195.52.223.247

As of: Oct 10, 2024 3:00am UTC | Latest

Host

Attribute Value
ip 195.52.223.247
location.continent Europe
location.country Germany
location.country_code DE
location.city Frankfurt am Main
location.postal_code 60306
location.timezone Europe/Berlin
location.province Hesse
location.coordinates.latitude 50.11552
location.coordinates.longitude 8.68417
location_updated_at 2024-10-06T12:47:53.781414941Z
autonomous_system.asn 12312
autonomous_system.description ECOTEL
autonomous_system.bgp_prefix 195.52.0.0/16
autonomous_system.name ECOTEL
autonomous_system.country_code DE
autonomous_system_updated_at 2024-10-06T12:47:53.781534435Z
whois.network.handle TIS-D406966-NET
whois.network.name webhoster.de AG
whois.network.cidrs 195.52.223.0/24
whois.network.created 2014-11-24T00:00:00Z
whois.network.updated 2017-11-01T00:00:00Z
whois.organization.handle ORG-ECA1-RIPE
whois.organization.name ecotel communication ag
whois.organization.address Prinzenallee 11\n40549\nDuesseldorf\nGERMANY
whois.organization.abuse_contacts.handle NET12312-RIPE
whois.organization.abuse_contacts.name AS12312 Network Management
whois.organization.abuse_contacts.email [email protected]
whois.organization.admin_contacts.handle MB50402-RIPE
whois.organization.admin_contacts.name Matthias Belz
whois.organization.admin_contacts.handle PW1632-RIPE
whois.organization.admin_contacts.name Peter Winkler
whois.organization.admin_contacts.email [email protected]
operating_system.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
operating_system.part o
operating_system.product linux
operating_system.source OSI_TRANSPORT_LAYER
dns.names test.server.ehrenwert.it
dns.names vm201.server.ehrenwert.it
dns.names vm208.ehrenwert.it
dns.records.test.server.ehrenwert.it.record_type A
dns.records.test.server.ehrenwert.it.resolved_at 2024-10-07T18:25:59.407565284Z
dns.records.vm208.ehrenwert.it.record_type A
dns.records.vm208.ehrenwert.it.resolved_at 2024-10-08T19:47:12.580765516Z
dns.records.vm201.server.ehrenwert.it.record_type A
dns.records.vm201.server.ehrenwert.it.resolved_at 2024-10-07T18:26:00.038714349Z
dns.reverse_dns.names breiding-vps1.aula.ehrenwert.it
dns.reverse_dns.resolved_at 2024-10-08T05:43:27.309459960Z
last_updated_at 2024-10-10T03:00:56.268Z
labels email
labels remote-access

143/IMAP TCP View Definition

Attribute Value
services.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.\r\n
services.banner_hashes sha256:3535c1c91c9938cc78b1a93a8b510daff703245d7abc0d8ca0e217b0480eeca0
services.banner_hex 2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45204c49544552414c2b205354415254544c5320415554483d504c41494e20415554483d4c4f47494e20415554483d4449474553542d4d443520415554483d4352414d2d4d44355d20446f7665636f742072656164792e0d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_18
services.extended_service_name IMAPS
services.imap.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.\r\n
services.imap.start_tls a001 OK Begin TLS negotiation now.\r\n
services.labels email
services.observed_at 2024-10-08T07:34:56.216104562Z
services.pending_removal_since 2024-10-09T13:43:09.559050907Z
services.perspective_id PERSPECTIVE_HE
services.port 143
services.service_name IMAP
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Dovecot
services.software.product Dovecot
services.software.other.family Dovecot
services.software.source OSI_APPLICATION_LAYER
services.source_ip 162.142.125.33
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus vrPL4t9kvZ0ilt7TPWdwsypu4SPr3RBzJmC8ygxrbvtuEyZuEdF9XcL0vlSHhLnp6crNeVBGL1jMgWFT8grH4QLoHERKh7wjkJXRV4mIOurFuNwX7gAnf0OZRHLS3Grep9dS9ouIUfqSQH4Bqz1bp9Suq27SD1t3YD43IUDqsXi6yDZa6AaKxiAepXTUm7dlrR/Bv4jfvclsJ/7FoQpsk3JAiXHWHSj5KSVU6sie94qj7jwdjDFKhf7GWzob6kmz6PDg7HNah6nUe1gKLxKbXUtAM52p70pre2bq7ep64iUCURpkFfME1XdM9pJozvD6Y8eVbHi2H70Ne7tlgWBxmASHybIwVAYrzqp0AZ4/lrJl2Wx5mJUcne6sDPYaUFqkXWqwTaLT27W29UXz1AToAlufmSYATk4gcAStHmA2frSvf5zZD1rj3ASRfUVsZp1NrWY6BWmwACLiQrBdp0DHNBLE+Lxaj8qkwiM6DOK8eSIHbB7vW65g1cIZ/bxkCexh2g0bkenlQ+9G6LYVIRjEvo/dhRRj9aFTf09rS/qwcieZyL/mlMrpcT3C1PiLGIdARZnbt05DjMoPj7pq4U/h6fad6bXN8nNCy8Ix53+I7GI6O79v0yjkzH2EBudWLm7zhsK+uU29oaxP8nhd4iscaPR+czTRa4o4VtDkDxmUOI0=
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.ja4s t120200_c030_344b4dce5a52
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.versions.ja4s t120200_c030_344b4dce5a52
services.transport_protocol TCP
services.truncated false

