164.138.220.26

As of: Jul 18, 2025 8:44pm UTC | Latest

Host

Attribute Value
ip 164.138.220.26
location.continent Europe
location.country Bulgaria
location.country_code BG
location.city Sofia
location.postal_code 1000
location.timezone Europe/Sofia
location.province Sofia-Capital
location.coordinates.latitude 42.69751
location.coordinates.longitude 23.32415
location_updated_at 2025-07-03T22:41:43.110492477Z
autonomous_system.asn 201200
autonomous_system.description SUPERHOSTING_AS
autonomous_system.bgp_prefix 164.138.220.0/23
autonomous_system.name SUPERHOSTING_AS
autonomous_system.country_code BG
autonomous_system_updated_at 2025-07-03T22:41:43.110624297Z
whois.network.handle SUPERHOSTINGBG
whois.network.name SuperHosting.BG - CL
whois.network.cidrs 164.138.220.0/23
whois.network.created 2013-07-12T00:00:00Z
whois.network.updated 2016-01-06T00:00:00Z
whois.organization.handle ORG-SL338-RIPE
whois.organization.name SuperHosting.BG Ltd.
whois.organization.address East, str. Dr. G. M. Dimitrov No. 36\n1797\nSofia\nBULGARIA
whois.organization.abuse_contacts.handle SHRO-RIPE
whois.organization.abuse_contacts.name SuperHosting.BG administrative contact
whois.organization.abuse_contacts.email [email protected]
dns.names dlst.mu-plovdiv.bg
dns.names edo.mup.bg
dns.names meduyjkx.superdnsserver.net
dns.names cpcontacts.meduniversity-plovdiv.bg
dns.names mf.mu-plovdiv.bg
dns.names www.ff.mu-plovdiv.bg
dns.names webdisk.meduniversity-plovdiv.bg
dns.names mc.mu-plovdiv.bg
dns.names cpcalendars.meduniversity-plovdiv.bg
dns.names mail.mup.bg
dns.names www.edo.mup.bg
dns.names www.archive.mu-plovdiv.bg
dns.names fdm.mu-plovdiv.bg
dns.names webmail.meduniversity-plovdiv.bg
dns.names www.meduniversity-plovdiv.bg.cdn.cloudflare.net
dns.names phd.mu-plovdiv.bg
dns.names cpanel.meduniversity-plovdiv.bg
dns.names www.dlst.mu-plovdiv.bg
dns.names www.phd.mu-plovdiv.bg
dns.names www.edo.meduniversity-plovdiv.bg
dns.names ezproxy.library.mu-plovdiv.bg
dns.names www.fdm.mu-plovdiv.bg
dns.names ff.mu-plovdiv.bg
dns.names fph.mu-plovdiv.bg
dns.names edo.meduniversity-plovdiv.bg
dns.names meduniversity-plovdiv.bg
dns.names mup.bg
dns.names www.fph.mu-plovdiv.bg
dns.names www.meduniversity-plovdiv.bg
dns.names www.mf.mu-plovdiv.bg
dns.names mail.meduniversity-plovdiv.bg
dns.names www.mc.mu-plovdiv.bg
dns.names cloudflare-resolve-to.meduniversity-plovdiv.bg
dns.names www.mu-plovdiv.meduniversity-plovdiv.bg
dns.records.webdisk.meduniversity-plovdiv.bg.record_type A
dns.records.webdisk.meduniversity-plovdiv.bg.resolved_at 2025-07-13T16:38:03.115313631Z
dns.records.www.mf.mu-plovdiv.bg.record_type A
dns.records.www.mf.mu-plovdiv.bg.resolved_at 2025-06-23T12:40:06.409946624Z
dns.records.www.meduniversity-plovdiv.bg.cdn.cloudflare.net.record_type CNAME
dns.records.www.meduniversity-plovdiv.bg.cdn.cloudflare.net.resolved_at 2025-07-08T03:53:15.563862833Z
dns.records.cpcontacts.meduniversity-plovdiv.bg.record_type A
dns.records.cpcontacts.meduniversity-plovdiv.bg.resolved_at 2025-07-12T12:34:21.447998648Z
dns.records.webmail.meduniversity-plovdiv.bg.record_type A
dns.records.webmail.meduniversity-plovdiv.bg.resolved_at 2025-07-18T12:29:51.236837680Z
dns.records.phd.mu-plovdiv.bg.record_type A
dns.records.phd.mu-plovdiv.bg.resolved_at 2025-07-08T12:32:57.203984101Z
dns.records.www.fdm.mu-plovdiv.bg.record_type A
dns.records.www.fdm.mu-plovdiv.bg.resolved_at 2025-07-18T12:30:59.121503319Z
dns.records.www.ff.mu-plovdiv.bg.record_type A
dns.records.www.ff.mu-plovdiv.bg.resolved_at 2025-07-03T12:38:50.782545993Z
