142.132.195.16

As of: Jun 14, 2024 5:59pm UTC | Latest
{
  "ip": "142.132.195.16",
  "services": [
    {
      "_decoded": "ssh",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u1",
      "banner_hashes": [
        "sha256:7f884f317e207e1df4b58ed0db420fff8b24166704f8df7637cb70c7af407daa"
      ],
      "banner_hex": "5353482d322e302d4f70656e5353485f382e3470312044656269616e2d352b64656231317531",
      "extended_service_name": "SSH",
      "labels": [
        "remote-access"
      ],
      "observed_at": "2024-06-14T03:43:47.033720674Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 22,
      "service_name": "SSH",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        }
      ],
      "source_ip": "167.94.146.56",
      "ssh": {
        "endpoint_id": {
          "_encoding": {
            "raw": "DISPLAY_UTF8"
          },
          "raw": "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u1",
          "protocol_version": "2.0",
          "software_version": "OpenSSH_8.4p1",
          "comment": "Debian-5+deb11u1"
        },
        "kex_init_message": {
          "kex_algorithms": [
            "curve25519-sha256",
            "[email protected]",
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "diffie-hellman-group-exchange-sha256",
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group14-sha256"
          ],
          "host_key_algorithms": [
            "rsa-sha2-512",
            "rsa-sha2-256",
            "ssh-rsa",
            "ecdsa-sha2-nistp256",
            "ssh-ed25519"
          ],
          "client_to_server_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]"
          ],
          "server_to_client_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]"
          ],
          "client_to_server_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "server_to_client_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "client_to_server_compression": [
            "none",
            "[email protected]"
          ],
          "server_to_client_compression": [
            "none",
            "[email protected]"
          ],
          "first_kex_follows": false
        },
        "algorithm_selection": {
          "kex_algorithm": "[email protected]",
          "host_key_algorithm": "ecdsa-sha2-nistp256",
          "client_to_server_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          },
          "server_to_client_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          }
        },
        "server_host_key": {
          "fingerprint_sha256": "ac5bd9d9ebf77aa8308656f2951cacfdf5168229eb0d69d71dffa50325923dac",
          "ecdsa_public_key": {
            "_encoding": {
              "b": "DISPLAY_BASE64",
              "gx": "DISPLAY_BASE64",
              "gy": "DISPLAY_BASE64",
              "n": "DISPLAY_BASE64",
              "p": "DISPLAY_BASE64",
              "x": "DISPLAY_BASE64",
              "y": "DISPLAY_BASE64"
            },
            "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
            "curve": "P-256",
            "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
            "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
            "length": 256,
            "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
            "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
            "x": "8rEHL7Y6OgWnZAgXKlTsJgMJpU4SEj5fqRL+Fb+Liw0=",
            "y": "3D5sCqcKJ3qaJp8yksQQqWoZe+Pvdto/MQR2MDGZSmg="
          }
        },
        "hassh_fingerprint": "3ccd1778a76049721c71ad7d2bf62bbc"
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n",
      "banner_hashes": [
        "sha256:06979a32a7c0d3b28fd465e7945973a8d4a970d20e69b6dd2d70aa0cd20dd840"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203134360d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://142.132.195.16/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "146"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Connection": [
              "keep-alive"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>404 Not Found</title>"
          ],
          "body_size": 146,
          "body": "<html>\r\n<head><title>404 Not Found</title></head>\r\n<body>\r\n<center><h1>404 Not Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
          "body_hashes": [
            "sha256:55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0",
            "sha1:3c0af39ecb3753c5fee3b53d063c7286019eac3b"
          ],
          "body_hash": "sha1:3c0af39ecb3753c5fee3b53d063c7286019eac3b",
          "html_title": "404 Not Found"
        },
        "supports_http2": false
      },
      "observed_at": "2024-06-14T17:59:04.306292284Z",
      "perspective_id": "PERSPECTIVE_ORANGE",
      "port": 80,
      "service_name": "HTTP",
      "source_ip": "167.94.145.106",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains\r\n",
      "banner_hashes": [
        "sha256:57350f7fc4fab8faa3a7ff39d3af12556e12364597c1627ce12b955715aa0b21"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203134360d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a5374726963742d5472616e73706f72742d53656375726974793a206d61782d6167653d31353732343830303b20696e636c756465537562446f6d61696e730d0a",
      "certificate": "3bc94f646ac9bc1e7fcbed25316455b3ee4bd57068e4bfb79fc991bd47ad6e85",
      "discovery_method": "PREDICTIVE_METHOD_18",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://142.132.195.16/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "Connection": [