465/SMTP TCP View Definition

Attribute Value
services.banner 220 webhoster.ag ESMTP Postfix\r\n
services.banner_hashes sha256:0c7145a49a84237b2d8ef83263a29d5bb3fbcb05938bb9c8654432b0dd0f78db
services.banner_hex 32323020776562686f737465722e61672045534d545020506f73746669780d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_16
services.extended_service_name SMTPS
services.labels email
services.observed_at 2024-10-09T12:08:19.237209883Z
services.perspective_id PERSPECTIVE_NTT_2
services.port 465
services.service_name SMTP
services.smtp.banner 220 webhoster.ag ESMTP Postfix\r\n
services.smtp.ehlo 250-webhoster.ag\r\n250-PIPELINING\r\n250-SIZE 102400000\r\n250-ETRN\r\n250-AUTH DIGEST-MD5 CRAM-MD5 PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250-DSN\r\n250-SMTPUTF8\r\n250 CHUNKING\r\n
services.software.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.software.part o
services.software.product linux
services.software.source OSI_TRANSPORT_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Postfix
services.software.product Postfix
services.software.other.family Postfix
services.software.source OSI_APPLICATION_LAYER
services.source_ip 199.45.155.69
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.ja4s t120200_c030_344b4dce5a52
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.versions.ja4s t120200_c030_344b4dce5a52
services.transport_fingerprint.id 72
services.transport_fingerprint.os Ubuntu / Debian / CentOS
services.transport_fingerprint.raw 28960,64,true,MSTNW,1460,false,false
services.transport_protocol TCP
services.truncated false

995/POP3 TCP View Definition

Attribute Value
services.banner +OK Dovecot ready. <[email protected]>\r\n
services.banner_hashes sha256:3885c73d7ac69f96fc2cc0354c2d7e82ca9c1d302284f31eba08c7f059266770
services.banner_hex 2b4f4b20446f7665636f742072656164792e203c663534612e3661362e36373034623462332e3674336f4436765373423247426d4651714e426863673d3d40776562686f737465722e61673e0d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_7
services.extended_service_name POP3S
services.labels email
services.observed_at 2024-10-08T04:27:31.538185888Z
services.pending_removal_since 2024-10-09T13:39:41.929469045Z
services.perspective_id PERSPECTIVE_NTT
services.pop3.banner +OK Dovecot ready. <[email protected]>\r\n
services.port 995
services.service_name POP3
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Dovecot
services.software.product Dovecot
services.software.other.family Dovecot
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.112
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.ja4s t120200_c030_344b4dce5a52
services.transport_protocol TCP
services.truncated false

