185.30.32.2

Host

Attribute	Value
ip	185.30.32.2
location.continent	Europe
location.country	Germany
location.country_code	DE
location.city	Hamburg
location.postal_code	20038
location.timezone	Europe/Berlin
location.province	Hamburg
location.coordinates.latitude	53.55073
location.coordinates.longitude	9.99302
location_updated_at	2025-03-17T04:16:21.368109561Z
autonomous_system.asn	48324
autonomous_system.description	DE-WEBGO www.webgo.de
autonomous_system.bgp_prefix	185.30.32.0/22
autonomous_system.name	DE-WEBGO www.webgo.de
autonomous_system.country_code	DE
autonomous_system_updated_at	2025-03-16T15:29:34.659782589Z
whois.network.handle	WEBGO-RZ-HAM1
whois.network.name	webgo GmbH
whois.network.cidrs	185.30.32.0/23
whois.network.created	2018-09-26T00:00:00Z
whois.network.updated	2018-09-26T00:00:00Z
whois.organization.handle	ORG-WE2-RIPE
whois.organization.name	webgo GmbH
whois.organization.address	Heidenkampsweg 81\n20097\nHamburg\nGERMANY
whois.organization.abuse_contacts.handle WRC4-RIPE whois.organization.abuse_contacts.name webgo Ripe Coordination whois.organization.abuse_contacts.email [email protected]
whois.organization.admin_contacts.handle SA8363-RIPE whois.organization.admin_contacts.name Sebastian Angermeyer whois.organization.admin_contacts.email [email protected]
operating_system.uniform_resource_identifier	cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
operating_system.part	o
operating_system.vendor	Debian
operating_system.product	Linux
operating_system.other.family	Linux
dns.names	www.tanjabauer-uebersetzt.de
dns.names	www.euro-top-one.de
dns.names	malerbetriebmueller.de
dns.names	www.bader.support
dns.names	www.frauenhofpalais.de
dns.names	jb-it.support
dns.names	server2.webgo24.de
dns.names	wiebkechristinlebus.com
dns.names	bvbs-homann.de
dns.names	pop.swue-netz.de
dns.names	john-bader.de
dns.names	mail1.tanjabauer-uebersetzt.de
dns.names	mail2.tanjabauer-uebersetzt.de
dns.names	pop.bader.systems
dns.names	www.pflegequalitaet-schulz.de
dns.names	www.lutz-arnold.eu
dns.names	pop.delphin-potential.de
dns.names	smtp.bader.systems
dns.names	elli-john.de
dns.names	www.horst-abel.de
dns.names	pop.synoptikfibel.de
dns.names	mail1.swueb.de
dns.names	christineputz.de
dns.names	smtp.bader.support
dns.names	www.adelheidhenke.de
dns.names	mail2.swueb.de
dns.names	www.bbs-rutke.de
dns.names	www.swueb.de
dns.names	www.elli-john.de
dns.names	tanjabauer-uebersetzt.de
dns.names	pop.hug-sz.de
dns.names	nsgos.fh28.de
dns.names	md-maler.de
dns.names	www.wille-schenk.de
dns.names	mail1.divh.de
dns.names	swue-netz.de
dns.names	mail1.elli-john.de
dns.names	klostertrophy.de
dns.names	delphin-potential.de
dns.names	synoptikfibel.de
dns.names	it-support.john-bader.de
dns.names	smtp.elli-bader.de
dns.names	www.matthias-fischbach.de
dns.names	brauer-tischlerei.de
dns.names	www.idt21.de
dns.names	smtp.delphin-potential.de
dns.names	hug-sz.de
dns.names	www.jamo-events.de
dns.names	smtp.frauenhofpalais.de
dns.names	www.minihold.de
dns.names	www.verein-effeltrich.de
dns.names	pop.minihold.de
dns.names	www.concaer.de
dns.names	mail1.jb-it.support
dns.names	www.schornsteinfeger-ordowski.de
dns.names	www.kaiser-schornsteinfeger.de
dns.names	euro-top-one.com
dns.names	adelheidhenke.de
dns.names	www.swue-netz.de
dns.names	www.brauer-tischlerei.de
dns.names	matthias-fischbach.de
dns.names	mit-kidz.de
dns.names	kosmetikpraxis-erkrath.de
dns.names	www.energieberater-ordowski.de
dns.names	www.elli-bader.de
dns.names	livesol.de
dns.names	www.aua-autoservice.de
dns.names	www.synoptikfibel.de
dns.names	minihold.de
dns.names	www.hug-sz.de
dns.names	mail2.jb-it.support
dns.names	www.mit-kidz.de
dns.names	pop.elli-bader.de
dns.names	euro-top-one.de
dns.names	www.euro-top-one.com
dns.names	smtp.synoptikfibel.de
dns.names	concaer.de
dns.names	mail2.john-bader.de
dns.names	www.idt21.com
dns.names	idt21.de
dns.names	pop.frauenhofpalais.de
dns.names	bader.systems
dns.names	pflegequalitaet-schulz.de
dns.names	mail1.john-bader.de
dns.names	www.md-maler.de
dns.names	energieberater-ordowski.de
dns.names	elli-bader.de
dns.names	www.livesol.de
dns.names	www.malerbetriebmueller.de
dns.names	mail2.divh.de
dns.names	idt21.com
dns.names	horst-abel.de
dns.names	kaiser-schornsteinfeger.de
dns.names	jm-medpro.de
dns.names	ruetten-stb.de
dns.names	pop.bader.support
dns.names	smtp.hug-sz.de
dns.names	swueb.de
dns.names	smtp.minihold.de
dns.names	aua-autoservice.de
dns.records.idt21.de.record_type	A
dns.records.idt21.de.resolved_at	2025-03-22T20:40:16.582099570Z
dns.records.jm-medpro.de.record_type	A
dns.records.jm-medpro.de.resolved_at	2025-03-16T19:41:49.715196320Z
dns.records.pop.bader.systems.record_type	A
dns.records.pop.bader.systems.resolved_at	2025-03-22T00:35:04.707685662Z
dns.records.mail2.john-bader.de.record_type	A
dns.records.mail2.john-bader.de.resolved_at	2025-03-08T21:24:40.413800840Z
dns.records.pop.frauenhofpalais.de.record_type	A
dns.records.pop.frauenhofpalais.de.resolved_at	2025-03-10T21:16:17.600348712Z
dns.records.www.bbs-rutke.de.record_type	A
dns.records.www.bbs-rutke.de.resolved_at	2025-03-07T19:22:44.790966508Z
dns.records.horst-abel.de.record_type	A
dns.records.horst-abel.de.resolved_at	2025-03-12T21:47:29.427804349Z
dns.records.pop.minihold.de.record_type	A
dns.records.pop.minihold.de.resolved_at	2025-03-16T19:42:52.522207569Z
dns.records.md-maler.de.record_type	A
dns.records.md-maler.de.resolved_at	2025-03-21T19:28:25.845687222Z
dns.records.wiebkechristinlebus.com.record_type	A
dns.records.wiebkechristinlebus.com.resolved_at	2025-03-18T19:09:21.854138892Z
dns.records.www.elli-bader.de.record_type	A
dns.records.www.elli-bader.de.resolved_at	2025-03-09T19:32:24.039622631Z
dns.records.www.adelheidhenke.de.record_type	A
dns.records.www.adelheidhenke.de.resolved_at	2025-03-20T19:47:30.508543041Z
dns.records.www.tanjabauer-uebersetzt.de.record_type	A
dns.records.www.tanjabauer-uebersetzt.de.resolved_at	2025-03-20T20:02:16.886988657Z
dns.records.smtp.hug-sz.de.record_type	A
dns.records.smtp.hug-sz.de.resolved_at	2025-03-21T19:25:42.126488265Z
dns.records.mail2.jb-it.support.record_type	A
dns.records.mail2.jb-it.support.resolved_at	2025-03-13T04:31:50.471376019Z
dns.records.www.frauenhofpalais.de.record_type	A
dns.records.www.frauenhofpalais.de.resolved_at	2025-03-20T19:51:51.820324992Z
dns.records.malerbetriebmueller.de.record_type	A
dns.records.malerbetriebmueller.de.resolved_at	2025-03-18T19:37:33.620878576Z
dns.records.www.idt21.com.record_type	A
dns.records.www.idt21.com.resolved_at	2025-03-24T17:27:00.136628429Z
dns.records.smtp.minihold.de.record_type	A
dns.records.smtp.minihold.de.resolved_at	2025-03-19T21:06:29.294091560Z
dns.records.synoptikfibel.de.record_type	A
dns.records.synoptikfibel.de.resolved_at	2025-03-20T19:58:50.822548277Z
dns.records.hug-sz.de.record_type	A
dns.records.hug-sz.de.resolved_at	2025-03-16T19:39:43.538565966Z
dns.records.pop.elli-bader.de.record_type	A
dns.records.pop.elli-bader.de.resolved_at	2025-02-28T19:12:50.557708484Z
dns.records.jb-it.support.record_type	A
dns.records.jb-it.support.resolved_at	2025-03-21T01:08:59.524334842Z
dns.records.www.concaer.de.record_type	A
dns.records.www.concaer.de.resolved_at	2025-03-01T21:17:00.925547047Z
dns.records.smtp.elli-bader.de.record_type	A
dns.records.smtp.elli-bader.de.resolved_at	2025-03-09T19:32:22.779122039Z
dns.records.www.minihold.de.record_type	A
dns.records.www.minihold.de.resolved_at	2025-03-12T21:50:16.042922967Z
dns.records.bvbs-homann.de.record_type	A
dns.records.bvbs-homann.de.resolved_at	2025-03-16T19:38:04.446319704Z
dns.records.www.horst-abel.de.record_type	A
dns.records.www.horst-abel.de.resolved_at	2025-03-16T19:40:59.562821942Z
dns.records.bader.systems.record_type	A
dns.records.bader.systems.resolved_at	2025-03-24T03:25:02.811016566Z
dns.records.www.euro-top-one.de.record_type	A
dns.records.www.euro-top-one.de.resolved_at	2025-03-18T19:34:20.925200259Z
dns.records.mail2.swueb.de.record_type	A
dns.records.mail2.swueb.de.resolved_at	2025-03-07T19:31:26.398449134Z
dns.records.server2.webgo24.de.record_type	A
dns.records.server2.webgo24.de.resolved_at	2025-02-26T19:57:36.598559235Z
dns.records.www.mit-kidz.de.record_type	A
dns.records.www.mit-kidz.de.resolved_at	2025-03-15T21:18:30.549236136Z
dns.records.www.swue-netz.de.record_type	A
