202.208.176.104
As of: Oct 14, 2024 8:58am UTC |
Latest
{
"ip": "202.208.176.104",
"services": [
{
"_decoded": "ftp",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "220 Welcome\r\n",
"banner_hashes": [
"sha256:acbbff6bf30cef3bbc9750e8fe79c7d1fef6c17a9ab34a8c238b3132a02f3a25"
],
"banner_hex": "3232302057656c636f6d650d0a",
"certificate": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"extended_service_name": "FTPes",
"ftp": {
"_encoding": {
"banner": "DISPLAY_UTF8",
"auth_tls_response": "DISPLAY_UTF8"
},
"banner": "220 Welcome\r\n",
"auth_tls_response": "234 Proceed with negotiation.\r\n",
"status_code": 220,
"status_meaning": "Service ready for new user.",
"implicit_tls": false
},
"labels": [
"file-sharing"
],
"observed_at": "2024-10-13T17:38:32.199372469Z",
"perspective_id": "PERSPECTIVE_ORANGE",
"port": 21,
"service_name": "FTP",
"source_ip": "167.94.145.110",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"chain_fps_sha_256": [
"e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab"
],
"leaf_data": {
"names": [
"*.office.synapse.ne.jp",
"office.synapse.ne.jp"
],
"subject_dn": "CN=*.office.synapse.ne.jp",
"issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "8ce291ecd2ef47a2086807c93ba1efc25521ba1da61427069ac55c7af8fbb9f3",
"fingerprint": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"issuer": {
"common_name": [
"GlobalSign GCC R6 AlphaSSL CA 2023"
],
"organization": [
"GlobalSign nv-sa"
],
"country": [
"BE"
]
},
"subject": {
"common_name": [
"*.office.synapse.ne.jp"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "xU1LIb4bFkmoyoYVQCKIWGw+sJp2CEkhn7NeEZuViSbJeBE0aTly90XNbCvelz23QbizIiDg0hcUalCV2ArCQ0rpnjdeZZcNecYWHsKStcDGM0Mc0xshORgWk829GMm4ovvVbB9tCA4p+u2YmoA1zAdk2exAtNMMICgdzglYn21zTnA/TDdEneQ5TrFEQSOB4v1CRHeQKrGPVCn360q7JHePWfThreA7SmS5uPAJxZCN8CBnV3cSZBErSJTESOMUP0CURIEz9ufcYO5I82MrJhUO3D56X+Ryt1hIUuArDD+2RNMhBTdGl7HKE6eY2sDyOvYk/JNkk6vefAG6B0zcMQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "ba7dd6ec7afa0a5fccb8ac7dd76deac4efb588bc99159d5ca7a592cc2afd1df0"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab",
"subject_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"issuer_dn": "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "303951d4c50efb2e991652225a6f02b1",
"ja4s": "t120200_c02f_344b4dce5a52"
},
"transport_fingerprint": {
"id": 401,
"os": "device412",
"raw": "29200,64,true,MNNSNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "smtp",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "220 plus04004.office.synapse.ne.jp ESMTP\r\n",
"banner_hashes": [
"sha256:f5328759cd71c9ab7472fe2c0e654715d950f56c6a60af21ba2f4b84084960ac"
],
"banner_hex": "32323020706c757330343030342e6f66666963652e73796e617073652e6e652e6a702045534d54500d0a",
"extended_service_name": "SMTP",
"labels": [
"email"
],
"observed_at": "2024-10-14T08:58:15.701198660Z",
"perspective_id": "PERSPECTIVE_TELIA",
"port": 25,
"service_name": "SMTP",
"smtp": {
"_encoding": {
"banner": "DISPLAY_UTF8",
"ehlo": "DISPLAY_UTF8",
"start_tls": "DISPLAY_UTF8"
},
"banner": "220 plus04004.office.synapse.ne.jp ESMTP\r\n",
"ehlo": "250-plus04004.office.synapse.ne.jp\r\n250-PIPELINING\r\n250-SIZE 150000000\r\n250-ETRN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250 DSN\r\n",
"start_tls": "502 5.5.1 Error: command not implemented\r\n"
},
"source_ip": "167.94.146.50",
"transport_fingerprint": {
"id": 373,
"os": "device400",