              "keep-alive"
            ],
            "_encoding": {
              "Connection": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Strict_Transport_Security": "DISPLAY_UTF8"
            },
            "Date": [
              "<REDACTED>"
            ],
            "Content_Length": [
              "146"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Strict_Transport_Security": [
              "max-age=15724800; includeSubDomains"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>404 Not Found</title>"
          ],
          "body_size": 146,
          "body": "<html>\r\n<head><title>404 Not Found</title></head>\r\n<body>\r\n<center><h1>404 Not Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
          "body_hashes": [
            "sha256:55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0",
            "sha1:3c0af39ecb3753c5fee3b53d063c7286019eac3b"
          ],
          "body_hash": "sha1:3c0af39ecb3753c5fee3b53d063c7286019eac3b",
          "html_title": "404 Not Found"
        },
        "supports_http2": true
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "29d29d00029d29d00042d42d00000023f2ae7180b8a0816654f2296c007d93",
        "cipher_and_version_fingerprint": "29d29d00029d29d00042d42d000000",
        "tls_extensions_sha256": "23f2ae7180b8a0816654f2296c007d93",
        "observed_at": "2024-06-14T04:47:44.486106560Z"
      },
      "observed_at": "2024-06-14T00:41:37.428725943Z",
      "perspective_id": "PERSPECTIVE_ORANGE",
      "port": 443,
      "service_name": "HTTP",
      "source_ip": "167.94.145.111",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "3bc94f646ac9bc1e7fcbed25316455b3ee4bd57068e4bfb79fc991bd47ad6e85",
          "leaf_data": {
            "names": [
              "ingress.local"
            ],
            "subject_dn": "O=Acme Co, CN=Kubernetes Ingress Controller Fake Certificate",
            "issuer_dn": "O=Acme Co, CN=Kubernetes Ingress Controller Fake Certificate",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "ad5d3d07a4be224e8033f651b35d31631a964bdcdc45c50161e6ac094547d93a",
            "fingerprint": "3bc94f646ac9bc1e7fcbed25316455b3ee4bd57068e4bfb79fc991bd47ad6e85",
            "issuer": {
              "common_name": [
                "Kubernetes Ingress Controller Fake Certificate"
              ],
              "organization": [
                "Acme Co"
              ]
            },
            "subject": {
              "common_name": [
                "Kubernetes Ingress Controller Fake Certificate"
              ],
              "organization": [
                "Acme Co"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "z6BB1EyanW813HFJcMc21+LqvcPWpIqIeUT0gDxUYsBqBnopVTYA3rH0jN4ACf0sbhl2qVfMOh5jGDUsmLTV1qwoHLoxRGpVZimW2Cub9MEDijZTU5RPsvdhJ++xdFhLBvFl9GzxMHZVNKp0uyub7SQF+3vdMLpgdADYrpEefPt9lqw/cXoQauHTuJI1bFXN8YvGCSS61AK9A0ytJ1LAjkmfHvzJdXyzgIKY4pWymAS0vRL4qyPWe9NWnxt36SulBEJgVUsi9r4Yj3pAcaJsHk+QGiBRc2qzXFmpmqVo+YLP53pDUUaWhk4PUz6flNxt8mrEfcjpfjrTFf1OG5Kk/w==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "41c45d4ae297c79b29d719a7843fa3f11221fc1ac77f997bdffefbdaabab6470"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "15af977ce25de452b96affa2addb1036",
            "ja4s": "t130200_1302_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "303951d4c50efb2e991652225a6f02b1",
            "ja4s": "t120200_c02f_344b4dce5a52"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX"
      },
      "banner": "",
      "banner_hashes": [
        "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
      ],
      "certificate": "cd55db5474a77e4a6b394dc4e36b2b949ac6a9cbb99dc4ab3cd6d8a78f0d3585",
      "discovery_method": "PREDICTIVE_METHOD_20",
      "extended_service_name": "UNKNOWN",
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "3fd3fd20d0000000003fd3fd3fd3fda859d4cce1f85fcba092ff8c96c96b06",
        "cipher_and_version_fingerprint": "3fd3fd20d0000000003fd3fd3fd3fd",
        "tls_extensions_sha256": "a859d4cce1f85fcba092ff8c96c96b06",
        "observed_at": "2024-06-03T08:50:14.103537921Z"
      },
      "observed_at": "2024-06-12T22:53:22.501975100Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 2379,
      "service_name": "UNKNOWN",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        }
      ],
      "source_ip": "162.142.125.219",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "cd55db5474a77e4a6b394dc4e36b2b949ac6a9cbb99dc4ab3cd6d8a78f0d3585",
          "leaf_data": {
            "names": [
              "127.0.0.1",
              "142.132.195.16",
              "debian-bullseye-hetzner",
              "localhost"
            ],
            "subject_dn": "CN=debian-bullseye-hetzner",
            "issuer_dn": "CN=etcd-ca",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "019614f690ddc85a47695f88fc194e9bd4e9ca2c2ffdf51e467bfe3fe3895696",
            "fingerprint": "cd55db5474a77e4a6b394dc4e36b2b949ac6a9cbb99dc4ab3cd6d8a78f0d3585",
            "issuer": {
              "common_name": [
                "etcd-ca"
              ]
            },
            "subject": {
              "common_name": [
