37.140.192.111

As of: May 23, 2025 1:21am UTC | Latest

Basic Information

Reverse DNS: server61.hosting.reg.ru
Forward DNS: mail.armbeltorg.am, www.svarog-uv.org, ckr.gkh76.ru, allrehab.online, www.stom.allrehab.online, ...
Routing: 37.140.192.0/24 via AS-REG, RU (AS197695)
OS: linux
Services (17): 21/FTP, 22/SSH, 25/SMTP, 53/DNS, 80/HTTP, 110/POP3, 111/PORTMAP, 111/PORTMAP, 143/IMAP, 443/HTTP, 465/SMTP, 587/SMTP, 993/IMAP, 995/POP3, 1500/HTTP, 3306/MYSQL, 3310/MYSQL
Labels: Database Email File Sharing Remote Access

FTP 21/TCP

05/22/2025 19:40 UTC

File Sharing

View All Data

Software

linux

Details

Banner

220 FTP Server ready.

Auth TLS Response

234 AUTH TLS successful

Status Code

220

Status Meaning

Service ready for new user.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

SSH 22/TCP

05/22/2025 02:51 UTC

Remote Access

View All Data

Software

linux

Dropbear SSH Project Dropbear SSH 2024.85

Details

Host Key

Algorithm: ecdsa-sha2-nistp256
Fingerprint: e52702aad3c4363b464c7a64cd8dbc45c9d1bd027c318575c74abc546b4f7de0

Negotiated

Key Exchange: [email protected]
Symmetric Cipher: aes128-ctr [] aes128-ctr []
MAC: hmac-sha2-256 [] hmac-sha2-256 []

SMTP 25/TCP

05/22/2025 16:25 UTC

View All Data

Software

exim 4.98.2

Details

Banner

220 server61.hosting.reg.ru ESMTP Exim 4.98.2 Thu, 22 May 2025 19:25:52 +0300

EHLO

250-server61.hosting.reg.ru Hello www.censys.io [167.94.146.63]
250-SIZE 52428800
250-LIMITS MAILMAX=1000 RCPTMAX=50
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250-STARTTLS
250 HELP

Start TLS

220 TLS go ahead

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

DNS 53/UDP

05/22/2025 06:57 UTC

View All Data

Details

Server Type: AUTHORITATIVE
R Code: REFUSED

HTTP 80/TCP

05/22/2025 15:58 UTC

View All Data Go

Software

nginx

Details

http://37.140.192.111/

Status

200 OK

Body Hash

sha1:eca6cc248af9bad6d04e41f07c387e63c95061aa

HTML Title

Домен не привязан к хостингу

Response Body

POP3 110/TCP

05/23/2025 01:14 UTC

View All Data

Software

linux

Dovecot

Details

Banner

+OK Dovecot ready.

Start TLS

+OK Begin TLS negotiation now.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

PORTMAP 111/TCP

05/22/2025 07:13 UTC

View All Data

Software

linux

Details

PORTMAP 111/UDP

05/23/2025 00:28 UTC

View All Data

Details

IMAP 143/TCP

05/22/2025 18:57 UTC

View All Data

Software

Dovecot

Details

Banner

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

Start TLS

a001 OK Begin TLS negotiation now.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

HTTP 443/TCP

05/22/2025 12:05 UTC

View All Data Go

Software

nginx

Details

https://37.140.192.111/

Status

200 OK

Body Hash

sha1:eca6cc248af9bad6d04e41f07c387e63c95061aa

HTML Title

Домен не привязан к хостингу

Response Body

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JARM: 29d29d00029d29d00042d42d0000005d86ccb1a0567e012264097a0315d7a7
JA3S: 15af977ce25de452b96affa2addb1036
JA4S: t130200_1302_a56c5b993250

SMTP 465/TCP

05/22/2025 19:15 UTC

View All Data

Software

exim 4.98.2

Details

Banner

220 server61.hosting.reg.ru ESMTP Exim 4.98.2 Thu, 22 May 2025 22:15:57 +0300

EHLO

250-server61.hosting.reg.ru Hello www.censys.io [66.132.153.61]
250-SIZE 52428800
250-LIMITS MAILMAX=1000 RCPTMAX=50
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250 HELP

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JARM: 07d10d12d21d21d00007d10d07d21dbcdec66d41b4fbe37d83de5ea6f7fba6
JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

SMTP 587/TCP

05/23/2025 01:21 UTC

View All Data

Software

exim 4.98.2

Details

Banner

220 server61.hosting.reg.ru ESMTP Exim 4.98.2 Fri, 23 May 2025 04:21:40 +0300

EHLO

250-server61.hosting.reg.ru Hello www.censys.io [66.132.153.61]
250-SIZE 52428800
250-LIMITS MAILMAX=1000 RCPTMAX=50
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250-STARTTLS
250 HELP

