217.77.209.130

As of: Feb 03, 2023 1:25am UTC | Latest
{
  "ip": "217.77.209.130",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: http://mkrada.gov.ua/\r\n",
      "banner_hashes": [
        "sha256:7bd09cd8f86bb84bd5fd23bce6d5a52c44ce27944fb8b5fc024198c5e05560ba"
      ],
      "banner_hex": "485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a5365727665723a206e67696e780d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203136320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4c6f636174696f6e3a20687474703a2f2f6d6b726164612e676f762e75612f0d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://217.77.209.130/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 301,
          "status_reason": "Moved Permanently",
          "headers": {
            "Content_Type": [
              "text/html"
            ],
            "_encoding": {
              "Content_Type": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8"
            },
            "Server": [
              "nginx"
            ],
            "Location": [
              "http://mkrada.gov.ua/"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Connection": [
              "keep-alive"
            ],
            "Content_Length": [
              "162"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>301 Moved Permanently</title>"
          ],
          "body_size": 162,
          "body": "<html>\r\n<head><title>301 Moved Permanently</title></head>\r\n<body>\r\n<center><h1>301 Moved Permanently</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
          "body_hashes": [
            "sha256:9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a",
            "sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff"
          ],
          "body_hash": "sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff",
          "html_title": "301 Moved Permanently"
        },
        "supports_http2": false
      },
      "observed_at": "2023-02-02T20:50:24.350004828Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "nginx",
          "product": "nginx",
          "other": {
            "family": "nginx"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.7",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: http://mkrada.gov.ua/\r\n",
      "banner_hashes": [
        "sha256:7bd09cd8f86bb84bd5fd23bce6d5a52c44ce27944fb8b5fc024198c5e05560ba"
      ],
      "banner_hex": "485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a5365727665723a206e67696e780d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203136320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4c6f636174696f6e3a20687474703a2f2f6d6b726164612e676f762e75612f0d0a",
      "certificate": "55a9cdbe2257466fc527a771da99e78a5ca25087005467320e2c9fddaf7fe4d4",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://217.77.209.130/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 301,
          "status_reason": "Moved Permanently",
          "headers": {
            "Server": [
              "nginx"
            ],
            "_encoding": {
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "162"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Connection": [
              "keep-alive"
            ],
            "Location": [
              "http://mkrada.gov.ua/"
            ],
            "Content_Type": [
              "text/html"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>301 Moved Permanently</title>"
          ],
          "body_size": 162,
          "body": "<html>\r\n<head><title>301 Moved Permanently</title></head>\r\n<body>\r\n<center><h1>301 Moved Permanently</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
          "body_hashes": [
            "sha256:9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a",
            "sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff"
          ],
          "body_hash": "sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff",
          "html_title": "301 Moved Permanently"
        },
        "supports_http2": false
      },
      "observed_at": "2023-02-01T17:43:18.015073575Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "nginx",
          "product": "nginx",
          "other": {