dns.records.www.edo.meduniversity-plovdiv.bg.record_type A
dns.records.www.edo.meduniversity-plovdiv.bg.resolved_at 2025-07-17T12:23:37.310182309Z
dns.records.mup.bg.record_type A
dns.records.mup.bg.resolved_at 2025-07-08T12:29:09.679972427Z
dns.records.fph.mu-plovdiv.bg.record_type A
dns.records.fph.mu-plovdiv.bg.resolved_at 2025-07-01T12:39:56.943959551Z
dns.records.meduniversity-plovdiv.bg.record_type A
dns.records.meduniversity-plovdiv.bg.resolved_at 2025-07-12T12:34:20.862178934Z
dns.records.www.archive.mu-plovdiv.bg.record_type A
dns.records.www.archive.mu-plovdiv.bg.resolved_at 2025-07-18T12:30:57.324815474Z
dns.records.mf.mu-plovdiv.bg.record_type A
dns.records.mf.mu-plovdiv.bg.resolved_at 2025-07-14T12:26:35.830198921Z
dns.records.mc.mu-plovdiv.bg.record_type A
dns.records.mc.mu-plovdiv.bg.resolved_at 2025-07-13T16:36:53.572124478Z
dns.records.www.fph.mu-plovdiv.bg.record_type A
dns.records.www.fph.mu-plovdiv.bg.resolved_at 2025-07-17T12:28:58.457469780Z
dns.records.dlst.mu-plovdiv.bg.record_type A
dns.records.dlst.mu-plovdiv.bg.resolved_at 2025-07-11T14:29:46.222098487Z
dns.records.www.phd.mu-plovdiv.bg.record_type A
dns.records.www.phd.mu-plovdiv.bg.resolved_at 2025-07-15T12:27:11.450173505Z
dns.records.mail.meduniversity-plovdiv.bg.record_type CNAME
dns.records.mail.meduniversity-plovdiv.bg.resolved_at 2025-07-06T12:40:10.528851215Z
dns.records.www.edo.mup.bg.record_type A
dns.records.www.edo.mup.bg.resolved_at 2025-07-09T06:47:51.410299823Z
dns.records.edo.mup.bg.record_type A
dns.records.edo.mup.bg.resolved_at 2025-06-16T12:42:11.940415858Z
dns.records.cloudflare-resolve-to.meduniversity-plovdiv.bg.record_type CNAME
dns.records.cloudflare-resolve-to.meduniversity-plovdiv.bg.resolved_at 2025-07-13T16:38:01.939563147Z
dns.records.mail.mup.bg.record_type CNAME
dns.records.mail.mup.bg.resolved_at 2025-07-04T12:32:59.606971713Z
dns.records.cpcalendars.meduniversity-plovdiv.bg.record_type A
dns.records.cpcalendars.meduniversity-plovdiv.bg.resolved_at 2025-07-12T12:34:21.154993591Z
dns.records.www.mu-plovdiv.meduniversity-plovdiv.bg.record_type A
dns.records.www.mu-plovdiv.meduniversity-plovdiv.bg.resolved_at 2025-07-04T12:32:14.477008438Z
dns.records.meduyjkx.superdnsserver.net.record_type A
dns.records.meduyjkx.superdnsserver.net.resolved_at 2025-07-13T14:37:40.954173999Z
dns.records.www.mc.mu-plovdiv.bg.record_type A
dns.records.www.mc.mu-plovdiv.bg.resolved_at 2025-07-10T19:34:36.799584821Z
dns.records.edo.meduniversity-plovdiv.bg.record_type A
dns.records.edo.meduniversity-plovdiv.bg.resolved_at 2025-07-16T12:35:30.276445882Z
dns.records.www.meduniversity-plovdiv.bg.record_type CNAME
dns.records.www.meduniversity-plovdiv.bg.resolved_at 2025-07-07T12:29:35.293445556Z
dns.records.ezproxy.library.mu-plovdiv.bg.record_type A
dns.records.ezproxy.library.mu-plovdiv.bg.resolved_at 2025-07-13T16:36:53.490747411Z
dns.records.cpanel.meduniversity-plovdiv.bg.record_type A
dns.records.cpanel.meduniversity-plovdiv.bg.resolved_at 2025-07-06T12:40:09.258534109Z
dns.records.www.dlst.mu-plovdiv.bg.record_type A
dns.records.www.dlst.mu-plovdiv.bg.resolved_at 2025-06-17T12:30:56.118482851Z
dns.records.ff.mu-plovdiv.bg.record_type A
dns.records.ff.mu-plovdiv.bg.resolved_at 2025-07-16T12:38:05.079470461Z
dns.records.fdm.mu-plovdiv.bg.record_type A
dns.records.fdm.mu-plovdiv.bg.resolved_at 2025-07-08T12:30:56.172291086Z
dns.reverse_dns.names meduyjkx.superdnsserver.net
dns.reverse_dns.resolved_at 2025-06-24T15:52:17.060527647Z
last_updated_at 2025-07-18T20:44:18.166Z
labels email
labels remote-access