                "debian-bullseye-hetzner"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "v1j5/8vdkjPT+foyjkPexpDSPM/cCLw2iuzloMhlAXaEKyVOuusVn+t75jVUHJZcIvCdOSr9Gi1+wqeXmsZMkoe4y6ElTbMpQKlx4u3u1kFAqHXgOD8mSeHzxPtuANxmoQd0FHKOHLzKUG1FhY2W8O8gFykEQYgX0lD+ZObYuym2yZQYbpcxA0/ezVS1jVvx7909P74kn8O1RsxhJld09iK1O2c69thZDwhRebZRhSVQGcw1zWs84jd9/fMhHB1QbqrGlbbZ9rwHiSH1Qy+Nd4gMCq1witcPylpgqeqjEFVhk608UKcT4b1zqoXXCk3y3UXyBck0/4vGUtV0PxfGSw==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "97beb1afdc9198c4ce8e8dc558d67c3f10122fc65c03df2ddb3e5cf835f5f74a"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          }
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 29
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "d25619cb77d3219fc9fc14cb6b35eacc",
        "ja4s": "t120200_cca8_8b3ccbb12ea0",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "d25619cb77d3219fc9fc14cb6b35eacc",
            "ja4s": "t120200_cca8_8b3ccbb12ea0"
          }
        ]
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX"
      },
      "banner": "",
      "banner_hashes": [
        "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
      ],
      "certificate": "4b4689e2d19d078565ca7d441bfe6247f206d3a62b9fcd9827e4fe2e1bd3f8db",
      "discovery_method": "PREDICTIVE_METHOD_20",
      "extended_service_name": "UNKNOWN",
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "3fd3fd20d0000000003fd3fd3fd3fda859d4cce1f85fcba092ff8c96c96b06",
        "cipher_and_version_fingerprint": "3fd3fd20d0000000003fd3fd3fd3fd",
        "tls_extensions_sha256": "a859d4cce1f85fcba092ff8c96c96b06",
        "observed_at": "2024-06-01T05:58:55.485586155Z"
      },
      "observed_at": "2024-06-12T12:08:35.091773374Z",
      "perspective_id": "PERSPECTIVE_ORANGE",
      "port": 2380,
      "service_name": "UNKNOWN",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        }
      ],
      "source_ip": "167.94.145.100",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "4b4689e2d19d078565ca7d441bfe6247f206d3a62b9fcd9827e4fe2e1bd3f8db",
          "leaf_data": {
            "names": [
              "127.0.0.1",
              "142.132.195.16",
              "debian-bullseye-hetzner",
              "localhost"
            ],
            "subject_dn": "CN=debian-bullseye-hetzner",
            "issuer_dn": "CN=etcd-ca",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "70cb4709bc1ba7cc622964af24bf13060129217126d6a99d04269f9b4e32d76c",
            "fingerprint": "4b4689e2d19d078565ca7d441bfe6247f206d3a62b9fcd9827e4fe2e1bd3f8db",
            "issuer": {
              "common_name": [
                "etcd-ca"
              ]
            },
            "subject": {
              "common_name": [
                "debian-bullseye-hetzner"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "nhnBdw+fhJyo7kVVviuIRi9rkvDzbroCZ8kdmfuldqlVJVRbEdnjgUsB5fTms4NxZhBDc5UiNI76H1oC609uT2areqlMku6S4Aa9qE+jdVUSs2akAy3ex7atHNjQwRlXMr3clMMfR/U/zKOmSTySh9gPUxveWf+Ebmh6pLKskFNTMNK+00QUW+RRHhipFvE9uvOu8GAVY5oWJRHF5tQJ9rPdfsaVe6hCoqQaMG+fDHFiSMqLfXUF2952PiYcIJAtS8gIjbyunSg377IHQQ88dqgNqa3e03LdzcIPKfXQfCtjaDI/1gLQu0fvJ8+O53Y1QDvkC10uZi528y8pvpkXbw==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "78f68f75b055ad2d61b1af055002284cf549ce17b78ef86f6ff37fc8e131cfd4"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          }
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 29
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "d25619cb77d3219fc9fc14cb6b35eacc",
        "ja4s": "t120200_cca8_8b3ccbb12ea0",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "d25619cb77d3219fc9fc14cb6b35eacc",
            "ja4s": "t120200_cca8_8b3ccbb12ea0"
          }
        ]
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "kubernetes",
      "_encoding": {
        "certificate": "DISPLAY_HEX"
      },
      "certificate": "1ec4cd12abbdd63fbb5adf5ef1d341313e6cd6c5a0d88ffdb56d00f1825ac172",
      "discovery_method": "PREDICTIVE_METHOD_12",
      "extended_service_name": "KUBERNETES",
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "3fd3fd20d00000000043d3fd3fd43da936ab0256fab25eca082941d14e3ece",
        "cipher_and_version_fingerprint": "3fd3fd20d00000000043d3fd3fd43d",
        "tls_extensions_sha256": "a936ab0256fab25eca082941d14e3ece",
        "observed_at": "2024-05-30T20:36:49.915431292Z"
      },
      "kubernetes": {
        "version_info": {
          "major": "1",
          "minor": "27",
          "git_version": "v1.27.8",
          "git_commit": "66fee42707cd7f5a89f1987f7cb81b02dd19161c",
          "git_tree_state": "clean",
          "build_date": "2023-11-15T16:50:09Z",
          "go_version": "go1.20.11",
          "compiler": "gc",
          "platform": "linux/amd64"
        },
        "kubernetes_dashboard_found": false
      },
      "observed_at": "2024-06-14T07:20:21.945941982Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 6443,
      "service_name": "KUBERNETES",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:kubernetes:kubernetes:1.27:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Kubernetes",
          "product": "Kubernetes",
          "version": "1.27",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:golang:go:1.20.11:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Golang",
          "product": "Go",
          "version": "1.20.11",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:linux:linux:*:*:*:*:*:*:amd64:*",
          "part": "o",
          "vendor": "Linux",
          "product": "linux",
          "target_hw": "amd64",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.119",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "1ec4cd12abbdd63fbb5adf5ef1d341313e6cd6c5a0d88ffdb56d00f1825ac172",