            "family": "nginx"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.248.133.117",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "55a9cdbe2257466fc527a771da99e78a5ca25087005467320e2c9fddaf7fe4d4",
          "chain_fps_sha_256": [
            "7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676"
          ],
          "leaf_data": {
            "names": [
              "*.mkrada.gov.ua",
              "mkrada.gov.ua"
            ],
            "subject_dn": "CN=*.mkrada.gov.ua",
            "issuer_dn": "C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA",
            "pubkey_bit_size": 4096,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "69eaaa61db248d6c5ab17ca7a02a9d22b4ee23431fca444c47520cbbd6a223c7",
            "fingerprint": "55a9cdbe2257466fc527a771da99e78a5ca25087005467320e2c9fddaf7fe4d4",
            "issuer": {
              "common_name": [
                "Sectigo RSA Domain Validation Secure Server CA"
              ],
              "locality": [
                "Salford"
              ],
              "organization": [
                "Sectigo Limited"
              ],
              "province": [
                "Greater Manchester"
              ],
              "country": [
                "GB"
              ]
            },
            "subject": {
              "common_name": [
                "*.mkrada.gov.ua"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "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",
                "exponent": "AAEAAQ==",
                "length": 512
              },
              "fingerprint": "3c9121f90513716ba8583f4e78ab4911e9704c5cb593bf409693f1a75f69345e"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676",
              "subject_dn": "C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA",
              "issuer_dn": "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036"
      },
      "transport_fingerprint": {
        "raw": "1480,255,false,,0,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "pptp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "Clavister  1.0 0.1",
      "banner_hashes": [
        "sha256:e2871ce048d79ed9ee50f194d4f1952a55d7e6a9c144ea92c04cc38c9d8807d0"
      ],
      "banner_hex": "436c617669737465722020312e3020302e31",
      "extended_service_name": "PPTP",
      "observed_at": "2023-02-02T20:11:16.549569172Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 1723,
      "pptp": {
        "result_message": {
          "code": 1,
          "meaning": "Successful channel establishment"
        },
        "error_message": {
          "meaning": "No general error",
          "code": 0
        },
        "framing_message": {
          "code": 3,
          "meaning": "Synchronous or asynchronous framing supported"
        },
        "bearer_message": {
          "code": 3,
          "meaning": "Digital or analog access supported"
        },
        "firmware": {
          "minor": 1,
          "major": 0
        },
        "protocol": {
          "major": 1,
          "minor": 0
        },
        "vendor": "Clavister",
        "maximum_channels": 0
      },
      "service_name": "PPTP",
      "source_ip": "162.142.125.210",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "ssh",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8",
      "banner_hashes": [
        "sha256:73d3491da3d0f88d659dd988a61765e8916247ceddd332914d0f8a475c5076b1"
      ],
      "banner_hex": "5353482d322e302d4f70656e5353485f372e327032205562756e74752d347562756e7475322e38",
      "extended_service_name": "SSH",
      "observed_at": "2023-02-02T03:52:40.640144048Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 2222,
      "service_name": "SSH",
      "software": [
        {
          "product": "openssh",
          "other": {
            "comment": "Ubuntu-4ubuntu2.8"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Ubuntu",
          "product": "Linux",
          "version": "16.04",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:openbsd:openssh:7.2:p2:*:*:*:*:*:*",
          "part": "a",
          "vendor": "OpenBSD",
          "product": "OpenSSH",
          "version": "7.2",
          "update": "p2",
          "other": {
            "family": "OpenSSH"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.212",
      "ssh": {
        "endpoint_id": {
          "_encoding": {
            "raw": "DISPLAY_UTF8"
