211.245.23.135

As of: Oct 14, 2024 4:33pm UTC | Latest
{
  "ip": "211.245.23.135",
  "services": [
    {
      "_decoded": "ftp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 Microsoft FTP Service\r\n",
      "banner_hashes": [
        "sha256:1330121f692d2b691ce187db6f11751c54549a97efc4a317e1ab240e6229a97d"
      ],
      "banner_hex": "323230204d6963726f736f66742046545020536572766963650d0a",
      "extended_service_name": "FTP",
      "ftp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "auth_tls_response": "DISPLAY_UTF8",
          "auth_ssl_response": "DISPLAY_UTF8"
        },
        "banner": "220 Microsoft FTP Service\r\n",
        "auth_tls_response": "534 Local policy on server does not allow TLS secure connections.\r\n",
        "auth_ssl_response": "534 Local policy on server does not allow TLS secure connections.\r\n",
        "status_code": 220,
        "status_meaning": "Service ready for new user.",
        "implicit_tls": false
      },
      "labels": [
        "file-sharing"
      ],
      "observed_at": "2024-10-13T19:45:47.272858697Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 21,
      "service_name": "FTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "IIS",
          "other": {
            "family": "IIS"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.48",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n",
      "banner_hashes": [
        "sha256:7aa31096104385afec524295a86107d030b40c85378e2a9d2d1b9c00ade98bea"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d75732d61736369690d0a5365727665723a204d6963726f736f66742d485454504150492f322e300d0a446174653a203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d4c656e6774683a203331350d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://211.245.23.135/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8"
            },
            "Server": [
              "Microsoft-HTTPAPI/2.0"
            ],
            "Content_Length": [
              "315"
            ],
            "Content_Type": [
              "text/html; charset=us-ascii"
            ],
            "Connection": [
              "close"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>Not Found</TITLE>",
            "<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\">"
          ],
          "body_size": 315,
          "body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n",
          "body_hashes": [
            "sha256:ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0",
            "sha1:a66898b36c94c53766e66c1a7aaeb149447ec083"
          ],
          "body_hash": "sha1:a66898b36c94c53766e66c1a7aaeb149447ec083",
          "html_title": "Not Found"
        },
        "supports_http2": false
      },
      "observed_at": "2024-10-14T14:21:41.761200130Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:http_api:2.0:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "HTTP API",
          "version": "2.0",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.36",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8"
      },
      "banner": "",
      "banner_hashes": [
        "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
      ],
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "DCERPC",
      "observed_at": "2024-10-13T09:23:34.320999688Z",
      "parsed": {
        "dcerpc": {
          "could_bind": true,
          "could_query_epm": true,
          "endpoints": [
            {
              "protocol": "N/A",
              "executable": "certprop.dll",
              "explained_uuid": "30b044a5-a225-43f0-b3a4-e060df91f9c1 v1.0",
              "bindings": [
                "ncalrpc:[LRPC-77bd75de21858e4da2]",
                "ncalrpc:[DeviceSetupManager]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\srvsvc]",
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "1a0d010f-1c33-432c-b0f5-8cf4e8053099 v1.0 IdSegSrv service",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "[MS-TSCH]: Task Scheduler Service Remoting Protocol",
              "executable": "schedsvc.dll",
              "explained_uuid": "86d35949-83c9-4044-b424-db363231fd0c v1.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "[MS-TSCH]: Task Scheduler Service Remoting Protocol",