"raw": "29200,64,true,MNNSNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 403 Forbidden\r\nDate: <REDACTED>\r\nServer: Apache\r\nLast-Modified: Fri, 08 Jun 2007 10:03:54 GMT\r\nETag: \"24b-432622615f680\"\r\nAccept-Ranges: bytes\r\nContent-Length: 587\r\nContent-Type: text/html\r\n",
"banner_hashes": [
"sha256:29e9ba2a8baa235781d81bdbd091513d080e323153de8c4cb068b9e8e433e7b7"
],
"banner_hex": "485454502f312e312034303320466f7262696464656e0d0a446174653a203c52454441435445443e0d0a5365727665723a204170616368650d0a4c6173742d4d6f6469666965643a204672692c203038204a756e20323030372031303a30333a353420474d540d0a455461673a20223234622d34333236323236313566363830220d0a4163636570742d52616e6765733a2062797465730d0a436f6e74656e742d4c656e6774683a203538370d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://202.208.176.104/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 403,
"status_reason": "Forbidden",
"headers": {
"Server": [
"Apache"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Accept_Ranges": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"ETag": "DISPLAY_UTF8",
"Last_Modified": "DISPLAY_UTF8"
},
"Content_Length": [
"587"
],
"Content_Type": [
"text/html"
],
"Accept_Ranges": [
"bytes"
],
"Date": [
"<REDACTED>"
],
"ETag": [
"\"24b-432622615f680\""
],
"Last_Modified": [
"Fri, 08 Jun 2007 10:03:54 GMT"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>403-Forbidden</title>",
"<meta http-equiv=\"Content-Type\" content=\"text/html; charset=shift_jis\" />"
],
"body_size": 587,
"body": "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=shift_jis\" />\r\n<title>403-Forbidden</title>\r\n<link href=\"/officeplus-error/office-plus-error.css\" rel=\"stylesheet\" type=\"text/css\" media=\"screen\" />\r\n</head>\r\n\r\n<body>\r\n<div id=\"error-page\">\r\n<div class=\"comments\">\r\n<h1>403-Forbidden</h1>\r\n<p>\u7533\u3057\u8a33\u3054\u3056\u3044\u307e\u305b\u3093\u3002<br />\r\n\u3053\u306e\u30da\u30fc\u30b8\u306e\u3054\u5229\u7528\u306f\u4e0d\u53ef\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002</p>\r\n</di",
"body_hashes": [
"sha256:1781980bf655cb4a43c2258ccb6aef883f896fd0dd789758099aef68bdc0c43a",
"sha1:1263356f81f0fc0dddaf72b55da2101244880122"
],
"body_hash": "sha1:1263356f81f0fc0dddaf72b55da2101244880122",
"html_title": "403-Forbidden"
},
"supports_http2": false
},
"observed_at": "2024-10-13T20:36:26.539937576Z",
"perspective_id": "PERSPECTIVE_NTT",
"port": 80,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Apache",
"product": "HTTPD",
"other": {
"family": "Apache"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "206.168.34.118",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "pop3",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "+OK \r\n",
"banner_hashes": [
"sha256:ced4602f1e0d7a8d37c79a10c4c4deab39c6b7bfa2a4da83061666f42d6cccfa"
],
"banner_hex": "2b4f4b200d0a",
"certificate": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"extended_service_name": "POP3S",
"labels": [
"email"
],
"observed_at": "2024-10-14T04:37:33.190083889Z",
"perspective_id": "PERSPECTIVE_NTT",
"pop3": {
"_encoding": {
"banner": "DISPLAY_UTF8",
"start_tls": "DISPLAY_UTF8"
},
"banner": "+OK \r\n",
"start_tls": "+OK Begin TLS negotiation now.\r\n"
},
"port": 110,
"service_name": "POP3",
"source_ip": "206.168.34.124",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"chain_fps_sha_256": [
"e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab"
],
"leaf_data": {
"names": [
"*.office.synapse.ne.jp",
"office.synapse.ne.jp"
],
"subject_dn": "CN=*.office.synapse.ne.jp",
"issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "8ce291ecd2ef47a2086807c93ba1efc25521ba1da61427069ac55c7af8fbb9f3",
"fingerprint": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"issuer": {
"common_name": [
"GlobalSign GCC R6 AlphaSSL CA 2023"
],
"organization": [
"GlobalSign nv-sa"
],
"country": [
"BE"
]
},
"subject": {
"common_name": [
"*.office.synapse.ne.jp"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "xU1LIb4bFkmoyoYVQCKIWGw+sJp2CEkhn7NeEZuViSbJeBE0aTly90XNbCvelz23QbizIiDg0hcUalCV2ArCQ0rpnjdeZZcNecYWHsKStcDGM0Mc0xshORgWk829GMm4ovvVbB9tCA4p+u2YmoA1zAdk2exAtNMMICgdzglYn21zTnA/TDdEneQ5TrFEQSOB4v1CRHeQKrGPVCn360q7JHePWfThreA7SmS5uPAJxZCN8CBnV3cSZBErSJTESOMUP0CURIEz9ufcYO5I82MrJhUO3D56X+Ryt1hIUuArDD+2RNMhBTdGl7HKE6eY2sDyOvYk/JNkk6vefAG6B0zcMQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "ba7dd6ec7afa0a5fccb8ac7dd76deac4efb588bc99159d5ca7a592cc2afd1df0"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab",
"subject_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"issuer_dn": "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "0debd3853f330c574b05e0b6d882dc27",
"ja4s": "t120200_c030_344b4dce5a52"
},
"transport_fingerprint": {
"id": 401,
"os": "device412",
"raw": "29200,64,true,MNNSNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 404 Not Found\r\nDate: <REDACTED>\r\nServer: Apache\r\nContent-Length: 317\r\nContent-Type: text/html; charset=iso-8859-1\r\n",
"banner_hashes": [
"sha256:a60ebc3f35a8aa4601105878412acd914dd93fdf3df09e06e1954c8989ebcff9"
],
"banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a446174653a203c52454441435445443e0d0a5365727665723a204170616368650d0a436f6e74656e742d4c656e6774683a203331370d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d69736f2d383835392d310d0a",
"certificate": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://202.208.176.104/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 404,
"status_reason": "Not Found",
"headers": {
"Date": [
"<REDACTED>"
],
"_encoding": {
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8"
},
"Server": [
"Apache"
],
"Content_Length": [
"317"
],
"Content_Type": [
"text/html; charset=iso-8859-1"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>404 Not Found</title>"
],
"body_size": 317,
"body": "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL / was not found on this server.</p>\n<p>Additionally, a 404 Not Found\nerror was encountered while trying to use an ErrorDocument to handle the request.</p>\n</body></html>\n",
"body_hashes": [
"sha256:8f9bcaf2108af8933b2a16dbdfd87d0f89114d1befab749aca3f9bcf76cfa7ca",
"sha1:391f3433b45bb5138d846d333f30ac869d9fb6a0"
],
"body_hash": "sha1:391f3433b45bb5138d846d333f30ac869d9fb6a0",
"html_title": "404 Not Found"
},
"supports_http2": false
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "29d29d15d29d29d00029d29d29d29d487dfc3734968073f786f66dcf4de1b2",
"cipher_and_version_fingerprint": "29d29d15d29d29d00029d29d29d29d",
"tls_extensions_sha256": "487dfc3734968073f786f66dcf4de1b2",
"observed_at": "2024-09-29T15:39:41.202568253Z"
},
"observed_at": "2024-10-13T20:41:57.150237442Z",
"perspective_id": "PERSPECTIVE_NTT",
"port": 443,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Apache",
"product": "HTTPD",
"other": {
"family": "Apache"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "206.168.34.223",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"chain_fps_sha_256": [
"e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab"
],
"leaf_data": {
"names": [
"*.office.synapse.ne.jp",