dns.records.www.swue-netz.de.resolved_at	2025-03-18T19:39:02.991731656Z
dns.records.www.md-maler.de.record_type	A
dns.records.www.md-maler.de.resolved_at	2025-03-22T20:43:34.651572077Z
dns.records.smtp.frauenhofpalais.de.record_type	A
dns.records.smtp.frauenhofpalais.de.resolved_at	2025-02-28T19:13:15.511160699Z
dns.records.www.jamo-events.de.record_type	A
dns.records.www.jamo-events.de.resolved_at	2025-03-02T19:49:00.418837104Z
dns.records.swueb.de.record_type	A
dns.records.swueb.de.resolved_at	2025-03-18T19:39:03.255016258Z
dns.records.idt21.com.record_type	A
dns.records.idt21.com.resolved_at	2025-03-13T17:19:05.491058210Z
dns.records.euro-top-one.com.record_type	A
dns.records.euro-top-one.com.resolved_at	2025-03-24T16:48:47.730746899Z
dns.records.www.elli-john.de.record_type	A
dns.records.www.elli-john.de.resolved_at	2025-03-21T19:24:24.689107513Z
dns.records.pop.swue-netz.de.record_type	A
dns.records.pop.swue-netz.de.resolved_at	2025-03-01T21:26:58.917160680Z
dns.records.elli-bader.de.record_type	A
dns.records.elli-bader.de.resolved_at	2025-03-17T20:08:56.313340465Z
dns.records.it-support.john-bader.de.record_type	A
dns.records.it-support.john-bader.de.resolved_at	2025-03-15T21:16:31.032716753Z
dns.records.smtp.delphin-potential.de.record_type	A
dns.records.smtp.delphin-potential.de.resolved_at	2025-03-13T19:29:31.888033421Z
dns.records.www.schornsteinfeger-ordowski.de.record_type	A
dns.records.www.schornsteinfeger-ordowski.de.resolved_at	2025-03-08T21:29:09.954934902Z
dns.records.www.wille-schenk.de.record_type	A
dns.records.www.wille-schenk.de.resolved_at	2025-03-16T19:52:07.915807182Z
dns.records.www.verein-effeltrich.de.record_type	A
dns.records.www.verein-effeltrich.de.resolved_at	2025-03-21T19:34:08.538450230Z
dns.records.pop.synoptikfibel.de.record_type	A
dns.records.pop.synoptikfibel.de.resolved_at	2025-03-16T19:45:26.687915873Z
dns.records.smtp.bader.systems.record_type	A
dns.records.smtp.bader.systems.resolved_at	2025-03-18T02:37:28.237356370Z
dns.records.www.pflegequalitaet-schulz.de.record_type	A
dns.records.www.pflegequalitaet-schulz.de.resolved_at	2025-03-17T20:14:45.614403366Z
dns.records.minihold.de.record_type	A
dns.records.minihold.de.resolved_at	2025-03-08T21:26:04.473886717Z
dns.records.www.matthias-fischbach.de.record_type	A
dns.records.www.matthias-fischbach.de.resolved_at	2025-03-18T19:37:38.457425664Z
dns.records.mail1.elli-john.de.record_type	A
dns.records.mail1.elli-john.de.resolved_at	2025-03-23T20:53:30.930524249Z
dns.records.mit-kidz.de.record_type	A
dns.records.mit-kidz.de.resolved_at	2025-03-06T21:04:53.708581884Z
dns.records.mail1.swueb.de.record_type	A
dns.records.mail1.swueb.de.resolved_at	2025-03-19T21:09:04.016019045Z
dns.records.adelheidhenke.de.record_type	A
dns.records.adelheidhenke.de.resolved_at	2025-02-28T19:11:44.989464864Z
dns.records.kaiser-schornsteinfeger.de.record_type	A
dns.records.kaiser-schornsteinfeger.de.resolved_at	2025-03-11T20:15:21.760126017Z
dns.records.pop.delphin-potential.de.record_type	A
dns.records.pop.delphin-potential.de.resolved_at	2025-03-21T19:24:15.804319837Z
dns.records.mail1.divh.de.record_type	A
dns.records.mail1.divh.de.resolved_at	2025-03-22T20:37:49.411269468Z
dns.records.www.euro-top-one.com.record_type	A
dns.records.www.euro-top-one.com.resolved_at	2025-03-10T17:21:54.429676612Z
dns.records.www.brauer-tischlerei.de.record_type	A
dns.records.www.brauer-tischlerei.de.resolved_at	2025-02-24T20:20:38.858859003Z
dns.records.mail2.tanjabauer-uebersetzt.de.record_type	A
dns.records.mail2.tanjabauer-uebersetzt.de.resolved_at	2025-03-21T19:32:26.212055446Z
dns.records.aua-autoservice.de.record_type	A
dns.records.aua-autoservice.de.resolved_at	2025-03-09T19:30:27.103799641Z
dns.records.matthias-fischbach.de.record_type	A
dns.records.matthias-fischbach.de.resolved_at	2025-03-07T19:27:00.936669964Z
dns.records.swue-netz.de.record_type	A
dns.records.swue-netz.de.resolved_at	2025-03-13T19:38:44.796884719Z
dns.records.mail1.john-bader.de.record_type	A
dns.records.mail1.john-bader.de.resolved_at	2025-03-22T20:41:23.541738345Z
dns.records.klostertrophy.de.record_type	A
dns.records.klostertrophy.de.resolved_at	2025-03-21T19:26:59.865954945Z
dns.records.www.idt21.de.record_type	A
dns.records.www.idt21.de.resolved_at	2025-03-16T19:40:29.306290567Z
dns.records.brauer-tischlerei.de.record_type	A
dns.records.brauer-tischlerei.de.resolved_at	2025-03-16T19:37:18.660768587Z
dns.records.smtp.synoptikfibel.de.record_type	A
dns.records.smtp.synoptikfibel.de.resolved_at	2025-03-13T19:38:26.478809295Z
dns.records.www.bader.support.record_type	A
dns.records.www.bader.support.resolved_at	2025-03-23T03:11:54.916373808Z
dns.records.www.synoptikfibel.de.record_type	A
dns.records.www.synoptikfibel.de.resolved_at	2025-03-12T21:52:54.593555335Z
dns.records.energieberater-ordowski.de.record_type	A
dns.records.energieberater-ordowski.de.resolved_at	2025-03-06T21:01:05.729831084Z
dns.records.pop.hug-sz.de.record_type	A
dns.records.pop.hug-sz.de.resolved_at	2025-03-21T19:25:41.536522346Z
dns.records.mail1.jb-it.support.record_type	A
dns.records.mail1.jb-it.support.resolved_at	2025-03-24T03:24:55.206132161Z
dns.records.www.aua-autoservice.de.record_type	A
dns.records.www.aua-autoservice.de.resolved_at	2025-03-20T19:47:41.345762396Z
dns.records.christineputz.de.record_type	A
dns.records.christineputz.de.resolved_at	2025-03-20T19:50:17.719637616Z
dns.records.mail1.tanjabauer-uebersetzt.de.record_type	A
dns.records.mail1.tanjabauer-uebersetzt.de.resolved_at	2025-03-05T21:23:32.490969411Z
dns.records.www.kaiser-schornsteinfeger.de.record_type	A
dns.records.www.kaiser-schornsteinfeger.de.resolved_at	2025-03-16T19:43:12.855174410Z
dns.records.www.hug-sz.de.record_type	A
dns.records.www.hug-sz.de.resolved_at	2025-03-16T19:39:44.362537091Z
dns.records.concaer.de.record_type	A
dns.records.concaer.de.resolved_at	2025-03-23T20:52:05.665257492Z
dns.records.pop.bader.support.record_type	A
dns.records.pop.bader.support.resolved_at	2025-03-08T00:45:06.052013948Z
dns.records.ruetten-stb.de.record_type	A
dns.records.ruetten-stb.de.resolved_at	2025-03-04T19:36:15.391492959Z
dns.records.www.livesol.de.record_type	A
dns.records.www.livesol.de.resolved_at	2025-03-18T19:38:12.998371413Z
dns.records.www.lutz-arnold.eu.record_type	A
dns.records.www.lutz-arnold.eu.resolved_at	2025-03-19T22:07:23.753664875Z
dns.records.elli-john.de.record_type	A
dns.records.elli-john.de.resolved_at	2025-03-18T19:35:51.419868486Z
dns.records.www.swueb.de.record_type	A
dns.records.www.swueb.de.resolved_at	2025-03-20T19:56:55.017828505Z
dns.records.delphin-potential.de.record_type	A
dns.records.delphin-potential.de.resolved_at	2025-03-20T19:49:27.512375911Z
dns.records.livesol.de.record_type	A
dns.records.livesol.de.resolved_at	2025-03-14T20:04:17.861238903Z
dns.records.smtp.bader.support.record_type	A
dns.records.smtp.bader.support.resolved_at	2025-03-09T03:53:03.041839899Z
dns.records.tanjabauer-uebersetzt.de.record_type	A
dns.records.tanjabauer-uebersetzt.de.resolved_at	2025-03-17T20:23:25.245225868Z
dns.records.www.malerbetriebmueller.de.record_type	A
dns.records.www.malerbetriebmueller.de.resolved_at	2025-03-23T20:57:16.217189557Z
dns.records.mail2.divh.de.record_type	A
dns.records.mail2.divh.de.resolved_at	2025-03-13T19:30:12.532105392Z
dns.records.pflegequalitaet-schulz.de.record_type	A
dns.records.pflegequalitaet-schulz.de.resolved_at	2025-03-15T21:19:43.231042623Z
dns.records.nsgos.fh28.de.record_type	A
dns.records.nsgos.fh28.de.resolved_at	2025-03-14T19:58:59.206630284Z
dns.records.www.energieberater-ordowski.de.record_type	A
dns.records.www.energieberater-ordowski.de.resolved_at	2025-03-06T21:01:06.645299808Z
dns.records.kosmetikpraxis-erkrath.de.record_type	A
dns.records.kosmetikpraxis-erkrath.de.resolved_at	2025-03-17T20:12:12.847881961Z
dns.records.euro-top-one.de.record_type	A
dns.records.euro-top-one.de.resolved_at	2025-03-22T20:38:19.746257342Z
dns.records.john-bader.de.record_type	A
dns.records.john-bader.de.resolved_at	2025-03-16T19:41:39.263019789Z
dns.reverse_dns.names	server2.webgo24.de
dns.reverse_dns.resolved_at	2025-03-22T23:30:57.036561350Z
last_updated_at	2025-03-25T18:57:16.080Z
labels	bootstrap
labels	database
labels	email
labels	file-sharing
labels	jquery
labels	login-page
labels	remote-access

