Scan Time: Tue Dec 30 23:19:28 2025 Target: 213.199.52.47 ---------------------------------------- Starting Nmap 7.95 ( https://nmap.org ) at 2025-12-30 23:16 UTC Nmap scan report for vmi2793055.contaboserver.net (213.199.52.47) Host is up (0.066s latency). Not shown: 992 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 9.6p1 Ubuntu 3ubuntu13.13 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 256 26:9f:f0:41:f1:bf:1c:5d:ce:8f:19:3f:31:71:58:1e (ECDSA) |_ 256 8a:f8:9d:24:6c:43:f6:4f:23:02:e8:ed:fa:a3:2e:98 (ED25519) 25/tcp filtered smtp 80/tcp open http nginx 1.24.0 (Ubuntu) |_http-title: 404 Not Found |_http-server-header: nginx/1.24.0 (Ubuntu) 443/tcp open ssl/http nginx 1.24.0 (Ubuntu) |_http-server-header: nginx/1.24.0 (Ubuntu) |_ssl-date: TLS randomness does not represent time | ssl-cert: Subject: commonName=agent.thinkingsas.com | Subject Alternative Name: DNS:agent.thinkingsas.com | Not valid before: 2025-09-05T12:42:37 |_Not valid after: 2025-12-04T12:42:36 |_http-title: Welcome to nginx! 465/tcp filtered smtps 3005/tcp open http Node.js Express framework |_http-title: Site doesn't have a title (application/json; charset=utf-8). |_http-cors: HEAD GET POST PUT DELETE PATCH 3006/tcp open deslogind? 3306/tcp open mysql MySQL 8.0.44-0ubuntu0.24.04.1 | ssl-cert: Subject: commonName=MySQL_Server_8.0.43_Auto_Generated_Server_Certificate | Not valid before: 2025-09-05T02:38:36 |_Not valid after: 2035-09-03T02:38:36 |_ssl-date: TLS randomness does not represent time | mysql-info: | Protocol: 10 | Version: 8.0.44-0ubuntu0.24.04.1 | Thread ID: 3542 | Capabilities flags: 65535 | Some Capabilities: SupportsCompression, Support41Auth, SupportsLoadDataLocal, Speaks41ProtocolOld, Speaks41ProtocolNew, LongColumnFlag, FoundRows, IgnoreSigpipes, LongPassword, SwitchToSSLAfterHandshake, ODBCClient, InteractiveClient, SupportsTransactions, IgnoreSpaceBeforeParenthesis, DontAllowDatabaseTableColumn, ConnectWithDatabase, SupportsMultipleResults, SupportsMultipleStatments, SupportsAuthPlugins | Status: Autocommit | Salt: \x12&y^qQmu | Z@j[n2haxS2 |_ Auth Plugin Name: caching_sha2_password Device type: general purpose|router Running: Linux 5.X, MikroTik RouterOS 7.X OS CPE: cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 OS details: Linux 5.0 - 5.14, MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) Network Distance: 16 hops Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel TRACEROUTE (using port 1723/tcp) HOP RTT ADDRESS 1 0.10 ms 172.18.0.1 2 3.07 ms 172.31.1.1 3 1.48 ms 26472.your-cloud.host (162.55.119.126) 4 ... 5 6 1.14 ms core-spine-rdev2.cloud2.fsn1.hetzner.com (213.239.239.81) 7 3.53 ms core22.fsn1.hetzner.com (213.239.227.214) 8 3.36 ms juniper8.dc3.fsn1.hetzner.com (213.239.240.14) 9 14.23 ms hbg-b2-link.ip.twelve99.net (62.115.192.154) 10 13.94 ms hbg-bb3-link.ip.twelve99.net (62.115.120.70) 11 20.41 ms ffm-bb1-link.ip.twelve99.net (62.115.123.76) 12 25.58 ms laut-b1-link.ip.twelve99.net (62.115.136.147) 13 21.57 ms contabofrance-ic-390813.ip.twelve99-cust.net (62.115.45.149) 14 ... 15 16 30.38 ms vmi2793055.contaboserver.net (213.199.52.47) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 185.77 seconds