"office.synapse.ne.jp"
],
"subject_dn": "CN=*.office.synapse.ne.jp",
"issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "8ce291ecd2ef47a2086807c93ba1efc25521ba1da61427069ac55c7af8fbb9f3",
"fingerprint": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"issuer": {
"common_name": [
"GlobalSign GCC R6 AlphaSSL CA 2023"
],
"organization": [
"GlobalSign nv-sa"
],
"country": [
"BE"
]
},
"subject": {
"common_name": [
"*.office.synapse.ne.jp"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "xU1LIb4bFkmoyoYVQCKIWGw+sJp2CEkhn7NeEZuViSbJeBE0aTly90XNbCvelz23QbizIiDg0hcUalCV2ArCQ0rpnjdeZZcNecYWHsKStcDGM0Mc0xshORgWk829GMm4ovvVbB9tCA4p+u2YmoA1zAdk2exAtNMMICgdzglYn21zTnA/TDdEneQ5TrFEQSOB4v1CRHeQKrGPVCn360q7JHePWfThreA7SmS5uPAJxZCN8CBnV3cSZBErSJTESOMUP0CURIEz9ufcYO5I82MrJhUO3D56X+Ryt1hIUuArDD+2RNMhBTdGl7HKE6eY2sDyOvYk/JNkk6vefAG6B0zcMQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "ba7dd6ec7afa0a5fccb8ac7dd76deac4efb588bc99159d5ca7a592cc2afd1df0"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab",
"subject_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"issuer_dn": "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"session_ticket": {
"length": 192,
"lifetime_hint": 7200
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "0c0aff9ccea5e7e1de5c3a0069d103f3",
"ja4s": "t120400_c02f_e1dda4771ae8",
"versions": [
{
"tls_version": "TLSv1_2",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "0c0aff9ccea5e7e1de5c3a0069d103f3",
"ja4s": "t120400_c02f_e1dda4771ae8"
}
]
},
"transport_fingerprint": {
"id": 401,
"os": "device412",
"raw": "29200,64,true,MNNSNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "smtp",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "220 plus04004.office.synapse.ne.jp ESMTP\r\n",
"banner_hashes": [
"sha256:f5328759cd71c9ab7472fe2c0e654715d950f56c6a60af21ba2f4b84084960ac"
],
"banner_hex": "32323020706c757330343030342e6f66666963652e73796e617073652e6e652e6a702045534d54500d0a",
"certificate": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "SMTPS",
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "07d10d11d21d21d07c07d10d07d21dc74a10f0dd8921b3cc912d3ee25ffd0a",
"cipher_and_version_fingerprint": "07d10d11d21d21d07c07d10d07d21d",
"tls_extensions_sha256": "c74a10f0dd8921b3cc912d3ee25ffd0a",
"observed_at": "2024-10-07T12:26:06.461695221Z"
},
"labels": [
"email"
],
"observed_at": "2024-10-13T12:57:44.108246182Z",
"perspective_id": "PERSPECTIVE_ORANGE",
"port": 465,
"service_name": "SMTP",
"smtp": {
"_encoding": {
"banner": "DISPLAY_UTF8",
"ehlo": "DISPLAY_UTF8"
},
"banner": "220 plus04004.office.synapse.ne.jp ESMTP\r\n",
"ehlo": "250-plus04004.office.synapse.ne.jp\r\n250-PIPELINING\r\n250-SIZE 150000000\r\n250-ETRN\r\n250-AUTH PLAIN LOGIN\r\n250-AUTH=PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250 DSN\r\n"
},
"source_ip": "167.94.145.108",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"chain_fps_sha_256": [
"e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab"
],
"leaf_data": {
"names": [
"*.office.synapse.ne.jp",
"office.synapse.ne.jp"
],
"subject_dn": "CN=*.office.synapse.ne.jp",
"issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "8ce291ecd2ef47a2086807c93ba1efc25521ba1da61427069ac55c7af8fbb9f3",
"fingerprint": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"issuer": {
"common_name": [
"GlobalSign GCC R6 AlphaSSL CA 2023"
],
"organization": [
"GlobalSign nv-sa"
],
"country": [
"BE"
]
},
"subject": {
"common_name": [
