195.52.223.247

As of: Jul 15, 2025 9:41pm UTC | Latest

Host

Attribute Value
ip 195.52.223.247
location.continent Europe
location.country Germany
location.country_code DE
location.city Frankfurt am Main
location.postal_code 60306
location.timezone Europe/Berlin
location.province Hesse
location.coordinates.latitude 50.11552
location.coordinates.longitude 8.68417
location_updated_at 2025-07-05T08:10:15.827976598Z
autonomous_system.asn 12312
autonomous_system.description ECOTEL
autonomous_system.bgp_prefix 195.52.0.0/16
autonomous_system.name ECOTEL
autonomous_system.country_code DE
autonomous_system_updated_at 2025-07-05T08:10:15.828204558Z
whois.network.handle TIS-D406966-NET
whois.network.name webhoster.de AG
whois.network.cidrs 195.52.223.0/24
whois.network.created 2014-11-24T00:00:00Z
whois.network.updated 2017-11-01T00:00:00Z
whois.organization.handle ORG-ECA1-RIPE
whois.organization.name ecotel communication ag
whois.organization.address Prinzenallee 11\n40549\nDuesseldorf\nGERMANY
whois.organization.abuse_contacts.handle NET12312-RIPE
whois.organization.abuse_contacts.name AS12312 Network Management
whois.organization.abuse_contacts.email [email protected]
whois.organization.admin_contacts.handle MB50402-RIPE
whois.organization.admin_contacts.name Matthias Belz
whois.organization.admin_contacts.handle PW1632-RIPE
whois.organization.admin_contacts.name Peter Winkler
whois.organization.admin_contacts.email [email protected]
operating_system.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
operating_system.part o
operating_system.product linux
operating_system.source OSI_TRANSPORT_LAYER
dns.names vm208.ehrenwert.it
dns.names test.server.ehrenwert.it
dns.names vm207.ehrenwert.it
dns.names vm209.ehrenwert.it
dns.names briefzentrum.mx.ehrenwert.it
dns.names imwebsein.dedicated.customers.ehrenwert.it
dns.names 1.tm.virtual.customers.ehrenwert.it
dns.names antispam.ehrenwert.it
dns.names breiding-vps1.aula.ehrenwert.it
dns.names endcore-vps1.kunden.ehrenwert.it
dns.names vm201.server.ehrenwert.it
dns.names schulze-vps1.kunden.ehrenwert.it
dns.names rechnungen.ehrenwert.it
dns.names ehrenwert.it
dns.records.briefzentrum.mx.ehrenwert.it.record_type A
dns.records.briefzentrum.mx.ehrenwert.it.resolved_at 2025-07-04T21:24:35.277929779Z
dns.records.antispam.ehrenwert.it.record_type A
dns.records.antispam.ehrenwert.it.resolved_at 2025-06-21T22:42:38.836505490Z
dns.records.imwebsein.dedicated.customers.ehrenwert.it.record_type A
dns.records.imwebsein.dedicated.customers.ehrenwert.it.resolved_at 2025-07-09T02:17:01.240917562Z
dns.records.vm209.ehrenwert.it.record_type A
dns.records.vm209.ehrenwert.it.resolved_at 2025-06-20T21:58:34.994282974Z
dns.records.vm208.ehrenwert.it.record_type A
dns.records.vm208.ehrenwert.it.resolved_at 2025-07-03T21:59:06.801855026Z
dns.records.vm201.server.ehrenwert.it.record_type A
dns.records.vm201.server.ehrenwert.it.resolved_at 2025-07-15T17:22:19.747467254Z
dns.records.test.server.ehrenwert.it.record_type A
dns.records.test.server.ehrenwert.it.resolved_at 2025-06-22T20:45:09.994151419Z
dns.records.rechnungen.ehrenwert.it.record_type A
dns.records.rechnungen.ehrenwert.it.resolved_at 2025-07-02T19:58:50.752136986Z
dns.records.schulze-vps1.kunden.ehrenwert.it.record_type A
dns.records.schulze-vps1.kunden.ehrenwert.it.resolved_at 2025-06-27T20:21:41.790963579Z
dns.records.ehrenwert.it.record_type A
dns.records.ehrenwert.it.resolved_at 2025-07-13T20:34:58.641278094Z
dns.records.endcore-vps1.kunden.ehrenwert.it.record_type A
dns.records.endcore-vps1.kunden.ehrenwert.it.resolved_at 2025-07-04T21:24:34.388423016Z
dns.records.1.tm.virtual.customers.ehrenwert.it.record_type A
dns.records.1.tm.virtual.customers.ehrenwert.it.resolved_at 2025-06-25T23:27:28.403135165Z
dns.records.breiding-vps1.aula.ehrenwert.it.record_type A
dns.records.breiding-vps1.aula.ehrenwert.it.resolved_at 2025-07-09T10:19:44.875584332Z
dns.records.vm207.ehrenwert.it.record_type A
dns.records.vm207.ehrenwert.it.resolved_at 2025-07-09T02:30:03.487452133Z
dns.reverse_dns.names breiding-vps1.aula.ehrenwert.it
dns.reverse_dns.resolved_at 2025-06-25T13:05:59.340007435Z
last_updated_at 2025-07-15T21:41:41.902Z
labels email
labels file-sharing
labels jquery
labels login-page
labels remote-access
labels web.control-panel.hosting

21/FTP TCP View Definition

Attribute Value
services.banner 220 ProFTPD Server (ProFTPD) [195.52.223.247]\r\n
services.banner_hashes sha256:7532687251fbb3cd02c55fc62864bf569aa8bfb890957a6e0191f58fce6dd2f3
services.banner_hex 3232302050726f4654504420536572766572202850726f4654504429205b3139352e35322e3232332e3234375d0d0a
services.discovery_method IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name FTP
services.ftp.banner 220 ProFTPD Server (ProFTPD) [195.52.223.247]\r\n
services.ftp.status_code 220
services.ftp.status_meaning Service ready for new user.
services.ftp.implicit_tls false
services.labels file-sharing
services.observed_at 2025-07-15T11:39:55.334424109Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 21
services.service_name FTP
services.software.uniform_resource_identifier cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor ProFTPD Project
services.software.product ProFTPD
services.software.other.family ProFTPD
services.software.source OSI_APPLICATION_LAYER
services.software.other.ip 195.52.223.247
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.74
services.transport_protocol TCP
services.truncated false