          },
          "raw": "SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8",
          "protocol_version": "2.0",
          "software_version": "OpenSSH_7.2p2",
          "comment": "Ubuntu-4ubuntu2.8"
        },
        "kex_init_message": {
          "kex_algorithms": [
            "[email protected]",
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "diffie-hellman-group-exchange-sha256",
            "diffie-hellman-group14-sha1"
          ],
          "host_key_algorithms": [
            "ssh-rsa",
            "rsa-sha2-512",
            "rsa-sha2-256",
            "ecdsa-sha2-nistp256",
            "ssh-ed25519"
          ],
          "client_to_server_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]"
          ],
          "server_to_client_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]"
          ],
          "client_to_server_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "server_to_client_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "client_to_server_compression": [
            "none",
            "[email protected]"
          ],
          "server_to_client_compression": [
            "none",
            "[email protected]"
          ],
          "first_kex_follows": false
        },
        "algorithm_selection": {
          "kex_algorithm": "[email protected]",
          "host_key_algorithm": "ecdsa-sha2-nistp256",
          "client_to_server_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          },
          "server_to_client_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          }
        },
        "server_host_key": {
          "fingerprint_sha256": "1e09ae4110499ba153769ebace4d29fc7d3a351288d3c7dc261e981106dd15b4",
          "ecdsa_public_key": {
            "_encoding": {
              "b": "DISPLAY_BASE64",
              "gx": "DISPLAY_BASE64",
              "gy": "DISPLAY_BASE64",
              "n": "DISPLAY_BASE64",
              "p": "DISPLAY_BASE64",
              "x": "DISPLAY_BASE64",
              "y": "DISPLAY_BASE64"
            },
            "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
            "curve": "P-256",
            "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
            "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
            "length": 256,
            "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
            "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
            "x": "Uzxd0u74y3aR3evxCWtwbJtFwmZLhpo6D6YwphS9YDQ=",
            "y": "19aIAbekGUvStAaiPNycY3YolDIsJVwzrqmAx/ZofJI="
          }
        },
        "hassh_fingerprint": "d43d91bc39d5aaed819ad9f6b57b7348"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "ssh",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.1",
      "banner_hashes": [
        "sha256:b419a25dd52379c69d2220f4fb4f12dc26e078dc921e2bb39335c6623576789f"
      ],
      "banner_hex": "5353482d322e302d4f70656e5353485f372e327032205562756e74752d347562756e7475322e31",
      "extended_service_name": "SSH",
      "observed_at": "2023-02-01T17:42:12.751962149Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 2223,
      "service_name": "SSH",
      "software": [
        {
          "product": "openssh",
          "other": {
            "comment": "Ubuntu-4ubuntu2.1"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Ubuntu",
          "product": "Linux",
          "version": "16.04",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:openbsd:openssh:7.2:p2:*:*:*:*:*:*",
          "part": "a",
          "vendor": "OpenBSD",
          "product": "OpenSSH",
          "version": "7.2",
          "update": "p2",
          "other": {
            "family": "OpenSSH"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.7",
      "ssh": {
        "endpoint_id": {
          "_encoding": {
            "raw": "DISPLAY_UTF8"
          },
          "raw": "SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.1",
          "protocol_version": "2.0",
          "software_version": "OpenSSH_7.2p2",
          "comment": "Ubuntu-4ubuntu2.1"
        },
        "kex_init_message": {
          "kex_algorithms": [
            "[email protected]",
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "diffie-hellman-group-exchange-sha256",