"*.office.synapse.ne.jp"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "xU1LIb4bFkmoyoYVQCKIWGw+sJp2CEkhn7NeEZuViSbJeBE0aTly90XNbCvelz23QbizIiDg0hcUalCV2ArCQ0rpnjdeZZcNecYWHsKStcDGM0Mc0xshORgWk829GMm4ovvVbB9tCA4p+u2YmoA1zAdk2exAtNMMICgdzglYn21zTnA/TDdEneQ5TrFEQSOB4v1CRHeQKrGPVCn360q7JHePWfThreA7SmS5uPAJxZCN8CBnV3cSZBErSJTESOMUP0CURIEz9ufcYO5I82MrJhUO3D56X+Ryt1hIUuArDD+2RNMhBTdGl7HKE6eY2sDyOvYk/JNkk6vefAG6B0zcMQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "ba7dd6ec7afa0a5fccb8ac7dd76deac4efb588bc99159d5ca7a592cc2afd1df0"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab",
"subject_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"issuer_dn": "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "303951d4c50efb2e991652225a6f02b1",
"ja4s": "t120200_c02f_344b4dce5a52",
"versions": [
{
"tls_version": "TLSv1_2",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "303951d4c50efb2e991652225a6f02b1",
"ja4s": "t120200_c02f_344b4dce5a52"
},
{
"tls_version": "TLSv1_1",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "b8d8f22562475aebf44ad54175c1d9c7",
"ja4s": "t110200_c013_344b4dce5a52"
},
{
"tls_version": "TLSv1_0",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "184d532a16876b78846ae6a03f654890",
"ja4s": "t100200_c013_344b4dce5a52"
}
]
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "smtp",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "220 plus04004.office.synapse.ne.jp ESMTP\r\n",
"banner_hashes": [
"sha256:f5328759cd71c9ab7472fe2c0e654715d950f56c6a60af21ba2f4b84084960ac"
],
"banner_hex": "32323020706c757330343030342e6f66666963652e73796e617073652e6e652e6a702045534d54500d0a",
"extended_service_name": "SMTP",
"labels": [
"email"
],
"observed_at": "2024-10-13T13:45:09.970666005Z",
"perspective_id": "PERSPECTIVE_NTT",
"port": 587,
"service_name": "SMTP",
"smtp": {
"_encoding": {
"banner": "DISPLAY_UTF8",
"ehlo": "DISPLAY_UTF8",
"start_tls": "DISPLAY_UTF8"
},
"banner": "220 plus04004.office.synapse.ne.jp ESMTP\r\n",
"ehlo": "250-plus04004.office.synapse.ne.jp\r\n250-PIPELINING\r\n250-SIZE 150000000\r\n250-ETRN\r\n250-AUTH PLAIN LOGIN\r\n250-AUTH=PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250 DSN\r\n",
"start_tls": "502 5.5.1 Error: command not implemented\r\n"
},
"source_ip": "206.168.34.127",
"transport_fingerprint": {
"id": 401,
"os": "device412",
"raw": "29200,64,true,MNNSNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "imap",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] \r\n",
"banner_hashes": [
"sha256:cf12abcab9041561a606790f364313a862af98a90a6035e7d20b99ae4e79faa1"
],
"banner_hex": "2a204f4b205b4341504142494c49545920494d41503472657631204c49544552414c2b205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c4520415554483d504c41494e5d200d0a",
"certificate": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"extended_service_name": "IMAPS",
"imap": {
"_encoding": {
"banner": "DISPLAY_UTF8"
},
"banner": "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] \r\n"
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "2ad2ad16d2ad2ad22c2ad2ad2ad2ad579b2ec9bfaf00aff9d6fe780b7932ae",
"cipher_and_version_fingerprint": "2ad2ad16d2ad2ad22c2ad2ad2ad2ad",
"tls_extensions_sha256": "579b2ec9bfaf00aff9d6fe780b7932ae",
"observed_at": "2024-09-25T04:21:05.373439880Z"
},
"labels": [
"email"
],
"observed_at": "2024-10-13T00:09:42.892484624Z",
"perspective_id": "PERSPECTIVE_TATA",
"port": 993,
"service_name": "IMAP",
"source_ip": "167.94.138.53",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"chain_fps_sha_256": [