25/SMTP TCP View Definition

Attribute Value
services.banner 220-meduyjkx.superdnsserver.net ESMTP Exim 4.98.2 #2 Fri, 18 Jul 2025 04:32:05 +0300 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n
services.banner_hashes sha256:fa321c188933e85b353f7ebd81bbd60c475a87b04c0087b168d6066da56f09e7
services.banner_hex 3232302d6d656475796a6b782e7375706572646e737365727665722e6e65742045534d5450204578696d20342e39382e32202332204672692c203138204a756c20323032352030343a33323a3035202b30333030200d0a3232302d576520646f206e6f7420617574686f72697a652074686520757365206f6620746869732073797374656d20746f207472616e73706f727420756e736f6c6963697465642c200d0a32323020616e642f6f722062756c6b20652d6d61696c2e0d0a
services.certificate f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.extended_service_name SMTP-STARTTLS
services.labels email
services.observed_at 2025-07-18T01:32:04.978092361Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 25
services.service_name SMTP
services.smtp.banner 220-meduyjkx.superdnsserver.net ESMTP Exim 4.98.2 #2 Fri, 18 Jul 2025 04:32:05 +0300 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n
services.smtp.ehlo 250-meduyjkx.superdnsserver.net Hello www.censys.io [162.142.125.214]\r\n250-SIZE 52428800\r\n250-LIMITS MAILMAX=1000 RCPTMAX=50000\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250-STARTTLS\r\n250 HELP\r\n
services.smtp.start_tls 220 TLS go ahead\r\n
services.software.uniform_resource_identifier cpe:2.3:a:exim:exim:4.98.2:*:*:*:*:*:*:*
services.software.part a
services.software.vendor exim
services.software.product exim
services.software.version 4.98.2
services.software.other.family exim
services.software.source OSI_APPLICATION_LAYER
services.source_ip 162.142.125.214
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.leaf_data.names *.superdnsserver.net
services.tls.certificates.leaf_data.names superdnsserver.net
services.tls.certificates.leaf_data.subject_dn CN=*.superdnsserver.net
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint f6f3b2d35eca5c33bfa1df6e9a264dab593b3ccb954a38fb11ee9f72c6e69d4d
services.tls.certificates.leaf_data.fingerprint f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.superdnsserver.net
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 265965fcfad3d419f74e6cd2fc4921f66ec07094a955368660dd6c5ded077fcd
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.transport_protocol TCP
services.truncated false

