37.140.192.62

As of: Apr 23, 2025 9:27pm UTC | Latest

Basic Information

Reverse DNS: server109.hosting.reg.ru
Forward DNS: www.dobro.agency, www.bbrv.agency, ascension.center, glavpack33.ru, unicad.app, ...
Routing: 37.140.192.0/24 via AS-REG, RU (AS197695)
OS: linux
Services (17): 21/FTP, 22/SSH, 25/SMTP, 53/DNS, 80/HTTP, 110/POP3, 111/PORTMAP, 111/PORTMAP, 143/IMAP, 443/HTTP, 465/SMTP, 587/SMTP, 993/IMAP, 995/POP3, 1500/HTTP, 3306/MYSQL, 3310/MYSQL
Labels: Database Email File Sharing Remote Access

FTP 21/TCP

04/23/2025 09:14 UTC

File Sharing

Details

Banner

220 FTP Server ready.

Auth TLS Response

234 AUTH TLS successful

Status Code

220

Status Meaning

Service ready for new user.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

SSH 22/TCP

04/22/2025 22:59 UTC

Remote Access

View All Data

Software

linux

Dropbear SSH Project Dropbear SSH 2024.85

Details

Host Key

Algorithm: ecdsa-sha2-nistp256
Fingerprint: e52702aad3c4363b464c7a64cd8dbc45c9d1bd027c318575c74abc546b4f7de0

Negotiated

Key Exchange: [email protected]
Symmetric Cipher: aes128-ctr [] aes128-ctr []
MAC: hmac-sha2-256 [] hmac-sha2-256 []

SMTP 25/TCP

04/23/2025 00:35 UTC

View All Data

Software

exim 4.98.2

Details

Banner

220 server109.hosting.reg.ru ESMTP Exim 4.98.2 Wed, 23 Apr 2025 03:35:27 +0300

EHLO

250-server109.hosting.reg.ru Hello www.censys.io [66.132.153.63]
250-SIZE 52428800
250-LIMITS MAILMAX=1000 RCPTMAX=50
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250-STARTTLS
250 HELP

Start TLS

220 TLS go ahead

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

DNS 53/UDP

04/23/2025 15:54 UTC

View All Data

Details

Server Type: AUTHORITATIVE
R Code: REFUSED

HTTP 80/TCP

04/22/2025 17:30 UTC

View All Data Go

Software

nginx

Details

http://37.140.192.62/

Status

200 OK

Body Hash

sha1:e1532d28b4c892bb66ca4a1c10a47ab708e95e47

HTML Title

Домен не привязан к хостингу

Response Body

POP3 110/TCP

04/23/2025 13:50 UTC

View All Data

Software

Dovecot

Details

Banner

+OK Dovecot ready.

Start TLS

+OK Begin TLS negotiation now.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

PORTMAP 111/TCP

04/23/2025 20:12 UTC

View All Data

Software

linux

Details

PORTMAP 111/UDP

04/23/2025 03:31 UTC

View All Data

Details

IMAP 143/TCP

04/23/2025 15:36 UTC

View All Data

Software

Dovecot

Details

Banner

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

Start TLS

a001 OK Begin TLS negotiation now.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

HTTP 443/TCP

04/23/2025 20:13 UTC

View All Data Go

Software

nginx

Details

https://37.140.192.62/

Status

200 OK

Body Hash

sha1:e1532d28b4c892bb66ca4a1c10a47ab708e95e47

HTML Title

Домен не привязан к хостингу

Response Body

TLS

Handshake

Version Selected: TLSv1_3
Cipher Selected: TLS_AES_256_GCM_SHA384

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JARM: 29d29d00029d29d00042d42d0000005d86ccb1a0567e012264097a0315d7a7
JA3S: 15af977ce25de452b96affa2addb1036
JA4S: t130200_1302_a56c5b993250

SMTP 465/TCP

04/23/2025 10:13 UTC

View All Data

Software

exim 4.98.2

Details

Banner

220 server109.hosting.reg.ru ESMTP Exim 4.98.2 Wed, 23 Apr 2025 13:13:59 +0300

EHLO

250-server109.hosting.reg.ru Hello www.censys.io [66.132.153.55]
250-SIZE 52428800
250-LIMITS MAILMAX=1000 RCPTMAX=50
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250 HELP

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JARM: 07d10d12d21d21d00007d10d07d21dbcdec66d41b4fbe37d83de5ea6f7fba6
JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

SMTP 587/TCP

04/22/2025 23:34 UTC

View All Data

Software

exim 4.98.2

Details

Banner

220 server109.hosting.reg.ru ESMTP Exim 4.98.2 Wed, 23 Apr 2025 02:34:26 +0300

EHLO

250-server109.hosting.reg.ru Hello www.censys.io [167.94.138.169]
250-SIZE 52428800
250-LIMITS MAILMAX=1000 RCPTMAX=50
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH LOGIN PLAIN
250-STARTTLS
250 HELP

Start TLS

220 TLS go ahead

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

IMAP 993/TCP

04/23/2025 20:14 UTC

View All Data

Software

Dovecot

Details

Banner

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JARM: 05d02d20d21d20d05c05d02d05d20da23a7a927f270a23608b3c7a72999cab
JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

POP3 995/TCP

04/22/2025 22:12 UTC

View All Data

Software

Dovecot

Details

Banner

+OK Dovecot ready.