              "executable": "taskcomp.dll",
              "explained_uuid": "1ff70682-0a51-30e8-076d-740be8cee98b v1.0",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "c605f9fb-f0a3-4e2a-a073-73560f8d9e3e v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "8782d3b9-ebbd-4644-a3d8-e8725381919b v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "appinfo.dll",
              "explained_uuid": "58e604e8-9adb-4d2e-a464-3b0683fb1480 v1.0 AppInfo",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\pipe\\SessEnvPublicRpc]",
                "ncalrpc:[SessEnvPrivateRpc]",
                "ncalrpc:[LRPC-77bd75de21858e4da2]",
                "ncalrpc:[DeviceSetupManager]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\srvsvc]",
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "MPSSVC.dll",
              "explained_uuid": "7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 v1.0 Fw APIs",
              "bindings": [
                "ncalrpc:[LRPC-0ac860de1f1c052872]",
                "ncalrpc:[LRPC-0053e8d86656e1f339]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "f2c9b409-c1c9-4100-8639-d8ab1486694a v1.0 Witness Client Upcall Server",
              "bindings": [
                "ncalrpc:[LRPC-5a333c3ca33c0531e4]",
                "ncalrpc:[DNSResolver]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "e40f7b57-7a25-4cd3-a135-7f7d3df9d16b v1.0 Network Connection Broker server endpoint",
              "bindings": [
                "ncalrpc:[OLEB8E74BF4122A167FEC7C4AB7329F]",
                "ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]",
                "ncalrpc:[trkwks]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\trkwks]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "2d98a740-581d-41b9-aa0d-a88b9d5ce938 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "BFE.DLL",
              "explained_uuid": "dd490425-5325-4565-b774-7e27d6c09c24 v1.0 Base Firewall Engine API",
              "bindings": [
                "ncalrpc:[LRPC-0053e8d86656e1f339]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "085b0334-e454-4d91-9b8c-4134f9e793f3 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "appinfo.dll",
              "explained_uuid": "201ef99a-7fa0-444c-9399-19ba84f12a1a v1.0 AppInfo",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\pipe\\SessEnvPublicRpc]",
                "ncalrpc:[SessEnvPrivateRpc]",
                "ncalrpc:[LRPC-77bd75de21858e4da2]",
                "ncalrpc:[DeviceSetupManager]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\srvsvc]",
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "appinfo.dll",
              "explained_uuid": "fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 v1.0 AppInfo",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\pipe\\SessEnvPublicRpc]",
                "ncalrpc:[SessEnvPrivateRpc]",
                "ncalrpc:[LRPC-77bd75de21858e4da2]",
                "ncalrpc:[DeviceSetupManager]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\srvsvc]",
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "gpsvc.dll",
              "explained_uuid": "2eb08e3e-639f-4fba-97b1-14f878961076 v1.0 Group Policy RPC Interface",
              "bindings": [
                "ncalrpc:[LRPC-beb9c7d565c49ff0be]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "5222821f-d5e2-4885-84f1-5f6185a0ec41 v1.0 Network Connection Broker server endpoint for NCB Reset module",
              "bindings": [
                "ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]",
                "ncalrpc:[trkwks]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\trkwks]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "srvsvc.dll",
              "explained_uuid": "98716d03-89ac-44c7-bb8c-285824e51c4a v1.0 XactSrv service",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "MPSSVC.dll",
              "explained_uuid": "2fb92682-6599-42dc-ae13-bd2ca89bd11c v1.0 Fw APIs",
              "bindings": [
                "ncalrpc:[LRPC-0ac860de1f1c052872]",
                "ncalrpc:[LRPC-0053e8d86656e1f339]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "eb081a0d-10ee-478a-a1dd-50995283e7a8 v3.0 Witness Client Test Interface",