53/DNS UDP View Definition

Attribute Value
services.banner unknown
services.banner_hashes sha256:b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc
services.banner_hex 756e6b6e6f776e
services.discovery_method IPV4_WALK_FULL_PRIORITY_1
services.dns.version unknown
services.dns.server_type AUTHORITATIVE
services.dns.r_code REFUSED
services.dns.resolves_correctly false
services.extended_service_name DNS
services.observed_at 2025-07-17T00:34:04.351805064Z
services.pending_removal_since 2025-07-18T01:34:08.677769891Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 53
services.service_name DNS
services.source_ip 206.168.34.39
services.transport_protocol UDP
services.truncated false

80/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 200 OK\r\nDate: <REDACTED>\r\nServer: Apache\r\nUpgrade: h2,h2c\r\nConnection: Upgrade\r\nLast-Modified: Thu, 12 Dec 2024 17:28:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 163\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html\r\n
services.banner_hashes sha256:7499ce43439d0e824b991b245098f52d64179b73bc778b129a8e8fd94542b61f
services.banner_hex 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
services.discovery_method PREDICTIVE_METHOD_7
services.extended_service_name HTTP
services.http.request.method GET
services.http.request.uri http://164.138.220.26/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 200
services.http.response.status_reason OK
services.http.response.headers.Cache_Control no-cache, no-store, must-revalidate
services.http.response.headers.Server Apache
services.http.response.headers.Content_Length 163
services.http.response.headers.Expires 0
services.http.response.headers.Content_Type text/html
services.http.response.headers.Accept_Ranges bytes
services.http.response.headers.Connection Upgrade
services.http.response.headers.Pragma no-cache
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Upgrade h2,h2c
services.http.response.headers.Last_Modified Thu, 12 Dec 2024 17:28:00 GMT
services.http.response.html_tags <META HTTP-EQUIV="Cache-control" CONTENT="no-cache">
services.http.response.html_tags <META HTTP-EQUIV="refresh" CONTENT="0;URL=/cgi-sys/defaultwebpage.cgi">
services.http.response.body_size 163
services.http.response.body <html><head><META HTTP-EQUIV="Cache-control" CONTENT="no-cache"><META HTTP-EQUIV="refresh" CONTENT="0;URL=/cgi-sys/defaultwebpage.cgi"></head><body></body></html>\n
services.http.response.body_hashes sha256:9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
services.http.response.body_hashes sha1:5bc7aceba9a8704ef4b1d427d7d08b140afcd866
services.http.response.body_hashes tlsh:71c08cd8009c383c7124b888dfc102c284669009a4a03ec154dbb62cc27ca27c88e2e4
services.http.response.body_hash sha1:5bc7aceba9a8704ef4b1d427d7d08b140afcd866
services.http.supports_http2 true
services.observed_at 2025-07-18T04:47:27.968838797Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 80
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Apache
services.software.product HTTPD
services.software.other.family Apache
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.65
services.transport_protocol TCP
services.truncated false

110/POP3 TCP View Definition

Attribute Value
services.banner +OK Dovecot ready.\r\n
services.banner_hashes sha256:095c6dbf7d6290d9c885271a78f82e11a7df7c9a8733d4e13236b47608e527c4
services.banner_hex 2b4f4b20446f7665636f742072656164792e0d0a
services.certificate f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.discovery_method PREDICTIVE_METHOD_7
services.extended_service_name POP3S
services.labels email
services.observed_at 2025-07-18T00:05:59.314018001Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.pop3.banner +OK Dovecot ready.\r\n
services.pop3.start_tls +OK Begin TLS negotiation now.\r\n
services.port 110
services.service_name POP3
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Dovecot
services.software.product Dovecot
services.software.other.family Dovecot
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.138.175
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.leaf_data.names *.superdnsserver.net
services.tls.certificates.leaf_data.names superdnsserver.net
services.tls.certificates.leaf_data.subject_dn CN=*.superdnsserver.net
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint f6f3b2d35eca5c33bfa1df6e9a264dab593b3ccb954a38fb11ee9f72c6e69d4d
services.tls.certificates.leaf_data.fingerprint f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.superdnsserver.net
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 265965fcfad3d419f74e6cd2fc4921f66ec07094a955368660dd6c5ded077fcd
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.transport_protocol TCP
services.truncated false