            "diffie-hellman-group14-sha1"
          ],
          "host_key_algorithms": [
            "ssh-rsa",
            "rsa-sha2-512",
            "rsa-sha2-256",
            "ecdsa-sha2-nistp256",
            "ssh-ed25519"
          ],
          "client_to_server_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]"
          ],
          "server_to_client_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]"
          ],
          "client_to_server_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "server_to_client_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "client_to_server_compression": [
            "none",
            "[email protected]"
          ],
          "server_to_client_compression": [
            "none",
            "[email protected]"
          ],
          "first_kex_follows": false
        },
        "algorithm_selection": {
          "kex_algorithm": "[email protected]",
          "host_key_algorithm": "ecdsa-sha2-nistp256",
          "client_to_server_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          },
          "server_to_client_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          }
        },
        "server_host_key": {
          "fingerprint_sha256": "a2cf4021ecb68f7c54aa13b4625cf665b339973007084d66f68b6d87347fef1b",
          "ecdsa_public_key": {
            "_encoding": {
              "b": "DISPLAY_BASE64",
              "gx": "DISPLAY_BASE64",
              "gy": "DISPLAY_BASE64",
              "n": "DISPLAY_BASE64",
              "p": "DISPLAY_BASE64",
              "x": "DISPLAY_BASE64",
              "y": "DISPLAY_BASE64"
            },
            "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
            "curve": "P-256",
            "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
            "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
            "length": 256,
            "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
            "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
            "x": "YNiBReh4pM5QaFM1fCagcDVYHOuGsGsjk17OGP/xQrU=",
            "y": "xyNaU3I4GCllC3iJB8zLvaOZaK+Xm2El3+qkRPxOjyo="
          }
        },
        "hassh_fingerprint": "d43d91bc39d5aaed819ad9f6b57b7348"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "<?xml version='1.0'?><stream:stream id='' xmlns:stream='http://etherx.jabber.org/streams' version='1.0' xmlns='jabber:client'><stream:error><improper-addressing",
      "banner_grab": {
        "_encoding": {
          "banner": "DISPLAY_BASE64"
        },
        "banner": "PD94bWwgdmVyc2lvbj0nMS4wJz8+PHN0cmVhbTpzdHJlYW0gaWQ9JycgeG1sbnM6c3RyZWFtPSdodHRwOi8vZXRoZXJ4LmphYmJlci5vcmcvc3RyZWFtcycgdmVyc2lvbj0nMS4wJyB4bWxucz0namFiYmVyOmNsaWVudCc+PHN0cmVhbTplcnJvcj48aW1wcm9wZXItYWRkcmVzc2luZw==",
        "transport": "TCP"
      },
      "banner_hashes": [
        "sha256:55c01af2ff603c354a5ced79244e2dbfcdee3d1dacc037b6323690591288d13f"
      ],
      "banner_hex": "3c3f786d6c2076657273696f6e3d27312e30273f3e3c73747265616d3a73747265616d2069643d272720786d6c6e733a73747265616d3d27687474703a2f2f6574686572782e6a61626265722e6f72672f73747265616d73272076657273696f6e3d27312e302720786d6c6e733d276a61626265723a636c69656e74273e3c73747265616d3a6572726f723e3c696d70726f7065722d61646472657373696e67",
      "extended_service_name": "XMPP",
      "observed_at": "2023-02-02T20:11:14.479450216Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 5222,
      "service_name": "XMPP",
      "source_ip": "167.248.133.61",
      "transport_fingerprint": {
        "raw": "28960,64,false,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "<?xml version='1.0'?><stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' version='1.0' from='' id='12b94185-c602-42",
      "banner_grab": {
        "_encoding": {
          "banner": "DISPLAY_BASE64"
        },
        "banner": "PD94bWwgdmVyc2lvbj0nMS4wJz8+PHN0cmVhbTpzdHJlYW0geG1sbnM6ZGI9J2phYmJlcjpzZXJ2ZXI6ZGlhbGJhY2snIHhtbG5zOnN0cmVhbT0naHR0cDovL2V0aGVyeC5qYWJiZXIub3JnL3N0cmVhbXMnIHZlcnNpb249JzEuMCcgZnJvbT0nJyBpZD0nMTJiOTQxODUtYzYwMi00Mg==",
        "transport": "TCP"
      },
      "banner_hashes": [
        "sha256:5cfd59f233afcf0f80ece3b9edf0498806053334a249a6c852f982725d99da1a"
      ],