              "bindings": [
                "ncalrpc:[LRPC-5a333c3ca33c0531e4]",
                "ncalrpc:[DNSResolver]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "3b338d89-6cfa-44b8-847e-531531bc9992 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "f47433c3-3e9d-4157-aad4-83aa1f5c2d4c v1.0 Fw APIs",
              "bindings": [
                "ncalrpc:[LRPC-0ac860de1f1c052872]",
                "ncalrpc:[LRPC-0053e8d86656e1f339]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "IKEEXT.DLL",
              "explained_uuid": "a398e520-d59a-4bdd-aa7a-3c1e0303a511 v1.0 IKE/Authip API",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "nsisvc.dll",
              "explained_uuid": "7ea70bcf-48af-4f6a-8968-6a440754d5fa v1.0 NSI server endpoint",
              "bindings": [
                "ncalrpc:[LRPC-5ec9cad4b926fbf71c]",
                "ncalrpc:[OLE1E9D760828BD319160A292D65091]"
              ]
            },
            {
              "protocol": "[MS-TSCH]: Task Scheduler Service Remoting Protocol",
              "executable": "taskcomp.dll",
              "explained_uuid": "378e52b0-c0a9-11cf-822d-00aa0051e40f v1.0",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "[MS-RSP]: Remote Shutdown Protocol",
              "executable": "wininit.exe",
              "explained_uuid": "d95afe70-a6d5-4259-822e-2c84da1ddb0d v1.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49152]",
                "ncalrpc:[WindowsShutdown]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\InitShutdown]",
                "ncalrpc:[WMsgKRpc075F20]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "winlogon.exe",
              "explained_uuid": "76f226c3-ec14-4325-8a99-6a46348418af v1.0",
              "bindings": [
                "ncalrpc:[WindowsShutdown]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\InitShutdown]",
                "ncalrpc:[WMsgKRpc075F20]",
                "ncalrpc:[WMsgKRpc078131]",
                "ncalrpc:[WMsgKRpc06FF122]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "[MS-EVEN6]: EventLog Remoting Protocol",
              "executable": "wevtsvc.dll",
              "explained_uuid": "f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0 Event log TCPIP",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49153]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\eventlog]",
                "ncalrpc:[eventlog]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 v1.0",
              "bindings": [
                "ncalrpc:[LRPC-1a82263583d8587e27]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "9b008953-f195-4bf9-bde0-4471971e58ed v1.0",
              "bindings": [
                "ncalrpc:[LRPC-ee60a7824a7fe1f4e1]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\LSM_API_service]",
                "ncalrpc:[LSMApi]",
                "ncalrpc:[LRPC-a2c510587c5ac9f55f]",
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "dhcpcsvc6.dll",
              "explained_uuid": "3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 v1.0 DHCPv6 Client LRPC Endpoint",
              "bindings": [
                "ncalrpc:[dhcpcsvc6]",
                "ncalrpc:[LRPC-e8fb2d5932e5e2f71f]",
                "ncacn_ip_tcp:211.245.23.135[49153]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\eventlog]",
                "ncalrpc:[eventlog]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "3a9ef155-691d-4449-8d05-09ad57031823 v1.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "[MS-SAMR]: Security Account Manager (SAM) Remote Protocol",
              "executable": "samsrv.dll",
              "explained_uuid": "12345778-1234-abcd-ef00-0123456789ac v1.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49154]",
                "ncalrpc:[samss lpc]",
                "ncalrpc:[SidKey Local End Point]",
                "ncalrpc:[protected_storage]",
                "ncalrpc:[lsasspirpc]",
                "ncalrpc:[lsapolicylookup]",
                "ncalrpc:[LSA_EAS_ENDPOINT]",
                "ncalrpc:[lsacap]",
                "ncalrpc:[LSARPC_ENDPOINT]",
                "ncalrpc:[securityevent]",
                "ncalrpc:[audit]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\lsass]"