          "leaf_data": {
            "names": [
              "10.245.0.1",
              "142.132.195.16",
              "debian-bullseye-hetzner",
              "kubernetes",
              "kubernetes.default",
              "kubernetes.default.svc",
              "kubernetes.default.svc.cluster.local"
            ],
            "subject_dn": "CN=kube-apiserver",
            "issuer_dn": "CN=kubernetes",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "0e32f6e01d7495e4aed8ccfad73d199f415feeecfe15c1aaa822ffd78ebc9a59",
            "fingerprint": "1ec4cd12abbdd63fbb5adf5ef1d341313e6cd6c5a0d88ffdb56d00f1825ac172",
            "issuer": {
              "common_name": [
                "kubernetes"
              ]
            },
            "subject": {
              "common_name": [
                "kube-apiserver"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "5alKBOBueG749JvipGmqh1zPKwvGF5Nu8LShzFEG5Uf/fR9Wy56j2A/9OZvBqrRXQDVorRAGMDs8nIVZcOvjcnd6oYzijmAyqsyzGQavErYpUqkrFvFMB1aHgZVJxmztDe5Kq0Ku9fyQjPLQUQZSx2IRyGUEQos9+/LmLUKCESSM6PBN9B6VpvNNyONh6ktm9AfBrpCCkvk7CmrMh4yxywq/GrRM6/doSalNosxWgDMOor6ZhsgYERtahmEnOIfv42D0b9xflWFh7Wv09YXPdW209wCxYH5hfqSpFJDjscj+ywPpyssIc+ZjU5mz2sCPBG89NgZOLRXtJJ6/RlReOw==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "0318328dd835f82448ab4e1a2ab666530d6a18dd22c3833ebc65ca66a03b19ed"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891",
        "ja4s": "t130200_1303_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "475c9302dc42b2751db9edcac3b74891",
            "ja4s": "t130200_1303_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "d25619cb77d3219fc9fc14cb6b35eacc",
            "ja4s": "t120200_cca8_344b4dce5a52"
          }
        ]
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n",
      "banner_hashes": [
        "sha256:06979a32a7c0d3b28fd465e7945973a8d4a970d20e69b6dd2d70aa0cd20dd840"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203134360d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a",
      "discovery_method": "PREDICTIVE_METHOD_24",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://142.132.195.16:8181/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "146"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Connection": [
              "keep-alive"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>404 Not Found</title>"
          ],
          "body_size": 146,
          "body": "<html>\r\n<head><title>404 Not Found</title></head>\r\n<body>\r\n<center><h1>404 Not Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
          "body_hashes": [
            "sha256:55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0",
            "sha1:3c0af39ecb3753c5fee3b53d063c7286019eac3b"
          ],
          "body_hash": "sha1:3c0af39ecb3753c5fee3b53d063c7286019eac3b",
          "html_title": "404 Not Found"
        },
        "supports_http2": false
      },
      "observed_at": "2024-06-12T23:13:15.751171791Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 8181,
      "service_name": "HTTP",
      "source_ip": "206.168.34.112",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 400 Bad Request\r\nDate:  <REDACTED>\r\nContent-Length: 0\r\n",
      "banner_hashes": [
        "sha256:705d71b30aa6c2c65add1218bca4f8213f7744ec39387167d47d3a6687356caa"
      ],
      "banner_hex": "485454502f312e31203430302042616420526571756573740d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a20300d0a",
      "certificate": "be11be1b300c714fa95378e1cd1cbe1badecd5d9d83ed1528ac0049b65899590",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://142.132.195.16:8443/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 400,
          "status_reason": "Bad Request",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "0"
            ]
          },
          "body_size": 0
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "40d40d40d00000000043d40d40d43d9d4f83ac87494648a3bed4ab670795cd",
        "cipher_and_version_fingerprint": "40d40d40d00000000043d40d40d43d",
        "tls_extensions_sha256": "9d4f83ac87494648a3bed4ab670795cd",
        "observed_at": "2024-05-17T15:41:24.306047118Z"
      },
      "observed_at": "2024-06-14T12:36:44.881263547Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 8443,
      "service_name": "HTTP",
      "source_ip": "206.168.34.41",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "be11be1b300c714fa95378e1cd1cbe1badecd5d9d83ed1528ac0049b65899590",
          "leaf_data": {
            "names": [
              "ingress-nginx-controller-admission",
              "ingress-nginx-controller-admission.ingress-nginx.svc"
            ],
            "subject_dn": "O=nil2",
            "issuer_dn": "O=nil1",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "fef16c17a9df40bbe7860468be26fc45380b8f3c76cb213a2bae42082effbcd9",
            "fingerprint": "be11be1b300c714fa95378e1cd1cbe1badecd5d9d83ed1528ac0049b65899590",
            "issuer": {
              "organization": [
                "nil1"
              ]
            },
            "subject": {
              "organization": [
                "nil2"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "XOdU+6H4vqTcx9g+yoKA5exYgS/IVzkKEpFP3Nqjr6c=",
                "y": "bYO7RF1VH7rgw+KGPmuQjlKiNHXb+fQtAuuzNwdYGBg="
              },
              "fingerprint": "4221adc82517933d544c43fe444da589dfec447241cc719ec6ec1e30ba4036c7"