143/IMAP TCP View Definition

Attribute Value
services.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS MOVE SNIPPET=FUZZY NAMESPACE LITERAL+ NOTIFY SPECIAL-USE COMPRESS=DEFLATE QUOTA STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n
services.banner_hashes sha256:93a0cd0fc728b10e15f6de6cf856abc9ca5cd2c4ceb5a01b916957c4c3fd0487
services.banner_hex 2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c4520534f525420534f52543d444953504c4159205448524541443d5245464552454e434553205448524541443d52454653205448524541443d4f5244455245445355424a454354204d554c5449415050454e442055524c2d5041525449414c20434154454e41544520554e53454c454354204348494c4452454e204e414d45535041434520554944504c5553204c4953542d455854454e444544204931384e4c4556454c3d3120434f4e4453544f52452051524553594e4320455345415243482045534f5254205345415243485245532057495448494e20434f4e544558543d534541524348204c4953542d535441545553204d4f564520534e49505045543d46555a5a59204e414d455350414345204c49544552414c2b204e4f54494659205350454349414c2d55534520434f4d50524553533d4445464c4154452051554f5441205354415254544c5320415554483d504c41494e20415554483d4c4f47494e5d20446f7665636f742072656164792e0d0a
services.certificate f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.discovery_method PREDICTIVE_METHOD_7
services.extended_service_name IMAPS
services.imap.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS MOVE SNIPPET=FUZZY NAMESPACE LITERAL+ NOTIFY SPECIAL-USE COMPRESS=DEFLATE QUOTA STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n
services.imap.start_tls a001 OK Begin TLS negotiation now.\r\n
services.labels email
services.observed_at 2025-07-17T19:37:27.273757511Z
services.pending_removal_since 2025-07-18T20:36:25.540445329Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 143
services.service_name IMAP
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Dovecot
services.software.product Dovecot
services.software.other.family Dovecot
services.software.source OSI_APPLICATION_LAYER
services.source_ip 162.142.125.198
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.leaf_data.names *.superdnsserver.net
services.tls.certificates.leaf_data.names superdnsserver.net
services.tls.certificates.leaf_data.subject_dn CN=*.superdnsserver.net
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint f6f3b2d35eca5c33bfa1df6e9a264dab593b3ccb954a38fb11ee9f72c6e69d4d
services.tls.certificates.leaf_data.fingerprint f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.superdnsserver.net
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 265965fcfad3d419f74e6cd2fc4921f66ec07094a955368660dd6c5ded077fcd
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3
services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.versions.ja4s t130200_1303_a56c5b993250
services.transport_protocol TCP
services.truncated false