              ]
            },
            {
              "protocol": "[MS-SCMR]: Service Control Manager Remote Protocol",
              "executable": "services.exe",
              "explained_uuid": "367abb81-9844-35f1-ad32-98f038001003 v2.0",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49166]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "7f1343fe-50a9-4927-a778-0c5859517bac v1.0 DfsDs service",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\wkssvc]",
                "ncalrpc:[LRPC-5a333c3ca33c0531e4]",
                "ncalrpc:[DNSResolver]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "dhcpcsvc.dll",
              "explained_uuid": "3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 v1.0 DHCP Client LRPC Endpoint",
              "bindings": [
                "ncalrpc:[dhcpcsvc]",
                "ncalrpc:[dhcpcsvc6]",
                "ncalrpc:[LRPC-e8fb2d5932e5e2f71f]",
                "ncacn_ip_tcp:211.245.23.135[49153]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\eventlog]",
                "ncalrpc:[eventlog]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "880fd55e-43b9-11e0-b1a8-cf4edfd72085 v1.0 KAPI Service endpoint",
              "bindings": [
                "ncalrpc:[OLEB8E74BF4122A167FEC7C4AB7329F]",
                "ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]",
                "ncalrpc:[trkwks]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\trkwks]"
              ]
            },
            {
              "protocol": "[MS-CMPO]: MSDTC Connection Manager:",
              "executable": "msdtcprx.dll",
              "explained_uuid": "906b0ce0-c70b-1067-b317-00dd010662da v1.0",
              "bindings": [
                "ncalrpc:[LRPC-73066f9f63543d6066]",
                "ncalrpc:[LRPC-73066f9f63543d6066]",
                "ncalrpc:[LRPC-73066f9f63543d6066]",
                "ncalrpc:[LRPC-26bf59b7eb70b42fcb]",
                "ncalrpc:[OLEB65AB9F89D5D5BBF8EC4D4D5B68A]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "sysntfy.dll",
              "explained_uuid": "c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 v1.0 Impl friendly name",
              "bindings": [
                "ncalrpc:[LRPC-a2c510587c5ac9f55f]",
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]",
                "ncalrpc:[LRPC-77bd75de21858e4da2]",
                "ncalrpc:[DeviceSetupManager]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\srvsvc]",
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]",
                "ncalrpc:[IUserProfile2]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "abfb6ca3-0c5e-4734-9285-0aee72fe8d1c v1.0 Wcm Service",
              "bindings": [
                "ncalrpc:[LRPC-e8fb2d5932e5e2f71f]",
                "ncacn_ip_tcp:211.245.23.135[49153]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\eventlog]",
                "ncalrpc:[eventlog]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "appinfo.dll",
              "explained_uuid": "5f54ce7d-5b79-4175-8584-cb65313a0e98 v1.0 AppInfo",
              "bindings": [
                "ncacn_np:\\\\SFI-WEB[\\pipe\\SessEnvPublicRpc]",
                "ncalrpc:[SessEnvPrivateRpc]",
                "ncalrpc:[LRPC-77bd75de21858e4da2]",
                "ncalrpc:[DeviceSetupManager]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\srvsvc]",
                "ncacn_ip_tcp:211.245.23.135[49155]",
                "ncalrpc:[ubpmtaskhostchannel]",
                "ncacn_np:\\\\SFI-WEB[\\PIPE\\atsvc]",
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "schedsvc.dll",
              "explained_uuid": "0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 v1.0",
              "bindings": [
                "ncalrpc:[OLE8454BB30260342294D3E7083CE01]",
                "ncalrpc:[senssvc]",
                "ncalrpc:[IUserProfile2]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 v2.0 KeyIso",
              "bindings": [
                "ncacn_ip_tcp:211.245.23.135[49154]",
                "ncalrpc:[samss lpc]",
                "ncalrpc:[SidKey Local End Point]",
                "ncalrpc:[protected_storage]",
                "ncalrpc:[lsasspirpc]",
