211.245.23.135

As of: Jun 16, 2024 9:49am UTC | Latest
{
  "ip": "211.245.23.135",
  "services": [
    {
      "_decoded": "ftp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 Microsoft FTP Service\r\n",
      "banner_hashes": [
        "sha256:1330121f692d2b691ce187db6f11751c54549a97efc4a317e1ab240e6229a97d"
      ],
      "banner_hex": "323230204d6963726f736f66742046545020536572766963650d0a",
      "extended_service_name": "FTP",
      "ftp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "auth_tls_response": "DISPLAY_UTF8",
          "auth_ssl_response": "DISPLAY_UTF8"
        },
        "banner": "220 Microsoft FTP Service\r\n",
        "auth_tls_response": "534 Local policy on server does not allow TLS secure connections.\r\n",
        "auth_ssl_response": "534 Local policy on server does not allow TLS secure connections.\r\n",
        "status_code": 220,
        "status_meaning": "Service ready for new user.",
        "implicit_tls": false
      },
      "labels": [
        "file-sharing"
      ],
      "observed_at": "2024-06-16T08:56:44.931469373Z",
      "perspective_id": "PERSPECTIVE_ORANGE",
      "port": 21,
      "service_name": "FTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "IIS",
          "other": {
            "family": "IIS"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.145.96",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate:  <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n",
      "banner_hashes": [
        "sha256:d7de42c1e8c09cf951e3ad6248fda3ab48a60ca3eac8b25effd4b3067df8f362"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d75732d61736369690d0a5365727665723a204d6963726f736f66742d485454504150492f322e300d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d4c656e6774683a203331350d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://211.245.23.135/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8"
            },
            "Server": [
              "Microsoft-HTTPAPI/2.0"
            ],
            "Content_Length": [
              "315"
            ],
            "Content_Type": [
              "text/html; charset=us-ascii"
            ],
            "Connection": [
              "close"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>Not Found</TITLE>",
            "<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\">"
          ],
          "body_size": 315,
          "body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n",
          "body_hashes": [
            "sha256:ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0",
            "sha1:a66898b36c94c53766e66c1a7aaeb149447ec083"
          ],
          "body_hash": "sha1:a66898b36c94c53766e66c1a7aaeb149447ec083",
          "html_title": "Not Found"
        },
        "supports_http2": false
      },
      "observed_at": "2024-06-16T00:21:50.792421069Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:http_api:2.0:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "HTTP API",
          "version": "2.0",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.207",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8"
      },
      "banner": "",
      "banner_hashes": [
        "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
      ],
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "DCERPC",
      "observed_at": "2024-06-16T09:49:33.435222016Z",
      "parsed": {
        "dcerpc": {
          "could_bind": true,
          "could_query_epm": true,
          "endpoints": [
            {
              "protocol": "N/A",
              "executable": "certprop.dll",
              "explained_uuid": "30b044a5-a225-43f0-b3a4-e060df91f9c1 v1.0",
              "bindings": [
                "ncalrpc:[LRPC-ebe6474c9fc7a92810]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\srvsvc]",
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "c605f9fb-f0a3-4e2a-a073-73560f8d9e3e v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "dhcpcsvc6.dll",
              "explained_uuid": "3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 v1.0 DHCPv6 Client LRPC Endpoint",
              "bindings": [
                "ncalrpc:[dhcpcsvc6]",
                "ncalrpc:[LRPC-a874c409b868f73bf1]",
                "ncacn_ip_tcp:211.245.23.135[49153]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\eventlog]",
                "ncalrpc:[eventlog]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "3b338d89-6cfa-44b8-847e-531531bc9992 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "[MS-TSCH]: Task Scheduler Service Remoting Protocol",
              "executable": "schedsvc.dll",
              "explained_uuid": "86d35949-83c9-4044-b424-db363231fd0c v1.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "MPSSVC.dll",
