211.245.23.135
As of: May 29, 2023 1:08pm UTC |
Latest
{
"ip": "211.245.23.135",
"services": [
{
"_decoded": "ftp",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "220 Microsoft FTP Service\r\n",
"banner_hashes": [
"sha256:1330121f692d2b691ce187db6f11751c54549a97efc4a317e1ab240e6229a97d"
],
"banner_hex": "323230204d6963726f736f66742046545020536572766963650d0a",
"extended_service_name": "FTP",
"ftp": {
"_encoding": {
"banner": "DISPLAY_UTF8",
"auth_tls_response": "DISPLAY_UTF8",
"auth_ssl_response": "DISPLAY_UTF8"
},
"banner": "220 Microsoft FTP Service\r\n",
"auth_tls_response": "534 Local policy on server does not allow TLS secure connections.\r\n",
"auth_ssl_response": "534 Local policy on server does not allow TLS secure connections.\r\n",
"status_code": 220,
"status_meaning": "Service ready for new user.",
"implicit_tls": false
},
"labels": [
"file-sharing"
],
"observed_at": "2023-05-29T13:08:29.198173491Z",
"perspective_id": "PERSPECTIVE_HE",
"port": 21,
"service_name": "FTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "IIS",
"other": {
"family": "IIS"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Microsoft",
"product": "Windows",
"other": {
"family": "Windows"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "162.142.125.223",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n",
"banner_hashes": [
"sha256:d7de42c1e8c09cf951e3ad6248fda3ab48a60ca3eac8b25effd4b3067df8f362"
],
"banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d75732d61736369690d0a5365727665723a204d6963726f736f66742d485454504150492f322e300d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d4c656e6774683a203331350d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://211.245.23.135/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 404,
"status_reason": "Not Found",
"headers": {
"Content_Length": [
"315"
],
"_encoding": {
"Content_Length": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8"
},
"Date": [
"<REDACTED>"
],
"Content_Type": [
"text/html; charset=us-ascii"
],
"Server": [
"Microsoft-HTTPAPI/2.0"
],
"Connection": [
"close"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<TITLE>Not Found</TITLE>",
"<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\">"
],
"body_size": 315,
"body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n",
"body_hashes": [
"sha256:ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0",
"sha1:a66898b36c94c53766e66c1a7aaeb149447ec083"
],
"body_hash": "sha1:a66898b36c94c53766e66c1a7aaeb149447ec083",
"html_title": "Not Found"
},
"supports_http2": false
},
"observed_at": "2023-05-29T06:59:09.503941740Z",
"perspective_id": "PERSPECTIVE_HE",
"port": 80,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Microsoft",
"product": "Windows",
"other": {
"family": "Windows"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:http_api:2.0:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "HTTP API",
"version": "2.0",
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "162.142.125.11",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 301 Moved Permanently\r\nContent-Type: text/html; charset=UTF-8\r\nLocation: https://www.servingfriends.org/\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: <REDACTED>\r\nContent-Length: 212\r\n",
"banner_hashes": [
"sha256:b306f42bd516cb760e7e2cda23b280e0dcc8e2be24414900df0619857847d50b"
],
"banner_hex": "485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d5554462d380d0a4c6f636174696f6e3a2068747470733a2f2f7777772e73657276696e67667269656e64732e6f72672f0d0a5365727665723a204d6963726f736f66742d4949532f382e350d0a582d506f77657265642d42793a204153502e4e45540d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a203231320d0a",
"certificate": "7f179dbeec4b1772b4b612f082eb9dbf289ae56082059dc143419d3bbc1549b9",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://211.245.23.135/",
"headers": {
"Accept": [
"*/*"
],
"_encoding": {
"Accept": "DISPLAY_UTF8",
"User_Agent": "DISPLAY_UTF8"
},
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 301,
"status_reason": "Moved Permanently",
"headers": {
"Content_Type": [
"text/html; charset=UTF-8"
],
"_encoding": {
"Content_Type": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"X_Powered_By": "DISPLAY_UTF8",
"Location": "DISPLAY_UTF8"
},
"Date": [
"<REDACTED>"
],
"Server": [
"Microsoft-IIS/8.5"
],
"Content_Length": [
"212"
],
"X_Powered_By": [
"ASP.NET"
],
"Location": [
"https://www.servingfriends.org/"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>\ubb38\uc11c\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.</title>"
],
"body_size": 212,
"body": "<head><title>\ubb38\uc11c\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.</title></head>\n<body><h1>\uac1c\uccb4\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.</h1><a HREF=\"https://www.servingfriends.org/\">\uc5ec\uae30</a>\uc5d0\uc11c \uc774 \ubb38\uc11c\ub97c \ucc3e\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4.</body>",
"body_hashes": [
"sha256:7c549b3f44b5f2e92e735138c4fee297921ed1a920304d3c7319ff7c43ea5c79",
"sha1:57c210976da8e0b7bc7f861e3a64895ee2cef059"
],
"body_hash": "sha1:57c210976da8e0b7bc7f861e3a64895ee2cef059",
"html_title": "\ubb38\uc11c\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4."