      "banner_hex": "3c3f786d6c2076657273696f6e3d27312e30273f3e3c73747265616d3a73747265616d20786d6c6e733a64623d276a61626265723a7365727665723a6469616c6261636b2720786d6c6e733a73747265616d3d27687474703a2f2f6574686572782e6a61626265722e6f72672f73747265616d73272076657273696f6e3d27312e30272066726f6d3d27272069643d2731326239343138352d633630322d3432",
      "extended_service_name": "XMPP",
      "observed_at": "2023-02-01T17:43:11.605313874Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 5269,
      "service_name": "XMPP",
      "source_ip": "167.248.133.61",
      "transport_fingerprint": {
        "raw": "28960,64,false,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nConnection: Keep-Alive\r\nContent-Length: 394\r\nDate:  <REDACTED>\r\n",
      "banner_hashes": [
        "sha256:07d3f52c49555c56532d7db46a980b34fe4863d06dd7a2f070f0e6eff97ed0d0"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a203339340d0a446174653a20203c52454441435445443e0d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://217.77.209.130:5280/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "Connection": [
              "Keep-Alive"
            ],
            "_encoding": {
              "Connection": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8"
            },
            "Date": [
              "<REDACTED>"
            ],
            "Content_Length": [
              "394"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<meta charset=\"utf-8\">"
          ],
          "body_size": 394,
          "body": "<!DOCTYPE html>\n<html>\n<head><meta charset=\"utf-8\"><style>body{margin-top:14%;text-align:center;background-color:#F8F8F8;font-family:sans-serif;}h1{font-size:xx-large;}p{font-size:x-large;}p+p { font-size: large; font-family: courier }</style>\n</head>\n<body><h1>404 Not Found</h1><p>Whatever you were looking for is not here. Keep looking.</p><p>Unknown host: 217.77.209.130</p>\n</body>\n</html>",
          "body_hashes": [
            "sha256:c17c4553a2fa6316620c98630ad30a60d1e1cfaabaa8406cca1fe287cf7bf287",
            "sha1:f7e6860cb2bac7268c13ca70f6c0867613009bdb"
          ],
          "body_hash": "sha1:f7e6860cb2bac7268c13ca70f6c0867613009bdb"
        },
        "supports_http2": false
      },
      "observed_at": "2023-02-02T20:11:23.383577873Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 5280,
      "service_name": "HTTP",
      "source_ip": "167.94.138.119",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n",
      "banner_hashes": [
        "sha256:55cc4007b56883e116a4fcbbfad700f83f1138f790782fbdc8ba8fe5aa804a9f"
      ],
      "banner_hex": "485454502f312e31203430302042616420526571756573740d0a5365727665723a206e67696e780d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203234380d0a436f6e6e656374696f6e3a20636c6f73650d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://217.77.209.130:8088/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 400,
          "status_reason": "Bad Request",
          "headers": {
            "Connection": [
              "close"
            ],
            "_encoding": {
              "Connection": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8"
            },
            "Server": [
              "nginx"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Content_Length": [
              "248"
            ],
            "Content_Type": [
              "text/html"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>400 The plain HTTP request was sent to HTTPS port</title>"
          ],
          "body_size": 248,
          "body": "<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
          "body_hashes": [
            "sha256:f4754ba869b9fc2d0dc7001142522250fdaa628b5af56a9064ec9bdde54fefa6",
            "sha1:e70b2bdf0abb7fbf695bc27eef3ddf563d36aca1"
          ],
          "body_hash": "sha1:e70b2bdf0abb7fbf695bc27eef3ddf563d36aca1",
          "html_title": "400 The plain HTTP request was sent to HTTPS port"
        },
        "supports_http2": false
      },
      "observed_at": "2023-02-02T20:11:20.130635735Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 8088,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "nginx",
          "product": "nginx",
          "other": {