21/FTP TCP View Definition

Attribute	Value
services.banner	220 webgo STRINGTOREPLACE FTP Server ready.\r\n
services.banner_hashes	sha256:9e74df2f57fee49f33cf8475c57c83ac26a52116530b334f7053af6982949cbb
services.banner_hex	32323020776562676f20535452494e47544f5245504c41434520465450205365727665722072656164792e0d0a
services.certificate	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.extended_service_name	FTPes
services.ftp.banner	220 webgo STRINGTOREPLACE FTP Server ready.\r\n
services.ftp.auth_tls_response	234 AUTH TLS successful\r\n
services.ftp.status_code	220
services.ftp.status_meaning	Service ready for new user.
services.ftp.implicit_tls	false
services.labels	file-sharing
services.observed_at	2025-03-25T09:35:06.785679348Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	21
services.service_name	FTP
services.source_ip	206.168.34.50
services.tls.version_selected	TLSv1_2
services.tls.cipher_selected	TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.chain_fps_sha_256	7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256	68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256	d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.leaf_data.names	*.webgo24.de
services.tls.certificates.leaf_data.names	webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=*.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size	2048
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	3c8b8ced0f40619280a5ee6f46db78fdb77e7e7e3fd5ca53e8f13de4869e2768
services.tls.certificates.leaf_data.fingerprint	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.leaf_data.issuer.common_name	Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality	Salford
services.tls.certificates.leaf_data.issuer.organization	Sectigo Limited
services.tls.certificates.leaf_data.issuer.province	Greater Manchester
services.tls.certificates.leaf_data.issuer.country	GB
services.tls.certificates.leaf_data.subject.common_name	*.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	oAiUZ7x7udIYPj1BxpF4pE377Z6lgPx0LCrMrIIZCVCOugThtLz9HfL5OP/3Auc3AdgvRsNqNNe1vryqCA4wbiXxOPhcy4fAysvlXcjqud/7ApWoZE5uPxQwtBUwmJIQqXWo63VQI4ZI3j3juvlZTbovqVuxgPiRBq/vRG5qLARIRC2YP92fQ+8E2sqMf9NEqUmfUPgJExoUZur8QhzbPcfrsjMCVWlE9IfZw5BsBju4OdHM6gHVfLHhUwy0QW+KA2m++cJFbjAh2eyV4OpYYl+59mamSGPUMAPAOHnoC7zZFnfBuqT2yQNw9HMbFOv1HQESDuLbxmIUKMM7OMs9pw==
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	256
services.tls.certificates.leaf_data.public_key.fingerprint	d150ddb154113c3934b2e58b40d9a51e34caaa48e6aa24154cc96c8b45e5b24c
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.server_key_exchange.ec_params.named_curve	29
services.tls.ja3s	d25619cb77d3219fc9fc14cb6b35eacc
services.tls.ja4s	t120200_cca8_344b4dce5a52
services.transport_protocol	TCP
services.truncated	false

22/SSH TCP View Definition

Attribute	Value
services.banner	SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u4
services.banner_hashes	sha256:553d331a69ce46be74a741d42fe85b00e375d9c349c3144ebdfb619f1059f6cc
services.banner_hex	5353482d322e302d4f70656e5353485f382e3470312044656269616e2d352b64656231317534
services.extended_service_name	SSH
services.labels	remote-access
services.observed_at	2025-03-25T09:51:32.434119693Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	22
services.service_name	SSH
services.software.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:* services.software.part o services.software.product linux services.software.source OSI_TRANSPORT_LAYER
services.source_ip	167.94.146.49
services.ssh.endpoint_id.raw	SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u4
services.ssh.endpoint_id.protocol_version	2.0
services.ssh.endpoint_id.software_version	OpenSSH_8.4p1
services.ssh.endpoint_id.comment	Debian-5+deb11u4
services.ssh.kex_init_message.kex_algorithms	curve25519-sha256
services.ssh.kex_init_message.kex_algorithms	[email protected]
services.ssh.kex_init_message.kex_algorithms	ecdh-sha2-nistp256
services.ssh.kex_init_message.kex_algorithms	ecdh-sha2-nistp384
services.ssh.kex_init_message.kex_algorithms	ecdh-sha2-nistp521
services.ssh.kex_init_message.kex_algorithms	diffie-hellman-group-exchange-sha256
services.ssh.kex_init_message.kex_algorithms	diffie-hellman-group16-sha512
services.ssh.kex_init_message.kex_algorithms	diffie-hellman-group18-sha512
services.ssh.kex_init_message.kex_algorithms	diffie-hellman-group14-sha256
services.ssh.kex_init_message.kex_algorithms	[email protected]
services.ssh.kex_init_message.host_key_algorithms	rsa-sha2-512
services.ssh.kex_init_message.host_key_algorithms	rsa-sha2-256
services.ssh.kex_init_message.host_key_algorithms	ssh-rsa
services.ssh.kex_init_message.client_to_server_ciphers	[email protected]
services.ssh.kex_init_message.client_to_server_ciphers	aes128-ctr
services.ssh.kex_init_message.client_to_server_ciphers	aes192-ctr
services.ssh.kex_init_message.client_to_server_ciphers	aes256-ctr
services.ssh.kex_init_message.client_to_server_ciphers	[email protected]
services.ssh.kex_init_message.client_to_server_ciphers	[email protected]
services.ssh.kex_init_message.server_to_client_ciphers	[email protected]
services.ssh.kex_init_message.server_to_client_ciphers	aes128-ctr
services.ssh.kex_init_message.server_to_client_ciphers	aes192-ctr
services.ssh.kex_init_message.server_to_client_ciphers	aes256-ctr
services.ssh.kex_init_message.server_to_client_ciphers	[email protected]
services.ssh.kex_init_message.server_to_client_ciphers	[email protected]
services.ssh.kex_init_message.client_to_server_macs	[email protected]
services.ssh.kex_init_message.client_to_server_macs	[email protected]
services.ssh.kex_init_message.client_to_server_macs	[email protected]
services.ssh.kex_init_message.client_to_server_macs	[email protected]
services.ssh.kex_init_message.client_to_server_macs	[email protected]
services.ssh.kex_init_message.client_to_server_macs	[email protected]
services.ssh.kex_init_message.client_to_server_macs	[email protected]
services.ssh.kex_init_message.client_to_server_macs	hmac-sha2-256
services.ssh.kex_init_message.client_to_server_macs	hmac-sha2-512
services.ssh.kex_init_message.client_to_server_macs	hmac-sha1
services.ssh.kex_init_message.server_to_client_macs	[email protected]
services.ssh.kex_init_message.server_to_client_macs	[email protected]
services.ssh.kex_init_message.server_to_client_macs	[email protected]
services.ssh.kex_init_message.server_to_client_macs	[email protected]
services.ssh.kex_init_message.server_to_client_macs	[email protected]
services.ssh.kex_init_message.server_to_client_macs	[email protected]
services.ssh.kex_init_message.server_to_client_macs	[email protected]
services.ssh.kex_init_message.server_to_client_macs	hmac-sha2-256
services.ssh.kex_init_message.server_to_client_macs	hmac-sha2-512
services.ssh.kex_init_message.server_to_client_macs	hmac-sha1
services.ssh.kex_init_message.client_to_server_compression	none
services.ssh.kex_init_message.client_to_server_compression	[email protected]
services.ssh.kex_init_message.server_to_client_compression	none
services.ssh.kex_init_message.server_to_client_compression	[email protected]
services.ssh.kex_init_message.first_kex_follows	false
services.ssh.algorithm_selection.kex_algorithm	[email protected]
services.ssh.algorithm_selection.host_key_algorithm	ssh-rsa
services.ssh.algorithm_selection.client_to_server_alg_group.cipher	aes128-ctr
services.ssh.algorithm_selection.client_to_server_alg_group.mac	hmac-sha2-256
services.ssh.algorithm_selection.client_to_server_alg_group.compression	none
services.ssh.algorithm_selection.server_to_client_alg_group.cipher	aes128-ctr
services.ssh.algorithm_selection.server_to_client_alg_group.mac	hmac-sha2-256
services.ssh.algorithm_selection.server_to_client_alg_group.compression	none
services.ssh.server_host_key.fingerprint_sha256	69b6f0e46ac5e9cb7c1f9c49bb1dc702ee61b0face503d38557ea50bfcb42855
services.ssh.server_host_key.rsa_public_key.modulus	vCEbtK7VUlN0H6u2C6aCiEjqgoV9ITsAvLw0020uGSrsfUs9E4SY64a2Ph86QkTqrmFwJ67cJh8Fp5YJkgf2bLBfSrPmqLU5d048lXLp4RGxoY2VDjnBA6nLn9NjCP9lCX/IFWbbRuK6obUQlNi+SMXyjs+VWfX+urEbr56YnIY3dM/KeTtB4crswaAVL/vcmd5cE7tgE4EGPQv1pAcGTj6qMV+U/j+1D2jzahlqFIOww3mbiZ78OmagnIdmrFE1dC+puqDQgcyF59Ix2yZB+KVEKVpe47nOcre8Hhnvtq4rw9iocfI3sCyNZh5rTPhcRAYy9iU6ZCB6AswNkuVaUw==
services.ssh.server_host_key.rsa_public_key.exponent	AAEAAQ==
services.ssh.server_host_key.rsa_public_key.length	2048
services.ssh.hassh_fingerprint	779664e66160bf75999f091fce5edb5a
services.transport_fingerprint.id	262
services.transport_fingerprint.os	CentOS
services.transport_fingerprint.raw	65160,64,true,MSTNW,1460,false,false
services.transport_protocol	TCP
services.truncated	false