},
"supports_http2": false
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532",
"cipher_and_version_fingerprint": "26d26d16d26d26d22c26d26d26d26d",
"tls_extensions_sha256": "fd9c9d14e4f4f67f94f0359f8b28f532",
"observed_at": "2023-05-27T20:54:17.502953697Z"
},
"observed_at": "2023-05-29T12:30:24.899900938Z",
"perspective_id": "PERSPECTIVE_NTT",
"port": 443,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:8.5:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "IIS",
"version": "8.5",
"other": {
"family": "IIS"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "ASP.NET",
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Microsoft",
"product": "Windows Server 2012 R2",
"other": {
"family": "Windows"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.248.133.126",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "7f179dbeec4b1772b4b612f082eb9dbf289ae56082059dc143419d3bbc1549b9",
"chain_fps_sha_256": [
"7c4e90207b2b7caec080426cc469908cb27b925ee3b1c999c22b8568812fda8c"
],
"leaf_data": {
"names": [
"servingfriends.org",
"www.servingfriends.org"
],
"subject_dn": "CN=www.servingfriends.org",
"issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G4",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "a732d656b06024c7138c9e4b90e288bf408e2c0a8ac15bbc1e4541231b969bab",
"fingerprint": "7f179dbeec4b1772b4b612f082eb9dbf289ae56082059dc143419d3bbc1549b9",
"issuer": {
"common_name": [
"AlphaSSL CA - SHA256 - G4"
],
"organization": [
"GlobalSign nv-sa"
],
"country": [
"BE"
]
},
"subject": {
"common_name": [
"www.servingfriends.org"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "p0ESsSr34+p7U0Va2JRujUBsTh3BU3WFREiCs7dCx9sZeXEIM8FzbtQdnQYF6i2/aCDy6RYnH+TJijM9vNOHV1rEYooFz5RYVhz9eOMNj2ncTWJo+5Hs6G4pIu05vi5gBpVWXMLqBk3Ovu8QvIdy3Zc8g+sfL7nDI6IiHI5+sC/RHfuwstUArDVAx859phr8UTu6rrvxlalWdvwRGq1qY6+A9BfUrO5bpZ9hoCw8XsHyBs24Wk6s2eD9DLX1u3FHqzGc8RCqDGwxbLxn/Yq0JtsO6jVndHoj2yfv2QKQHv+/ppoUL0NXuHuRx54g33NE7+4yMpObPxmaap65eSuXnQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "54b50604ef2dad44472f3d2251bcc456cda6bc4862d79a8a5bbf12cb819e136f"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "7c4e90207b2b7caec080426cc469908cb27b925ee3b1c999c22b8568812fda8c",
"subject_dn": "C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G4",
"issuer_dn": "C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "507bcb4f8187a3fb0cbc7fdfaf344f0d"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "smb",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "SMB SMB 2.1",
"banner_hashes": [
"sha256:51d9f41a595c653b76dbff0adeec37710decd99e91825ba2de9ef6e273bfcaf0"
],
"banner_hex": "534d4220534d4220322e31",
"extended_service_name": "SMB",
"labels": [
"file-sharing"
],
"observed_at": "2023-05-28T22:57:26.068078425Z",
"perspective_id": "PERSPECTIVE_ORANGE",
"port": 445,
"service_name": "SMB",
"smb": {
"smb_version": {
"major": 2,
"minor": 1,
"version_string": "SMB 2.1",
"revision": 0
},
"smb_capabilities": {
"smb_dfs_support": true,
"smb_leasing_support": true,
"smb_multicredit_support": true,
"smb_multichan_support": false,
"smb_persistent_handle_support": false,
"smb_directory_leasing_support": false,
"smb_encryption_support": false
},
"has_ntlm": true,
"negotiation_log": {
"header_log": {
"_encoding": {
"protocol_id": "DISPLAY_HEX"
},
"protocol_id": "00000000fe534d42",
"credits": 1,
"flags": 1,
"status": 0,
"command": 0
},
"security_mode": 1,
"dialect_revision": 528,
"_encoding": {
"server_guid": "DISPLAY_HEX"