                "ncalrpc:[lsapolicylookup]",
                "ncalrpc:[LSA_EAS_ENDPOINT]",
                "ncalrpc:[lsacap]",
                "ncalrpc:[LSARPC_ENDPOINT]",
                "ncalrpc:[securityevent]",
                "ncalrpc:[audit]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\lsass]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "697dcda9-3ba9-4eb2-9247-e11f1901b0d2 v1.0",
              "bindings": [
                "ncalrpc:[LRPC-ee60a7824a7fe1f4e1]",
                "ncacn_np:\\\\SFI-WEB[\\pipe\\LSM_API_service]",
                "ncalrpc:[LSMApi]",
                "ncalrpc:[LRPC-a2c510587c5ac9f55f]",
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "8bfc3be1-6def-4e2d-af74-7c47cd0ade4a v1.0",
              "bindings": [
                "ncalrpc:[actkernel]",
                "ncalrpc:[umpo]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "N/A",
              "explained_uuid": "b2507c30-b126-494a-92ac-ee32b6eeb039 v1.0",
              "bindings": [
                "ncalrpc:[LRPC-c30a80e8b6dbc3e83e]"
              ]
            },
            {
              "protocol": "N/A",
              "executable": "winlogon.exe",
              "explained_uuid": "12e65dd8-887f-41ef-91bf-8d816c42c2e7 v1.0 Secure Desktop LRPC interface",
              "bindings": [
                "ncalrpc:[WMsgKRpc06FF122]"
              ]
            }
          ]
        }
      },
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 135,
      "service_name": "DCERPC",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "microsoft",
          "product": "windows",
          "source": "OSI_TRANSPORT_LAYER"
        }
      ],
      "source_ip": "167.94.146.53",
      "transport_fingerprint": {
        "id": 310,
        "os": "Windows 2008 R2 / 2012",
        "raw": "8192,128,true,MNWST,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 301 Moved Permanently\r\nContent-Type: text/html; charset=UTF-8\r\nLocation: https://www.servingfriends.org/\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: <REDACTED>\r\nContent-Length: 212\r\n",
      "banner_hashes": [
        "sha256:ebf831db20a9fc02936423d48ce009da3eaefbc7a49869b2793ea29dc89ce784"
      ],
      "banner_hex": "485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d5554462d380d0a4c6f636174696f6e3a2068747470733a2f2f7777772e73657276696e67667269656e64732e6f72672f0d0a5365727665723a204d6963726f736f66742d4949532f382e350d0a582d506f77657265642d42793a204153502e4e45540d0a446174653a203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a203231320d0a",
      "certificate": "88992fd1f5df337de28fb9b72c6708eb6b420039c1f5503075b217d1072ae3db",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://211.245.23.135/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 301,
          "status_reason": "Moved Permanently",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "X_Powered_By": "DISPLAY_UTF8"
            },
            "Server": [
              "Microsoft-IIS/8.5"
            ],
            "Content_Length": [
              "212"
            ],
            "Content_Type": [
              "text/html; charset=UTF-8"
            ],
            "Location": [
              "https://www.servingfriends.org/"
            ],
            "X_Powered_By": [
              "ASP.NET"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>\ubb38\uc11c\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.</title>"
          ],
          "body_size": 212,
          "body": "<head><title>\ubb38\uc11c\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.</title></head>\n<body><h1>\uac1c\uccb4\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.</h1><a HREF=\"https://www.servingfriends.org/\">\uc5ec\uae30</a>\uc5d0\uc11c \uc774 \ubb38\uc11c\ub97c \ucc3e\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4.</body>",
          "body_hashes": [
            "sha256:7c549b3f44b5f2e92e735138c4fee297921ed1a920304d3c7319ff7c43ea5c79",
            "sha1:57c210976da8e0b7bc7f861e3a64895ee2cef059"
          ],
          "body_hash": "sha1:57c210976da8e0b7bc7f861e3a64895ee2cef059",
          "html_title": "\ubb38\uc11c\uac00 \uc774\ub3d9\ub418\uc5c8\uc2b5\ub2c8\ub2e4."