25/SMTP TCP View Definition

Attribute Value
services.banner 220 webhoster.ag ESMTP Postfix\r\n
services.banner_hashes sha256:0c7145a49a84237b2d8ef83263a29d5bb3fbcb05938bb9c8654432b0dd0f78db
services.banner_hex 32323020776562686f737465722e61672045534d545020506f73746669780d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name SMTP-STARTTLS
services.labels email
services.observed_at 2025-07-15T05:32:10.257144396Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 25
services.service_name SMTP
services.smtp.banner 220 webhoster.ag ESMTP Postfix\r\n
services.smtp.ehlo 250-webhoster.ag\r\n250-PIPELINING\r\n250-SIZE 102400000\r\n250-ETRN\r\n250-STARTTLS\r\n250-AUTH CRAM-MD5 PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250-DSN\r\n250-SMTPUTF8\r\n250 CHUNKING\r\n
services.smtp.start_tls 220 2.0.0 Ready to start TLS\r\n
services.software.uniform_resource_identifier cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Postfix
services.software.product Postfix
services.software.other.family Postfix
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.40
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus vrPL4t9kvZ0ilt7TPWdwsypu4SPr3RBzJmC8ygxrbvtuEyZuEdF9XcL0vlSHhLnp6crNeVBGL1jMgWFT8grH4QLoHERKh7wjkJXRV4mIOurFuNwX7gAnf0OZRHLS3Grep9dS9ouIUfqSQH4Bqz1bp9Suq27SD1t3YD43IUDqsXi6yDZa6AaKxiAepXTUm7dlrR/Bv4jfvclsJ/7FoQpsk3JAiXHWHSj5KSVU6sie94qj7jwdjDFKhf7GWzob6kmz6PDg7HNah6nUe1gKLxKbXUtAM52p70pre2bq7ep64iUCURpkFfME1XdM9pJozvD6Y8eVbHi2H70Ne7tlgWBxmASHybIwVAYrzqp0AZ4/lrJl2Wx5mJUcne6sDPYaUFqkXWqwTaLT27W29UXz1AToAlufmSYATk4gcAStHmA2frSvf5zZD1rj3ASRfUVsZp1NrWY6BWmwACLiQrBdp0DHNBLE+Lxaj8qkwiM6DOK8eSIHbB7vW65g1cIZ/bxkCexh2g0bkenlQ+9G6LYVIRjEvo/dhRRj9aFTf09rS/qwcieZyL/mlMrpcT3C1PiLGIdARZnbt05DjMoPj7pq4U/h6fad6bXN8nNCy8Ix53+I7GI6O79v0yjkzH2EBudWLm7zhsK+uU29oaxP8nhd4iscaPR+czTRa4o4VtDkDxmUOI0=
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.ja3s 15af977ce25de452b96affa2addb1036
services.tls.ja4s t130200_1302_a56c5b993250
services.transport_protocol TCP
services.truncated false

53/DNS UDP View Definition

Attribute Value
services.banner none
services.banner_hashes sha256:140bedbf9c3f6d56a9846d2ba7088798683f4da0c248231336e6a05679e4fdfe
services.banner_hex 6e6f6e65
services.dns.version none
services.dns.server_type AUTHORITATIVE
services.dns.r_code REFUSED
services.dns.resolves_correctly false
services.extended_service_name DNS
services.observed_at 2025-07-15T16:49:11.665680071Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 53
services.service_name DNS
services.source_ip 167.94.138.200
services.transport_protocol UDP
services.truncated false

80/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 415 Unsupported Media Type\r\nServer: openresty/1.27.1.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 185\r\nConnection: keep-alive\r\n
services.banner_hashes sha256:a50bd3575870237494f77bd66b23aba66f04597a8fb8609c86a82dd24961c85d
services.banner_hex 485454502f312e312034313520556e737570706f72746564204d6564696120547970650d0a5365727665723a206f70656e72657374792f312e32372e312e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203138350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a
services.discovery_method PREDICTIVE_METHOD_20
services.extended_service_name HTTP
services.http.request.method GET
services.http.request.uri http://195.52.223.247/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 415
services.http.response.status_reason Unsupported Media Type
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Server openresty/1.27.1.1
services.http.response.headers.Content_Length 185
services.http.response.headers.Content_Type text/html
services.http.response.headers.Connection keep-alive
services.http.response.html_tags <title>415 Unsupported Media Type</title>
services.http.response.body_size 185
services.http.response.body <html>\r\n<head><title>415 Unsupported Media Type</title></head>\r\n<body>\r\n<center><h1>415 Unsupported Media Type</h1></center>\r\n<hr><center>openresty/1.27.1.1</center>\r\n</body>\r\n</html>\r\n
services.http.response.body_hashes sha256:93601d7d66a95d2f58e11ac07ec0e487e49934287305e27c3155a7c622a7feac
services.http.response.body_hashes sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.body_hashes tlsh:e1c0127d25a67c09556364ba34c39890d192c23146d8a6418244066f70c7021d9d73d1
services.http.response.body_hash sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.html_title 415 Unsupported Media Type
services.http.supports_http2 true
services.observed_at 2025-07-15T17:46:52.206242397Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 80
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:openresty:openresty:1.27.1.1:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenResty
services.software.product OpenResty
services.software.version 1.27.1.1
services.software.source OSI_APPLICATION_LAYER
services.source_ip 199.45.155.94
services.transport_protocol TCP
services.truncated false

110/POP3 TCP View Definition

Attribute Value
services.banner +OK Dovecot ready. <[email protected]>\r\n
services.banner_hashes sha256:a9434decbfe8c9dd5e345fe2c736d0e27005a1f4d5be7a3df7876abe35acb39f
services.banner_hex 2b4f4b20446f7665636f742072656164792e203c31363665332e3362652e36383735643836352e325258705a59476c44716b745044646b5a71474c38773d3d40776562686f737465722e61673e0d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_12
services.extended_service_name POP3S
services.labels email
services.observed_at 2025-07-15T04:26:13.672881796Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.pop3.banner +OK Dovecot ready. <[email protected]>\r\n
services.pop3.start_tls +OK Begin TLS negotiation now.\r\n
services.port 110
services.service_name POP3
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Dovecot
services.software.product Dovecot
services.software.other.family Dovecot
services.software.source OSI_APPLICATION_LAYER
services.source_ip 162.142.125.195
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.ja4s t120200_c030_344b4dce5a52
services.transport_protocol TCP
services.truncated false

143/IMAP TCP View Definition

Attribute Value
services.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.\r\n
services.banner_hashes sha256:3535c1c91c9938cc78b1a93a8b510daff703245d7abc0d8ca0e217b0480eeca0
services.banner_hex 2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45204c49544552414c2b205354415254544c5320415554483d504c41494e20415554483d4c4f47494e20415554483d4449474553542d4d443520415554483d4352414d2d4d44355d20446f7665636f742072656164792e0d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name IMAPS
services.imap.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.\r\n
services.imap.start_tls a001 OK Begin TLS negotiation now.\r\n
services.labels email
services.observed_at 2025-07-15T16:47:45.625847029Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 143
services.service_name IMAP
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Dovecot
services.software.product Dovecot
services.software.other.family Dovecot
services.software.source OSI_APPLICATION_LAYER
services.source_ip 199.45.154.124
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.ja4s t120200_c030_344b4dce5a52
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.versions.ja4s t120200_c030_344b4dce5a52
services.transport_protocol TCP
services.truncated false