            },
            "signature": {
              "signature_algorithm": "ECDSA-SHA256",
              "self_signed": false
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891",
        "ja4s": "t130200_1303_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "475c9302dc42b2751db9edcac3b74891",
            "ja4s": "t130200_1303_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "954f7e9207d4c9012fd0692885732b12",
            "ja4s": "t120200_cca9_344b4dce5a52"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 200 OK\r\nContent-Type: text/html; charset=UTF-8\r\nDate:  <REDACTED>\r\nContent-Length: 961\r\n",
      "banner_hashes": [
        "sha256:7cc4e860c0773149aed8e8e7dd4f5cd37aa0b4e0fead7e1749e6d71ba6f89b0b"
      ],
      "banner_hex": "485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d5554462d380d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a203936310d0a",
      "discovery_method": "PREDICTIVE_METHOD_7",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://142.132.195.16:9100/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 200,
          "status_reason": "OK",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "961"
            ],
            "Content_Type": [
              "text/html; charset=UTF-8"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>Node Exporter</title>",
            "<meta charset=\"UTF-8\">",
            "<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">"
          ],
          "body_size": 961,
          "body": "<html lang=\"en\">\n  <head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Node Exporter</title>\n    <style>body {\n  font-family: -apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,Liberation Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;\n  margin: 0;\n}\nheader {\n  background-color: #e6522c;\n  color: #fff;\n  font-size: 1rem;\n  padding: 1rem;\n}\nmain {\n  padding: 1rem;\n}\nlabel {\n  display: inline-block;\n  width: 0.5em;\n}\n\n</style>\n  </head>\n  <body>\n    <header>\n      <h1>Node Exporter</h1>\n    </header>\n    <main>\n      <h2>Prometheus Node Exporter</h2>\n      <div>Version: (version=1.7.0, branch=HEAD, revision=7333465abf9efba81876303bb57e6fadb946041b)</div>\n      <div>\n        <ul>\n          \n          <li><a href=\"/metrics\">Metrics</a></li>\n          \n        </ul>\n      </div>\n      \n      \n    </main>\n  </body>\n</html>\n",
          "body_hashes": [
            "sha256:1978b288d76bb18be468b00e910385cc401b1b03e0ea70598194a56ac84ff703",
            "sha1:9f376459793b052b49c56c60e21d84180c1653d6"
          ],
          "body_hash": "sha1:9f376459793b052b49c56c60e21d84180c1653d6",
          "html_title": "Node Exporter"
        },
        "supports_http2": false
      },
      "observed_at": "2024-06-13T00:49:26.136137362Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 9100,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:prometheus:node_exporter:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Prometheus",
          "product": "Node Exporter",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "206.168.34.38",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/plain; charset=utf-8\r\nX-Content-Type-Options: nosniff\r\nDate:  <REDACTED>\r\nContent-Length: 19\r\n",
      "banner_hashes": [
        "sha256:d01d33874c1a1716026081b3b3fc90b8173203aba832874a8faf5e56e0058837"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a436f6e74656e742d547970653a20746578742f706c61696e3b20636861727365743d7574662d380d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a2031390d0a",
      "certificate": "b5926258c8506a962ac7a33ea008986de92f7248d58fa96f00600cc1a0d5253e",
      "discovery_method": "PREDICTIVE_METHOD_20",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://142.132.195.16:10250/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "X_Content_Type_Options": [
              "nosniff"
            ],
            "_encoding": {
              "X_Content_Type_Options": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8"
            },
            "Date": [
              "<REDACTED>"
            ],
            "Content_Length": [
              "19"
            ],
            "Content_Type": [
              "text/plain; charset=utf-8"
            ]
          },
          "body_size": 19,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "404 page not found\n",
          "body_hashes": [
            "sha256:b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793",
            "sha1:da3968197e7bf67aa45a77515b52ba2710c5fc34"
          ],
          "body_hash": "sha1:da3968197e7bf67aa45a77515b52ba2710c5fc34"
        },
        "supports_http2": true
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "3fd3fd20d00000000043d3fd3fd43da936ab0256fab25eca082941d14e3ece",
        "cipher_and_version_fingerprint": "3fd3fd20d00000000043d3fd3fd43d",
        "tls_extensions_sha256": "a936ab0256fab25eca082941d14e3ece",
        "observed_at": "2024-06-03T17:29:33.797431377Z"
      },
      "observed_at": "2024-06-14T00:12:50.080962579Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 10250,
      "service_name": "HTTP",
      "source_ip": "167.94.138.126",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "b5926258c8506a962ac7a33ea008986de92f7248d58fa96f00600cc1a0d5253e",
          "chain_fps_sha_256": [
            "8101ea1b7c19cd36b772132cb93a0b657a0977169134e8f805e8b82e6b9d8da9"