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532",
        "cipher_and_version_fingerprint": "26d26d16d26d26d22c26d26d26d26d",
        "tls_extensions_sha256": "fd9c9d14e4f4f67f94f0359f8b28f532",
        "observed_at": "2024-10-09T18:27:03.283739052Z"
      },
      "observed_at": "2024-10-14T11:28:32.018571534Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:8.5:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "IIS",
          "version": "8.5",
          "other": {
            "family": "IIS"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "ASP.NET",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.53",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "88992fd1f5df337de28fb9b72c6708eb6b420039c1f5503075b217d1072ae3db",
          "chain_fps_sha_256": [
            "e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab"
          ],
          "leaf_data": {
            "names": [
              "servingfriends.org",
              "www.servingfriends.org"
            ],
            "subject_dn": "CN=www.servingfriends.org",
            "issuer_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "435f8085c129835f38a8cdf09d67ca207bae76d7e78cdc411260627c2a8a7ef9",
            "fingerprint": "88992fd1f5df337de28fb9b72c6708eb6b420039c1f5503075b217d1072ae3db",
            "issuer": {
              "common_name": [
                "GlobalSign GCC R6 AlphaSSL CA 2023"
              ],
              "organization": [
                "GlobalSign nv-sa"
              ],
              "country": [
                "BE"
              ]
            },
            "subject": {
              "common_name": [
                "www.servingfriends.org"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "1/AhNahTYeAIhE5iFAQAodnYiLo/H4UvwOzMqmPav8E0VhRG1Mn//eTD2K55N8D+12LbNBvyS0pMSb4GZWAZf/0BLm/T+HW0WDHN79nLrr6eRLaZi2hNsV1+fSOkwDIieA9iHvKzj6DzmC/Y/LAMi1NBUTrxhHiiAD96VNmP52fSDE88blmLo41KtTimTgtZO9b4k97cjLiqhL8HT5Qlf6fpaEyd4rbloKs/oaLYtALoLjPTB8/KLB8Gk0oJNQqOOxqLzJESUKocYK/HG4IXVjYBcNWlHLEb7VQEAlRDqScF1RZldYou+XKm+D+GDzIGdvEK2lmKXiTIsHvlVomq/Q==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "7137d48280b6eeb0a7b563137e9a8653cd8324d26e1aac889ab2f83e2350b03c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab",
              "subject_dn": "C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023",
              "issuer_dn": "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "507bcb4f8187a3fb0cbc7fdfaf344f0d",
        "ja4s": "t120200_c014_fee41c0d62a8",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "507bcb4f8187a3fb0cbc7fdfaf344f0d",
            "ja4s": "t120200_c014_fee41c0d62a8"
          },
          {
            "tls_version": "TLSv1_1",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "26336690a8f7aafc732cffde53dc8f72",
            "ja4s": "t110200_c014_fee41c0d62a8"
          },
          {
            "tls_version": "TLSv1_0",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "e69f6e9634d5dabcd8f3162b12fe4fbf",
            "ja4s": "t100200_c014_fee41c0d62a8"
          },
          {
            "tls_version": "SSLv3"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8"
      },
      "banner": "",
      "banner_hashes": [
        "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
      ],
      "extended_service_name": "WINRM",
      "observed_at": "2024-10-13T21:13:56.303748395Z",
      "parsed": {
        "winrm": {
          "auth_types": [
            "Negotiate"
          ],
          "ntlm_info": {
            "encryption_56bit_supported": true,
            "encryption_128bit_supported": true,
            "ntlm1_supported": true,
            "ntlm2_supported": true,
            "always_sign_supported": true,
            "challenge_type": 3,
            "target_name": "SFI-WEB",
            "netbios_computer_name": "SFI-WEB",
            "netbios_domain_name": "SFI-WEB",
            "dns_server_name": "SFI-WEB",
            "dns_domain_name": "SFI-WEB",
            "os_version": "6.3.9600",
            "ntlm_version": 15
          }
        }
      },
      "perspective_id": "PERSPECTIVE_ORANGE",
      "port": 5985,
      "service_name": "WINRM",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "microsoft",
          "product": "windows",
          "source": "OSI_TRANSPORT_LAYER"