            "family": "nginx"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.9",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.0 200 Document follows\r\nDate:  <REDACTED>\r\nServer: MiniServ/1.831\r\nConnection: close\r\nAuth-type: auth-required=1\r\nSet-Cookie: redirect=1; path=/\r\nSet-Cookie: testing=1; path=/; secure\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self'; child-src 'self'\r\nContent-type: text/html; Charset=UTF-8\r\n",
      "banner_hashes": [
        "sha256:1d37c1d724b1b1d67a445122bac3cd52c83da04446c524f7eac11e64c14605ff"
      ],
      "banner_hex": "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",
      "certificate": "00102dd83669adaae602087b79bc855989a3aabdec5671ad25b93b5c1b4a693f",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://217.77.209.130:10000/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.0",
          "status_code": 200,
          "status_reason": "Document follows",
          "headers": {
            "X_Frame_Options": [
              "SAMEORIGIN"
            ],
            "_encoding": {
              "X_Frame_Options": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Auth_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Set_Cookie": "DISPLAY_UTF8",
              "Content_Security_Policy": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8"
            },
            "Content_Type": [
              "text/html; Charset=UTF-8"
            ],
            "Auth_Type": [
              "auth-required=1"
            ],
            "Connection": [
              "close"
            ],
            "Set_Cookie": [
              "redirect=1; path=/",
              "testing=1; path=/; secure"
            ],
            "Content_Security_Policy": [
              "script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self'; child-src 'self'"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Server": [
              "MiniServ/1.831"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>Login to Webmin</title>",
            "<meta charset=\"utf-8\">",
            "<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">"
          ],
          "body_size": 2622,
          "body": "<!DOCTYPE HTML>\n<html data-background-style=\"\" class=\"session_login\">\n<head>\n<title>Login to Webmin</title>\n<meta charset=\"utf-8\">\n<link rel=\"shortcut icon\" href=\"/images/favicon-webmin.ico\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n<link href=\"/unauthenticated/css/bootstrap.min.css?1832\" rel=\"stylesheet\">\n<link href=\"/unauthenticated/css/fontbase.min.css?1832\" rel=\"stylesheet\">\n<link href=\"/unauthenticated/css/authentic.min.css?1832\" rel=\"stylesheet\">\n<link href=\"/unauthenticated/css/fonts-roboto.min.css?1832\" rel=\"stylesheet\">\n<script src=\"/unauthenticated/js/jquery.min.js?1832\"></script>\n</head>\n<body class=\"session_login\" data-style=\"-webkit-filter: grayscale()  saturate() hue-rotate(deg); filter: grayscale()  saturate() hue-rotate(deg);\">\n<div class=\"container session_login\">\n\n<form method=\"post\" target=\"_top\" action=\"/session_login.cgi\" class=\"form-signin session_login clearfix\" role=\"form\" onsubmit=\"spinner()\">\n<i class=\"wbm-webmin\"></i><h2 class=\"form-signin-heading\">\n     <span>Webmin</span></h2>\n<p class=\"form-signin-paragraph\">You must enter a username and password to login to the server on<strong> 217.77.209.130</strong></p>\n<div class=\"input-group form-group\">\n<span class=\"input-group-addon\"><i class=\"fa fa-fw fa-user\"></i></span>\n<input type=\"text\" class=\"form-control session_login\" name=\"user\" autocomplete=\"off\" placeholder=\"Username\"  autofocus>\n</div>\n<div class=\"input-group form-group\">\n<span class=\"input-group-addon\"><i class=\"fa fa-fw fa-lock\"></i></span>\n<input type=\"password\" class=\"form-control session_login\" name=\"pass\" autocomplete=\"off\" placeholder=\"Password\"  >\n</div>\n<div class=\"input-group form-group\">\n            <span class=\"awcheckbox awobject\"><input class=\"iawobject\" name=\"save\" value=\"1\" id=\"save\" type=\"checkbox\"> <label class=\"lawobject\" for=\"save\">Remember me</label></span>\n         </div>\n<div class=\"form-group\"><button class=\"btn btn-primary pull-left\" type=\"submit\" style=\"margin-top: 0 !important; width: 50%\"><i class=\"fa fa-sign-in\"></i>&nbsp;&nbsp;Sign in</button>\n<button class=\"btn btn-danger pull-right\" type=\"reset\" style=\"width: 50%\"><i class=\"fa fa-backup fa-1_25x\"></i>&nbsp;&nbsp;Reset</button>\n<script>function spinner(){var x=$(\".fa-sign-in\"),s ='<span class=\"cspinner_container\" style=\"position: absolute; width: 18px; height: 14px; display: inline-block;\"><span class=\"cspinner\" style=\"margin-top: 2px; margin-left: -22px;\"><span class=\"cspinner-icon white small\"></span></span></span>';x.addClass(\"invisible\").after(s);x.parent(\".btn\").addClass(\"disabled\")}</script></div></form>\n</div>\n</body>\n</html>\n",