          ],
          "leaf_data": {
            "names": [
              "debian-bullseye-hetzner"
            ],
            "subject_dn": "CN=debian-bullseye-hetzner@1700347178",
            "issuer_dn": "CN=debian-bullseye-hetzner-ca@1700347178",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "cd4ced50c88a82b8c0d0e597b84a1e16ca02c68ee4368641966daf527b2c0656",
            "fingerprint": "b5926258c8506a962ac7a33ea008986de92f7248d58fa96f00600cc1a0d5253e",
            "issuer": {
              "common_name": [
                "debian-bullseye-hetzner-ca@1700347178"
              ]
            },
            "subject": {
              "common_name": [
                "debian-bullseye-hetzner@1700347178"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "ra8DZ5LFtlAjMyBH2vGMLSdRbKLO9l8LKYxclXzjGYEs2AemY+rK3b6IkMvx9YkDVVp353BRssZs2yo/2BccB7RvJvD6KDitzjrE41wWUabinroxP4AAEI054/cFxAws7mjjx3hTvON9Y5VElnCmnST0Klw8EsX1Cf3HBhL0o7OwTszNMzmXHWNuv1qSmHamqDFPtqk17HxHWvjny1d8KZ+TorTYkg3whdc9GIWKWAe35i2HlG4ZsS+5NuzDyUPfOETtCz+3Z+Tt4/F9FdW9ZXiC6blS49VZaOdVcz9CS7mjASfcoEM9SSn4BOGqb69CUb+aHavCV0yIvU1M/l3AiQ==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "e0a1c5c6a5fed56e58fe72de3089272317463b4635e6eef3027e58c1ad3fffda"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "8101ea1b7c19cd36b772132cb93a0b657a0977169134e8f805e8b82e6b9d8da9",
              "subject_dn": "CN=debian-bullseye-hetzner-ca@1700347178",
              "issuer_dn": "CN=debian-bullseye-hetzner-ca@1700347178"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891",
        "ja4s": "t130200_1303_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "475c9302dc42b2751db9edcac3b74891",
            "ja4s": "t130200_1303_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "d25619cb77d3219fc9fc14cb6b35eacc",
            "ja4s": "t120200_cca8_344b4dce5a52"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/plain; charset=utf-8\r\nX-Content-Type-Options: nosniff\r\nDate:  <REDACTED>\r\nContent-Length: 19\r\n",
      "banner_hashes": [
        "sha256:d01d33874c1a1716026081b3b3fc90b8173203aba832874a8faf5e56e0058837"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a436f6e74656e742d547970653a20746578742f706c61696e3b20636861727365743d7574662d380d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a2031390d0a",
      "discovery_method": "PREDICTIVE_METHOD_12",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://142.132.195.16:10254/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "X_Content_Type_Options": [
              "nosniff"
            ],
            "_encoding": {
              "X_Content_Type_Options": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8"
            },
            "Date": [
              "<REDACTED>"
            ],
            "Content_Length": [
              "19"
            ],
            "Content_Type": [
              "text/plain; charset=utf-8"
            ]
          },
          "body_size": 19,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "404 page not found\n",
          "body_hashes": [
            "sha256:b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793",
            "sha1:da3968197e7bf67aa45a77515b52ba2710c5fc34"
          ],
          "body_hash": "sha1:da3968197e7bf67aa45a77515b52ba2710c5fc34"
        },
        "supports_http2": false
      },
      "observed_at": "2024-06-14T00:23:49.586189077Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 10254,
      "service_name": "HTTP",
      "source_ip": "162.142.125.36",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/plain; charset=utf-8\r\nX-Content-Type-Options: nosniff\r\nDate:  <REDACTED>\r\nContent-Length: 19\r\n",
      "banner_hashes": [
        "sha256:d01d33874c1a1716026081b3b3fc90b8173203aba832874a8faf5e56e0058837"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a436f6e74656e742d547970653a20746578742f706c61696e3b20636861727365743d7574662d380d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a2031390d0a",
      "discovery_method": "PREDICTIVE_METHOD_12",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://142.132.195.16:10256/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "X_Content_Type_Options": [
              "nosniff"
            ],
            "_encoding": {
              "X_Content_Type_Options": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8"
            },
            "Date": [
              "<REDACTED>"
            ],
            "Content_Length": [
              "19"
            ],
            "Content_Type": [
              "text/plain; charset=utf-8"
            ]
          },
          "body_size": 19,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "404 page not found\n",
          "body_hashes": [
            "sha256:b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793",
            "sha1:da3968197e7bf67aa45a77515b52ba2710c5fc34"
          ],
          "body_hash": "sha1:da3968197e7bf67aa45a77515b52ba2710c5fc34"
        },
        "supports_http2": false
      },
      "observed_at": "2024-06-13T00:42:39.155518784Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 10256,
      "service_name": "HTTP",
      "source_ip": "206.168.34.188",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 200 OK\r\nCache-Control: no-cache, no-store, must-revalidate\r\nDate:  <REDACTED>\r\nContent-Length: 0\r\n",
      "banner_hashes": [