},
"server_guid": "00000000000000000000000000000000ee653cac24601943a627592dbdbb849e",
"capabilities": 7,
"system_time": 1685314644,
"server_start_time": 1650380876,
"authentication_types": [
"1.3.6.1.4.1.311.2.2.30",
"1.3.6.1.4.1.311.2.2.10"
]
},
"session_setup_log": {
"header_log": {
"_encoding": {
"protocol_id": "DISPLAY_HEX"
},
"protocol_id": "00000000fe534d42",
"status": 3221225494,
"command": 1,
"credits": 1,
"flags": 1
},
"target_name": "SFI-WEB",
"negotiate_flags": 2726953477,
"setup_flags": 0
},
"smbv1_support": false
},
"source_ip": "167.94.145.60",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n",
"banner_hashes": [
"sha256:d7de42c1e8c09cf951e3ad6248fda3ab48a60ca3eac8b25effd4b3067df8f362"
],
"banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d75732d61736369690d0a5365727665723a204d6963726f736f66742d485454504150492f322e300d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d4c656e6774683a203331350d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://211.245.23.135:5985/",
"headers": {
"Accept": [
"*/*"
],
"_encoding": {
"Accept": "DISPLAY_UTF8",
"User_Agent": "DISPLAY_UTF8"
},
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 404,
"status_reason": "Not Found",
"headers": {
"Content_Length": [
"315"
],
"_encoding": {
"Content_Length": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8"
},
"Date": [
"<REDACTED>"
],
"Server": [
"Microsoft-HTTPAPI/2.0"
],
"Connection": [
"close"
],
"Content_Type": [
"text/html; charset=us-ascii"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<TITLE>Not Found</TITLE>",
"<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\">"
],
"body_size": 315,
"body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n",
"body_hashes": [
"sha256:ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0",
"sha1:a66898b36c94c53766e66c1a7aaeb149447ec083"
],
"body_hash": "sha1:a66898b36c94c53766e66c1a7aaeb149447ec083",
"html_title": "Not Found"
},
"supports_http2": false
},
"observed_at": "2023-05-28T15:30:55.822145185Z",
"perspective_id": "PERSPECTIVE_NTT",
"port": 5985,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Microsoft",
"product": "Windows",
"other": {
"family": "Windows"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:http_api:2.0:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "HTTP API",
"version": "2.0",
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.248.133.188",
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "Asia",
"country": "South Korea",
"country_code": "KR",
"city": "Seoul",
"postal_code": "03141",
"timezone": "Asia/Seoul",
"province": "Seoul",
"coordinates": {
"latitude": 37.566,
"longitude": 126.9784
}
},
"location_updated_at": "2023-05-22T03:34:26.973299Z",
"autonomous_system": {
"asn": 9318,
"description": "SKB-AS SK Broadband Co Ltd",
"bgp_prefix": "211.245.16.0/20",
"name": "SKB-AS SK Broadband Co Ltd",
"country_code": "KR"
},
"autonomous_system_updated_at": "2023-05-28T03:21:35.630269Z",
"operating_system": {
"uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Microsoft",
"product": "Windows",
"other": {
"family": "Windows"
}
},
"dns": {
"names": [
"www.servingfriends.org",
"servingfriends.org"
],
"records": {
"www.servingfriends.org": {
"record_type": "A",
"resolved_at": "2023-05-23T21:43:27.578460196Z"
},
"servingfriends.org": {
"record_type": "A",
"resolved_at": "2023-05-23T21:43:26.882793577Z"
}
}
},
"last_updated_at": "2023-05-29T13:08:30.087Z",
"labels": [
"file-sharing"
]
}