Start TLS

220 TLS go ahead

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

IMAP 993/TCP

05/22/2025 20:51 UTC

View All Data

Software

Dovecot

Details

Banner

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JARM: 05d02d20d21d20d05c05d02d05d20da23a7a927f270a23608b3c7a72999cab
JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

POP3 995/TCP

05/22/2025 15:12 UTC

View All Data

Software

Dovecot

Details

Banner

+OK Dovecot ready.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JARM: 05d02d20d21d20d05c05d02d05d20da23a7a927f270a23608b3c7a72999cab
JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

HTTP 1500/TCP

05/22/2025 06:57 UTC

View All Data Go

Details

https://37.140.192.111:1500/

Status

200 OK

Body Hash

sha1:fb05b943b56d8c6fe0fc192f38c4b0ea59f35183

HTML Title

Authorization

Response Body

      Javascript required for login

Your browser is out of date, so the interface may work incorrectly. Please
update or change the browser

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JARM: 29d02d00029d29d29d29d02d29d29ddec047dae5c8df4f14546ec68b9cee76
JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

MYSQL 3306/TCP

05/22/2025 11:02 UTC

Database

View All Data

Software

Oracle MySQL 5.7.44-48

Details

Protocol Version: 10
Character Set: 8

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: 385872ee4f0ca7fd83c288d62b0b0c59a2e4563e133ce247a6508380cb42610d
Subject: CN=MySQL_Server_5.7.24-27_Auto_Generated_Server_Certificate
Issuer: CN=MySQL_Server_5.7.24-27_Auto_Generated_CA_Certificate

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

MYSQL 3310/TCP

05/22/2025 06:49 UTC

Database

View All Data

Software

Oracle MySQL 5.7.44-48

Details

Protocol Version: 10
Character Set: 8

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: 385872ee4f0ca7fd83c288d62b0b0c59a2e4563e133ce247a6508380cb42610d
Subject: CN=MySQL_Server_5.7.24-27_Auto_Generated_Server_Certificate
Issuer: CN=MySQL_Server_5.7.24-27_Auto_Generated_CA_Certificate

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

Geographic Location

City: Moscow
Province: Moscow
Country: Russia (RU)
Coordinates: 55.75222, 37.61556
Timezone: Europe/Moscow

37.140.192.111

Basic Information

FTP 21/TCP 05/22/2025 19:40 UTC

Software

linux

Details

TLS

Handshake

Certificate

Fingerprint

SSH 22/TCP 05/22/2025 02:51 UTC

Software

linux

Dropbear SSH Project Dropbear SSH 2024.85

Details

Host Key

Negotiated

SMTP 25/TCP 05/22/2025 16:25 UTC

Software

exim 4.98.2

Details

TLS

Handshake

Certificate

Fingerprint

DNS 53/UDP 05/22/2025 06:57 UTC

Details

HTTP 80/TCP 05/22/2025 15:58 UTC

Software

nginx

Details

http://37.140.192.111/

POP3 110/TCP 05/23/2025 01:14 UTC

Software

linux

Dovecot

Details

TLS

Handshake

Certificate

Fingerprint

PORTMAP 111/TCP 05/22/2025 07:13 UTC

Software

linux

Details

PORTMAP 111/UDP 05/23/2025 00:28 UTC

Details

IMAP 143/TCP 05/22/2025 18:57 UTC

Software

Dovecot

Details

TLS

Handshake

Certificate

Fingerprint

HTTP 443/TCP 05/22/2025 12:05 UTC

Software

nginx

Details

https://37.140.192.111/

TLS

Handshake

Certificate

Fingerprint

SMTP 465/TCP 05/22/2025 19:15 UTC

Software

exim 4.98.2

Details

TLS

Handshake

Certificate

Fingerprint

SMTP 587/TCP 05/23/2025 01:21 UTC

Software

exim 4.98.2

Details

TLS

Handshake

Certificate

Fingerprint

FTP 21/TCP

05/22/2025 19:40 UTC

SSH 22/TCP

05/22/2025 02:51 UTC

SMTP 25/TCP

05/22/2025 16:25 UTC

DNS 53/UDP

05/22/2025 06:57 UTC

HTTP 80/TCP

05/22/2025 15:58 UTC

POP3 110/TCP

05/23/2025 01:14 UTC

PORTMAP 111/TCP

05/22/2025 07:13 UTC

PORTMAP 111/UDP

05/23/2025 00:28 UTC

IMAP 143/TCP

05/22/2025 18:57 UTC

HTTP 443/TCP

05/22/2025 12:05 UTC

SMTP 465/TCP

05/22/2025 19:15 UTC

SMTP 587/TCP

05/23/2025 01:21 UTC

IMAP 993/TCP

05/22/2025 20:51 UTC

POP3 995/TCP

05/22/2025 15:12 UTC

HTTP 1500/TCP

05/22/2025 06:57 UTC

MYSQL 3306/TCP

05/22/2025 11:02 UTC

MYSQL 3310/TCP

05/22/2025 06:49 UTC