GeneralInformation

Hostnames	31-31-202-137.ovz.vps.regruhosting.ru
Domains	regruhosting.ru
Country	Russian Federation
City	Moscow
Organization	Reg.Ru Hosting
ISP	"Domain names registrar REG.RU", Ltd
ASN	AS197695

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 22 25 53 80 111 443 993 995

1340886486 | 2025-01-13T05:06:12.819857

21 / tcp

220 FTP Server ready.\r\n

-1570353890 | 2025-01-12T17:32:56.194332

22 / tcp

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQCz/8Og+iDLIfGiOu0K/oTtj4Abz5SBDdL2D/YB0PJrUX/7
7XpKIT4JvGqk8Y8KuuHcE7bxXNdN15v0ZJjtiAcI7nlmY0uKivFlBCBeMHcmk9zgG78rN5GwUJyn
IB5EIGGzdogV0lcF8GHd5PRI6vgILvrfIPOcq3qqKtY/a0LZARp9Rmbs1A7J0K1PGhEELaJ52J72
tElP58yzaMbuxy+sZfENtMuI/+boO9HBdMiRHCndFSsz4Qjq4OxIk9ZgpRvq8VdUpNBn1L4FmItp
QM2pHT+PmCAZaC9nMsu6gXb0R3uzWLItO0soOHRTePIB1DYZrLHQY7Zp8dGQqBXt+xTR
Fingerprint: 36:26:d4:04:8b:85:3b:30:fc:5d:6d:01:77:7b:f6:d8

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com
	aes128-cbc
	aes192-cbc
	aes256-cbc
	blowfish-cbc
	cast128-cbc
	3des-cbc

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-1642575063 | 2025-01-10T20:30:33.826592

25 / tcp

220 31-31-202-137.ovz.vps.regruhosting.ru ESMTP Exim 4.97.1 Fri, 10 Jan 2025 23:29:54 +0300
250-31-31-202-137.ovz.vps.regruhosting.ru Hello 224.112.13.35 [224.112.13.35]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH PLAIN LOGIN CRAM-MD5
250-CHUNKING
250-STARTTLS
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            dc:f5:c2:42:a2:47:95:de
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=151-248-122-119.ovz.vps.regruhosting.ru/emailAddress=root@151-248-122-119.ovz.vps.regruhosting.ru
        Validity
            Not Before: Jun  2 11:12:35 2017 GMT
            Not After : May 31 11:12:35 2027 GMT
        Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=151-248-122-119.ovz.vps.regruhosting.ru/emailAddress=root@151-248-122-119.ovz.vps.regruhosting.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:f4:49:63:a4:7b:a8:fd:93:35:b9:d6:99:bb:dd:
                    2c:14:fb:64:b7:79:60:8e:52:85:43:65:70:a9:84:
                    10:02:fb:34:cc:db:b3:dd:15:65:14:e6:ed:a9:c6:
                    d6:de:20:fe:ce:0a:7c:8a:25:c7:ad:b5:85:0a:ac:
                    b7:59:2b:bf:8a:df:f6:37:ee:95:69:c6:f6:48:e9:
                    20:65:29:36:e0:25:c2:3f:5b:f0:7e:db:ae:7f:32:
                    b1:f1:5d:60:35:a8:ad:13:19:33:04:61:ac:2b:fd:
                    5c:67:4a:41:9a:dd:c7:10:e7:fe:20:c8:fe:fd:8c:
                    d3:17:11:fc:78:e5:96:57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                44:D8:B7:CE:49:39:16:92:74:BC:85:2F:83:0E:CD:96:18:1E:51:DF
            X509v3 Authority Key Identifier: 
                44:D8:B7:CE:49:39:16:92:74:BC:85:2F:83:0E:CD:96:18:1E:51:DF
            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        20:f1:93:11:7f:cb:19:8b:fb:10:bb:20:cb:33:96:a0:f7:f7:
        d9:bb:67:11:7b:0f:24:91:6e:c9:1a:75:65:59:1c:38:6a:47:
        b7:71:46:a5:dd:a8:4e:dd:1d:ab:42:d6:f6:7d:04:10:43:ed:
        b2:f6:10:bb:35:cb:fd:a8:b4:e0:59:33:ee:78:27:ac:d3:58:
        1c:6d:e5:4b:84:be:68:b2:a8:43:6c:81:f9:6c:e8:0c:34:24:
        7d:d9:ec:9f:97:f3:e6:3a:81:4b:b6:15:ff:07:fb:d1:3f:c8:
        2b:8e:14:e5:32:95:ac:bb:17:2e:9e:53:99:cb:c1:37:e5:18:
        9c:c1