"e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab"
],
"leaf_data": {
"names": [
"*.office.synapse.ne.jp",
"office.synapse.ne.jp"
],
"subject_dn": "CN=*.office.synapse.ne.jp",
"issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "8ce291ecd2ef47a2086807c93ba1efc25521ba1da61427069ac55c7af8fbb9f3",
"fingerprint": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"issuer": {
"common_name": [
"GlobalSign GCC R6 AlphaSSL CA 2023"
],
"organization": [
"GlobalSign nv-sa"
],
"country": [
"BE"
]
},
"subject": {
"common_name": [
"*.office.synapse.ne.jp"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "xU1LIb4bFkmoyoYVQCKIWGw+sJp2CEkhn7NeEZuViSbJeBE0aTly90XNbCvelz23QbizIiDg0hcUalCV2ArCQ0rpnjdeZZcNecYWHsKStcDGM0Mc0xshORgWk829GMm4ovvVbB9tCA4p+u2YmoA1zAdk2exAtNMMICgdzglYn21zTnA/TDdEneQ5TrFEQSOB4v1CRHeQKrGPVCn360q7JHePWfThreA7SmS5uPAJxZCN8CBnV3cSZBErSJTESOMUP0CURIEz9ufcYO5I82MrJhUO3D56X+Ryt1hIUuArDD+2RNMhBTdGl7HKE6eY2sDyOvYk/JNkk6vefAG6B0zcMQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "ba7dd6ec7afa0a5fccb8ac7dd76deac4efb588bc99159d5ca7a592cc2afd1df0"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab",
"subject_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"issuer_dn": "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "0debd3853f330c574b05e0b6d882dc27",
"ja4s": "t120200_c030_344b4dce5a52",
"versions": [
{
"tls_version": "TLSv1_2",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "0debd3853f330c574b05e0b6d882dc27",
"ja4s": "t120200_c030_344b4dce5a52"
},
{
"tls_version": "TLSv1_1",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "ce815ab6e37127ab1cb9fe33d3ba250d",
"ja4s": "t110200_c014_344b4dce5a52"
},
{
"tls_version": "TLSv1_0",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "623de93db17d313345d7ea481e7443cf",
"ja4s": "t100200_c014_344b4dce5a52"
}
]
},
"transport_fingerprint": {
"id": 401,
"os": "device412",
"raw": "29200,64,true,MNNSNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "pop3",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "+OK \r\n",
"banner_hashes": [
"sha256:ced4602f1e0d7a8d37c79a10c4c4deab39c6b7bfa2a4da83061666f42d6cccfa"
],
"banner_hex": "2b4f4b200d0a",
"certificate": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "POP3S",
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "2ad2ad16d2ad2ad22c2ad2ad2ad2ad579b2ec9bfaf00aff9d6fe780b7932ae",
"cipher_and_version_fingerprint": "2ad2ad16d2ad2ad22c2ad2ad2ad2ad",
"tls_extensions_sha256": "579b2ec9bfaf00aff9d6fe780b7932ae",
"observed_at": "2024-10-11T20:06:41.069579245Z"
},
"labels": [
"email"
],
"observed_at": "2024-10-14T08:09:55.065781100Z",
"perspective_id": "PERSPECTIVE_PCCW",
"pop3": {
"_encoding": {
"banner": "DISPLAY_UTF8"
},
"banner": "+OK \r\n"
},
"port": 995,
"service_name": "POP3",
"source_ip": "199.45.154.159",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"chain_fps_sha_256": [
"e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab"
],
"leaf_data": {
"names": [
"*.office.synapse.ne.jp",
"office.synapse.ne.jp"
],
"subject_dn": "CN=*.office.synapse.ne.jp",
"issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "8ce291ecd2ef47a2086807c93ba1efc25521ba1da61427069ac55c7af8fbb9f3",
"fingerprint": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"issuer": {
"common_name": [
"GlobalSign GCC R6 AlphaSSL CA 2023"
],
"organization": [
"GlobalSign nv-sa"
],
"country": [
"BE"
]
},
"subject": {
"common_name": [