25/SMTP TCP View Definition

Attribute	Value
services.banner	220-webgo MAILSERVER - checking mail...\r\n220 server2.webgo24.de ESMTP Postfix (Debian/GNU)\r\n
services.banner_hashes	sha256:e0774d25eea42114d591d6f4243e210273622cc9a15870552af5bf46b3d99c65
services.banner_hex	3232302d776562676f204d41494c534552564552202d20636865636b696e67206d61696c2e2e2e0d0a32323020736572766572322e776562676f32342e64652045534d545020506f7374666978202844656269616e2f474e55290d0a
services.certificate	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.extended_service_name	SMTP-STARTTLS
services.labels	email
services.observed_at	2025-03-24T18:18:15.902816201Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	25
services.service_name	SMTP
services.smtp.banner	220-webgo MAILSERVER - checking mail...\r\n220 server2.webgo24.de ESMTP Postfix (Debian/GNU)\r\n
services.smtp.ehlo	250-server2.webgo24.de\r\n250-PIPELINING\r\n250-SIZE 1073741824\r\n250-ETRN\r\n250-STARTTLS\r\n250-AUTH PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250 CHUNKING\r\n
services.smtp.start_tls	220 2.0.0 Ready to start TLS\r\n
services.source_ip	167.94.138.43
services.tls.version_selected	TLSv1_3
services.tls.cipher_selected	TLS_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.chain_fps_sha_256	7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256	68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256	d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.leaf_data.names	*.webgo24.de
services.tls.certificates.leaf_data.names	webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=*.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size	2048
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	3c8b8ced0f40619280a5ee6f46db78fdb77e7e7e3fd5ca53e8f13de4869e2768
services.tls.certificates.leaf_data.fingerprint	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.leaf_data.issuer.common_name	Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality	Salford
services.tls.certificates.leaf_data.issuer.organization	Sectigo Limited
services.tls.certificates.leaf_data.issuer.province	Greater Manchester
services.tls.certificates.leaf_data.issuer.country	GB
services.tls.certificates.leaf_data.subject.common_name	*.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	oAiUZ7x7udIYPj1BxpF4pE377Z6lgPx0LCrMrIIZCVCOugThtLz9HfL5OP/3Auc3AdgvRsNqNNe1vryqCA4wbiXxOPhcy4fAysvlXcjqud/7ApWoZE5uPxQwtBUwmJIQqXWo63VQI4ZI3j3juvlZTbovqVuxgPiRBq/vRG5qLARIRC2YP92fQ+8E2sqMf9NEqUmfUPgJExoUZur8QhzbPcfrsjMCVWlE9IfZw5BsBju4OdHM6gHVfLHhUwy0QW+KA2m++cJFbjAh2eyV4OpYYl+59mamSGPUMAPAOHnoC7zZFnfBuqT2yQNw9HMbFOv1HQESDuLbxmIUKMM7OMs9pw==
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	256
services.tls.certificates.leaf_data.public_key.fingerprint	d150ddb154113c3934b2e58b40d9a51e34caaa48e6aa24154cc96c8b45e5b24c
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s	15af977ce25de452b96affa2addb1036
services.tls.ja4s	t130200_1302_a56c5b993250
services.transport_protocol	TCP
services.truncated	false

80/HTTP TCP View Definition

Attribute	Value
services.banner	HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: http://server2.webgo24.de\r\n
services.banner_hashes	sha256:5f54c8b121e00b89ae22abfa2dec560e4fbad4f9f4fd3492d527596956a0de18
services.banner_hex	485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a5365727665723a206e67696e780d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203136320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4c6f636174696f6e3a20687474703a2f2f736572766572322e776562676f32342e64650d0a
services.extended_service_name	HTTP
services.http.request.method	GET
services.http.request.uri	http://185.30.32.2/
services.http.request.headers.User_Agent	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept	*/*
services.http.response.protocol	HTTP/1.1
services.http.response.status_code	301
services.http.response.status_reason	Moved Permanently
services.http.response.headers.Date	<REDACTED>
services.http.response.headers.Server	nginx
services.http.response.headers.Content_Length	162
services.http.response.headers.Content_Type	text/html
services.http.response.headers.Location	http://server2.webgo24.de
services.http.response.headers.Connection	keep-alive
services.http.response.html_tags	<title>301 Moved Permanently</title>
services.http.response.body_size	162
services.http.response.body	<html>\r\n<head><title>301 Moved Permanently</title></head>\r\n<body>\r\n<center><h1>301 Moved Permanently</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n
services.http.response.body_hashes	sha256:9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
services.http.response.body_hashes	sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff
services.http.response.body_hashes	tlsh:0bc08cadab022cc8b8a73b3861c36160e2ec80701699451101b04a07f1cf1979ec23d1
services.http.response.body_hash	sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff
services.http.response.html_title	301 Moved Permanently
services.http.supports_http2	false
services.observed_at	2025-03-24T20:00:44.699386490Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	80
services.service_name	HTTP
services.software.uniform_resource_identifier cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:* services.software.part a services.software.vendor nginx services.software.product nginx services.software.other.family nginx services.software.source OSI_APPLICATION_LAYER
services.source_ip	206.168.34.193
services.transport_protocol	TCP
services.truncated	false

110/POP3 TCP View Definition

Attribute	Value
services.banner	+OK Dovecot (Debian) ready.\r\n
services.banner_hashes	sha256:d23f942eab9de1c939a3dcab0aefadf6c86ebc2b99ba56b2b364c14c7c2b8dad
services.banner_hex	2b4f4b20446f7665636f74202844656269616e292072656164792e0d0a
services.certificate	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.extended_service_name	POP3S
services.labels	email
services.observed_at	2025-03-25T13:10:34.985074875Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.pop3.banner	+OK Dovecot (Debian) ready.\r\n
services.pop3.start_tls	+OK Begin TLS negotiation now.\r\n
services.port	110
services.service_name	POP3
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:* services.software.part a services.software.vendor Dovecot services.software.product Dovecot services.software.other.family Dovecot services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:* services.software.part o services.software.vendor Debian services.software.product Linux services.software.other.family Linux services.software.source OSI_APPLICATION_LAYER
services.source_ip	162.142.125.207
services.tls.version_selected	TLSv1_3
services.tls.cipher_selected	TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.chain_fps_sha_256	7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256	68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256	d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.leaf_data.names	*.webgo24.de
services.tls.certificates.leaf_data.names	webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=*.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size	2048
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	3c8b8ced0f40619280a5ee6f46db78fdb77e7e7e3fd5ca53e8f13de4869e2768
services.tls.certificates.leaf_data.fingerprint	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.leaf_data.issuer.common_name	Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality	Salford
services.tls.certificates.leaf_data.issuer.organization	Sectigo Limited
services.tls.certificates.leaf_data.issuer.province	Greater Manchester
services.tls.certificates.leaf_data.issuer.country	GB
services.tls.certificates.leaf_data.subject.common_name	*.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	oAiUZ7x7udIYPj1BxpF4pE377Z6lgPx0LCrMrIIZCVCOugThtLz9HfL5OP/3Auc3AdgvRsNqNNe1vryqCA4wbiXxOPhcy4fAysvlXcjqud/7ApWoZE5uPxQwtBUwmJIQqXWo63VQI4ZI3j3juvlZTbovqVuxgPiRBq/vRG5qLARIRC2YP92fQ+8E2sqMf9NEqUmfUPgJExoUZur8QhzbPcfrsjMCVWlE9IfZw5BsBju4OdHM6gHVfLHhUwy0QW+KA2m++cJFbjAh2eyV4OpYYl+59mamSGPUMAPAOHnoC7zZFnfBuqT2yQNw9HMbFOv1HQESDuLbxmIUKMM7OMs9pw==
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	256
services.tls.certificates.leaf_data.public_key.fingerprint	d150ddb154113c3934b2e58b40d9a51e34caaa48e6aa24154cc96c8b45e5b24c
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s	475c9302dc42b2751db9edcac3b74891
services.tls.ja4s	t130200_1303_a56c5b993250
services.transport_protocol	TCP
services.truncated	false

123/NTP UDP View Definition

Attribute	Value
services.extended_service_name	NTP
services.ntp.get_time_header.version	3
services.ntp.get_time_header.mode	4
services.ntp.get_time_header.stratum	3
services.ntp.get_time_header.poll	3
services.ntp.get_time_header.precision	-23
services.ntp.get_time_header.reference_id	�2u
services.ntp.get_time_header.leap_indicator	0
services.observed_at	2025-03-25T02:03:06.833426560Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	123
services.service_name	NTP
services.source_ip	199.45.155.94
services.transport_protocol	UDP
services.truncated	false