-2101715503 | 2025-01-19T10:30:36.122513

53 / tcp

9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.16
Resolver name: 31-31-202-137.ovz.vps.regruhosting.ru

897585984 | 2025-01-05T03:28:01.358897

80 / tcp

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.2
Date: Sun, 05 Jan 2025 03:28:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://31.31.202.137:443/

CVE-2023-44487 CVE-2021-3618

-1345205424 | 2025-01-15T11:13:22.035400

111 / tcp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-1345205424 | 2025-01-11T07:09:45.803368

111 / udp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

229609748 | 2025-01-16T00:17:22.128913

443 / tcp

Authorization

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 16 Jan 2025 00:17:21 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Expires: 0
Set-Cookie: ispmgrlang5=dragon:en; path=/; expires=Fri, 16 Jan 2026 03:17:21 MSK; Secure; HttpOnly
X-Frame-Options: SAMEORIGIN

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cf:e7:f1:1e:89:f4:3f:95
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151.248.122.119
        Validity
            Not Before: Jun  2 11:09:39 2017 GMT
            Not After : May 31 11:09:39 2027 GMT
        Subject: CN=151.248.122.119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c6:c4:35:73:ba:1e:8d:52:41:a9:74:59:d9:99:
                    0e:1c:9c:ab:36:3f:7d:7d:06:c5:71:77:97:8d:66:
                    69:2f:d0:4a:46:06:1e:06:ba:a8:ba:ff:26:73:75:
                    75:bc:90:e3:d7:25:4a:78:a6:dc:eb:8b:23:c8:7f:
                    cf:b1:26:52:99:f5:a3:35:f8:c1:52:4d:0f:17:8a:
                    bf:82:df:c7:6f:22:79:d1:44:d5:94:ec:5c:7b:a1:
                    53:36:95:00:8e:3f:95:f9:88:a4:f2:f2:5f:62:05:
                    4f:1b:32:58:4e:40:d5:fc:99:37:7c:e2:93:24:35:
                    0e:13:6e:59:79:0f:e3:62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        10:80:93:bd:6e:b4:ed:cd:1f:ab:85:fe:51:18:c2:50:25:5a:
        87:19:d5:9c:49:d2:39:36:f3:27:c6:d8:28:8c:ed:81:66:8f:
        ca:c7:63:e3:44:13:74:11:73:aa:91:f5:44:8f:ce:66:d0:a6:
        7c:6e:e3:ff:6a:51:ca:6b:7a:9e:f7:dd:c2:05:c8:77:0f:26:
        a5:6b:c8:8e:35:a8:0b:b5:df:49:35:5c:61:64:e0:55:a4:7c:
        fe:21:51:5a:16:da:a9:1b:e8:65:5a:d1:27:4c:72:ee:99:8b:
        2c:8e:6e:fb:8a:10:78:3b:66:5e:8f:3b:13:ce:62:0a:32:63:
        2d:29

CVE-2023-44487 CVE-2021-3618

-1708341480 | 2025-01-15T01:21:27.185944

993 / tcp

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready.
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