465/SMTP TCP View Definition

Attribute Value
services.banner 220-meduyjkx.superdnsserver.net ESMTP Exim 4.98.2 #2 Fri, 18 Jul 2025 07:42:47 +0300 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n
services.banner_hashes sha256:f281232e778aa15cad94ad84ccfea902e1da77e6fd5b3576ad7f4ab37624eec1
services.banner_hex 3232302d6d656475796a6b782e7375706572646e737365727665722e6e65742045534d5450204578696d20342e39382e32202332204672692c203138204a756c20323032352030373a34323a3437202b30333030200d0a3232302d576520646f206e6f7420617574686f72697a652074686520757365206f6620746869732073797374656d20746f207472616e73706f727420756e736f6c6963697465642c200d0a32323020616e642f6f722062756c6b20652d6d61696c2e0d0a
services.certificate f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.discovery_method IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name SMTPS
services.labels email
services.observed_at 2025-07-18T04:42:45.249683284Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 465
services.service_name SMTP
services.smtp.banner 220-meduyjkx.superdnsserver.net ESMTP Exim 4.98.2 #2 Fri, 18 Jul 2025 07:42:47 +0300 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n
services.smtp.ehlo 250-meduyjkx.superdnsserver.net Hello www.censys.io [162.142.125.200]\r\n250-SIZE 52428800\r\n250-LIMITS MAILMAX=1000 RCPTMAX=50000\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250 HELP\r\n
services.software.uniform_resource_identifier cpe:2.3:a:exim:exim:4.98.2:*:*:*:*:*:*:*
services.software.part a
services.software.vendor exim
services.software.product exim
services.software.version 4.98.2
services.software.other.family exim
services.software.source OSI_APPLICATION_LAYER
services.source_ip 162.142.125.200
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.leaf_data.names *.superdnsserver.net
services.tls.certificates.leaf_data.names superdnsserver.net
services.tls.certificates.leaf_data.subject_dn CN=*.superdnsserver.net
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint f6f3b2d35eca5c33bfa1df6e9a264dab593b3ccb954a38fb11ee9f72c6e69d4d
services.tls.certificates.leaf_data.fingerprint f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.superdnsserver.net
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus we9QEvmYSy16uivLfM3pxC0JheFY/oVzvffIfnfoDG+KI2pPSoE7l/Y8gFDzy+B86UtX5AVp+aOluiBKWmSIvfnl6C46orvR6diIOcpLpF4dn8xYUy4h6gclmKGfoV6/4v2hnK54q4VC8uoegOqBXzjjuNl69iS+JBdG0PWRjXJrLtGSZ4Po08GQAAGvcB6iS0HS1mzn+pEIzJOloun6qs2BQK0YOJBAkVVJutrsKNaSfdqKeVzFO0c+YcNZSSRO56obbRtbozSQMRt5fe7l+d7j6Y0WGEp83469ql8AvfXdc+2L0fnMmh5R7uPs1qbHyg4j+bqcQ7ILVuKiQiIyrJFiNhRSA8QnXCYZxYyNCJHUnWeDT77NdHkb5b+FwIhnfTDglYFI1XgIA3sdb5NSuaynS3QpRbpzWVU6pLuwGrFnQex7XZT6hN92DwTgH5dcWlqgFXmIEW7+1wwT1+Ws/act397KlLeILAY0nziEfqdsTTz9/X4I3jbV8Dw1u/uWGg6wD8amAA9WN9scuOOCtkA3auv6HAwsXKK0LwH9fh6Z9wfC1DBDuc4EE+VkmvgwDKCtGFxDmt47AhyVjugQVXOwH0mnK3WOmozAHTxdzvtjuzig+dHc5wQXpOMM3x7ELxu6k6YAs1ltQbN2t1NjxV/gnU2NiLHXrj/BO84nLDE=
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 265965fcfad3d419f74e6cd2fc4921f66ec07094a955368660dd6c5ded077fcd
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3
services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.versions.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s d25619cb77d3219fc9fc14cb6b35eacc
services.tls.versions.ja4s t120200_cca8_344b4dce5a52
services.tls.versions.tls_version TLSv1_1
services.tls.versions.ja3s b8d8f22562475aebf44ad54175c1d9c7
services.tls.versions.ja4s t110200_c013_344b4dce5a52
services.tls.versions.tls_version TLSv1_0
services.tls.versions.ja3s 184d532a16876b78846ae6a03f654890
services.tls.versions.ja4s t100200_c013_344b4dce5a52
services.transport_protocol TCP
services.truncated false