443/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: text/html\r\nLast-Modified: Sun, 19 Jan 2020 16:22:53 GMT\r\nEtag: "14e8-5e24825d-89c22ce5629bf447;gz"\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nContent-Length: 1694\r\nDate: <REDACTED>\r\nServer: LiteSpeed\r\nX-Powered-By: PleskLin\r\nalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"\r\n
services.banner_hashes sha256:2f0a4e31ab523668d3e5f961e31bc1404672cc6d03f232a888c12b26fce43a34
services.banner_hex 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
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_20
services.extended_service_name HTTPS
services.http.request.method GET
services.http.request.uri https://195.52.223.247/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 200
services.http.response.status_reason OK
services.http.response.headers.Vary Accept-Encoding
services.http.response.headers.Etag "14e8-5e24825d-89c22ce5629bf447;gz"
services.http.response.headers.Server LiteSpeed
services.http.response.headers.Content_Length 1694
services.http.response.headers.Content_Type text/html
services.http.response.headers.Keep_Alive timeout=5, max=100
services.http.response.headers.Accept_Ranges bytes
services.http.response.headers.Connection Keep-Alive
services.http.response.headers.alt_svc h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Content_Encoding gzip
services.http.response.headers.X_Powered_By PleskLin
services.http.response.headers.Last_Modified Sun, 19 Jan 2020 16:22:53 GMT
services.http.response.html_tags <title>Web Server's Default Page</title>
services.http.response.html_tags <meta charset="utf-8">
services.http.response.html_tags <meta name="copyright" content="Copyright 1999-2020. webhoster.de AG">
services.http.response.html_tags <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
services.http.response.html_tags <meta name="viewport" content="width=device-width, initial-scale=1">
services.http.response.body_size 5352
services.http.response.body <!doctype html>\n<html lang="en">\n<head>\n <meta charset="utf-8">\n <title>Web Server's Default Page</title>\n <meta name="copyright" content="Copyright 1999-2020. webhoster.de AG">\n <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">\n <meta name="viewport" content="width=device-width, initial-scale=1">\n <link rel="shortcut icon" href="favicon.ico">\n <link rel="preload" href="fonts/lato-v16-latin-regular.woff2" as="font" type="font/woff2" crossorigin>\n <link rel="stylesheet" href="style.css">\n</head>\n<body>\n <header class="header">\n <div class="header__inner">\n <div class="header__content">\n <a class="header__logo" href="https://www.webhoster.ag" target="_blank">\n <img src="img/webhosterlogo.png" alt="webhoster logo">\n </a>\n <h1 class="header__title">Webhoster Standard Seite</h1>\n <p class="header__message">\n Dieses Seite wurde generiert von der <a href="https://www.webhoster.ag" target="_blank">webhoster.de AG</a><br>\n Sie sehen die Website, weil bisher keine Daten hochgeladen wurden.\n </p>\n <div class="note">\n <span class="note__message">Loggen Sie in die Verwaltungsoberfläche ein.</span>\n <script>document.write('<a class="note__button" href="https://' + location.hostname + (location.protocol === 'https:' ? ':8443' : '') + '">Webhoster Login</a>');</script>\n </div>\n </div>\n </div>\n </header>\n <main class="content">\n <div class="content__inner">\n <h2 class="content__title">Wichtige Webhosting Informationen</h2>\n <p><b><a href="https://www.webhosting.de/umzug-confixx-plesk/">Umzug Confixx zu Plesk</a></b> falls Ihr Account umgezogen wurde finden Sie hier alle wichtigen Neuerungen.<br>Bitte prüfen Sie auch Ihr eMailprogramm. Eine Anleitung für die richtige Konfiguration Ihre eMail Programme finden Sie unter <a href="https://www.webhoster.ag/email/">webhoster.ag/email</a>.\n\t\t</p>\n <h2 class="content__title"><a href="https://www.webhoster.ag/wie-ist-meine-ip">Wie ist meine IP?</a></h2>\n\t <p><script src="https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>\n <script>\n$.get("https://ipinfo.io/json", function (response) {\n $("#ip").html("IP: " + response.ip);\n $("#address").html("Location: " + response.city + ", " + response.region);\n $("#details").html(JSON.stringify(response, null, 4));\n}, "jsonp");\n </script>\n<div id="ip"></div> Bitte geben Sie Ihre IP Adresse bei Serviceanfragen an. Hiermit können wir Ihnen schneller helfen. Wenn Sie sofort technischen Service benötigen, klicken Sie bitte unten auf Soforthilfe. Wir sind immer für Sie da.<br><br>\nProbleme mit eMails? Schauen Sie einmal unter <a href="https://www.webhoster.ag/email/">eMail Einrichtung</a> für die richtigen Einstellungen.\n\t\t</p>\n <ul class="resources-list">\n <li class="resources-list__item">\n <a class="plesk-guides" href="https://www.webhoster.ag/anleitungen/" target="_blank">\n <img class="icon" src="img/plesk-guides.svg" alt="Anleitungen">\n <span>Webhoster Anleitungen</span>\n </a>\n </li>\n <li class="resources-list__item">\n <a href="https://www.webhoster.ag/soforthilfe/" target="_blank">\n <img class="icon" src="img/knowlede-base.svg" alt="Knowledge Base">\n <span>Soforthilfe</span>\n </a>\n </li>\n <li class="resources-list__item">\n <a href="https://www.webhosting.de" target="_blank">\n <img class="icon" src="img/forum.svg" alt="Forum">\n <span>Forum</span>\n </a>\n </li>\n <li class="resources-list__item">\n <a href="https://www.webhoster.ag/blog/" target="_blank">\n <img class="icon" src="img/developers-blog.svg" alt="Webhoster Blog">\n <span>Webhoster Blog</span>\n </a>\n </li>\n <li class="resources-list__item">\n <a href="https://www.youtube.com/c/webhoster" target="_blank">\n <img class="icon" src="img/video-guides.svg" alt="Video Guides">\n <span>Video Anleitungen</span>\n </a>\n </li>\n <li class="resources-list__item">\n <a href="https://www.facebook.com/webhosterde" target="_blank">\n <img class="icon" src="img/facebook.svg" alt="Facebook">\n <span>Facebook</span>\n </a>\n </li>\n </ul>\n </div>\n </main>\n <footer class="footer">\n <div class="footer__inner">Diese Website wurde von der webhoster.de AG erstellt. Wir sind webhosting Anbieter seit 1996 und bieten hochverfügbare Webhosting Leistungen an.\n Erfahre mehr bei: <a href="https://www.webhoster.de" target="_blank">webhoster.de</a>\n </div>\n </footer>\n</body>\n</html>\n
services.http.response.favicons.size 1150
services.http.response.favicons.name https://195.52.223.247/favicon.ico
services.http.response.favicons.md5_hash ec49973c1991bf39fcdb53260467f39f
services.http.response.favicons.hashes md5:ec49973c1991bf39fcdb53260467f39f
services.http.response.favicons.hashes sha256:3550474f9a466ace7857064d81db50a25ba7c81de043bc9df8289bd90e32e411
services.http.response.favicons.shodan_hash -1050786453
services.http.response.body_hashes sha256:4e3f5e7b41a8888828a9784054173060f69aa021c62eb753a55883fab9c2c007
services.http.response.body_hashes sha1:eb0b61184dc93fe40a907d7e673bc5363046b6ff
services.http.response.body_hashes tlsh:88b1207204f5a57f5352d2c2ea21e7bcbdc2802bcd516d15b1fd464e2fe2e4a89a314c
services.http.response.body_hash sha1:eb0b61184dc93fe40a907d7e673bc5363046b6ff
services.http.response.html_title Web Server's Default Page
services.http.supports_http2 false
services.jarm.fingerprint 21d19d00021d21d00042d43d00000091f9827a8676a9d9f27d421962a09b5d
services.jarm.cipher_and_version_fingerprint 21d19d00021d21d00042d43d000000
services.jarm.tls_extensions_sha256 91f9827a8676a9d9f27d421962a09b5d
services.jarm.observed_at 2025-07-10T06:16:11.930373563Z
services.labels jquery
services.labels web.control-panel.hosting
services.observed_at 2025-07-15T02:52:45.463016731Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 443
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor LiteSpeed Technologies
services.software.product LiteSpeed Web Server
services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:*:plesklin:*:*:*:*:*:*:*:*
services.software.part a
services.software.product PleskLin
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.138.124
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus vrPL4t9kvZ0ilt7TPWdwsypu4SPr3RBzJmC8ygxrbvtuEyZuEdF9XcL0vlSHhLnp6crNeVBGL1jMgWFT8grH4QLoHERKh7wjkJXRV4mIOurFuNwX7gAnf0OZRHLS3Grep9dS9ouIUfqSQH4Bqz1bp9Suq27SD1t3YD43IUDqsXi6yDZa6AaKxiAepXTUm7dlrR/Bv4jfvclsJ/7FoQpsk3JAiXHWHSj5KSVU6sie94qj7jwdjDFKhf7GWzob6kmz6PDg7HNah6nUe1gKLxKbXUtAM52p70pre2bq7ep64iUCURpkFfME1XdM9pJozvD6Y8eVbHi2H70Ne7tlgWBxmASHybIwVAYrzqp0AZ4/lrJl2Wx5mJUcne6sDPYaUFqkXWqwTaLT27W29UXz1AToAlufmSYATk4gcAStHmA2frSvf5zZD1rj3ASRfUVsZp1NrWY6BWmwACLiQrBdp0DHNBLE+Lxaj8qkwiM6DOK8eSIHbB7vW65g1cIZ/bxkCexh2g0bkenlQ+9G6LYVIRjEvo/dhRRj9aFTf09rS/qwcieZyL/mlMrpcT3C1PiLGIdARZnbt05DjMoPj7pq4U/h6fad6bXN8nNCy8Ix53+I7GI6O79v0yjkzH2EBudWLm7zhsK+uU29oaxP8nhd4iscaPR+czTRa4o4VtDkDxmUOI0=
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.server_key_exchange.ec_params.named_curve 29
services.tls.session_ticket.length 176
services.tls.session_ticket.lifetime_hint 7195
services.tls.ja3s e35df3e00ca4ef31d42b34bebaa2f86e
services.tls.ja4s t120300_c030_bec8bdbaef8a
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s e35df3e00ca4ef31d42b34bebaa2f86e
services.tls.versions.ja4s t120300_c030_bec8bdbaef8a
services.transport_protocol TCP
services.truncated false