143/IMAP TCP View Definition

Attribute	Value
services.banner	* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot (Debian) ready.\r\n
services.banner_hashes	sha256:30da5d31a6902099f19ddc50a2f3de9fceaa1081ac7b6fed7c48384108795c93
services.banner_hex	2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45204c49544552414c2b205354415254544c5320415554483d504c41494e5d20446f7665636f74202844656269616e292072656164792e0d0a
services.certificate	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.extended_service_name	IMAPS
services.imap.banner	* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot (Debian) ready.\r\n
services.imap.start_tls	a001 OK Begin TLS negotiation now.\r\n
services.labels	email
services.observed_at	2025-03-25T18:57:05.993257770Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	143
services.service_name	IMAP
services.software.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:* services.software.part o services.software.product linux services.software.source OSI_TRANSPORT_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:* services.software.part a services.software.vendor Dovecot services.software.product Dovecot services.software.other.family Dovecot services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:* services.software.part o services.software.vendor Debian services.software.product Linux services.software.other.family Linux services.software.source OSI_APPLICATION_LAYER
services.source_ip	167.94.145.102
services.tls.version_selected	TLSv1_3
services.tls.cipher_selected	TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.chain_fps_sha_256	7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256	68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256	d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.leaf_data.names	*.webgo24.de
services.tls.certificates.leaf_data.names	webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=*.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size	2048
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	3c8b8ced0f40619280a5ee6f46db78fdb77e7e7e3fd5ca53e8f13de4869e2768
services.tls.certificates.leaf_data.fingerprint	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.leaf_data.issuer.common_name	Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality	Salford
services.tls.certificates.leaf_data.issuer.organization	Sectigo Limited
services.tls.certificates.leaf_data.issuer.province	Greater Manchester
services.tls.certificates.leaf_data.issuer.country	GB
services.tls.certificates.leaf_data.subject.common_name	*.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	oAiUZ7x7udIYPj1BxpF4pE377Z6lgPx0LCrMrIIZCVCOugThtLz9HfL5OP/3Auc3AdgvRsNqNNe1vryqCA4wbiXxOPhcy4fAysvlXcjqud/7ApWoZE5uPxQwtBUwmJIQqXWo63VQI4ZI3j3juvlZTbovqVuxgPiRBq/vRG5qLARIRC2YP92fQ+8E2sqMf9NEqUmfUPgJExoUZur8QhzbPcfrsjMCVWlE9IfZw5BsBju4OdHM6gHVfLHhUwy0QW+KA2m++cJFbjAh2eyV4OpYYl+59mamSGPUMAPAOHnoC7zZFnfBuqT2yQNw9HMbFOv1HQESDuLbxmIUKMM7OMs9pw==
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	256
services.tls.certificates.leaf_data.public_key.fingerprint	d150ddb154113c3934b2e58b40d9a51e34caaa48e6aa24154cc96c8b45e5b24c
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s	475c9302dc42b2751db9edcac3b74891
services.tls.ja4s	t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3 services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891 services.tls.versions.ja4s t130200_1303_a56c5b993250
services.transport_fingerprint.id	262
services.transport_fingerprint.os	CentOS
services.transport_fingerprint.raw	65160,64,true,MSTNW,1460,false,false
services.transport_protocol	TCP
services.truncated	false

443/HTTP TCP View Definition

Attribute	Value
services.banner	HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: <REDACTED>\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nSet-Cookie: PHPSESSID=5e0e3967e877b54518df6992ba80e56e; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\n
services.banner_hashes	sha256:b7ae3a7653e7a5950d86e54da8b0ff0d312daa8c1dcb05a12022237eb3473a45
services.banner_hex	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
services.certificate	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.extended_service_name	HTTPS
services.http.request.method	GET
services.http.request.uri	https://185.30.32.2/
services.http.request.headers.User_Agent	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept	*/*
services.http.response.protocol	HTTP/1.1
services.http.response.status_code	200
services.http.response.status_reason	OK
services.http.response.headers.Vary	Accept-Encoding
services.http.response.headers.Cache_Control	no-store, no-cache, must-revalidate
services.http.response.headers.Server	nginx
services.http.response.headers.Transfer_Encoding	chunked
services.http.response.headers.Expires	Thu, 19 Nov 1981 08:52:00 GMT
services.http.response.headers.Content_Type	text/html; charset=UTF-8
services.http.response.headers.Connection	keep-alive
services.http.response.headers.Pragma	no-cache
services.http.response.headers.Date	<REDACTED>
services.http.response.headers.Content_Encoding	gzip
services.http.response.headers.Set_Cookie	PHPSESSID=5e0e3967e877b54518df6992ba80e56e; path=/
services.http.response.html_tags	<title>webgo Webspace-Admin</title>
services.http.response.html_tags	<meta charset="UTF-8">
services.http.response.html_tags	<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
services.http.response.html_tags	<meta http-equiv="X-UA-Compatible" content="IE=edge">
services.http.response.html_tags	<meta name="viewport" content="width=device-width, initial-scale=1">
services.http.response.html_tags	<meta name="description" content="webgo Webspace-Admin">
services.http.response.html_tags	<meta name="keywords" content="Mesos, webgo Webspace-Admin, Linux, Server, Verwaltung, Postfix, Dovecot, Nginx, Apache, Mariadb">
services.http.response.body_size	3381
services.http.response.body	<!DOCTYPE html>\n<html lang="de">\n\n<head>\n\t <style>\n :root {\n --set-dynamic-backgorund-color: #d32c30;\n --set-dynamic-border-color: #d32c30;\n --set-dynamic-text-color: #d32c30;\n --set-dynamic-without-login-text-color: #646464;\n --set-dynamic-without-login-backgound-color: rgb(249, 248, 248);\n --set-dynamic-without-login-button-backgound-color: #d32c30;\n --set-dynamic-without-login-button-text-color: #ffffff;\n --set-dynamic-sidebar-menu-text-color: #d32c30;\n --set-dynamic-login-form-border-color: #a9a9a9;\n } \n </style>\t<meta charset="UTF-8">\n\t<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">\n\t<meta http-equiv="X-UA-Compatible" content="IE=edge">\n\t<meta name="viewport" content="width=device-width, initial-scale=1">\n\t<meta name="description" content="webgo Webspace-Admin">\n\t<meta name="keywords" content="Mesos, webgo Webspace-Admin, Linux, Server, Verwaltung, Postfix, Dovecot, Nginx, Apache, Mariadb">\n\n\t<title>webgo Webspace-Admin</title>\n\t<link rel="icon" href="https://www.webgo.de/assets/images/favicon.ico">\t<!-- Bootstrap-CSS -->\n\t<link href="templates/default_v4/css/bootstrap.min.css" rel="stylesheet">\n\t<!-- Bootstrap-Theme -->\n\t<link href="templates/default_v4/css/bootstrap-theme.min.css" rel="stylesheet">\n\t<!-- Fonts Awesome von http://fontawesome.io/ -->\n\t<link href="templates/default_v4/css/font-awesome.min.css" rel="stylesheet">\n\t<!-- Optional fuer Live Search in selects -->\n\t<link href="templates/default_v4/css/bootstrap-select.min.css" rel="stylesheet">\n\t<!-- Optional ende -->\n\n\t<!-- Eigen-CSS -->\n\t<link href="templates/default_v4/css/mesosadmin.css?v=2024092601" rel="stylesheet">\n\t<link href="templates/default_v4/css/login.css?v=20240924" rel="stylesheet">\n</head>\n\n<body class="text-center">\n\t<div class="mesos-login">\n\t\t\t<div class="mesos-login-head">\n\t\t\t<img src="/images/logo.svg" class="logosses" style="width: 130px;\n\t\t\theight: 86px;">\n\t\t</div>\n\t\t\t<form method="POST" action="index.php" class="mesos-form-login">\n\t\t\t<h1 class="h3 mb-3 font-weight-normal">Bitte einloggen</h1>\n\t\t\t<label for="Login" class="sr-only">Benutzername</label>\n\t\t\t<input type="text" name="Login" id="Login" class="form-control form-control-sm" placeholder="Benutzername" required autofocus>\n\t\t\t<label for="Password" class="sr-only">Passwort</label>\n\t\t\t<input type="password" name="Password" id="Password" class="form-control form-control-sm mt-3" placeholder="Passwort" required>\n\t\t\t\t\t\t<input type="hidden" name="do_login" value="1">\n\t\t\t<button class="btn btn-sm btn-light pl-5 pr-5" type="submit">Login</button>\n\t\t\t<p class="mt-1 mb-1 text-muted"><a href="index.php?forgotten=1">Passwort vergessen</a></p>\n\t\t\t\t\t\t\t<p class="mt-0 mb-3 text-muted"><a href="https://webgo.de/impressum" target="_blank">Impressum</a></p>\n\t\t\t\t\t</form>\n\t</div>\n<!-- <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"></script> -->\n<script src="templates/default_v4/js/jquery.min.js"></script>\n<script src="templates/default_v4/js/bootstrap.min.js"></script>\n<!-- <script src="templates/default_v4/js/docs.min.js"></script> -->\n<!-- IE10-Anzeigefenster-Hack fuer Fehler auf Surface und Desktop-Windows-8 -->\n<script src="templates/default_v4/js/ie10-viewport-bug-workaround.js"></script>\n</body>\n</html>\n
services.http.response.body_hashes	sha256:92f75b1fd1e0ffc52a22f756210fc678e0d132e8057cc3d3324ae55e1d8f5045
services.http.response.body_hashes	sha1:754c2d23c34f9fdd767319b6a446042659bb6b05
services.http.response.body_hashes	tlsh:d1617213840e8d2f216049bda189f358d5be8d5abea4fe56b0ff17150f44f8a4b2e990
services.http.response.body_hash	sha1:754c2d23c34f9fdd767319b6a446042659bb6b05
services.http.response.html_title	webgo Webspace-Admin
services.http.supports_http2	true
services.jarm.fingerprint	29d29d38d29d29d00042d42d0000005fd00fabd213a5ac89229012f70afd5c
services.jarm.cipher_and_version_fingerprint	29d29d38d29d29d00042d42d000000
services.jarm.tls_extensions_sha256	5fd00fabd213a5ac89229012f70afd5c
services.jarm.observed_at	2025-03-10T18:02:31.304143527Z
services.labels	bootstrap
services.labels	jquery
services.labels	login-page
services.observed_at	2025-03-25T18:27:45.920020216Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	443
services.service_name	HTTP
services.software.uniform_resource_identifier cpe:2.3:a:php:php:*:*:*:*:*:*:*:* services.software.part a services.software.vendor PHP services.software.product PHP services.software.other.family PHP services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:* services.software.part a services.software.vendor nginx services.software.product nginx services.software.other.family nginx services.software.source OSI_APPLICATION_LAYER
services.source_ip	206.168.34.65
services.tls.version_selected	TLSv1_3
services.tls.cipher_selected	TLS_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.chain_fps_sha_256	7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256	68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256	d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.leaf_data.names	*.webgo24.de
services.tls.certificates.leaf_data.names	webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=*.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size	2048
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	3c8b8ced0f40619280a5ee6f46db78fdb77e7e7e3fd5ca53e8f13de4869e2768
services.tls.certificates.leaf_data.fingerprint	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.leaf_data.issuer.common_name	Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality	Salford
services.tls.certificates.leaf_data.issuer.organization	Sectigo Limited
services.tls.certificates.leaf_data.issuer.province	Greater Manchester
services.tls.certificates.leaf_data.issuer.country	GB
services.tls.certificates.leaf_data.subject.common_name	*.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	oAiUZ7x7udIYPj1BxpF4pE377Z6lgPx0LCrMrIIZCVCOugThtLz9HfL5OP/3Auc3AdgvRsNqNNe1vryqCA4wbiXxOPhcy4fAysvlXcjqud/7ApWoZE5uPxQwtBUwmJIQqXWo63VQI4ZI3j3juvlZTbovqVuxgPiRBq/vRG5qLARIRC2YP92fQ+8E2sqMf9NEqUmfUPgJExoUZur8QhzbPcfrsjMCVWlE9IfZw5BsBju4OdHM6gHVfLHhUwy0QW+KA2m++cJFbjAh2eyV4OpYYl+59mamSGPUMAPAOHnoC7zZFnfBuqT2yQNw9HMbFOv1HQESDuLbxmIUKMM7OMs9pw==
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	256
services.tls.certificates.leaf_data.public_key.fingerprint	d150ddb154113c3934b2e58b40d9a51e34caaa48e6aa24154cc96c8b45e5b24c
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s	15af977ce25de452b96affa2addb1036
services.tls.ja4s	t130200_1302_a56c5b993250
services.tls.versions.tls_version TLSv1_3 services.tls.versions.ja3s 15af977ce25de452b96affa2addb1036 services.tls.versions.ja4s t130200_1302_a56c5b993250
services.tls.versions.tls_version TLSv1_2 services.tls.versions.ja3s 303951d4c50efb2e991652225a6f02b1 services.tls.versions.ja4s t120200_c02f_344b4dce5a52
services.transport_protocol	TCP
services.truncated	false