587/SMTP TCP View Definition

Attribute Value
services.banner 220-meduyjkx.superdnsserver.net ESMTP Exim 4.98.2 #2 Fri, 18 Jul 2025 23:42:29 +0300 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n
services.banner_hashes sha256:8a08a673a339e00b5ac87b1d4c1e4dac9edf3b0b55dd7d3406dcc36ea634cd52
services.banner_hex 3232302d6d656475796a6b782e7375706572646e737365727665722e6e65742045534d5450204578696d20342e39382e32202332204672692c203138204a756c20323032352032333a34323a3239202b30333030200d0a3232302d576520646f206e6f7420617574686f72697a652074686520757365206f6620746869732073797374656d20746f207472616e73706f727420756e736f6c6963697465642c200d0a32323020616e642f6f722062756c6b20652d6d61696c2e0d0a
services.certificate f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.discovery_method PREDICTIVE_METHOD_7
services.extended_service_name SMTP-STARTTLS
services.labels email
services.observed_at 2025-07-18T20:42:29.597247500Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 587
services.service_name SMTP
services.smtp.banner 220-meduyjkx.superdnsserver.net ESMTP Exim 4.98.2 #2 Fri, 18 Jul 2025 23:42:29 +0300 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n
services.smtp.ehlo 250-meduyjkx.superdnsserver.net Hello www.censys.io [167.94.138.165]\r\n250-SIZE 52428800\r\n250-LIMITS MAILMAX=1000 RCPTMAX=50000\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250-STARTTLS\r\n250 HELP\r\n
services.smtp.start_tls 220 TLS go ahead\r\n
services.software.uniform_resource_identifier cpe:2.3:a:exim:exim:4.98.2:*:*:*:*:*:*:*
services.software.part a
services.software.vendor exim
services.software.product exim
services.software.version 4.98.2
services.software.other.family exim
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.138.165
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.leaf_data.names *.superdnsserver.net
services.tls.certificates.leaf_data.names superdnsserver.net
services.tls.certificates.leaf_data.subject_dn CN=*.superdnsserver.net
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint f6f3b2d35eca5c33bfa1df6e9a264dab593b3ccb954a38fb11ee9f72c6e69d4d
services.tls.certificates.leaf_data.fingerprint f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.superdnsserver.net
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 265965fcfad3d419f74e6cd2fc4921f66ec07094a955368660dd6c5ded077fcd
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.transport_protocol TCP
services.truncated false

993/IMAP TCP View Definition

Attribute Value
services.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS MOVE SNIPPET=FUZZY NAMESPACE LITERAL+ NOTIFY SPECIAL-USE COMPRESS=DEFLATE QUOTA AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n
services.banner_hashes sha256:45f91a2b47287121773012c32b436ddd511056c7777ad36b6f003856fac8b8dd
services.banner_hex 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
services.certificate f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.discovery_method PREDICTIVE_METHOD_7
services.extended_service_name IMAPS
services.imap.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS MOVE SNIPPET=FUZZY NAMESPACE LITERAL+ NOTIFY SPECIAL-USE COMPRESS=DEFLATE QUOTA AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n
services.labels email
services.observed_at 2025-07-18T04:17:45.884109759Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 993
services.service_name IMAP
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Dovecot
services.software.product Dovecot
services.software.other.family Dovecot
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.67
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.leaf_data.names *.superdnsserver.net
services.tls.certificates.leaf_data.names superdnsserver.net
services.tls.certificates.leaf_data.subject_dn CN=*.superdnsserver.net
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint f6f3b2d35eca5c33bfa1df6e9a264dab593b3ccb954a38fb11ee9f72c6e69d4d
services.tls.certificates.leaf_data.fingerprint f3ccaccda8f0c10d21b6286121772be996fd5d44d4b4ecde50a7a2a4e316a79a
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.superdnsserver.net
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 265965fcfad3d419f74e6cd2fc4921f66ec07094a955368660dd6c5ded077fcd
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3
services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.versions.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s d25619cb77d3219fc9fc14cb6b35eacc
services.tls.versions.ja4s t120200_cca8_344b4dce5a52
services.tls.versions.tls_version TLSv1_1
services.tls.versions.ja3s b8d8f22562475aebf44ad54175c1d9c7
services.tls.versions.ja4s t110200_c013_344b4dce5a52
services.tls.versions.tls_version TLSv1_0
services.tls.versions.ja3s 184d532a16876b78846ae6a03f654890
services.tls.versions.ja4s t100200_c013_344b4dce5a52
services.transport_protocol TCP
services.truncated false