465/SMTP TCP View Definition

Attribute Value
services.banner 220 webhoster.ag ESMTP Postfix\r\n
services.banner_hashes sha256:0c7145a49a84237b2d8ef83263a29d5bb3fbcb05938bb9c8654432b0dd0f78db
services.banner_hex 32323020776562686f737465722e61672045534d545020506f73746669780d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_7
services.extended_service_name SMTPS
services.labels email
services.observed_at 2025-07-15T10:54:14.352475576Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 465
services.service_name SMTP
services.smtp.banner 220 webhoster.ag ESMTP Postfix\r\n
services.smtp.ehlo 250-webhoster.ag\r\n250-PIPELINING\r\n250-SIZE 102400000\r\n250-ETRN\r\n250-AUTH CRAM-MD5 PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250-DSN\r\n250-SMTPUTF8\r\n250 CHUNKING\r\n
services.software.uniform_resource_identifier cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Postfix
services.software.product Postfix
services.software.other.family Postfix
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.223
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.ja4s t120200_c030_344b4dce5a52
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.versions.ja4s t120200_c030_344b4dce5a52
services.transport_protocol TCP
services.truncated false

587/SMTP TCP View Definition

Attribute Value
services.banner 220 webhoster.ag ESMTP Postfix\r\n
services.banner_hashes sha256:0c7145a49a84237b2d8ef83263a29d5bb3fbcb05938bb9c8654432b0dd0f78db
services.banner_hex 32323020776562686f737465722e61672045534d545020506f73746669780d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_19
services.extended_service_name SMTP-STARTTLS
services.labels email
services.observed_at 2025-07-15T17:35:07.309077802Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 587
services.service_name SMTP
services.smtp.banner 220 webhoster.ag ESMTP Postfix\r\n
services.smtp.ehlo 250-webhoster.ag\r\n250-PIPELINING\r\n250-SIZE 102400000\r\n250-ETRN\r\n250-STARTTLS\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250-DSN\r\n250-SMTPUTF8\r\n250 CHUNKING\r\n
services.smtp.start_tls 220 2.0.0 Ready to start TLS\r\n
services.software.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.software.part o
services.software.product linux
services.software.source OSI_TRANSPORT_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:postfix:postfix:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Postfix
services.software.product Postfix
services.software.other.family Postfix
services.software.source OSI_APPLICATION_LAYER
services.source_ip 162.142.125.207
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.ja4s t120200_c030_344b4dce5a52
services.transport_fingerprint.id 72
services.transport_fingerprint.os Ubuntu / Debian / CentOS
services.transport_fingerprint.raw 28960,64,true,MSTNW,1460,false,false
services.transport_protocol TCP
services.truncated false

993/IMAP TCP View Definition

Attribute Value
services.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.\r\n
services.banner_hashes sha256:5200893fa5fc0d7030ad2e4a151c50852c895346b68e6176baf4c5efdbae3c96
services.banner_hex 2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45204c49544552414c2b20415554483d504c41494e20415554483d4c4f47494e20415554483d4449474553542d4d443520415554483d4352414d2d4d44355d20446f7665636f742072656164792e0d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_18
services.extended_service_name IMAPS
services.imap.banner * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.\r\n
services.labels email
services.observed_at 2025-07-15T03:58:48.706866686Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 993
services.service_name IMAP
services.software.uniform_resource_identifier cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.software.part o
services.software.product linux
services.software.source OSI_TRANSPORT_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Dovecot
services.software.product Dovecot
services.software.other.family Dovecot
services.software.source OSI_APPLICATION_LAYER
services.source_ip 199.45.155.70
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.ja4s t120200_c030_344b4dce5a52
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s 0debd3853f330c574b05e0b6d882dc27
services.tls.versions.ja4s t120200_c030_344b4dce5a52
services.transport_fingerprint.id 72
services.transport_fingerprint.os Ubuntu / Debian / CentOS
services.transport_fingerprint.raw 28960,64,true,MSTNW,1460,false,false
services.transport_protocol TCP
services.truncated false