"*.office.synapse.ne.jp"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "xU1LIb4bFkmoyoYVQCKIWGw+sJp2CEkhn7NeEZuViSbJeBE0aTly90XNbCvelz23QbizIiDg0hcUalCV2ArCQ0rpnjdeZZcNecYWHsKStcDGM0Mc0xshORgWk829GMm4ovvVbB9tCA4p+u2YmoA1zAdk2exAtNMMICgdzglYn21zTnA/TDdEneQ5TrFEQSOB4v1CRHeQKrGPVCn360q7JHePWfThreA7SmS5uPAJxZCN8CBnV3cSZBErSJTESOMUP0CURIEz9ufcYO5I82MrJhUO3D56X+Ryt1hIUuArDD+2RNMhBTdGl7HKE6eY2sDyOvYk/JNkk6vefAG6B0zcMQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "ba7dd6ec7afa0a5fccb8ac7dd76deac4efb588bc99159d5ca7a592cc2afd1df0"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab",
"subject_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"issuer_dn": "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "0debd3853f330c574b05e0b6d882dc27",
"ja4s": "t120200_c030_344b4dce5a52"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 403 Forbidden\r\nDate: <REDACTED>\r\nServer: Apache\r\nLast-Modified: Fri, 08 Jun 2007 10:03:54 GMT\r\nETag: \"24b-432622615f680\"\r\nAccept-Ranges: bytes\r\nContent-Length: 587\r\nContent-Type: text/html\r\n",
"banner_hashes": [
"sha256:29e9ba2a8baa235781d81bdbd091513d080e323153de8c4cb068b9e8e433e7b7"
],
"banner_hex": "485454502f312e312034303320466f7262696464656e0d0a446174653a203c52454441435445443e0d0a5365727665723a204170616368650d0a4c6173742d4d6f6469666965643a204672692c203038204a756e20323030372031303a30333a353420474d540d0a455461673a20223234622d34333236323236313566363830220d0a4163636570742d52616e6765733a2062797465730d0a436f6e74656e742d4c656e6774683a203538370d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a",
"certificate": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://202.208.176.104:8443/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 403,
"status_reason": "Forbidden",
"headers": {
"Server": [
"Apache"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Accept_Ranges": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"ETag": "DISPLAY_UTF8",
"Last_Modified": "DISPLAY_UTF8"
},
"Content_Length": [
"587"
],
"Content_Type": [
"text/html"
],
"Accept_Ranges": [
"bytes"
],
"Date": [
"<REDACTED>"
],
"ETag": [
"\"24b-432622615f680\""
],
"Last_Modified": [
"Fri, 08 Jun 2007 10:03:54 GMT"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>403-Forbidden</title>",
"<meta http-equiv=\"Content-Type\" content=\"text/html; charset=shift_jis\" />"
],
"body_size": 587,
"body": "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=shift_jis\" />\r\n<title>403-Forbidden</title>\r\n<link href=\"/officeplus-error/office-plus-error.css\" rel=\"stylesheet\" type=\"text/css\" media=\"screen\" />\r\n</head>\r\n\r\n<body>\r\n<div id=\"error-page\">\r\n<div class=\"comments\">\r\n<h1>403-Forbidden</h1>\r\n<p>\u7533\u3057\u8a33\u3054\u3056\u3044\u307e\u305b\u3093\u3002<br />\r\n\u3053\u306e\u30da\u30fc\u30b8\u306e\u3054\u5229\u7528\u306f\u4e0d\u53ef\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002</p>\r\n</di",
"body_hashes": [
"sha256:1781980bf655cb4a43c2258ccb6aef883f896fd0dd789758099aef68bdc0c43a",
"sha1:1263356f81f0fc0dddaf72b55da2101244880122"
],
"body_hash": "sha1:1263356f81f0fc0dddaf72b55da2101244880122",
"html_title": "403-Forbidden"
},
"supports_http2": false
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "29d29d15d29d29d21c29d29d29d29dc80334825071f8ff93376ac14c5a331f",
"cipher_and_version_fingerprint": "29d29d15d29d29d21c29d29d29d29d",
"tls_extensions_sha256": "c80334825071f8ff93376ac14c5a331f",
"observed_at": "2024-10-03T16:30:56.798749577Z"
},
"observed_at": "2024-10-14T06:37:29.337981606Z",
"perspective_id": "PERSPECTIVE_TELIA",