2941/SSH TCP View Definition

Attribute Value
services.banner SSH-2.0-OpenSSH_7.4
services.banner_hashes sha256:be0da7ee170f9a69bc13b9e61ecfc9110c27db40f3f2e4c0ffae6741f064af8a
services.banner_hex 5353482d322e302d4f70656e5353485f372e34
services.discovery_method PREDICTIVE_METHOD_30
services.extended_service_name SSH
services.labels remote-access
services.observed_at 2024-10-08T10:03:19.636274148Z
services.pending_removal_since 2024-10-09T14:23:41.585552660Z
services.perspective_id PERSPECTIVE_TELIA
services.port 2941
services.service_name SSH
services.software.uniform_resource_identifier cpe:2.3:a:openbsd:openssh:7.4:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenBSD
services.software.product OpenSSH
services.software.version 7.4
services.software.other.family OpenSSH
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.146.54
services.ssh.endpoint_id.raw SSH-2.0-OpenSSH_7.4
services.ssh.endpoint_id.protocol_version 2.0
services.ssh.endpoint_id.software_version OpenSSH_7.4
services.ssh.kex_init_message.kex_algorithms curve25519-sha256
services.ssh.kex_init_message.kex_algorithms [email protected]
services.ssh.kex_init_message.kex_algorithms ecdh-sha2-nistp256
services.ssh.kex_init_message.kex_algorithms ecdh-sha2-nistp384
services.ssh.kex_init_message.kex_algorithms ecdh-sha2-nistp521
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group-exchange-sha256
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group16-sha512
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group18-sha512
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group-exchange-sha1
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group14-sha256
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group14-sha1
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group1-sha1
services.ssh.kex_init_message.kex_algorithms [email protected]
services.ssh.kex_init_message.host_key_algorithms ssh-rsa
services.ssh.kex_init_message.host_key_algorithms rsa-sha2-512
services.ssh.kex_init_message.host_key_algorithms rsa-sha2-256
services.ssh.kex_init_message.host_key_algorithms ecdsa-sha2-nistp256
services.ssh.kex_init_message.host_key_algorithms ssh-ed25519
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_ciphers aes128-ctr
services.ssh.kex_init_message.client_to_server_ciphers aes192-ctr
services.ssh.kex_init_message.client_to_server_ciphers aes256-ctr
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_ciphers aes128-cbc
services.ssh.kex_init_message.client_to_server_ciphers aes192-cbc
services.ssh.kex_init_message.client_to_server_ciphers aes256-cbc
services.ssh.kex_init_message.client_to_server_ciphers blowfish-cbc
services.ssh.kex_init_message.client_to_server_ciphers cast128-cbc
services.ssh.kex_init_message.client_to_server_ciphers 3des-cbc
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers aes128-ctr
services.ssh.kex_init_message.server_to_client_ciphers aes192-ctr
services.ssh.kex_init_message.server_to_client_ciphers aes256-ctr
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers aes128-cbc
services.ssh.kex_init_message.server_to_client_ciphers aes192-cbc
services.ssh.kex_init_message.server_to_client_ciphers aes256-cbc
services.ssh.kex_init_message.server_to_client_ciphers blowfish-cbc
services.ssh.kex_init_message.server_to_client_ciphers cast128-cbc
services.ssh.kex_init_message.server_to_client_ciphers 3des-cbc
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs hmac-sha2-256
services.ssh.kex_init_message.client_to_server_macs hmac-sha2-512
services.ssh.kex_init_message.client_to_server_macs hmac-sha1
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs hmac-sha2-256
services.ssh.kex_init_message.server_to_client_macs hmac-sha2-512
services.ssh.kex_init_message.server_to_client_macs hmac-sha1
services.ssh.kex_init_message.client_to_server_compression none
services.ssh.kex_init_message.client_to_server_compression [email protected]
services.ssh.kex_init_message.server_to_client_compression none
services.ssh.kex_init_message.server_to_client_compression [email protected]
services.ssh.kex_init_message.first_kex_follows false
services.ssh.algorithm_selection.kex_algorithm [email protected]
services.ssh.algorithm_selection.host_key_algorithm ecdsa-sha2-nistp256
services.ssh.algorithm_selection.client_to_server_alg_group.cipher aes128-ctr
services.ssh.algorithm_selection.client_to_server_alg_group.mac hmac-sha2-256
services.ssh.algorithm_selection.client_to_server_alg_group.compression none
services.ssh.algorithm_selection.server_to_client_alg_group.cipher aes128-ctr
services.ssh.algorithm_selection.server_to_client_alg_group.mac hmac-sha2-256
services.ssh.algorithm_selection.server_to_client_alg_group.compression none
services.ssh.server_host_key.fingerprint_sha256 12f0fd79c79847cff6bacaa91079db7ec2b422315d67ae3701405307095e9669
services.ssh.server_host_key.ecdsa_public_key.b WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=
services.ssh.server_host_key.ecdsa_public_key.curve P-256
services.ssh.server_host_key.ecdsa_public_key.gx axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=
services.ssh.server_host_key.ecdsa_public_key.gy T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=
services.ssh.server_host_key.ecdsa_public_key.length 256
services.ssh.server_host_key.ecdsa_public_key.n /////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=
services.ssh.server_host_key.ecdsa_public_key.p /////wAAAAEAAAAAAAAAAAAAAAD///////////////8=
services.ssh.server_host_key.ecdsa_public_key.x OwwpggdbBvD5VhwnKzx2NwySLf/sYSivLb/lyACvinM=
services.ssh.server_host_key.ecdsa_public_key.y BSuOzvaqSUfd59K+8X0E4YQbFaP9pk7hngXkPw7pO/U=
services.ssh.hassh_fingerprint 98fecded130dda2056c8711b651ef4a5
services.transport_protocol TCP
services.truncated false