        "sha256:4fe00bb7f1afca6d1b4b190597cd124948c3bec1eaee7fa1fd197c96ff772ef0"
      ],
      "banner_hex": "485454502f312e3120323030204f4b0d0a43616368652d436f6e74726f6c3a206e6f2d63616368652c206e6f2d73746f72652c206d7573742d726576616c69646174650d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a20300d0a",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_3",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://142.132.195.16:32197/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 200,
          "status_reason": "OK",
          "headers": {
            "Cache_Control": [
              "no-cache, no-store, must-revalidate"
            ],
            "_encoding": {
              "Cache_Control": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8"
            },
            "Date": [
              "<REDACTED>"
            ],
            "Content_Length": [
              "0"
            ]
          },
          "body_size": 0
        },
        "supports_http2": false
      },
      "observed_at": "2024-06-12T22:58:35.873798614Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 32197,
      "service_name": "HTTP",
      "source_ip": "206.168.34.34",
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Germany",
    "country_code": "DE",
    "city": "Falkenstein",
    "postal_code": "08223",
    "timezone": "Europe/Berlin",
    "province": "Saxony",
    "coordinates": {
      "latitude": 50.47788,
      "longitude": 12.37129
    }
  },
  "location_updated_at": "2024-06-03T08:09:45.161753869Z",
  "autonomous_system": {
    "asn": 24940,
    "description": "HETZNER-AS",
    "bgp_prefix": "142.132.128.0/17",
    "name": "HETZNER-AS",
    "country_code": "DE"
  },
  "autonomous_system_updated_at": "2024-06-03T08:09:45.161797927Z",
  "whois": {
    "network": {
      "handle": "DE-HETZNER-19900326",
      "name": "Hetzner Online GmbH",
      "cidrs": [
        "142.132.128.0/17"
      ],
      "created": "2021-04-15T00:00:00Z",
      "updated": "2021-04-15T00:00:00Z"
    },
    "organization": {
      "handle": "ORG-HOA1-RIPE",
      "name": "Hetzner Online GmbH",
      "address": "Industriestrasse 25\\nD-91710\\nGunzenhausen\\nGERMANY",
      "abuse_contacts": [
        {
          "handle": "HOAC1-RIPE",
          "name": "Hetzner Online GmbH - Contact Role",
          "email": "[email protected]"
        }
      ],
      "admin_contacts": [
        {
          "handle": "GM834-RIPE",
          "name": "Guenther Mueller",
          "email": "[email protected]"
        },
        {
          "handle": "HOAC1-RIPE",
          "name": "Hetzner Online GmbH - Contact Role",
          "email": "[email protected]"
        },
        {
          "handle": "MF1400-RIPE",
          "name": "Martin Fritzsche",
          "email": "[email protected]"
        },
        {
          "handle": "MH375-RIPE",
          "name": "Martin Hetzner",
          "email": "[email protected]"
        },
        {
          "handle": "SK2374-RIPE",
          "name": "Stephan Konvickova",
          "email": "[email protected]"
        }
      ]
    }
  },
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:linux:linux:*:*:*:*:*:*:amd64:*",
    "part": "o",
    "vendor": "Linux",
    "product": "linux",
    "target_hw": "amd64"
  },
  "dns": {
    "names": [
      "www.test.chfp.io",
      "api-admin.new.test.chfp.io",
      "test.chfp.io",
      "admin.new.test.chfp.io",
      "tomasbarta.eu",
      "www.consolidatedmanagement.cz",
      "www.coman.cz",
      "www.sentry.oone.dev",
      "static.16.195.132.142.clients.your-server.de",
      "mendelplaza.cz",
      "www.submitit.cz",
      "admin.pohyboteka.cz",
      "admin.test.superfrank.io",
      "ricpo.cz",
      "www.vkslavia.eu",
      "api-admin.test.superfrank.io",
      "wss.jenform.cz",
      "payments.jenform.cz",
      "consolidatedmanagement.cz",
      "www.vkslavia.com",
      "jenform.cz",
      "sprof.cz",
      "sentry.oone.dev",
      "submitit.cz",
      "api.pohyboteka.cz",
      "www.test.superfrank.io",
      "test.superfrank.io",
      "api-client.test.superfrank.io",
      "www.new.test.chfp.io",
      "www.sprof.cz",
      "vkslavia.eu",
      "vkslavia.cz",
      "api-client.new.test.chfp.io",
      "admin.test.chfp.io",
      "keycloak.oone.dev",
      "www.tomasbarta.eu",
      "vkslavia.com",
      "coman.cz",
      "www.ricpo.cz",
      "test2.submitit.cz",
      "www.airportpark.cz",
      "api-client.test.chfp.io",
      "pohyboteka.cz",
      "www.mendelplaza.cz",
      "airportpark.cz",
      "airportpark.submitit.cz",
      "test.submitit.cz",
      "api.jenform.cz",
      "www.vkslavia.cz",
      "new.test.chfp.io",
      "api-admin.test.chfp.io"
    ],
    "records": {
      "api-admin.new.test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-06-10T19:04:57.310697313Z"
      },
      "vkslavia.com": {
        "record_type": "A",
        "resolved_at": "2024-06-12T18:44:36.935727395Z"
      },
      "jenform.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-02T17:39:51.730156048Z"
      },
      "admin.pohyboteka.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-03T18:29:39.181607057Z"
      },
      "www.mendelplaza.cz": {
        "record_type": "A",
        "resolved_at": "2024-05-26T17:52:57.242295689Z"
      },
      "api-admin.test.superfrank.io": {
        "record_type": "A",
        "resolved_at": "2024-06-03T20:18:18.608515488Z"
      },
      "www.ricpo.cz": {