465/SMTP TCP View Definition

Attribute	Value
services.banner	220 server2.webgo24.de ESMTP Postfix (Debian/GNU)\r\n
services.banner_hashes	sha256:7c04ea0d77354c4686bb3b67e3e6be0b2b12c4f5b0474fad34e25a7f17a973b4
services.banner_hex	32323020736572766572322e776562676f32342e64652045534d545020506f7374666978202844656269616e2f474e55290d0a
services.certificate	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.discovery_method	IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name	SMTPS
services.jarm.fingerprint	3fd3fd1ad3fd3fd22c42d42d00000071072875005eb3aede396e09e29e9524
services.jarm.cipher_and_version_fingerprint	3fd3fd1ad3fd3fd22c42d42d000000
services.jarm.tls_extensions_sha256	71072875005eb3aede396e09e29e9524
services.jarm.observed_at	2025-03-24T08:24:17.940831024Z
services.labels	email
services.observed_at	2025-03-24T21:06:48.830071805Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	465
services.service_name	SMTP
services.smtp.banner	220 server2.webgo24.de ESMTP Postfix (Debian/GNU)\r\n
services.smtp.ehlo	250-server2.webgo24.de\r\n250-PIPELINING\r\n250-SIZE 1073741824\r\n250-ETRN\r\n250-AUTH PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250 CHUNKING\r\n
services.software.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:* services.software.part o services.software.product linux services.software.source OSI_TRANSPORT_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:* services.software.part a services.software.vendor Postfix services.software.product Postfix services.software.other.family Postfix services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:* services.software.part o services.software.vendor Debian services.software.product Linux services.software.other.family Linux services.software.source OSI_APPLICATION_LAYER
services.source_ip	199.45.154.119
services.tls.version_selected	TLSv1_3
services.tls.cipher_selected	TLS_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.chain_fps_sha_256	7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256	68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256	d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.leaf_data.names	*.webgo24.de
services.tls.certificates.leaf_data.names	webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=*.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size	2048
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	3c8b8ced0f40619280a5ee6f46db78fdb77e7e7e3fd5ca53e8f13de4869e2768
services.tls.certificates.leaf_data.fingerprint	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.leaf_data.issuer.common_name	Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality	Salford
services.tls.certificates.leaf_data.issuer.organization	Sectigo Limited
services.tls.certificates.leaf_data.issuer.province	Greater Manchester
services.tls.certificates.leaf_data.issuer.country	GB
services.tls.certificates.leaf_data.subject.common_name	*.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	oAiUZ7x7udIYPj1BxpF4pE377Z6lgPx0LCrMrIIZCVCOugThtLz9HfL5OP/3Auc3AdgvRsNqNNe1vryqCA4wbiXxOPhcy4fAysvlXcjqud/7ApWoZE5uPxQwtBUwmJIQqXWo63VQI4ZI3j3juvlZTbovqVuxgPiRBq/vRG5qLARIRC2YP92fQ+8E2sqMf9NEqUmfUPgJExoUZur8QhzbPcfrsjMCVWlE9IfZw5BsBju4OdHM6gHVfLHhUwy0QW+KA2m++cJFbjAh2eyV4OpYYl+59mamSGPUMAPAOHnoC7zZFnfBuqT2yQNw9HMbFOv1HQESDuLbxmIUKMM7OMs9pw==
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	256
services.tls.certificates.leaf_data.public_key.fingerprint	d150ddb154113c3934b2e58b40d9a51e34caaa48e6aa24154cc96c8b45e5b24c
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s	15af977ce25de452b96affa2addb1036
services.tls.ja4s	t130200_1302_a56c5b993250
services.tls.versions.tls_version TLSv1_3 services.tls.versions.ja3s 15af977ce25de452b96affa2addb1036 services.tls.versions.ja4s t130200_1302_a56c5b993250
services.tls.versions.tls_version TLSv1_2 services.tls.versions.ja3s d25619cb77d3219fc9fc14cb6b35eacc services.tls.versions.ja4s t120200_cca8_344b4dce5a52
services.tls.versions.tls_version TLSv1_1 services.tls.versions.ja3s ce815ab6e37127ab1cb9fe33d3ba250d services.tls.versions.ja4s t110200_c014_344b4dce5a52
services.tls.versions.tls_version TLSv1_0 services.tls.versions.ja3s 623de93db17d313345d7ea481e7443cf services.tls.versions.ja4s t100200_c014_344b4dce5a52
services.transport_fingerprint.id	262
services.transport_fingerprint.os	CentOS
services.transport_fingerprint.raw	65160,64,true,MSTNW,1460,false,false
services.transport_protocol	TCP
services.truncated	false

587/SMTP TCP View Definition

Attribute	Value
services.banner	220 server2.webgo24.de ESMTP Postfix (Debian/GNU)\r\n
services.banner_hashes	sha256:7c04ea0d77354c4686bb3b67e3e6be0b2b12c4f5b0474fad34e25a7f17a973b4
services.banner_hex	32323020736572766572322e776562676f32342e64652045534d545020506f7374666978202844656269616e2f474e55290d0a
services.certificate	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.extended_service_name	SMTP-STARTTLS
services.labels	email
services.observed_at	2025-03-25T06:54:19.602775872Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	587
services.service_name	SMTP
services.smtp.banner	220 server2.webgo24.de ESMTP Postfix (Debian/GNU)\r\n
services.smtp.ehlo	250-server2.webgo24.de\r\n250-PIPELINING\r\n250-SIZE 1073741824\r\n250-ETRN\r\n250-STARTTLS\r\n250-AUTH PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250 CHUNKING\r\n
services.smtp.start_tls	220 2.0.0 Ready to start TLS\r\n
services.software.uniform_resource_identifier cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:* services.software.part a services.software.vendor Postfix services.software.product Postfix services.software.other.family Postfix services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:* services.software.part o services.software.vendor Debian services.software.product Linux services.software.other.family Linux services.software.source OSI_APPLICATION_LAYER
services.source_ip	167.94.138.193
services.tls.version_selected	TLSv1_3
services.tls.cipher_selected	TLS_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.chain_fps_sha_256	7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256	68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256	d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.leaf_data.names	*.webgo24.de
services.tls.certificates.leaf_data.names	webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=*.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size	2048
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	3c8b8ced0f40619280a5ee6f46db78fdb77e7e7e3fd5ca53e8f13de4869e2768
services.tls.certificates.leaf_data.fingerprint	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.leaf_data.issuer.common_name	Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality	Salford
services.tls.certificates.leaf_data.issuer.organization	Sectigo Limited
services.tls.certificates.leaf_data.issuer.province	Greater Manchester
services.tls.certificates.leaf_data.issuer.country	GB
services.tls.certificates.leaf_data.subject.common_name	*.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	oAiUZ7x7udIYPj1BxpF4pE377Z6lgPx0LCrMrIIZCVCOugThtLz9HfL5OP/3Auc3AdgvRsNqNNe1vryqCA4wbiXxOPhcy4fAysvlXcjqud/7ApWoZE5uPxQwtBUwmJIQqXWo63VQI4ZI3j3juvlZTbovqVuxgPiRBq/vRG5qLARIRC2YP92fQ+8E2sqMf9NEqUmfUPgJExoUZur8QhzbPcfrsjMCVWlE9IfZw5BsBju4OdHM6gHVfLHhUwy0QW+KA2m++cJFbjAh2eyV4OpYYl+59mamSGPUMAPAOHnoC7zZFnfBuqT2yQNw9HMbFOv1HQESDuLbxmIUKMM7OMs9pw==
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	256
services.tls.certificates.leaf_data.public_key.fingerprint	d150ddb154113c3934b2e58b40d9a51e34caaa48e6aa24154cc96c8b45e5b24c
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s	15af977ce25de452b96affa2addb1036
services.tls.ja4s	t130200_1302_a56c5b993250
services.transport_protocol	TCP
services.truncated	false