-1830824801 | 2024-12-26T22:07:27.372030

995 / tcp

+OK Dovecot ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
USER
SASL PLAIN LOGIN CRAM-MD5
.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            dc:f5:c2:42:a2:47:95:de
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=151-248-122-119.ovz.vps.regruhosting.ru/emailAddress=root@151-248-122-119.ovz.vps.regruhosting.ru
        Validity
            Not Before: Jun  2 11:12:35 2017 GMT
            Not After : May 31 11:12:35 2027 GMT
        Subject: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=151-248-122-119.ovz.vps.regruhosting.ru/emailAddress=root@151-248-122-119.ovz.vps.regruhosting.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:f4:49:63:a4:7b:a8:fd:93:35:b9:d6:99:bb:dd:
                    2c:14:fb:64:b7:79:60:8e:52:85:43:65:70:a9:84:
                    10:02:fb:34:cc:db:b3:dd:15:65:14:e6:ed:a9:c6:
                    d6:de:20:fe:ce:0a:7c:8a:25:c7:ad:b5:85:0a:ac:
                    b7:59:2b:bf:8a:df:f6:37:ee:95:69:c6:f6:48:e9:
                    20:65:29:36:e0:25:c2:3f:5b:f0:7e:db:ae:7f:32:
                    b1:f1:5d:60:35:a8:ad:13:19:33:04:61:ac:2b:fd:
                    5c:67:4a:41:9a:dd:c7:10:e7:fe:20:c8:fe:fd:8c:
                    d3:17:11:fc:78:e5:96:57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                44:D8:B7:CE:49:39:16:92:74:BC:85:2F:83:0E:CD:96:18:1E:51:DF
            X509v3 Authority Key Identifier: 
                44:D8:B7:CE:49:39:16:92:74:BC:85:2F:83:0E:CD:96:18:1E:51:DF
            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        20:f1:93:11:7f:cb:19:8b:fb:10:bb:20:cb:33:96:a0:f7:f7:
        d9:bb:67:11:7b:0f:24:91:6e:c9:1a:75:65:59:1c:38:6a:47:
        b7:71:46:a5:dd:a8:4e:dd:1d:ab:42:d6:f6:7d:04:10:43:ed:
        b2:f6:10:bb:35:cb:fd:a8:b4:e0:59:33:ee:78:27:ac:d3:58:
        1c:6d:e5:4b:84:be:68:b2:a8:43:6c:81:f9:6c:e8:0c:34:24:
        7d:d9:ec:9f:97:f3:e6:3a:81:4b:b6:15:ff:07:fb:d1:3f:c8:
        2b:8e:14:e5:32:95:ac:bb:17:2e:9e:53:99:cb:c1:37:e5:18:
        9c:c1

31.31.202.137

Last Seen: 2025-01-19

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1340886486 | 2025-01-13T05:06:12.819857
21 / tcp

ProFTPD or KnFTPD

-1570353890 | 2025-01-12T17:32:56.194332
22 / tcp

OpenSSH7.4

-1642575063 | 2025-01-10T20:30:33.826592
25 / tcp

Exim smtpd4.97.1

-2101715503 | 2025-01-19T10:30:36.122513
53 / tcp

897585984 | 2025-01-05T03:28:01.358897
80 / tcp

nginx1.20.2

-1345205424 | 2025-01-15T11:13:22.035400
111 / tcp

-1345205424 | 2025-01-11T07:09:45.803368
111 / udp

229609748 | 2025-01-16T00:17:22.128913
443 / tcp

nginx1.20.2

-1708341480 | 2025-01-15T01:21:27.185944
993 / tcp

-1830824801 | 2024-12-26T22:07:27.372030
995 / tcp

Products

Pricing

Contact Us

31.31.202.137

Last Seen: 2025-01-19

Tags:

GeneralInformation

Vulnerabilities All ports Port 22 Port 80 Port 443 Latest CVSS

OpenPorts

1340886486 | 2025-01-13T05:06:12.819857 21 / tcp

ProFTPD or KnFTPD

-1570353890 | 2025-01-12T17:32:56.194332 22 / tcp

OpenSSH7.4

-1642575063 | 2025-01-10T20:30:33.826592 25 / tcp

Exim smtpd4.97.1

-2101715503 | 2025-01-19T10:30:36.122513 53 / tcp

897585984 | 2025-01-05T03:28:01.358897 80 / tcp

nginx1.20.2

-1345205424 | 2025-01-15T11:13:22.035400 111 / tcp

-1345205424 | 2025-01-11T07:09:45.803368 111 / udp

229609748 | 2025-01-16T00:17:22.128913 443 / tcp

nginx1.20.2

-1708341480 | 2025-01-15T01:21:27.185944 993 / tcp

-1830824801 | 2024-12-26T22:07:27.372030 995 / tcp

Products

Pricing

Contact Us

Vulnerabilities

1340886486 | 2025-01-13T05:06:12.819857
21 / tcp

-1570353890 | 2025-01-12T17:32:56.194332
22 / tcp

-1642575063 | 2025-01-10T20:30:33.826592
25 / tcp

-2101715503 | 2025-01-19T10:30:36.122513
53 / tcp

897585984 | 2025-01-05T03:28:01.358897
80 / tcp

-1345205424 | 2025-01-15T11:13:22.035400
111 / tcp

-1345205424 | 2025-01-11T07:09:45.803368
111 / udp

229609748 | 2025-01-16T00:17:22.128913
443 / tcp

-1708341480 | 2025-01-15T01:21:27.185944
993 / tcp

-1830824801 | 2024-12-26T22:07:27.372030
995 / tcp