              "explained_uuid": "7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 v1.0 Fw APIs",
              "bindings": [
                "ncalrpc:[LRPC-0d7e75c1da138839a9]",
                "ncalrpc:[LRPC-463c9860cac366491e]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "BFE.DLL",
              "explained_uuid": "dd490425-5325-4565-b774-7e27d6c09c24 v1.0 Base Firewall Engine API",
              "bindings": [
                "ncalrpc:[LRPC-463c9860cac366491e]"
              ]
            },
            {
              "protocol": "[MS-SCMR]: Service Control Manager Remote Protocol",
              "executable": "services.exe",
              "explained_uuid": "367abb81-9844-35f1-ad32-98f038001003 v2.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49164]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "880fd55e-43b9-11e0-b1a8-cf4edfd72085 v1.0 KAPI Service endpoint",
              "bindings": [
                "ncalrpc:[OLED44964AD6D3E9C104B9E162D1CD7]",
                "ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]",
                "ncalrpc:[trkwks]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\trkwks]"
              ]
            },
            {
              "protocol": "[MS-RSP]: Remote Shutdown Protocol",
              "executable": "wininit.exe",
              "explained_uuid": "d95afe70-a6d5-4259-822e-2c84da1ddb0d v1.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49152]",
                "ncalrpc:[WindowsShutdown]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\InitShutdown]",
                "ncalrpc:[WMsgKRpc078FD0]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "697dcda9-3ba9-4eb2-9247-e11f1901b0d2 v1.0",
              "bindings": [
                "ncalrpc:[LRPC-e97e18deda619af1e9]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\LSM_API_service]",
                "ncalrpc:[LSMApi]",
                "ncalrpc:[LRPC-7cb485c8e059b81ede]",
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "8782d3b9-ebbd-4644-a3d8-e8725381919b v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "[MS-EVEN6]: EventLog Remoting Protocol",
              "executable": "wevtsvc.dll",
              "explained_uuid": "f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0 Event log TCPIP",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49153]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\eventlog]",
                "ncalrpc:[eventlog]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "f2c9b409-c1c9-4100-8639-d8ab1486694a v1.0 Witness Client Upcall Server",
              "bindings": [
                "ncalrpc:[LRPC-03e216b56793079f02]",
                "ncalrpc:[DNSResolver]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "5222821f-d5e2-4885-84f1-5f6185a0ec41 v1.0 Network Connection Broker server endpoint for NCB Reset module",
              "bindings": [
                "ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]",
                "ncalrpc:[trkwks]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\trkwks]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "9b008953-f195-4bf9-bde0-4471971e58ed v1.0",
              "bindings": [
                "ncalrpc:[LRPC-e97e18deda619af1e9]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\LSM_API_service]",
                "ncalrpc:[LSMApi]",
                "ncalrpc:[LRPC-7cb485c8e059b81ede]",
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "nsisvc.dll",
              "explained_uuid": "7ea70bcf-48af-4f6a-8968-6a440754d5fa v1.0 NSI server endpoint",
              "bindings": [
                "ncalrpc:[LRPC-8d6a1625fb17c7c10c]",
                "ncalrpc:[OLEAFA7D9AFFCF16176B088F55D6501]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "sysntfy.dll",
              "explained_uuid": "c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 v1.0 Impl friendly name",
              "bindings": [
                "ncalrpc:[LRPC-7cb485c8e059b81ede]",
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]",
                "ncalrpc:[LRPC-ebe6474c9fc7a92810]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\srvsvc]",
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]",
                "ncalrpc:[IUserProfile2]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "[MS-TSCH]: Task Scheduler Service Remoting Protocol",
              "executable": "taskcomp.dll",
              "explained_uuid": "1ff70682-0a51-30e8-076d-740be8cee98b v1.0",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "f47433c3-3e9d-4157-aad4-83aa1f5c2d4c v1.0 Fw APIs",
              "bindings": [
                "ncalrpc:[LRPC-0d7e75c1da138839a9]",