2941/SSH TCP View Definition

Attribute Value
services.banner SSH-2.0-OpenSSH_7.4
services.banner_hashes sha256:be0da7ee170f9a69bc13b9e61ecfc9110c27db40f3f2e4c0ffae6741f064af8a
services.banner_hex 5353482d322e302d4f70656e5353485f372e34
services.discovery_method PREDICTIVE_METHOD_30
services.extended_service_name SSH
services.labels remote-access
services.observed_at 2025-07-14T19:08:32.215513536Z
services.pending_removal_since 2025-07-15T19:34:41.057747074Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 2941
services.service_name SSH
services.software.uniform_resource_identifier cpe:2.3:a:openbsd:openssh:7.4:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenBSD
services.software.product OpenSSH
services.software.version 7.4
services.software.other.family OpenSSH
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.217
services.ssh.endpoint_id.raw SSH-2.0-OpenSSH_7.4
services.ssh.endpoint_id.protocol_version 2.0
services.ssh.endpoint_id.software_version OpenSSH_7.4
services.ssh.kex_init_message.kex_algorithms curve25519-sha256
services.ssh.kex_init_message.kex_algorithms [email protected]
services.ssh.kex_init_message.kex_algorithms ecdh-sha2-nistp256
services.ssh.kex_init_message.kex_algorithms ecdh-sha2-nistp384
services.ssh.kex_init_message.kex_algorithms ecdh-sha2-nistp521
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group-exchange-sha256
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group16-sha512
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group18-sha512
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group-exchange-sha1
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group14-sha256
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group14-sha1
services.ssh.kex_init_message.kex_algorithms diffie-hellman-group1-sha1
services.ssh.kex_init_message.kex_algorithms [email protected]
services.ssh.kex_init_message.host_key_algorithms ssh-rsa
services.ssh.kex_init_message.host_key_algorithms rsa-sha2-512
services.ssh.kex_init_message.host_key_algorithms rsa-sha2-256
services.ssh.kex_init_message.host_key_algorithms ecdsa-sha2-nistp256
services.ssh.kex_init_message.host_key_algorithms ssh-ed25519
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_ciphers aes128-ctr
services.ssh.kex_init_message.client_to_server_ciphers aes192-ctr
services.ssh.kex_init_message.client_to_server_ciphers aes256-ctr
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_ciphers aes128-cbc
services.ssh.kex_init_message.client_to_server_ciphers aes192-cbc
services.ssh.kex_init_message.client_to_server_ciphers aes256-cbc
services.ssh.kex_init_message.client_to_server_ciphers blowfish-cbc
services.ssh.kex_init_message.client_to_server_ciphers cast128-cbc
services.ssh.kex_init_message.client_to_server_ciphers 3des-cbc
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers aes128-ctr
services.ssh.kex_init_message.server_to_client_ciphers aes192-ctr
services.ssh.kex_init_message.server_to_client_ciphers aes256-ctr
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers aes128-cbc
services.ssh.kex_init_message.server_to_client_ciphers aes192-cbc
services.ssh.kex_init_message.server_to_client_ciphers aes256-cbc
services.ssh.kex_init_message.server_to_client_ciphers blowfish-cbc
services.ssh.kex_init_message.server_to_client_ciphers cast128-cbc
services.ssh.kex_init_message.server_to_client_ciphers 3des-cbc
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.client_to_server_macs hmac-sha2-256
services.ssh.kex_init_message.client_to_server_macs hmac-sha2-512
services.ssh.kex_init_message.client_to_server_macs hmac-sha1
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs hmac-sha2-256
services.ssh.kex_init_message.server_to_client_macs hmac-sha2-512
services.ssh.kex_init_message.server_to_client_macs hmac-sha1
services.ssh.kex_init_message.client_to_server_compression none
services.ssh.kex_init_message.client_to_server_compression [email protected]
services.ssh.kex_init_message.server_to_client_compression none
services.ssh.kex_init_message.server_to_client_compression [email protected]
services.ssh.kex_init_message.first_kex_follows false
services.ssh.algorithm_selection.kex_algorithm [email protected]
services.ssh.algorithm_selection.host_key_algorithm ecdsa-sha2-nistp256
services.ssh.algorithm_selection.client_to_server_alg_group.cipher aes128-ctr
services.ssh.algorithm_selection.client_to_server_alg_group.mac hmac-sha2-256
services.ssh.algorithm_selection.client_to_server_alg_group.compression none
services.ssh.algorithm_selection.server_to_client_alg_group.cipher aes128-ctr
services.ssh.algorithm_selection.server_to_client_alg_group.mac hmac-sha2-256
services.ssh.algorithm_selection.server_to_client_alg_group.compression none
services.ssh.server_host_key.fingerprint_sha256 12f0fd79c79847cff6bacaa91079db7ec2b422315d67ae3701405307095e9669
services.ssh.server_host_key.ecdsa_public_key.b WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=
services.ssh.server_host_key.ecdsa_public_key.curve P-256
services.ssh.server_host_key.ecdsa_public_key.gx axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=
services.ssh.server_host_key.ecdsa_public_key.gy T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=
services.ssh.server_host_key.ecdsa_public_key.length 256
services.ssh.server_host_key.ecdsa_public_key.n /////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=
services.ssh.server_host_key.ecdsa_public_key.p /////wAAAAEAAAAAAAAAAAAAAAD///////////////8=
services.ssh.server_host_key.ecdsa_public_key.x OwwpggdbBvD5VhwnKzx2NwySLf/sYSivLb/lyACvinM=
services.ssh.server_host_key.ecdsa_public_key.y BSuOzvaqSUfd59K+8X0E4YQbFaP9pk7hngXkPw7pO/U=
services.ssh.hassh_fingerprint 98fecded130dda2056c8711b651ef4a5
services.transport_protocol TCP
services.truncated false