"port": 8443,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Apache",
"product": "HTTPD",
"other": {
"family": "Apache"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.146.58",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"chain_fps_sha_256": [
"e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab"
],
"leaf_data": {
"names": [
"*.office.synapse.ne.jp",
"office.synapse.ne.jp"
],
"subject_dn": "CN=*.office.synapse.ne.jp",
"issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "8ce291ecd2ef47a2086807c93ba1efc25521ba1da61427069ac55c7af8fbb9f3",
"fingerprint": "3d300e0f76ce4b5f1d1d75a5d0f0d7cea6401208498a6806e1e5977bd1aab64a",
"issuer": {
"common_name": [
"GlobalSign GCC R6 AlphaSSL CA 2023"
],
"organization": [
"GlobalSign nv-sa"
],
"country": [
"BE"
]
},
"subject": {
"common_name": [
"*.office.synapse.ne.jp"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "xU1LIb4bFkmoyoYVQCKIWGw+sJp2CEkhn7NeEZuViSbJeBE0aTly90XNbCvelz23QbizIiDg0hcUalCV2ArCQ0rpnjdeZZcNecYWHsKStcDGM0Mc0xshORgWk829GMm4ovvVbB9tCA4p+u2YmoA1zAdk2exAtNMMICgdzglYn21zTnA/TDdEneQ5TrFEQSOB4v1CRHeQKrGPVCn360q7JHePWfThreA7SmS5uPAJxZCN8CBnV3cSZBErSJTESOMUP0CURIEz9ufcYO5I82MrJhUO3D56X+Ryt1hIUuArDD+2RNMhBTdGl7HKE6eY2sDyOvYk/JNkk6vefAG6B0zcMQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "ba7dd6ec7afa0a5fccb8ac7dd76deac4efb588bc99159d5ca7a592cc2afd1df0"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab",
"subject_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
"issuer_dn": "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"session_ticket": {
"length": 192,
"lifetime_hint": 300
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "0c0aff9ccea5e7e1de5c3a0069d103f3",
"ja4s": "t120400_c02f_e1dda4771ae8",
"versions": [
{
"tls_version": "TLSv1_2",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "0c0aff9ccea5e7e1de5c3a0069d103f3",
"ja4s": "t120400_c02f_e1dda4771ae8"
},
{
"tls_version": "TLSv1_1",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "24abcc4acb0869d8e569d403dfe55a99",
"ja4s": "t110300_c013_cbb8871a0652"
},
{
"tls_version": "TLSv1_0",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "7ac2b84fdf4dcd940d5099b55a649c04",
"ja4s": "t100300_c013_cbb8871a0652"
}
]
},
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "Asia",
"country": "Japan",
"country_code": "JP",
"city": "Kagoshima",
"postal_code": "890-0054",
"timezone": "Asia/Tokyo",
"province": "Kagoshima",
"coordinates": {
"latitude": 31.56667,
"longitude": 130.55
}
},
"location_updated_at": "2024-10-12T11:07:43.021254035Z",
"autonomous_system": {
"asn": 7511,
"description": "SYNAPSE SYNAPSE Co.,Ltd.",
"bgp_prefix": "202.208.160.0/19",
"name": "SYNAPSE SYNAPSE Co.,Ltd.",
"country_code": "JP"
},
"autonomous_system_updated_at": "2024-10-02T04:55:59.474489901Z",
"whois": {
"network": {
"handle": "SYNAPSE-NET",
"name": "SYNAPSE Co.,Ltd.",
"cidrs": [
"202.208.176.0/22"
],
"updated": "2017-06-05T00:00:00Z"
}
},
"dns": {
"names": [
"welview.com",
"www.welview.com",
"plus04004.office.synapse.ne.jp"
],
"records": {
"www.welview.com": {
"record_type": "A",
"resolved_at": "2024-09-28T17:45:58.040177539Z"
},
"welview.com": {
"record_type": "A",
"resolved_at": "2024-10-12T17:33:53.816968981Z"
},
"plus04004.office.synapse.ne.jp": {
"record_type": "A",
"resolved_at": "2024-10-11T20:06:38.703192329Z"
}
},
"reverse_dns": {
"names": [
"plus04004.office.synapse.ne.jp"
],
"resolved_at": "2024-09-24T13:42:16.717079710Z"
}
},
"last_updated_at": "2024-10-14T08:58:17.646Z",
"labels": [
"email",
"file-sharing"
]
}