                "ncalrpc:[LRPC-463c9860cac366491e]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "e40f7b57-7a25-4cd3-a135-7f7d3df9d16b v1.0 Network Connection Broker server endpoint",
              "bindings": [
                "ncalrpc:[OLED44964AD6D3E9C104B9E162D1CD7]",
                "ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]",
                "ncalrpc:[trkwks]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\trkwks]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 v1.0",
              "bindings": [
                "ncalrpc:[LRPC-0738f552dbc4de7f37]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "dhcpcsvc.dll",
              "explained_uuid": "3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 v1.0 DHCP Client LRPC Endpoint",
              "bindings": [
                "ncalrpc:[dhcpcsvc]",
                "ncalrpc:[dhcpcsvc6]",
                "ncalrpc:[LRPC-a874c409b868f73bf1]",
                "ncacn_ip_tcp:211.245.23.135[49153]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\eventlog]",
                "ncalrpc:[eventlog]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "1a0d010f-1c33-432c-b0f5-8cf4e8053099 v1.0 IdSegSrv service",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "3a9ef155-691d-4449-8d05-09ad57031823 v1.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "[MS-TSCH]: Task Scheduler Service Remoting Protocol",
              "executable": "taskcomp.dll",
              "explained_uuid": "378e52b0-c0a9-11cf-822d-00aa0051e40f v1.0",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "schedsvc.dll",
              "explained_uuid": "0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 v1.0",
              "bindings": [
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "[MS-SAMR]: Security Account Manager (SAM) Remote Protocol",
              "executable": "samsrv.dll",
              "explained_uuid": "12345778-1234-abcd-ef00-0123456789ac v1.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49154]",
                "ncalrpc:[samss lpc]",
                "ncalrpc:[SidKey Local End Point]",
                "ncalrpc:[protected_storage]",
                "ncalrpc:[lsasspirpc]",
                "ncalrpc:[lsapolicylookup]",
                "ncalrpc:[LSA_EAS_ENDPOINT]",
                "ncalrpc:[lsacap]",
                "ncalrpc:[LSARPC_ENDPOINT]",
                "ncalrpc:[securityevent]",
                "ncalrpc:[audit]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\lsass]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "MPSSVC.dll",
              "explained_uuid": "2fb92682-6599-42dc-ae13-bd2ca89bd11c v1.0 Fw APIs",
              "bindings": [
                "ncalrpc:[LRPC-0d7e75c1da138839a9]",
                "ncalrpc:[LRPC-463c9860cac366491e]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "eb081a0d-10ee-478a-a1dd-50995283e7a8 v3.0 Witness Client Test Interface",
              "bindings": [
                "ncalrpc:[LRPC-03e216b56793079f02]",
                "ncalrpc:[DNSResolver]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "8bfc3be1-6def-4e2d-af74-7c47cd0ade4a v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "085b0334-e454-4d91-9b8c-4134f9e793f3 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "winlogon.exe",
              "explained_uuid": "12e65dd8-887f-41ef-91bf-8d816c42c2e7 v1.0 Secure Desktop LRPC interface",
              "bindings": [
                "ncalrpc:[WMsgKRpc06C3852]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "abfb6ca3-0c5e-4734-9285-0aee72fe8d1c v1.0 Wcm Service",
              "bindings": [
                "ncalrpc:[LRPC-a874c409b868f73bf1]",
                "ncacn_ip_tcp:211.245.23.135[49153]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\eventlog]",
                "ncalrpc:[eventlog]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "srvsvc.dll",
              "explained_uuid": "98716d03-89ac-44c7-bb8c-285824e51c4a v1.0 XactSrv service",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "IKEEXT.DLL",
              "explained_uuid": "a398e520-d59a-4bdd-aa7a-3c1e0303a511 v1.0 IKE/Authip API",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[OLE2BD007685838FA22D2F16DBD2A41]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "gpsvc.dll",
              "explained_uuid": "2eb08e3e-639f-4fba-97b1-14f878961076 v1.0 Group Policy RPC Interface",
              "bindings": [
                "ncalrpc:[LRPC-c70d95f9d0ee20a523]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "7f1343fe-50a9-4927-a778-0c5859517bac v1.0 DfsDs service",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\wkssvc]",
                "ncalrpc:[LRPC-03e216b56793079f02]",