7088/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nReferrer-Policy: same-origin\r\nX-Content-Type-Options: nosniff\r\nset-cookie: LSWSWEBUI=ce3f1ba29f673fe62ae883ca446a1a4f; path=/; secure; HttpOnly\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 1637\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nDate: <REDACTED>\r\nServer: LiteSpeed\r\n
services.banner_hashes sha256:3464bc18d2b4df43f1ccbaadca3645e16f9662781d845e925d25563ad2c5d53f
services.banner_hex 485454502f312e3120323030204f4b0d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a4b6565702d416c6976653a2074696d656f75743d352c206d61783d3130300d0a582d4672616d652d4f7074696f6e733a2053414d454f524947494e0d0a436f6e74656e742d53656375726974792d506f6c6963793a206672616d652d616e636573746f7273202773656c66270d0a52656665727265722d506f6c6963793a2073616d652d6f726967696e0d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a7365742d636f6f6b69653a204c53575357454255493d63653366316261323966363733666536326165383833636134343661316134663b20706174683d2f3b207365637572653b20487474704f6e6c790d0a457870697265733a205468752c203139204e6f7620313938312030383a35323a303020474d540d0a43616368652d436f6e74726f6c3a206e6f2d73746f72652c206e6f2d63616368652c206d7573742d726576616c69646174652c20706f73742d636865636b3d302c207072652d636865636b3d300d0a507261676d613a206e6f2d63616368650d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d5554462d380d0a436f6e74656e742d4c656e6774683a20313633370d0a436f6e74656e742d456e636f64696e673a20677a69700d0a566172793a204163636570742d456e636f64696e670d0a446174653a20203c52454441435445443e0d0a5365727665723a204c69746553706565640d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_30
services.extended_service_name HTTPS
services.http.request.method GET
services.http.request.uri https://195.52.223.247:7088/login.php
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 200
services.http.response.status_reason OK
services.http.response.headers.Vary Accept-Encoding
services.http.response.headers.Cache_Control no-store, no-cache, must-revalidate, post-check=0, pre-check=0
services.http.response.headers.Content_Length 1637
services.http.response.headers.Expires Thu, 19 Nov 1981 08:52:00 GMT
services.http.response.headers.Content_Type text/html; charset=UTF-8
services.http.response.headers.X_Content_Type_Options nosniff
services.http.response.headers.Content_Encoding gzip
services.http.response.headers.Referrer_Policy same-origin
services.http.response.headers.set_cookie LSWSWEBUI=ce3f1ba29f673fe62ae883ca446a1a4f; path=/; secure; HttpOnly
services.http.response.headers.X_Frame_Options SAMEORIGIN
services.http.response.headers.Server LiteSpeed
services.http.response.headers.Pragma no-cache
services.http.response.headers.Keep_Alive timeout=5, max=100
services.http.response.headers.Connection Keep-Alive
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Content_Security_Policy frame-ancestors 'self'
services.http.response.html_tags <title> - LiteSpeed WebAdmin Console</title>
services.http.response.html_tags <meta http-equiv='Content-Type' content='text/html; charset=utf-8'>
services.http.response.html_tags <meta HTTP-EQUIV='Cache-control' CONTENT='no-cache'>
services.http.response.html_tags <meta HTTP-EQUIV='Pragma' CONTENT='no-cache'>
services.http.response.html_tags <meta HTTP-EQUIV='Expires' CONTENT='-1'>
services.http.response.html_tags <meta name="robots" content="noindex">
services.http.response.body_size 5780
services.http.response.body <!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.0 Transitional//EN' 'http://www.w3.org/TR/html4/loose.dtd'>\n\t\t<html>\n\t\t<head>\n\t\t<title> - LiteSpeed WebAdmin Console</title>\n\t\t<meta http-equiv='Content-Type' content='text/html; charset=utf-8'>\n\t\t<meta HTTP-EQUIV='Cache-control' CONTENT='no-cache'>\n\t\t<meta HTTP-EQUIV='Pragma' CONTENT='no-cache'>\n\t\t<meta HTTP-EQUIV='Expires' CONTENT='-1'>\n <meta name="robots" content="noindex">\n\t\t<link rel='Shortcut Icon' type='image/x-icon' href='/static/images/icons/favicon.ico' />\n\t\t<link rel='stylesheet' type='text/css' href='/static/styles/style.css'>\n\t\t<script type='text/javascript'\n\t\tsrc='/static/scripts/general.js'></script>\n\t\t</head>\n\t\t<body >\n\t\t<form name='mgrform' method='post' action='/service/serviceMgr.php'>\n\t\t<input type='hidden' name='act'><input type='hidden' name='actId'><input type='hidden' name='vl'><input type='hidden' name='tk' value='0.14607200 1752535075'>\n\t\t</form>\n\t\t<div id="main-wrapper"> <style>\n html,\n body {\n margin: 0;\n font-size: 16px;\n height:100%;\n }\n form {\n margin:0;\n }\n #main-wrapper {\n width:auto;\n margin:0;\n height:100%;\n }\n .center-wrapper {\n display: flex;\n justify-content: center;\n min-height: 100%;\n padding: 20vh 1rem 1rem 1rem;\n box-sizing: border-box;\n }\n .login-form-inner {\n width: 100%;\n box-sizing: border-box;\n max-width: 320px;\n margin: 0 auto;\n padding: 1.25rem 1.5rem 1.5rem 1.5rem;\n border: 1px solid #ced4da;\n background-color: #f5f9fc;\n box-shadow: 0 .55rem 1.25rem rgba(0, 65, 98, .04);\n }\n .login-form-input {\n width: 100%;\n }\n .login-form-logo {\n text-align: center;\n margin-bottom: 1rem;\n }\n .login-form h1 {\n border-bottom: 1px solid #ced4da;\n font-size: .938rem;\n padding: 1.15rem 1.5rem 1rem 1.5rem;\n margin: -1.25rem -1.5rem 1.75rem -1.5rem;\n color: #0a2246;\n background-color: #cbddec;\n line-height: 1;\n }\n .login-form-label {\n font-size: .938rem;\n }\n .login-form-input {\n display: block;\n width: 100%;\n height: calc(1.5rem + .75rem + 2px);\n padding: .375rem .75rem;\n font-size: 1rem;\n font-weight: 400;\n line-height: 1.5;\n color: #495057;\n background-color: #fff;\n background-clip: padding-box;\n border: 1px solid #ced4da;\n border-radius: 0;\n margin-top: 0.25rem;\n margin-bottom: 1.25rem;\n }\n .text-center {\n text-align: center;\n }\n .login-button {\n color: #fff;\n background-color: #142c4e;\n border-color: #142c4e;\n padding: .275rem .75rem;\n font-size: 1rem;\n line-height: 1.5;\n border-radius: 0;\n box-shadow: none;\n min-width: 8rem;\n cursor: pointer;\n transition:.3s;\n }\n .login-button:hover {\n background-color: #165180;\n }\n .login-form-msg {\n font-size: .864rem;\n margin-bottom: 1.5rem;\n color: #5d6879;\n }\n </style>\n <div class="center-wrapper">\n <div>\n <form id="login" action="login.php" method="post">\n <div class="login-form">\n <div class="login-form-logo"><img src="/static/images/logo/product_logo.svg" width="300px" border="0"></div>\n <div class="login-form-inner">\n <h1>WebAdmin Console</h1>\n <div class="">\n <label for="uid" class="login-form-label">Username</label>\n <input name="userid" id="uid" type="text" class="login-form-input">\n </div>\n <div class="">\n <label for="pass" class="login-form-label">Password</label>\n <input name="pass" id="pass" type="password" class="login-form-input">\n </div>\n <div class="">\n <input type="submit" class="login-button" value="Login">\n </div>\n </div>\n </div>\n</form>\n <div id="copyright" class="text-center">Copyright &copy; 2002-2025 <a href="https://www.litespeedtech.com">LiteSpeed Technologies, Inc.</a> All Rights Reserved.</div>\n </div>\n </div>\n </div>\n </body>\n</html>\n
services.http.response.favicons.size 1150
services.http.response.favicons.name https://195.52.223.247:7088/favicon.ico
services.http.response.favicons.md5_hash 1f3b03dca43591a72ef5333db1f665a9
services.http.response.favicons.hashes md5:1f3b03dca43591a72ef5333db1f665a9
services.http.response.favicons.hashes sha256:aca4c15f1af4015041d36d1d60816b8dd1d83beeb5a45e63025984ed4cf30125
services.http.response.favicons.shodan_hash -1494963435
services.http.response.body_hashes sha256:9e849c38992a8bb92854c4ad5fa1610ce5498797e4709747c4fc2ebbc1082c99
services.http.response.body_hashes sha1:3ee719bead7da32e0817c090e287a980f3a95c1b
services.http.response.body_hashes tlsh:f4c1120c18ab09036943453467f65b847a99c0238a06cf2dbefe2784cf8eb5059db7dc
services.http.response.body_hash sha1:3ee719bead7da32e0817c090e287a980f3a95c1b
services.http.response.html_title - LiteSpeed WebAdmin Console
services.http.supports_http2 false
services.jarm.fingerprint 29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae
services.jarm.cipher_and_version_fingerprint 29d29d00029d29d00042d43d00041d
services.jarm.tls_extensions_sha256 598ac0c1012db967bb1ad0ff2491b3ae
services.jarm.observed_at 2025-07-13T22:19:01.971432385Z
services.labels login-page
services.observed_at 2025-07-14T23:17:49.848637626Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 7088
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor LiteSpeed Technologies
services.software.product LiteSpeed Web Server
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.138.172
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.ja3s d75f9129bb5d05492a65ff78e081bcb2
services.tls.ja4s t130200_1303_234ea6891581
services.tls.versions.tls_version TLSv1_3
services.tls.versions.ja3s d75f9129bb5d05492a65ff78e081bcb2
services.tls.versions.ja4s t130200_1303_234ea6891581
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s 303951d4c50efb2e991652225a6f02b1
services.tls.versions.ja4s t120200_c02f_344b4dce5a52
services.transport_protocol TCP
services.truncated false