8443/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 200 OK\r\nDate: <REDACTED>\r\nContent-Length: 1485\r\nConnection: keep-alive\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store, must-revalidate, max-age=0\r\nServer: imunify360-webshield/1.21\r\n
services.banner_hashes sha256:6f099fa24982e6b8942e337f62b0a63a1bb2308e6678c512390936f43e33cc0d
services.banner_hex 485454502f312e3120323030204f4b0d0a446174653a203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a20313438350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a43616368652d436f6e74726f6c3a206e6f2d63616368652c206e6f2d73746f72652c206d7573742d726576616c69646174652c206d61782d6167653d300d0a5365727665723a20696d756e6966793336302d776562736869656c642f312e32310d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_12
services.extended_service_name HTTPS
services.http.request.method GET
services.http.request.uri https://195.52.223.247:8443/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 200
services.http.response.status_reason OK
services.http.response.headers.Cache_Control no-cache, no-store, must-revalidate, max-age=0
services.http.response.headers.Server imunify360-webshield/1.21
services.http.response.headers.Content_Length 1485
services.http.response.headers.Content_Type text/html
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Connection keep-alive
services.http.response.html_tags <title>One moment, please...</title>
services.http.response.html_tags <meta charset="utf-8">
services.http.response.html_tags <meta name="robots" content="noindex, nofollow">
services.http.response.body_size 1485
services.http.response.body \n<!doctype html>\n<html lang="en">\n<head>\n <meta charset="utf-8">\n <meta name="robots" content="noindex, nofollow">\n <title>One moment, please...</title>\n <style>\n body {\n background: #F6F7F8;\n color: #303131;\n font-family: sans-serif;\n margin-top: 45vh;\n text-align: center;\n }\n </style>\n </head>\n<body>\n <h1>Please wait while your request is being verified...</h1>\n <form id="wsidchk-form" style="display:none;" action="/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f" method="GET">\n <input type="hidden" id="wsidchk" name="wsidchk"/>\n </form>\n <script>\n (function(){\n var west=+((+!+[])+(+!+[]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+![]+[])+(+!+[]+!![])+(+![]+[])+(+!+[]+!![])+(+!+[]+!![]+!![]+[])),\n east=+((+!+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+[])),\n x=function(){try{return !!window.addEventListener;}catch(e){return !!0;} },\n y=function(y,z){x() ? document.addEventListener('DOMContentLoaded',y,z) : document.attachEvent('onreadystatechange',y);};\n y(function(){\n document.getElementById('wsidchk').value = west + east;\n document.getElementById('wsidchk-form').submit();\n }, false);\n })();\n </script>\n</body>\n</html>
services.http.response.body_hashes sha256:11b8ad5e5b87e8a1887847bb1fdcfcf95ad70719327d01f03d71c8bb6ec1edc1
services.http.response.body_hashes sha1:0af4ced29eff2fdc326f32b5407e690832999327
services.http.response.body_hash sha1:0af4ced29eff2fdc326f32b5407e690832999327
services.http.response.html_title One moment, please...
services.http.supports_http2 true
services.observed_at 2024-10-09T11:28:03.440608781Z
services.perspective_id PERSPECTIVE_NTT_2
services.port 8443
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:imunify_security:imunify360:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Imunify Security
services.software.product Imunify360
services.software.source OSI_APPLICATION_LAYER
services.source_ip 199.45.155.69
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3
services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.versions.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s d25619cb77d3219fc9fc14cb6b35eacc
services.tls.versions.ja4s t120200_cca8_344b4dce5a52
services.transport_protocol TCP
services.truncated false