []
MAC
hmac-sha2-256 [] hmac-sha2-256 []

25/SMTP TCP
Observed Dec 08, 2022 at 11:02am UTC


View All Data

Software

exim 4.96

Details

Banner
220 sbx42.hosting.reg.ru ESMTP Exim 4.96 Thu, 08 Dec 2022 14:03:21 +0300
EHLO
250-sbx42.hosting.reg.ru Hello www.censys.io [167.94.146.58]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250-STARTTLS
250 HELP
Start TLS
220 TLS go ahead

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
Issuer Chain

53/DNS UDP
Observed Dec 08, 2022 at 4:55pm UTC


View All Data

Details

Server Type
AUTHORITATIVE
R Code
REFUSED

80/HTTP TCP
Observed Dec 07, 2022 at 3:36am UTC


View All Data Go

Software

nginx

Details

http://31.31.196.199
Request
GET /
Protocol
HTTP/1.1
Status Code
200
Status Reason
OK
Body Hash
sha1:72f3376ee8c3f87227dd4150be5a3e31ee1e1844
HTML Title
Домен не добавлен в панели
Response Body

110/POP3 TCP
Observed Dec 08, 2022 at 7:55pm UTC


View All Data

Software

Dovecot

Details

Banner
+OK Dovecot ready.
Start TLS
+OK Begin TLS negotiation now.

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
Issuer Chain

111/PORTMAP UDP
Observed Dec 07, 2022 at 3:35am UTC


View All Data

Details

Banner (Hex)
  
00000000
00000010
00000020
00000030
00000040
00000050
00000060
00000070
00000080
00000090
1a a9 ff e1 00 00 00 01 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 01 00 01 86 a0
00 00 00 04 00 00 00 06 00 00 00 6f 00 00 00 01
00 01 86 a0 00 00 00 03 00 00 00 06 00 00 00 6f
00 00 00 01 00 01 86 a0 00 00 00 02 00 00 00 06
00 00 00 6f 00 00 00 01 00 01 86 a0 00 00 00 04
00 00 00 11 00 00 00 6f 00 00 00 01 00 01 86 a0
00 00 00 03 00 00 00 11 00 00 00 6f 00 00 00 01
00 01 86 a0 00 00 00 02 00 00 00 11 00 00 00 6f
00 00 00 00
................
................
...........o....
...............o
................
...o............
.......o........
...........o....
...............o
....

143/IMAP TCP
Observed Dec 08, 2022 at 1:33am UTC


View All Data

Details

Banner
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
Start TLS
a001 OK Begin TLS negotiation now.

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
Issuer Chain

443/HTTP TCP
Observed Dec 08, 2022 at 7:11pm UTC


View All Data Go

Software

linux
nginx

Details

https://31.31.196.199
Request
GET /
Protocol
HTTP/1.1
Status Code
200
Status Reason
OK
Body Hash
sha1:72f3376ee8c3f87227dd4150be5a3e31ee1e1844
HTML Title
Домен не добавлен в панели
Response Body

TLS

Fingerprint
JARM
29d29d00029d29d00042d42d0000005d86ccb1a0567e012264097a0315d7a7
JA3S
15af977ce25de452b96affa2addb1036
Handshake
Version Selected
TLSv1_3
Cipher Selected
TLS_AES_256_GCM_SHA384
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
Issuer Chain

465/SMTP TCP
Observed Dec 08, 2022 at 5:33pm UTC


View All Data

Software

exim 4.96

Details

Banner
220 sbx42.hosting.reg.ru ESMTP Exim 4.96 Thu, 08 Dec 2022 20:34:05 +0300
EHLO
250-sbx42.hosting.reg.ru Hello scanner-25.ch1.censys-scanner.com [162.142.125.220]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250 HELP

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
Issuer Chain

587/SMTP TCP
Observed Dec 08, 2022 at 4:19pm UTC


View All Data

Software

exim 4.96

Details

Banner
220 sbx42.hosting.reg.ru ESMTP Exim 4.96 Thu, 08 Dec 2022 19:20:08 +0300
EHLO
250-sbx42.hosting.reg.ru Hello scanner-27.ch1.censys-scanner.com [167.94.138.117]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250-STARTTLS
250 HELP
Start TLS
220 TLS go ahead

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
Issuer Chain

993/IMAP TCP
Observed Dec 07, 2022 at 1:10pm UTC


View All Data

Details

Banner
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

TLS

Fingerprint
JARM
05d02d20d21d20d05c05d02d05d20da23a7a927f270a23608b3c7a72999cab
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
Issuer Chain

995/POP3 TCP
Observed Dec 08, 2022 at 8:44am UTC


View All Data

Software

Dovecot

Details

Banner
+OK Dovecot ready.

TLS

Fingerprint
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
Issuer Chain

1500/HTTP TCP
Observed Dec 07, 2022 at 1:12pm UTC


View All Data Go

Details

https://31.31.196.199:1500
Request
GET /
Protocol
HTTP/1.1
Status Code
200
Status Reason
OK
Body Hash
sha1:9bd60f470b0210fa96d113ec8518dd38368e5268
HTML Title
Authorization
Response Body
Javascript required for login

![](/manimg/dragon/default/login-logo-ispmgr.svg)

Your browser is out of date, so the interface may work incorrectly. Please
update or change the browser

Log in

Exosoft (C) 2022

TLS

Fingerprint
JARM
20d02d20d29d20d20c20d02d20d20d82810f76c2e865422123f6b34a0b8aa5
JA3S
303951d4c50efb2e991652225a6f02b1
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
Issuer Chain

3306/MYSQL TCP
Observed Dec 07, 2022 at 1:13pm UTC


View All Data

Software

Oracle MySQL
linux

Details

Error Code
1130
Error ID
ER_HOST_NOT_PRIVILEGED
Error Message
Host 'scanner-07.ch1.censys-scanner.com' is not allowed to connect to this MySQL server

9443/HTTP TCP
Observed Dec 07, 2022 at 1:12pm UTC


View All Data Go

Software

nginx 1.9.15

Details

https://31.31.196.199:9443
Request
GET /
Protocol
HTTP/1.1
Status Code
302
Status Reason
Moved Temporarily
Body Hash
sha1:b0d0bea9bca4195a1324bfab7c9054768fa7648f
HTML Title
302 Found
Response Body
# 302 Found

* * *

nginx/1.9.15

TLS

Fingerprint
JARM
05d10d20d21d20d05c05d10d05d20d74fcf6501ae7a92319e575bfafd2a827
JA3S
ccc514751b175866924439bdbb5bba34
Handshake
Version Selected
TLSv1_2
Cipher Selected
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Leaf Certificate
d7b272092e56d225d84c1d9149f486bfb8a5dca5af51c1b5b998cc08dab27615
CN=*.hosting.reg.ru
C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2

Geographic Location

Country
Russia (RU)
Coordinates
55.7386, 37.6068
Timezone
Europe/Moscow