        "record_type": "A",
        "resolved_at": "2024-05-30T18:26:31.649000493Z"
      },
      "vkslavia.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-09T18:41:41.001897157Z"
      },
      "www.test.superfrank.io": {
        "record_type": "A",
        "resolved_at": "2024-05-24T20:07:09.676959326Z"
      },
      "mendelplaza.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-12T18:59:30.759324243Z"
      },
      "www.vkslavia.cz": {
        "record_type": "A",
        "resolved_at": "2024-05-19T18:40:06.222090025Z"
      },
      "api-client.test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-06-03T20:13:08.318794815Z"
      },
      "www.vkslavia.eu": {
        "record_type": "A",
        "resolved_at": "2024-06-01T19:30:07.678840397Z"
      },
      "static.16.195.132.142.clients.your-server.de": {
        "record_type": "A",
        "resolved_at": "2024-05-29T19:25:56.987892146Z"
      },
      "admin.new.test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-06-10T19:04:56.269665537Z"
      },
      "test.submitit.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-04T18:55:55.227576015Z"
      },
      "api.pohyboteka.cz": {
        "record_type": "A",
        "resolved_at": "2024-05-27T18:29:59.292286003Z"
      },
      "www.airportpark.cz": {
        "record_type": "A",
        "resolved_at": "2024-05-31T17:51:23.903579431Z"
      },
      "wss.jenform.cz": {
        "record_type": "A",
        "resolved_at": "2024-05-29T19:02:59.765260364Z"
      },
      "www.consolidatedmanagement.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-04T18:54:46.203987851Z"
      },
      "api-client.test.superfrank.io": {
        "record_type": "A",
        "resolved_at": "2024-06-01T20:06:57.975649498Z"
      },
      "www.sentry.oone.dev": {
        "record_type": "A",
        "resolved_at": "2024-06-07T19:50:35.524705985Z"
      },
      "ricpo.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-04T18:55:25.398626660Z"
      },
      "pohyboteka.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-06T17:57:25.753868069Z"
      },
      "test2.submitit.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-12T19:00:43.317292993Z"
      },
      "consolidatedmanagement.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-03T18:28:56.580271636Z"
      },
      "www.test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-05-24T20:03:45.508554907Z"
      },
      "sprof.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-03T18:30:20.158901138Z"
      },
      "admin.test.superfrank.io": {
        "record_type": "A",
        "resolved_at": "2024-06-05T19:52:20.994602278Z"
      },
      "www.new.test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-05-26T19:33:49.863100531Z"
      },
      "new.test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-06-04T20:49:22.408688932Z"
      },
      "submitit.cz": {
        "record_type": "A",
        "resolved_at": "2024-05-29T19:04:38.657687288Z"
      },
      "airportpark.submitit.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-03T18:30:29.787113739Z"
      },
      "tomasbarta.eu": {
        "record_type": "A",
        "resolved_at": "2024-05-31T18:46:19.550535790Z"
      },
      "api-client.new.test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-06-09T20:27:42.224434638Z"
      },
      "www.tomasbarta.eu": {
        "record_type": "A",
        "resolved_at": "2024-05-30T19:34:31.530477266Z"
      },
      "admin.test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-06-02T19:13:24.229179349Z"
      },
      "www.sprof.cz": {
        "record_type": "A",
        "resolved_at": "2024-05-30T18:26:07.664626260Z"
      },
      "coman.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-12T18:58:53.562185781Z"
      },
      "vkslavia.eu": {
        "record_type": "A",
        "resolved_at": "2024-05-20T19:42:24.389760729Z"
      },
      "payments.jenform.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-09T18:40:17.133800640Z"
      },
      "test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-06-01T20:02:38.730384372Z"
      },
      "keycloak.oone.dev": {
        "record_type": "A",
        "resolved_at": "2024-05-29T19:55:15.506473440Z"
      },
      "www.vkslavia.com": {
        "record_type": "A",
        "resolved_at": "2024-05-17T18:57:23.293126754Z"
      },
      "www.submitit.cz": {
        "record_type": "A",
        "resolved_at": "2024-05-25T18:40:37.529225381Z"
      },
      "sentry.oone.dev": {
        "record_type": "A",
        "resolved_at": "2024-06-08T18:35:00.670883800Z"
      },
      "www.coman.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-06T17:57:15.886935938Z"
      },
      "api.jenform.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-07T18:53:34.364086452Z"
      },
      "test.superfrank.io": {
        "record_type": "A",
        "resolved_at": "2024-05-23T21:23:27.397554925Z"
      },
      "api-admin.test.chfp.io": {
        "record_type": "A",
        "resolved_at": "2024-06-02T19:13:25.502775805Z"
      },
      "airportpark.cz": {
        "record_type": "A",
        "resolved_at": "2024-06-01T18:24:58.078534104Z"
      }
    },
    "reverse_dns": {
      "names": [
        "static.16.195.132.142.clients.your-server.de"
      ],
      "resolved_at": "2024-06-05T04:09:11.549901981Z"
    }
  },
  "last_updated_at": "2024-06-14T17:59:04.469Z",
  "labels": [
    "remote-access"
  ]
}