993/IMAP TCP View Definition

Attribute	Value
services.banner	* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot (Debian) ready.\r\n
services.banner_hashes	sha256:c6da3659113355d5304fa51a7cf8a22204b433dac37072359c696b6c8b3b9f30
services.banner_hex	2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45204c49544552414c2b20415554483d504c41494e5d20446f7665636f74202844656269616e292072656164792e0d0a
services.certificate	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.extended_service_name	IMAPS
services.imap.banner	* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot (Debian) ready.\r\n
services.jarm.fingerprint	07d3fd12d21d21d07c42d43d0000008435c4f14f7a2c9375dab1adaee145f3
services.jarm.cipher_and_version_fingerprint	07d3fd12d21d21d07c42d43d000000
services.jarm.tls_extensions_sha256	8435c4f14f7a2c9375dab1adaee145f3
services.jarm.observed_at	2025-03-08T18:56:26.749117293Z
services.labels	email
services.observed_at	2025-03-25T09:23:20.946321149Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	993
services.service_name	IMAP
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:* services.software.part a services.software.vendor Dovecot services.software.product Dovecot services.software.other.family Dovecot services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:* services.software.part o services.software.vendor Debian services.software.product Linux services.software.other.family Linux services.software.source OSI_APPLICATION_LAYER
services.source_ip	167.94.146.59
services.tls.version_selected	TLSv1_3
services.tls.cipher_selected	TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.chain_fps_sha_256	7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256	68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256	d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.leaf_data.names	*.webgo24.de
services.tls.certificates.leaf_data.names	webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=*.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size	2048
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	3c8b8ced0f40619280a5ee6f46db78fdb77e7e7e3fd5ca53e8f13de4869e2768
services.tls.certificates.leaf_data.fingerprint	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.leaf_data.issuer.common_name	Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality	Salford
services.tls.certificates.leaf_data.issuer.organization	Sectigo Limited
services.tls.certificates.leaf_data.issuer.province	Greater Manchester
services.tls.certificates.leaf_data.issuer.country	GB
services.tls.certificates.leaf_data.subject.common_name	*.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	oAiUZ7x7udIYPj1BxpF4pE377Z6lgPx0LCrMrIIZCVCOugThtLz9HfL5OP/3Auc3AdgvRsNqNNe1vryqCA4wbiXxOPhcy4fAysvlXcjqud/7ApWoZE5uPxQwtBUwmJIQqXWo63VQI4ZI3j3juvlZTbovqVuxgPiRBq/vRG5qLARIRC2YP92fQ+8E2sqMf9NEqUmfUPgJExoUZur8QhzbPcfrsjMCVWlE9IfZw5BsBju4OdHM6gHVfLHhUwy0QW+KA2m++cJFbjAh2eyV4OpYYl+59mamSGPUMAPAOHnoC7zZFnfBuqT2yQNw9HMbFOv1HQESDuLbxmIUKMM7OMs9pw==
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	256
services.tls.certificates.leaf_data.public_key.fingerprint	d150ddb154113c3934b2e58b40d9a51e34caaa48e6aa24154cc96c8b45e5b24c
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s	475c9302dc42b2751db9edcac3b74891
services.tls.ja4s	t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3 services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891 services.tls.versions.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_2 services.tls.versions.ja3s d25619cb77d3219fc9fc14cb6b35eacc services.tls.versions.ja4s t120200_cca8_344b4dce5a52
services.tls.versions.tls_version TLSv1_1 services.tls.versions.ja3s b8d8f22562475aebf44ad54175c1d9c7 services.tls.versions.ja4s t110200_c013_344b4dce5a52
services.tls.versions.tls_version TLSv1_0 services.tls.versions.ja3s 184d532a16876b78846ae6a03f654890 services.tls.versions.ja4s t100200_c013_344b4dce5a52
services.transport_protocol	TCP
services.truncated	false

995/POP3 TCP View Definition

Attribute	Value
services.banner	+OK Dovecot (Debian) ready.\r\n
services.banner_hashes	sha256:d23f942eab9de1c939a3dcab0aefadf6c86ebc2b99ba56b2b364c14c7c2b8dad
services.banner_hex	2b4f4b20446f7665636f74202844656269616e292072656164792e0d0a
services.certificate	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.discovery_method	IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name	POP3S
services.jarm.fingerprint	07d3fd12d21d21d07c42d43d0000008435c4f14f7a2c9375dab1adaee145f3
services.jarm.cipher_and_version_fingerprint	07d3fd12d21d21d07c42d43d000000
services.jarm.tls_extensions_sha256	8435c4f14f7a2c9375dab1adaee145f3
services.jarm.observed_at	2025-03-20T18:45:50.772017698Z
services.labels	email
services.observed_at	2025-03-25T18:30:28.457051225Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.pop3.banner	+OK Dovecot (Debian) ready.\r\n
services.port	995
services.service_name	POP3
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:* services.software.part a services.software.vendor Dovecot services.software.product Dovecot services.software.other.family Dovecot services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:* services.software.part o services.software.vendor Debian services.software.product Linux services.software.other.family Linux services.software.source OSI_APPLICATION_LAYER
services.source_ip	167.94.145.110
services.tls.version_selected	TLSv1_3
services.tls.cipher_selected	TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.chain_fps_sha_256	7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain_fps_sha_256	68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256	d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.leaf_data.names	*.webgo24.de
services.tls.certificates.leaf_data.names	webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=*.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size	2048
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	3c8b8ced0f40619280a5ee6f46db78fdb77e7e7e3fd5ca53e8f13de4869e2768
services.tls.certificates.leaf_data.fingerprint	f2f2ebbe9deaee51d4f267cbc0f0a6c124cd50ba52b5a1e962a32aeb3818f606
services.tls.certificates.leaf_data.issuer.common_name	Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality	Salford
services.tls.certificates.leaf_data.issuer.organization	Sectigo Limited
services.tls.certificates.leaf_data.issuer.province	Greater Manchester
services.tls.certificates.leaf_data.issuer.country	GB
services.tls.certificates.leaf_data.subject.common_name	*.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	oAiUZ7x7udIYPj1BxpF4pE377Z6lgPx0LCrMrIIZCVCOugThtLz9HfL5OP/3Auc3AdgvRsNqNNe1vryqCA4wbiXxOPhcy4fAysvlXcjqud/7ApWoZE5uPxQwtBUwmJIQqXWo63VQI4ZI3j3juvlZTbovqVuxgPiRBq/vRG5qLARIRC2YP92fQ+8E2sqMf9NEqUmfUPgJExoUZur8QhzbPcfrsjMCVWlE9IfZw5BsBju4OdHM6gHVfLHhUwy0QW+KA2m++cJFbjAh2eyV4OpYYl+59mamSGPUMAPAOHnoC7zZFnfBuqT2yQNw9HMbFOv1HQESDuLbxmIUKMM7OMs9pw==
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	256
services.tls.certificates.leaf_data.public_key.fingerprint	d150ddb154113c3934b2e58b40d9a51e34caaa48e6aa24154cc96c8b45e5b24c
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.ja3s	475c9302dc42b2751db9edcac3b74891
services.tls.ja4s	t130200_1303_a56c5b993250
services.transport_protocol	TCP
services.truncated	false

999/HTTP TCP View Definition

Attribute	Value
services.banner	HTTP/1.1 403 Forbidden\r\nDate: <REDACTED>\r\nContent-Length: 0\r\n
services.banner_hashes	sha256:c28f407c23f6962ebd6ec1a15d17b91652ca7de591a2ccdfee40565c6400621d
services.banner_hex	485454502f312e312034303320466f7262696464656e0d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a20300d0a
services.discovery_method	PREDICTIVE_METHOD_30
services.extended_service_name	HTTP
services.http.request.method	GET
services.http.request.uri	http://185.30.32.2:999/
services.http.request.headers.User_Agent	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept	*/*
services.http.response.protocol	HTTP/1.1
services.http.response.status_code	403
services.http.response.status_reason	Forbidden
services.http.response.headers.Date	<REDACTED>
services.http.response.headers.Content_Length	0
services.http.response.body_size	0
services.http.supports_http2	false
services.observed_at	2025-03-25T00:22:52.666403965Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	999
services.service_name	HTTP
services.source_ip	167.94.146.56
services.transport_protocol	TCP
services.truncated	false