        }
      ],
      "source_ip": "167.94.145.103",
      "transport_fingerprint": {
        "id": 310,
        "os": "Windows 2008 R2 / 2012",
        "raw": "8192,128,true,MNWST,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX"
      },
      "banner": "",
      "banner_hashes": [
        "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
      ],
      "certificate": "c544058a0fc8453c713d620394054db7c041f1b7d6b9f6301556731f6324867e",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_3",
      "extended_service_name": "UNKNOWN",
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532",
        "cipher_and_version_fingerprint": "26d26d16d26d26d22c26d26d26d26d",
        "tls_extensions_sha256": "fd9c9d14e4f4f67f94f0359f8b28f532",
        "observed_at": "2024-10-14T16:33:17.473290467Z"
      },
      "observed_at": "2024-10-14T11:17:23.090288371Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 33889,
      "service_name": "UNKNOWN",
      "source_ip": "162.142.125.197",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c544058a0fc8453c713d620394054db7c041f1b7d6b9f6301556731f6324867e",
          "leaf_data": {
            "subject_dn": "CN=SFI-WEB",
            "issuer_dn": "CN=SFI-WEB",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "ff2a5adc84ea5976ef8a1dde1234f7a89f1038407d934532c4bafa2b07e8c544",
            "fingerprint": "c544058a0fc8453c713d620394054db7c041f1b7d6b9f6301556731f6324867e",
            "issuer": {
              "common_name": [
                "SFI-WEB"
              ]
            },
            "subject": {
              "common_name": [
                "SFI-WEB"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "4g9E902P4G3v6IA1Zo9M8vn6A9IZM+kvD+xp3h5atxY6TYgA6eMncNTjaY00c2RE/BmOqmeYTLeRWnIHjZBVpN0pXFySwLuirJ/jlF+0rckVSA2rz3Tr78iAOiwlpuypXtYzCKdbY5LOw6fRoC/+dljLlFea7XjIi4vQiiIt8BUFyrBN89/5O9Ls/G+j4+xaUhLOGkGLkm1VMtwXI3zmH4KtXWH2OmVeiliwAwdxcIp8J3uAvyuMZuwHn2QQcJ3UfmFDXlo7zI8645639+RheQuwEEjW56qEJax7wK3/93Ql1+h7RgGqto4ztAHEY2lNbtIyiqZibPO+rA04Yow//Q==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "00d22cc6928d0ffd2933c4e717805780e2fee0d7d261f4eaa14e0ff1825628c8"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "8529fd8de0d7f73186ef5ea8b4531a76",
        "ja4s": "t120100_c014_bc98f8e001b5",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "8529fd8de0d7f73186ef5ea8b4531a76",
            "ja4s": "t120100_c014_bc98f8e001b5"
          },
          {
            "tls_version": "TLSv1_1",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "1308be477c8afb355e2860ab89378ae5",
            "ja4s": "t110100_c014_bc98f8e001b5"
          },
          {
            "tls_version": "TLSv1_0",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "bcf3a836c82d12ee988005fb0c011445",
            "ja4s": "t100100_c014_bc98f8e001b5"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Asia",
    "country": "South Korea",
    "country_code": "KR",
    "city": "Incheon",
    "postal_code": "21505",
    "timezone": "Asia/Seoul",
    "province": "Incheon",
    "coordinates": {
      "latitude": 37.45646,
      "longitude": 126.70515
    }
  },
  "location_updated_at": "2024-10-04T16:50:43.082314245Z",
  "autonomous_system": {
    "asn": 9318,
    "description": "SKB-AS SK Broadband Co Ltd",
    "bgp_prefix": "211.245.16.0/20",
    "name": "SKB-AS SK Broadband Co Ltd",
    "country_code": "KR"
  },
  "autonomous_system_updated_at": "2024-10-11T05:07:36.289273356Z",
  "whois": {
    "network": {
      "handle": "BROADNNET",
      "name": "SK Broadband Co Ltd",
      "cidrs": [
        "211.245.0.0/17"
      ],
      "updated": "2017-02-03T00:00:00Z"
    }
  },
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
    "part": "o",
    "vendor": "Microsoft",
    "product": "Windows",
    "other": {
      "family": "Windows"
    }
  },
  "dns": {
    "names": [
      "www.servingfriends.org",
      "servingfriends.org"
    ],
    "records": {
      "www.servingfriends.org": {
        "record_type": "A",
        "resolved_at": "2024-10-12T22:02:01.799556160Z"
      },
      "servingfriends.org": {
        "record_type": "A",
        "resolved_at": "2024-10-14T02:01:18.265199954Z"
      }
    }
  },
  "last_updated_at": "2024-10-14T16:33:26.778Z",
  "labels": [
    "file-sharing"
  ]
}