                "ncalrpc:[DNSResolver]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "b2507c30-b126-494a-92ac-ee32b6eeb039 v1.0",
              "bindings": [
                "ncalrpc:[LRPC-4ca53d2b7c5ec35b46]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 v2.0 KeyIso",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49154]",
                "ncalrpc:[samss lpc]",
                "ncalrpc:[SidKey Local End Point]",
                "ncalrpc:[protected_storage]",
                "ncalrpc:[lsasspirpc]",
                "ncalrpc:[lsapolicylookup]",
                "ncalrpc:[LSA_EAS_ENDPOINT]",
                "ncalrpc:[lsacap]",
                "ncalrpc:[LSARPC_ENDPOINT]",
                "ncalrpc:[securityevent]",
                "ncalrpc:[audit]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\lsass]"
              ]
            },
            {
              "protocol": "[MS-CMPO]: MSDTC Connection Manager:",
              "executable": "msdtcprx.dll",
              "explained_uuid": "906b0ce0-c70b-1067-b317-00dd010662da v1.0",
              "bindings": [
                "ncalrpc:[LRPC-3b661ed4041332e61d]",
                "ncalrpc:[LRPC-3b661ed4041332e61d]",
                "ncalrpc:[LRPC-3b661ed4041332e61d]",
                "ncalrpc:[LRPC-a186659bfd34babea0]",
                "ncalrpc:[OLE0771127AF3004B4EEDC260A92502]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "winlogon.exe",
              "explained_uuid": "76f226c3-ec14-4325-8a99-6a46348418af v1.0",
              "bindings": [
                "ncalrpc:[WindowsShutdown]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\InitShutdown]",
                "ncalrpc:[WMsgKRpc078FD0]",
                "ncalrpc:[WMsgKRpc07B1B1]",
                "ncalrpc:[WMsgKRpc06C3852]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "2d98a740-581d-41b9-aa0d-a88b9d5ce938 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            }
          ]
        }
      },
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 135,
      "service_name": "DCERPC",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "microsoft",
          "product": "windows",
          "source": "OSI_TRANSPORT_LAYER"
        }
      ],
      "source_ip": "167.94.138.119",
      "transport_fingerprint": {
        "id": 310,
        "os": "Windows 2008 R2 / 2012",
        "raw": "8192,128,true,MNWST,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 301 Moved Permanently\r\nContent-Type: text/html; charset=UTF-8\r\nLocation: https://www.servingfriends.org/\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate:  <REDACTED>\r\nContent-Length: 212\r\n",
      "banner_hashes": [
        "sha256:b306f42bd516cb760e7e2cda23b280e0dcc8e2be24414900df0619857847d50b"
      ],
      "banner_hex": "485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d5554462d380d0a4c6f636174696f6e3a2068747470733a2f2f7777772e73657276696e67667269656e64732e6f72672f0d0a5365727665723a204d6963726f736f66742d4949532f382e350d0a582d506f77657265642d42793a204153502e4e45540d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a203231320d0a",
      "certificate": "7f179dbeec4b1772b4b612f082eb9dbf289ae56082059dc143419d3bbc1549b9",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://211.245.23.135/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 301,
          "status_reason": "Moved Permanently",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "X_Powered_By": "DISPLAY_UTF8"
            },
            "Server": [
              "Microsoft-IIS/8.5"
            ],
            "Content_Length": [
              "212"
            ],
            "Content_Type": [
              "text/html; charset=UTF-8"
            ],
            "Location": [
              "https://www.servingfriends.org/"
            ],
            "X_Powered_By": [
              "ASP.NET"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>\ubb38\uc11c\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.</title>"
          ],
          "body_size": 212,
          "body": "<head><title>\ubb38\uc11c\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.</title></head>\n<body><h1>\uac1c\uccb4\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.</h1><a HREF=\"https://www.servingfriends.org/\">\uc5ec\uae30</a>\uc5d0\uc11c \uc774 \ubb38\uc11c\ub97c \ucc3e\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4.</body>",
          "body_hashes": [
            "sha256:7c549b3f44b5f2e92e735138c4fee297921ed1a920304d3c7319ff7c43ea5c79",
            "sha1:57c210976da8e0b7bc7f861e3a64895ee2cef059"
          ],
          "body_hash": "sha1:57c210976da8e0b7bc7f861e3a64895ee2cef059",
          "html_title": "\ubb38\uc11c\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4."