1022/SSH TCP View Definition

Attribute Value
services.banner SSH-2.0-OpenSSH_8.0
services.banner_hashes sha256:2fa65f39c579f8943b13b6208b128f8a97dc339255bac4cf79a0d6a5cd4e6b54
services.banner_hex 5353482d322e302d4f70656e5353485f382e30
services.discovery_method PREDICTIVE_METHOD_20
services.extended_service_name SSH
services.labels remote-access
services.observed_at 2025-07-17T23:31:05.940645826Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 1022
services.service_name SSH
services.software.uniform_resource_identifier cpe:2.3:a:openbsd:openssh:8.0:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenBSD
services.software.product OpenSSH
services.software.version 8.0
services.software.other.family OpenSSH
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.138.115
services.ssh.endpoint_id.raw SSH-2.0-OpenSSH_8.0
services.ssh.endpoint_id.protocol_version 2.0
services.ssh.endpoint_id.software_version OpenSSH_8.0
services.ssh.kex_init_message.kex_algorithms curve25519-sha256
services.ssh.kex_init_message.kex_algorithms [email protected]
services.ssh.kex_init_message.kex_algorithms ecdh-sha2-nistp256
services.ssh.kex_init_message.kex_algorithms ecdh-sha2-nistp384
services.ssh.kex_init_message.kex_algorithms ecdh-sha2-nistp521
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group-exchange-sha256
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group14-sha256
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group16-sha512
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group18-sha512
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group-exchange-sha1
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group14-sha1
services.ssh.kex_init_message.kex_algorithms [email protected]
services.ssh.kex_init_message.host_key_algorithms rsa-sha2-512
services.ssh.kex_init_message.host_key_algorithms rsa-sha2-256
services.ssh.kex_init_message.host_key_algorithms ssh-rsa
services.ssh.kex_init_message.host_key_algorithms ecdsa-sha2-nistp256
services.ssh.kex_init_message.host_key_algorithms ssh-ed25519
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_ciphers aes256-ctr
services.ssh.kex_init_message.client_to_server_ciphers aes256-cbc
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_ciphers aes128-ctr
services.ssh.kex_init_message.client_to_server_ciphers aes128-cbc
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers aes256-ctr
services.ssh.kex_init_message.server_to_client_ciphers aes256-cbc
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers aes128-ctr
services.ssh.kex_init_message.server_to_client_ciphers aes128-cbc
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs hmac-sha2-256
services.ssh.kex_init_message.client_to_server_macs hmac-sha1
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs hmac-sha2-512
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs hmac-sha2-256
services.ssh.kex_init_message.server_to_client_macs hmac-sha1
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs hmac-sha2-512
services.ssh.kex_init_message.client_to_server_compression none
services.ssh.kex_init_message.client_to_server_compression [email protected]
services.ssh.kex_init_message.server_to_client_compression none
services.ssh.kex_init_message.server_to_client_compression [email protected]
services.ssh.kex_init_message.first_kex_follows false
services.ssh.algorithm_selection.kex_algorithm [email protected]
services.ssh.algorithm_selection.host_key_algorithm ecdsa-sha2-nistp256
services.ssh.algorithm_selection.client_to_server_alg_group.cipher aes128-ctr
services.ssh.algorithm_selection.client_to_server_alg_group.mac hmac-sha2-256
services.ssh.algorithm_selection.client_to_server_alg_group.compression none
services.ssh.algorithm_selection.server_to_client_alg_group.cipher aes128-ctr
services.ssh.algorithm_selection.server_to_client_alg_group.mac hmac-sha2-256
services.ssh.algorithm_selection.server_to_client_alg_group.compression none
services.ssh.server_host_key.fingerprint_sha256 a1513cbacbc0e55bc135717191b539343ae1498933520bbb1763c8d207f011d1
services.ssh.server_host_key.ecdsa_public_key.b WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=
services.ssh.server_host_key.ecdsa_public_key.curve P-256
services.ssh.server_host_key.ecdsa_public_key.gx axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=
services.ssh.server_host_key.ecdsa_public_key.gy T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=
services.ssh.server_host_key.ecdsa_public_key.length 256
services.ssh.server_host_key.ecdsa_public_key.n /////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=
services.ssh.server_host_key.ecdsa_public_key.p /////wAAAAEAAAAAAAAAAAAAAAD///////////////8=
services.ssh.server_host_key.ecdsa_public_key.x BlvcQi4Rsxkh3wm/XgdWAyTkATwYwqwGpPTOTfKUKOQ=
services.ssh.server_host_key.ecdsa_public_key.y absZhGSxE9ToXIJx5Pc0FEauKj7QYuMmd07aSS2VAWk=
services.ssh.hassh_fingerprint 686e20b21417c07a18d6311d1e29dacb
services.transport_protocol TCP
services.truncated false