          "body_hashes": [
            "sha256:6cc580e97787b3cb272ac552d5d8b615296c7d9cb55310901d176e8b5f6c38e5",
            "sha1:fd8695233bc88160a5f4c3ea8579eefdb5bcf110"
          ],
          "body_hash": "sha1:fd8695233bc88160a5f4c3ea8579eefdb5bcf110",
          "html_title": "Login to Webmin"
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "14d14d00014d14d00014d14d14d14d6b64279c20472e17718ddea38ab610fa",
        "cipher_and_version_fingerprint": "14d14d00014d14d00014d14d14d14d",
        "tls_extensions_sha256": "6b64279c20472e17718ddea38ab610fa",
        "observed_at": "2023-01-19T12:21:29.364385494Z"
      },
      "observed_at": "2023-02-02T03:12:40.486226401Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 10000,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:*:http:1.831:*:*:*:*:*:*:*",
          "part": "a",
          "product": "HTTP",
          "version": "1.831",
          "other": {
            "family": "WebServer"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Webmin",
          "product": "Webmin",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.61",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_RSA_WITH_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "00102dd83669adaae602087b79bc855989a3aabdec5671ad25b93b5c1b4a693f",
          "leaf_data": {
            "subject_dn": "[email protected], O=Webmin Webserver on msg.mkrada.gov.ua, CN=*, [email protected]",
            "issuer_dn": "[email protected], O=Webmin Webserver on msg.mkrada.gov.ua, CN=*, [email protected]",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "7ebfaa89991f3dd2b8991379be134b7477412a72871682c880c2336596e78b4a",
            "fingerprint": "00102dd83669adaae602087b79bc855989a3aabdec5671ad25b93b5c1b4a693f",
            "issuer": {
              "common_name": [
                "*"
              ],
              "organization": [
                "Webmin Webserver on msg.mkrada.gov.ua"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "subject": {
              "common_name": [
                "*"
              ],
              "organization": [
                "Webmin Webserver on msg.mkrada.gov.ua"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "vo7Dkwtkb+YQIMD3A1/9NswJmKofudHL7TnMEw+lQUC4+gGlFYXoZ0mxVUmMpld8+7EmF9LhwaLCT3G5BiHBxobcdSiO9kxpco9fj2x8WUptwKHEkD52hiQij/QiWUzxxWYe627C/CDap8tGnYRJk7dliUK0PkGZpTZanRp8yN7ExiybkvSQYEfBYyn5Y5lE+/ajWZ9Z6x87nm0o+s7lqF5cwJ8JZQARwJZW89uMVaB6V2N1eE3hzMjfvIFisOxLiXnyqV8bv9Lwbl9Lzz+9O79Msy4A+4Gnj0Ty0cITzlSnmOIPLwJpZ4uB09PI5Yggwh05eId4wYKkok/IP6fcNw==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "ddf9e16de34cdd1d09f23784a90eae01bae208912b9c300584e593ed7bdfda84"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "session_ticket": {
          "length": 160,
          "lifetime_hint": 300
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "7c02dbae662670040c7af9bd15fb7e2f"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "ssh",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "SSH-2.0-OpenSSH_7.2 FreeBSD-20160310",
      "banner_hashes": [
        "sha256:bcfd01c85fd08422bb90e8487c7a5c0a96ae647b08261748761a597012a14c16"
      ],
      "banner_hex": "5353482d322e302d4f70656e5353485f372e3220467265654253442d3230313630333130",
      "extended_service_name": "SSH",
      "observed_at": "2023-02-02T14:22:32.493787893Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 22222,
      "service_name": "SSH",
      "software": [
        {
          "product": "openssh",
          "other": {
            "comment": "FreeBSD-20160310"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "FreeBSD",
          "product": "FreeBSD",
          "other": {