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: ffe3a2160e9838de55074d63688326a94088828c5628123490797e2463e42cfa
Subject: CN=*.hosting.reg.ru
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
Names: *.hosting.reg.ru, hosting.reg.ru

Fingerprint

JARM: 05d02d20d21d20d05c05d02d05d20da23a7a927f270a23608b3c7a72999cab
JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

HTTP 1500/TCP

04/23/2025 10:43 UTC

View All Data Go

Details

http://37.140.192.62:1500/

Status: 301 Moved Permanently
Redirect Location: https://37.140.192.62:1500/

MYSQL 3306/TCP

04/23/2025 20:52 UTC

Database

View All Data

Software

Oracle MySQL 5.7.44-48

Details

Protocol Version: 10
Character Set: 8

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: b9ad7641a795fc4c3ec5c07b7a1e5b33c77315de81906ce569af6fcf0fdd7a43
Subject: CN=MySQL_Server_5.7.23-24_Auto_Generated_Server_Certificate
Issuer: CN=MySQL_Server_5.7.23-24_Auto_Generated_CA_Certificate

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

MYSQL 3310/TCP

04/23/2025 20:16 UTC

Database

View All Data

Software

Oracle MySQL 5.7.44-48

Details

Protocol Version: 10
Character Set: 8

TLS

Handshake

Version Selected: TLSv1_2
Cipher Selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Certificate

Fingerprint: b9ad7641a795fc4c3ec5c07b7a1e5b33c77315de81906ce569af6fcf0fdd7a43
Subject: CN=MySQL_Server_5.7.23-24_Auto_Generated_Server_Certificate
Issuer: CN=MySQL_Server_5.7.23-24_Auto_Generated_CA_Certificate

Fingerprint

JA3S: 303951d4c50efb2e991652225a6f02b1
JA4S: t120200_c02f_344b4dce5a52

Geographic Location

City: Moscow
Province: Moscow
Country: Russia (RU)
Coordinates: 55.75222, 37.61556
Timezone: Europe/Moscow

37.140.192.62

Basic Information

FTP 21/TCP 04/23/2025 09:14 UTC

Details

TLS

Handshake

Certificate

Fingerprint

SSH 22/TCP 04/22/2025 22:59 UTC

Software

linux

Dropbear SSH Project Dropbear SSH 2024.85

Details

Host Key

Negotiated

SMTP 25/TCP 04/23/2025 00:35 UTC

Software

exim 4.98.2

Details

TLS

Handshake

Certificate

Fingerprint

DNS 53/UDP 04/23/2025 15:54 UTC

Details

HTTP 80/TCP 04/22/2025 17:30 UTC

Software

nginx

Details

http://37.140.192.62/

POP3 110/TCP 04/23/2025 13:50 UTC

Software

Dovecot

Details

TLS

Handshake

Certificate

Fingerprint

PORTMAP 111/TCP 04/23/2025 20:12 UTC

Software

linux

Details

PORTMAP 111/UDP 04/23/2025 03:31 UTC

Details

IMAP 143/TCP 04/23/2025 15:36 UTC

Software

Dovecot

Details

TLS

Handshake

Certificate

Fingerprint

HTTP 443/TCP 04/23/2025 20:13 UTC

Software

nginx

Details

https://37.140.192.62/

TLS

Handshake

Certificate

Fingerprint

SMTP 465/TCP 04/23/2025 10:13 UTC

Software

exim 4.98.2

Details

TLS

Handshake

Certificate

Fingerprint

SMTP 587/TCP 04/22/2025 23:34 UTC

Software

exim 4.98.2

Details

TLS

Handshake

Certificate

Fingerprint

IMAP 993/TCP 04/23/2025 20:14 UTC

Software

Dovecot

FTP 21/TCP

04/23/2025 09:14 UTC

SSH 22/TCP

04/22/2025 22:59 UTC

SMTP 25/TCP

04/23/2025 00:35 UTC

DNS 53/UDP

04/23/2025 15:54 UTC

HTTP 80/TCP

04/22/2025 17:30 UTC

POP3 110/TCP

04/23/2025 13:50 UTC

PORTMAP 111/TCP

04/23/2025 20:12 UTC

PORTMAP 111/UDP

04/23/2025 03:31 UTC

IMAP 143/TCP

04/23/2025 15:36 UTC

HTTP 443/TCP

04/23/2025 20:13 UTC

SMTP 465/TCP

04/23/2025 10:13 UTC

SMTP 587/TCP

04/22/2025 23:34 UTC

IMAP 993/TCP

04/23/2025 20:14 UTC

POP3 995/TCP

04/22/2025 22:12 UTC

HTTP 1500/TCP

04/23/2025 10:43 UTC

MYSQL 3306/TCP

04/23/2025 20:52 UTC

MYSQL 3310/TCP

04/23/2025 20:16 UTC