8443/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 415 Unsupported Media Type\r\nServer: openresty/1.27.1.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 185\r\nConnection: keep-alive\r\n
services.banner_hashes sha256:a50bd3575870237494f77bd66b23aba66f04597a8fb8609c86a82dd24961c85d
services.banner_hex 485454502f312e312034313520556e737570706f72746564204d6564696120547970650d0a5365727665723a206f70656e72657374792f312e32372e312e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203138350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name HTTPS
services.http.request.method GET
services.http.request.uri https://195.52.223.247:8443/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 415
services.http.response.status_reason Unsupported Media Type
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Server openresty/1.27.1.1
services.http.response.headers.Content_Length 185
services.http.response.headers.Content_Type text/html
services.http.response.headers.Connection keep-alive
services.http.response.html_tags <title>415 Unsupported Media Type</title>
services.http.response.body_size 185
services.http.response.body <html>\r\n<head><title>415 Unsupported Media Type</title></head>\r\n<body>\r\n<center><h1>415 Unsupported Media Type</h1></center>\r\n<hr><center>openresty/1.27.1.1</center>\r\n</body>\r\n</html>\r\n
services.http.response.body_hashes sha256:93601d7d66a95d2f58e11ac07ec0e487e49934287305e27c3155a7c622a7feac
services.http.response.body_hashes sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.body_hashes tlsh:e1c0127d25a67c09556364ba34c39890d192c23146d8a6418244066f70c7021d9d73d1
services.http.response.body_hash sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.html_title 415 Unsupported Media Type
services.http.supports_http2 true
services.jarm.fingerprint 2ad2ad0002ad2ad0002ad2ad2ad2ad69ab8961d572743914b8d2889e95d072
services.jarm.cipher_and_version_fingerprint 2ad2ad0002ad2ad0002ad2ad2ad2ad
services.jarm.tls_extensions_sha256 69ab8961d572743914b8d2889e95d072
services.jarm.observed_at 2025-07-10T09:26:12.764884438Z
services.observed_at 2025-07-15T17:22:52.637080310Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 8443
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:openresty:openresty:1.27.1.1:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenResty
services.software.product OpenResty
services.software.version 1.27.1.1
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.145.106
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3
services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.versions.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s d25619cb77d3219fc9fc14cb6b35eacc
services.tls.versions.ja4s t120200_cca8_344b4dce5a52
services.transport_protocol TCP
services.truncated false

8880/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 415 Unsupported Media Type\r\nServer: openresty/1.27.1.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 185\r\nConnection: keep-alive\r\n
services.banner_hashes sha256:a50bd3575870237494f77bd66b23aba66f04597a8fb8609c86a82dd24961c85d
services.banner_hex 485454502f312e312034313520556e737570706f72746564204d6564696120547970650d0a5365727665723a206f70656e72657374792f312e32372e312e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203138350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a
services.discovery_method IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name HTTP
services.http.request.method GET
services.http.request.uri http://195.52.223.247:8880/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 415
services.http.response.status_reason Unsupported Media Type
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Server openresty/1.27.1.1
services.http.response.headers.Content_Length 185
services.http.response.headers.Content_Type text/html
services.http.response.headers.Connection keep-alive
services.http.response.html_tags <title>415 Unsupported Media Type</title>
services.http.response.body_size 185
services.http.response.body <html>\r\n<head><title>415 Unsupported Media Type</title></head>\r\n<body>\r\n<center><h1>415 Unsupported Media Type</h1></center>\r\n<hr><center>openresty/1.27.1.1</center>\r\n</body>\r\n</html>\r\n
services.http.response.body_hashes sha256:93601d7d66a95d2f58e11ac07ec0e487e49934287305e27c3155a7c622a7feac
services.http.response.body_hashes sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.body_hashes tlsh:e1c0127d25a67c09556364ba34c39890d192c23146d8a6418244066f70c7021d9d73d1
services.http.response.body_hash sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.html_title 415 Unsupported Media Type
services.http.supports_http2 true
services.observed_at 2025-07-15T13:57:11.672050730Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 8880
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:openresty:openresty:1.27.1.1:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenResty
services.software.product OpenResty
services.software.version 1.27.1.1
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.138.187
services.transport_protocol TCP
services.truncated false

52223/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 415 Unsupported Media Type\r\nServer: openresty/1.27.1.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 185\r\nConnection: keep-alive\r\n
services.banner_hashes sha256:a50bd3575870237494f77bd66b23aba66f04597a8fb8609c86a82dd24961c85d
services.banner_hex 485454502f312e312034313520556e737570706f72746564204d6564696120547970650d0a5365727665723a206f70656e72657374792f312e32372e312e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203138350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_30
services.extended_service_name HTTPS
services.http.request.method GET
services.http.request.uri https://195.52.223.247:52223/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 415
services.http.response.status_reason Unsupported Media Type
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Server openresty/1.27.1.1
services.http.response.headers.Content_Length 185
services.http.response.headers.Content_Type text/html
services.http.response.headers.Connection keep-alive
services.http.response.html_tags <title>415 Unsupported Media Type</title>
services.http.response.body_size 185
services.http.response.body <html>\r\n<head><title>415 Unsupported Media Type</title></head>\r\n<body>\r\n<center><h1>415 Unsupported Media Type</h1></center>\r\n<hr><center>openresty/1.27.1.1</center>\r\n</body>\r\n</html>\r\n
services.http.response.body_hashes sha256:93601d7d66a95d2f58e11ac07ec0e487e49934287305e27c3155a7c622a7feac
services.http.response.body_hashes sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.body_hashes tlsh:e1c0127d25a67c09556364ba34c39890d192c23146d8a6418244066f70c7021d9d73d1
services.http.response.body_hash sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.html_title 415 Unsupported Media Type
services.http.supports_http2 true
services.jarm.fingerprint 21d19d00021d21d00042d43d00000091f9827a8676a9d9f27d421962a09b5d
services.jarm.cipher_and_version_fingerprint 21d19d00021d21d00042d43d000000
services.jarm.tls_extensions_sha256 91f9827a8676a9d9f27d421962a09b5d
services.jarm.observed_at 2025-07-08T20:21:07.698014991Z
services.observed_at 2025-07-15T09:29:23.813239996Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 52223
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:openresty:openresty:1.27.1.1:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenResty
services.software.product OpenResty
services.software.version 1.27.1.1
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.82
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3
services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.versions.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s d25619cb77d3219fc9fc14cb6b35eacc
services.tls.versions.ja4s t120200_cca8_344b4dce5a52
services.transport_protocol TCP
services.truncated false