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532",
        "cipher_and_version_fingerprint": "26d26d16d26d26d22c26d26d26d26d",
        "tls_extensions_sha256": "fd9c9d14e4f4f67f94f0359f8b28f532",
        "observed_at": "2024-05-15T03:18:39.635047742Z"
      },
      "observed_at": "2024-06-16T08:38:24.596899086Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:8.5:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "IIS",
          "version": "8.5",
          "other": {
            "family": "IIS"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "ASP.NET",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.57",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "7f179dbeec4b1772b4b612f082eb9dbf289ae56082059dc143419d3bbc1549b9",
          "chain_fps_sha_256": [
            "7c4e90207b2b7caec080426cc469908cb27b925ee3b1c999c22b8568812fda8c"
          ],
          "leaf_data": {
            "names": [
              "servingfriends.org",
              "www.servingfriends.org"
            ],
            "subject_dn": "CN=www.servingfriends.org",
            "issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G4",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "a732d656b06024c7138c9e4b90e288bf408e2c0a8ac15bbc1e4541231b969bab",
            "fingerprint": "7f179dbeec4b1772b4b612f082eb9dbf289ae56082059dc143419d3bbc1549b9",
            "issuer": {
              "common_name": [
                "AlphaSSL CA - SHA256 - G4"
              ],
              "organization": [
                "GlobalSign nv-sa"
              ],
              "country": [
                "BE"
              ]
            },
            "subject": {
              "common_name": [
                "www.servingfriends.org"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "p0ESsSr34+p7U0Va2JRujUBsTh3BU3WFREiCs7dCx9sZeXEIM8FzbtQdnQYF6i2/aCDy6RYnH+TJijM9vNOHV1rEYooFz5RYVhz9eOMNj2ncTWJo+5Hs6G4pIu05vi5gBpVWXMLqBk3Ovu8QvIdy3Zc8g+sfL7nDI6IiHI5+sC/RHfuwstUArDVAx859phr8UTu6rrvxlalWdvwRGq1qY6+A9BfUrO5bpZ9hoCw8XsHyBs24Wk6s2eD9DLX1u3FHqzGc8RCqDGwxbLxn/Yq0JtsO6jVndHoj2yfv2QKQHv+/ppoUL0NXuHuRx54g33NE7+4yMpObPxmaap65eSuXnQ==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "54b50604ef2dad44472f3d2251bcc456cda6bc4862d79a8a5bbf12cb819e136f"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "7c4e90207b2b7caec080426cc469908cb27b925ee3b1c999c22b8568812fda8c",
              "subject_dn": "C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G4",
              "issuer_dn": "C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "507bcb4f8187a3fb0cbc7fdfaf344f0d",
        "ja4s": "t120200_c014_fee41c0d62a8",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "507bcb4f8187a3fb0cbc7fdfaf344f0d",
            "ja4s": "t120200_c014_fee41c0d62a8"
          },
          {
            "tls_version": "TLSv1_1",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "26336690a8f7aafc732cffde53dc8f72",
            "ja4s": "t110200_c014_fee41c0d62a8"
          },
          {
            "tls_version": "TLSv1_0",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "e69f6e9634d5dabcd8f3162b12fe4fbf",
            "ja4s": "t100200_c014_fee41c0d62a8"
          },
          {
            "tls_version": "SSLv3"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8"
      },
      "banner": "",
      "banner_hashes": [