            "family": "FreeBSD"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:openbsd:openssh:7.2:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "OpenBSD",
          "product": "OpenSSH",
          "version": "7.2",
          "other": {
            "family": "OpenSSH"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.248.133.118",
      "ssh": {
        "endpoint_id": {
          "_encoding": {
            "raw": "DISPLAY_UTF8"
          },
          "raw": "SSH-2.0-OpenSSH_7.2 FreeBSD-20160310",
          "protocol_version": "2.0",
          "software_version": "OpenSSH_7.2",
          "comment": "FreeBSD-20160310"
        },
        "kex_init_message": {
          "kex_algorithms": [
            "[email protected]",
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "diffie-hellman-group-exchange-sha256",
            "diffie-hellman-group14-sha1"
          ],
          "host_key_algorithms": [
            "ssh-rsa",
            "rsa-sha2-512",
            "rsa-sha2-256",
            "ssh-dss",
            "ecdsa-sha2-nistp256",
            "ssh-ed25519"
          ],
          "client_to_server_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]",
            "aes128-cbc",
            "aes192-cbc",
            "aes256-cbc"
          ],
          "server_to_client_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]",
            "aes128-cbc",
            "aes192-cbc",
            "aes256-cbc"
          ],
          "client_to_server_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "server_to_client_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "client_to_server_compression": [
            "none",
            "[email protected]"
          ],
          "server_to_client_compression": [
            "none",
            "[email protected]"
          ],
          "first_kex_follows": false
        },
        "algorithm_selection": {
          "kex_algorithm": "[email protected]",
          "host_key_algorithm": "ecdsa-sha2-nistp256",
          "client_to_server_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          },
          "server_to_client_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          }
        },
        "server_host_key": {
          "fingerprint_sha256": "cc755a50e9199c61de330fe2e40b54917a80ba241f519b9bb4fda24c6c392fe0",
          "ecdsa_public_key": {
            "_encoding": {
              "b": "DISPLAY_BASE64",
              "gx": "DISPLAY_BASE64",
              "gy": "DISPLAY_BASE64",
              "n": "DISPLAY_BASE64",
              "p": "DISPLAY_BASE64",
              "x": "DISPLAY_BASE64",
              "y": "DISPLAY_BASE64"
            },
            "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
            "curve": "P-256",
            "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
            "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
            "length": 256,
            "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
            "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
            "x": "Y6KTXT1UCUZa+VpRJmX0AL5INYWKFIqwi7eyhzO5bh0=",
            "y": "CdINsMIF/I2Jt14geA3m59ppaFXUCin7BM5JBFWAp7Q="
          }
        },
        "hassh_fingerprint": "07094a2b29664fb4178658c6e95a241f"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Ukraine",
    "country_code": "UA",
    "city": "Mykolayiv",
    "postal_code": "54038",
    "timezone": "Europe/Kyiv",
    "province": "Mykolaiv",
    "coordinates": {
      "latitude": 46.9674,
      "longitude": 32.0037
    },
    "registered_country": "Ukraine",
    "registered_country_code": "UA"
  },
  "location_updated_at": "2023-01-25T12:54:43.879615Z",
  "autonomous_system": {
    "asn": 31272,
    "description": "WILDPARK-AS ISP WildPark, Ukraine, Nikolaev",
    "bgp_prefix": "217.77.208.0/21",
    "name": "WILDPARK-AS ISP WildPark, Ukraine, Nikolaev",
    "country_code": "UA"
  },
  "autonomous_system_updated_at": "2023-01-25T12:54:43.889744Z",
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*",
    "part": "o",
    "vendor": "Ubuntu",
    "product": "Linux",
    "version": "16.04",
    "other": {
      "family": "Linux"
    }
  },
  "dns": {
    "reverse_dns": {
      "names": [
        "ferm0.mkrada.gov.ua"
      ],
      "resolved_at": "2023-01-19T04:58:07.897566179Z"
    }
  },
  "last_updated_at": "2023-02-03T01:25:04.209Z"
}