3306/MYSQL TCP View Definition

Attribute	Value
services.banner	5.5.5-10.11.4-MariaDB-1:10.11.4+maria~deb11-log
services.banner_hashes	sha256:42d3a0194dcea536a857e11269daa38506c04178b65e2481672d277061c0649f
services.banner_hex	352e352e352d31302e31312e342d4d6172696144422d313a31302e31312e342b6d617269617e64656231312d6c6f67
services.extended_service_name	MYSQL
services.labels	database
services.mysql.protocol_version	10
services.mysql.server_version	5.5.5-10.11.4-MariaDB-1:10.11.4+maria~deb11-log
services.mysql.connection_id	20824355
services.mysql.auth_plugin_data	773f7346456347784635746c42446e7c482e4d7800
services.mysql.character_set	45
services.mysql.status_flags.SERVER_STATUS_AUTOCOMMIT	true
services.mysql.capability_flags.CLIENT_RESERVED	true
services.mysql.capability_flags.CLIENT_MULTI_STATEMENTS	true
services.mysql.capability_flags.CLIENT_PROTOCOL_41	true
services.mysql.capability_flags.CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS	true
services.mysql.capability_flags.CLIENT_CONNECT_WITH_DB	true
services.mysql.capability_flags.CLIENT_SECURE_CONNECTION	true
services.mysql.capability_flags.CLIENT_ODBC	true
services.mysql.capability_flags.CLIENT_LOCAL_FILES	true
services.mysql.capability_flags.CLIENT_IGNORE_SPACE	true
services.mysql.capability_flags.CLIENT_PLUGIN_AUTH_LEN_ENC_CLIENT_DATA	true
services.mysql.capability_flags.CLIENT_IGNORE_SIGPIPE	true
services.mysql.capability_flags.CLIENT_DEPRECATED_EOF	true
services.mysql.capability_flags.CLIENT_FOUND_ROWS	true
services.mysql.capability_flags.CLIENT_SESSION_TRACK	true
services.mysql.capability_flags.CLIENT_INTERACTIVE	true
services.mysql.capability_flags.CLIENT_PLUGIN_AUTH	true
services.mysql.capability_flags.CLIENT_MULTI_RESULTS	true
services.mysql.capability_flags.CLIENT_CONNECT_ATTRS	true
services.mysql.capability_flags.CLIENT_LONG_FLAG	true
services.mysql.capability_flags.CLIENT_TRANSACTIONS	true
services.mysql.capability_flags.CLIENT_COMPRESS	true
services.mysql.capability_flags.CLIENT_PS_MULTI_RESULTS	true
services.mysql.capability_flags.CLIENT_NO_SCHEMA	true
services.mysql.auth_plugin_name	mysql_native_password
services.mysql.error_code	0
services.observed_at	2025-03-24T22:21:23.939572325Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	3306
services.service_name	MYSQL
services.software.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:* services.software.part o services.software.product linux services.software.source OSI_TRANSPORT_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:debian:debian_linux:9.1:*:*:*:*:*:*:* services.software.part o services.software.vendor Debian services.software.product Linux services.software.version 9.1 services.software.other.family Linux services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:mariadb:mariadb:10.11.4:*:*:*:*:*:*:* services.software.part a services.software.vendor MariaDB services.software.product MariaDB services.software.version 10.11.4 services.software.other.family MySQL services.software.source OSI_APPLICATION_LAYER
services.source_ip	206.168.34.89
services.transport_fingerprint.id	262
services.transport_fingerprint.os	CentOS
services.transport_fingerprint.raw	65160,64,true,MSTNW,1460,false,false
services.transport_protocol	TCP
services.truncated	false

4190/PIGEONHOLE TCP View Definition

Attribute	Value
services.banner	"IMPLEMENTATION" "Dovecot (Debian) Pigeonhole"\r\n"SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body
services.banner_hashes	sha256:2bab95704a42f08d471c62f1df2030ff7b9d52b7a018f4626d0ac4e63f14098a
services.banner_hex	22494d504c454d454e544154494f4e222022446f7665636f74202844656269616e2920506967656f6e686f6c65220d0a22534945564522202266696c65696e746f2072656a65637420656e76656c6f706520656e636f6465642d636861726163746572207661636174696f6e207375626164647265737320636f6d70617261746f722d693b61736369692d6e756d657269632072656c6174696f6e616c20726567657820696d617034666c61677320636f707920696e636c756465207661726961626c657320626f6479
services.extended_service_name	PIGEONHOLE
services.labels	email
services.observed_at	2025-03-25T00:19:38.565025560Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	4190
services.service_name	PIGEONHOLE
services.software.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:* services.software.part o services.software.product linux services.software.source OSI_TRANSPORT_LAYER
services.source_ip	167.94.145.104
services.transport_fingerprint.id	262
services.transport_fingerprint.os	CentOS
services.transport_fingerprint.raw	65160,64,true,MSTNW,1460,false,false
services.transport_protocol	TCP
services.truncated	false

5665/HTTP TCP View Definition

Attribute	Value
services.banner	HTTP/1.1 401 Unauthorized\r\nServer: Icinga/r2.14.5-1\r\nWWW-Authenticate: Basic realm="Icinga 2"\r\nConnection: close\r\nContent-Type: text/html\r\nContent-Length: 58\r\n
services.banner_hashes	sha256:a80472a931cee6bb7e99d80626c5386073070f4fb289092bdb479c3602f9c5ed
services.banner_hex	485454502f312e312034303120556e617574686f72697a65640d0a5365727665723a204963696e67612f72322e31342e352d310d0a5757572d41757468656e7469636174653a204261736963207265616c6d3d224963696e67612032220d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a2035380d0a
services.certificate	f702e811446a4c5c330c8db97eff714738f90feb6b15e9b9c83c12e4aff42b24
services.extended_service_name	HTTPS
services.http.request.method	GET
services.http.request.uri	https://185.30.32.2:5665/
services.http.request.headers.User_Agent	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept	*/*
services.http.response.protocol	HTTP/1.1
services.http.response.status_code	401
services.http.response.status_reason	Unauthorized
services.http.response.headers.WWW_Authenticate	Basic realm="Icinga 2"
services.http.response.headers.Server	Icinga/r2.14.5-1
services.http.response.headers.Content_Length	58
services.http.response.headers.Content_Type	text/html
services.http.response.headers.Connection	close
services.http.response.body_size	58
services.http.response.body	<h1>Unauthorized. Please check your user credentials.</h1>
services.http.response.body_hashes	sha256:96e9cf9119d9b1a4488e42969dd86cca39f90986c100149e0e10e367262e7781
services.http.response.body_hashes	sha1:0781b2ef0edae3f86ab5f8ef7aaa4e8dae54208a
services.http.response.body_hashes	tlsh:48a0022ca484035155471119e542d4d5580152385f9406a75e625459425624cb44f500
services.http.response.body_hash	sha1:0781b2ef0edae3f86ab5f8ef7aaa4e8dae54208a
services.http.supports_http2	false
services.jarm.fingerprint	2ad2ad16d2ad2ad00042d42d0000000b7957bea5dccaf2976e02aac6e2963a
services.jarm.cipher_and_version_fingerprint	2ad2ad16d2ad2ad00042d42d000000
services.jarm.tls_extensions_sha256	0b7957bea5dccaf2976e02aac6e2963a
services.jarm.observed_at	2025-03-17T19:23:50.009674762Z
services.observed_at	2025-03-25T13:11:20.167944841Z
services.perspective_id	PERSPECTIVE_UNKNOWN
services.port	5665
services.service_name	HTTP
services.software.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:* services.software.part o services.software.product linux services.software.source OSI_TRANSPORT_LAYER
services.source_ip	167.94.138.37
services.tls.version_selected	TLSv1_3
services.tls.cipher_selected	TLS_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256	f702e811446a4c5c330c8db97eff714738f90feb6b15e9b9c83c12e4aff42b24
services.tls.certificates.chain_fps_sha_256	e7892aa47949cb3b328caab424c8fd58869b1bb8f2b12b0ea5052b3c901e809d
services.tls.certificates.leaf_data.names	server2.webgo24.de
services.tls.certificates.leaf_data.subject_dn	CN=server2.webgo24.de
services.tls.certificates.leaf_data.issuer_dn	CN=Icinga CA
services.tls.certificates.leaf_data.pubkey_bit_size	4096
services.tls.certificates.leaf_data.pubkey_algorithm	RSA
services.tls.certificates.leaf_data.tbs_fingerprint	e1bd1c25a5e265f00c6c69bb36070bf9d8c499e2e37811ca03a1c3f7d371dd23
services.tls.certificates.leaf_data.fingerprint	f702e811446a4c5c330c8db97eff714738f90feb6b15e9b9c83c12e4aff42b24
services.tls.certificates.leaf_data.issuer.common_name	Icinga CA
services.tls.certificates.leaf_data.subject.common_name	server2.webgo24.de
services.tls.certificates.leaf_data.public_key.key_algorithm	RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus	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
services.tls.certificates.leaf_data.public_key.rsa.exponent	AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length	512
services.tls.certificates.leaf_data.public_key.fingerprint	743acea5429c319ee8a009d45bf7e4ca6bd9879a41d201362e332b9e230459d1
services.tls.certificates.leaf_data.signature.signature_algorithm	SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed	false
services.tls.certificates.chain.fingerprint e7892aa47949cb3b328caab424c8fd58869b1bb8f2b12b0ea5052b3c901e809d services.tls.certificates.chain.subject_dn CN=Icinga CA services.tls.certificates.chain.issuer_dn CN=Icinga CA
services.tls.ja3s	15af977ce25de452b96affa2addb1036
services.tls.ja4s	t130200_1302_a56c5b993250
services.tls.versions.tls_version TLSv1_3 services.tls.versions.ja3s 15af977ce25de452b96affa2addb1036 services.tls.versions.ja4s t130200_1302_a56c5b993250
services.tls.versions.tls_version TLSv1_2 services.tls.versions.ja3s 0debd3853f330c574b05e0b6d882dc27 services.tls.versions.ja4s t120200_c030_344b4dce5a52
services.transport_fingerprint.id	262
services.transport_fingerprint.os	CentOS
services.transport_fingerprint.raw	65160,64,true,MSTNW,1460,false,false
services.transport_protocol	TCP
services.truncated	false