        "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
      ],
      "extended_service_name": "WINRM",
      "observed_at": "2024-06-16T05:21:00.316549522Z",
      "parsed": {
        "winrm": {
          "auth_types": [
            "Negotiate"
          ],
          "ntlm_info": {
            "encryption_56bit_supported": true,
            "encryption_128bit_supported": true,
            "ntlm1_supported": true,
            "ntlm2_supported": true,
            "always_sign_supported": true,
            "challenge_type": 3,
            "target_name": "S\u0000F\u0000I\u0000-\u0000W\u0000E\u0000B\u0000",
            "netbios_computer_name": "S\u0000F\u0000I\u0000-\u0000W\u0000E\u0000B\u0000",
            "netbios_domain_name": "S\u0000F\u0000I\u0000-\u0000W\u0000E\u0000B\u0000",
            "dns_server_name": "S\u0000F\u0000I\u0000-\u0000W\u0000E\u0000B\u0000",
            "dns_domain_name": "S\u0000F\u0000I\u0000-\u0000W\u0000E\u0000B\u0000",
            "dns_tree_name": "",
            "os_version": "6.3.9600",
            "ntlm_version": 15
          }
        }
      },
      "perspective_id": "PERSPECTIVE_ORANGE",
      "port": 5985,
      "service_name": "WINRM",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "microsoft",
          "product": "windows",
          "source": "OSI_TRANSPORT_LAYER"
        }
      ],
      "source_ip": "167.94.145.104",
      "transport_fingerprint": {
        "id": 310,
        "os": "Windows 2008 R2 / 2012",
        "raw": "8192,128,true,MNWST,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "rdp",
      "_encoding": {
        "certificate": "DISPLAY_HEX"
      },
      "certificate": "b617b3babf8ade3f4518dc189c6e0e314a4ff4c75f18fa3ece96b6f4c8bec1e8",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_3",
      "extended_service_name": "RDP",
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532",
        "cipher_and_version_fingerprint": "26d26d16d26d26d22c26d26d26d26d",
        "tls_extensions_sha256": "fd9c9d14e4f4f67f94f0359f8b28f532",
        "observed_at": "2024-06-03T05:17:40.301036496Z"
      },
      "labels": [
        "network-administration",
        "remote-access"
      ],
      "observed_at": "2024-06-14T20:29:10.860229557Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 33889,
      "rdp": {
        "protocol_flags": {
          "extended_client_data_supported": true,
          "dynvc_graphics_pipeline": true,
          "neg_resp_reserved": true,
          "restricted_admin_mode": true,
          "restricted_auth_mode": false
        },
        "selected_security_protocol": {
          "rdstls": true,
          "raw_value": 4,
          "standard_rdp": false,
          "tls": false,
          "credssp": false,
          "credssp_early_auth": false,
          "error": false,
          "error_ssl_required": false,
          "error_ssl_forbidden": false,
          "error_ssl_cert_missing": false,
          "error_bad_flags": false,
          "error_hybrid_required": false,
          "error_ssl_user_auth_required": false,
          "error_unknown": false
        },
        "x224_cc_pdu_srcref": 13330
      },
      "service_name": "RDP",
      "source_ip": "206.168.34.127",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "b617b3babf8ade3f4518dc189c6e0e314a4ff4c75f18fa3ece96b6f4c8bec1e8",