52224/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 415 Unsupported Media Type\r\nServer: openresty/1.27.1.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 185\r\nConnection: keep-alive\r\n
services.banner_hashes sha256:a50bd3575870237494f77bd66b23aba66f04597a8fb8609c86a82dd24961c85d
services.banner_hex 485454502f312e312034313520556e737570706f72746564204d6564696120547970650d0a5365727665723a206f70656e72657374792f312e32372e312e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203138350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a
services.discovery_method PREDICTIVE_METHOD_30
services.extended_service_name HTTP
services.http.request.method GET
services.http.request.uri http://195.52.223.247:52224/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 415
services.http.response.status_reason Unsupported Media Type
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Server openresty/1.27.1.1
services.http.response.headers.Content_Length 185
services.http.response.headers.Content_Type text/html
services.http.response.headers.Connection keep-alive
services.http.response.html_tags <title>415 Unsupported Media Type</title>
services.http.response.body_size 185
services.http.response.body <html>\r\n<head><title>415 Unsupported Media Type</title></head>\r\n<body>\r\n<center><h1>415 Unsupported Media Type</h1></center>\r\n<hr><center>openresty/1.27.1.1</center>\r\n</body>\r\n</html>\r\n
services.http.response.body_hashes sha256:93601d7d66a95d2f58e11ac07ec0e487e49934287305e27c3155a7c622a7feac
services.http.response.body_hashes sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.body_hashes tlsh:e1c0127d25a67c09556364ba34c39890d192c23146d8a6418244066f70c7021d9d73d1
services.http.response.body_hash sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.html_title 415 Unsupported Media Type
services.http.supports_http2 true
services.observed_at 2025-07-15T09:24:40.311650206Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 52224
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:openresty:openresty:1.27.1.1:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenResty
services.software.product OpenResty
services.software.version 1.27.1.1
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.65
services.transport_protocol TCP
services.truncated false

52233/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 415 Unsupported Media Type\r\nServer: openresty/1.27.1.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 185\r\nConnection: keep-alive\r\n
services.banner_hashes sha256:a50bd3575870237494f77bd66b23aba66f04597a8fb8609c86a82dd24961c85d
services.banner_hex 485454502f312e312034313520556e737570706f72746564204d6564696120547970650d0a5365727665723a206f70656e72657374792f312e32372e312e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203138350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a
services.certificate c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.discovery_method PREDICTIVE_METHOD_30
services.extended_service_name HTTPS
services.http.request.method GET
services.http.request.uri https://195.52.223.247:52233/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 415
services.http.response.status_reason Unsupported Media Type
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Server openresty/1.27.1.1
services.http.response.headers.Content_Length 185
services.http.response.headers.Content_Type text/html
services.http.response.headers.Connection keep-alive
services.http.response.html_tags <title>415 Unsupported Media Type</title>
services.http.response.body_size 185
services.http.response.body <html>\r\n<head><title>415 Unsupported Media Type</title></head>\r\n<body>\r\n<center><h1>415 Unsupported Media Type</h1></center>\r\n<hr><center>openresty/1.27.1.1</center>\r\n</body>\r\n</html>\r\n
services.http.response.body_hashes sha256:93601d7d66a95d2f58e11ac07ec0e487e49934287305e27c3155a7c622a7feac
services.http.response.body_hashes sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.body_hashes tlsh:e1c0127d25a67c09556364ba34c39890d192c23146d8a6418244066f70c7021d9d73d1
services.http.response.body_hash sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.html_title 415 Unsupported Media Type
services.http.supports_http2 false
services.jarm.fingerprint 21d19d00021d21d00042d43d00000091f9827a8676a9d9f27d421962a09b5d
services.jarm.cipher_and_version_fingerprint 21d19d00021d21d00042d43d000000
services.jarm.tls_extensions_sha256 91f9827a8676a9d9f27d421962a09b5d
services.jarm.observed_at 2025-07-10T06:42:22.012196340Z
services.observed_at 2025-07-15T12:02:45.903276884Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 52233
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:openresty:openresty:1.27.1.1:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenResty
services.software.product OpenResty
services.software.version 1.27.1.1
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.116
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.chain_fps_sha_256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain_fps_sha_256 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain_fps_sha_256 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.leaf_data.names *.webhoster.ag
services.tls.certificates.leaf_data.names webhoster.ag
services.tls.certificates.leaf_data.subject_dn CN=*.webhoster.ag
services.tls.certificates.leaf_data.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.pubkey_bit_size 4096
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint a0877f2f71a0d4d67d29653f4dcd23da7f826d75997625c6a000bc90b941fedb
services.tls.certificates.leaf_data.fingerprint c6241932315465e381a241ff4c655a71ec4e7096a964e0d50f25d23213d1cace
services.tls.certificates.leaf_data.issuer.common_name Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.leaf_data.issuer.locality Salford
services.tls.certificates.leaf_data.issuer.organization Sectigo Limited
services.tls.certificates.leaf_data.issuer.province Greater Manchester
services.tls.certificates.leaf_data.issuer.country GB
services.tls.certificates.leaf_data.subject.common_name *.webhoster.ag
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 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
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 512
services.tls.certificates.leaf_data.public_key.fingerprint 280011949ab1aa6314fff396edf4d93cd8b3723a9d179d3a5f9cfd0746e3dca8
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
services.tls.certificates.chain.subject_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.certificates.chain.issuer_dn C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
services.tls.certificates.chain.fingerprint 7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
services.tls.certificates.chain.subject_dn C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
services.tls.certificates.chain.issuer_dn C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3
services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.versions.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s d25619cb77d3219fc9fc14cb6b35eacc
services.tls.versions.ja4s t120200_cca8_344b4dce5a52
services.transport_protocol TCP
services.truncated false

52234/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 415 Unsupported Media Type\r\nServer: openresty/1.27.1.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 185\r\nConnection: keep-alive\r\n
services.banner_hashes sha256:a50bd3575870237494f77bd66b23aba66f04597a8fb8609c86a82dd24961c85d
services.banner_hex 485454502f312e312034313520556e737570706f72746564204d6564696120547970650d0a5365727665723a206f70656e72657374792f312e32372e312e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203138350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a
services.discovery_method PREDICTIVE_METHOD_30
services.extended_service_name HTTP
services.http.request.method GET
services.http.request.uri http://195.52.223.247:52234/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 415
services.http.response.status_reason Unsupported Media Type
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Server openresty/1.27.1.1
services.http.response.headers.Content_Length 185
services.http.response.headers.Content_Type text/html
services.http.response.headers.Connection keep-alive
services.http.response.html_tags <title>415 Unsupported Media Type</title>
services.http.response.body_size 185
services.http.response.body <html>\r\n<head><title>415 Unsupported Media Type</title></head>\r\n<body>\r\n<center><h1>415 Unsupported Media Type</h1></center>\r\n<hr><center>openresty/1.27.1.1</center>\r\n</body>\r\n</html>\r\n
services.http.response.body_hashes sha256:93601d7d66a95d2f58e11ac07ec0e487e49934287305e27c3155a7c622a7feac
services.http.response.body_hashes sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.body_hashes tlsh:e1c0127d25a67c09556364ba34c39890d192c23146d8a6418244066f70c7021d9d73d1
services.http.response.body_hash sha1:4b84bd47853ce1233956b10efa50405a1df20e1e
services.http.response.html_title 415 Unsupported Media Type
services.http.supports_http2 true
services.observed_at 2025-07-15T09:29:51.855255273Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 52234
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:openresty:openresty:1.27.1.1:*:*:*:*:*:*:*
services.software.part a
services.software.vendor OpenResty
services.software.product OpenResty
services.software.version 1.27.1.1
services.software.source OSI_APPLICATION_LAYER
services.source_ip 162.142.125.211
services.transport_protocol TCP
services.truncated false