          "leaf_data": {
            "subject_dn": "CN=SFI-WEB",
            "issuer_dn": "CN=SFI-WEB",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "e93cf24e25291fa214d238db7913d179ce81c56c6d649dc21b20e9f40144ab56",
            "fingerprint": "b617b3babf8ade3f4518dc189c6e0e314a4ff4c75f18fa3ece96b6f4c8bec1e8",
            "issuer": {
              "common_name": [
                "SFI-WEB"
              ]
            },
            "subject": {
              "common_name": [
                "SFI-WEB"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "20VKzG4jsIXcTPTdcoBAwtSo6425L1bAeEBiSuk5XSWy2l8yr5vLd1W3z8pxJ/M5JIbmgGydoKxPDpyivNeYpzuKulDwP6g+DpN8JbFfr00xK5x8KceR7z2ibU1mCllEHnxmQUT1Gzqw8P/W3cg6VQlEAJSyB0o4nOcFcADe5m/zX/9/VIpe9qGbCG9Tjmv1ZrU1t119kC642JHLG5ph0b1EvHP/KqzGtaX/K/z8x5r3FOyU68wO2etcVUaY3f9SzxgFeoDyH86pGxmQbtWwK3Ja2RZCfaMJZo0kerFIJfsYhI8Jc6C9GAD/OFF1jr7aPKNpXnJ4LMZZTalK0hpFrw==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "5f5d5a4ac32a30a64ecf2fb506e5443a1804e1865fa77d35e6d24bd40d39a130"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "8529fd8de0d7f73186ef5ea8b4531a76",
        "ja4s": "t120100_c014_bc98f8e001b5",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "8529fd8de0d7f73186ef5ea8b4531a76",
            "ja4s": "t120100_c014_bc98f8e001b5"
          },
          {
            "tls_version": "TLSv1_1",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "1308be477c8afb355e2860ab89378ae5",
            "ja4s": "t110100_c014_bc98f8e001b5"
          },
          {
            "tls_version": "TLSv1_0",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "bcf3a836c82d12ee988005fb0c011445",
            "ja4s": "t100100_c014_bc98f8e001b5"
          }
        ]
      },
      "transport_fingerprint": {
        "raw": "64000,128,true,MNWST,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Asia",
    "country": "South Korea",
    "country_code": "KR",
    "city": "Seoul",
    "postal_code": "03141",
    "timezone": "Asia/Seoul",
    "province": "Seoul",
    "coordinates": {
      "latitude": 37.566,
      "longitude": 126.9784
    }
  },
  "location_updated_at": "2024-06-04T09:08:55.217509247Z",
  "autonomous_system": {
    "asn": 9318,
    "description": "SKB-AS SK Broadband Co Ltd",
    "bgp_prefix": "211.245.16.0/20",
    "name": "SKB-AS SK Broadband Co Ltd",
    "country_code": "KR"
  },
  "autonomous_system_updated_at": "2024-06-11T14:33:21.144609265Z",
  "whois": {
    "network": {
      "handle": "BROADNNET",
      "name": "SK Broadband Co Ltd",
      "cidrs": [
        "211.245.0.0/17"
      ],
      "updated": "2017-02-03T00:00:00Z"
    }
  },
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
    "part": "o",
    "vendor": "Microsoft",
    "product": "Windows",
    "other": {
      "family": "Windows"
    }
  },
  "dns": {
    "names": [
      "www.servingfriends.org",
      "servingfriends.org"
    ],
    "records": {
      "www.servingfriends.org": {
        "record_type": "A",
        "resolved_at": "2024-06-08T22:06:01.547631831Z"
      },
      "servingfriends.org": {
        "record_type": "A",
        "resolved_at": "2024-05-31T22:17:44.464585452Z"
      }
    }
  },
  "last_updated_at": "2024-06-16T09:49:34.286Z",
  "labels": [
    "file-sharing",
    "network-administration",
    "remote-access"
  ]
}