31.11.34.91

As of: Feb 02, 2023 12:49am UTC | Latest
{
  "ip": "31.11.34.91",
  "services": [
    {
      "_decoded": "ftp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 Microsoft FTP Service\r\n",
      "banner_hashes": [
        "sha256:1330121f692d2b691ce187db6f11751c54549a97efc4a317e1ab240e6229a97d"
      ],
      "banner_hex": "323230204d6963726f736f66742046545020536572766963650d0a",
      "certificate": "45a4b77fddaa1c0b297b7235768ea2f6ef71fb18e02980bad712777aca4c1a76",
      "extended_service_name": "FTPes",
      "ftp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "auth_tls_response": "DISPLAY_UTF8"
        },
        "banner": "220 Microsoft FTP Service\r\n",
        "auth_tls_response": "234 AUTH command ok. Expecting TLS Negotiation.\r\n",
        "status_code": 220,
        "status_meaning": "Service ready for new user.",
        "implicit_tls": false
      },
      "observed_at": "2023-02-01T12:49:36.659671273Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 21,
      "service_name": "FTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "IIS",
          "other": {
            "family": "IIS"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.60",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "45a4b77fddaa1c0b297b7235768ea2f6ef71fb18e02980bad712777aca4c1a76",
          "chain_fps_sha_256": [
            "931aaa1ec9b2ba0fa59a82302f4f830628c86d9b2d2a50a4d1b2ce895c4cc648"
          ],
          "leaf_data": {
            "names": [
              "*.aruba.it",
              "aruba.it"
            ],
            "subject_dn": "C=IT, ST=Bergamo, L=Ponte San Pietro, O=Aruba S.p.A., CN=*.aruba.it",
            "issuer_dn": "C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis S.p.A., CN=Actalis Organization Validated Server CA G3",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "89bc04e01f680dd99fd36ac6fbefcc332cf765209aca3810613d969fc74b625c",
            "fingerprint": "45a4b77fddaa1c0b297b7235768ea2f6ef71fb18e02980bad712777aca4c1a76",
            "issuer": {
              "common_name": [
                "Actalis Organization Validated Server CA G3"
              ],
              "locality": [
                "Ponte San Pietro"
              ],
              "organization": [
                "Actalis S.p.A."
              ],
              "province": [
                "Bergamo"
              ],
              "country": [
                "IT"
              ]
            },
            "subject": {
              "common_name": [
                "*.aruba.it"
              ],
              "locality": [
                "Ponte San Pietro"
              ],
              "organization": [
                "Aruba S.p.A."
              ],
              "province": [
                "Bergamo"
              ],
              "country": [
                "IT"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "xOxY4F+m0gS9rRwfaMnXvuflO4yoLzmNixzwgLvN4JDMjvKpZmXa7BuRdDxIqdvwwPMZpgYzMFbv9mjDaoigb1eVEx63knowqkuftSwswHWsxIxrRR4bX5VYfWlsiulfDacp0ASS1pTCq01VYgEZ79/iGe4zQRJUF9uW37jsh4eI6yJK7W3ngvnuSCj7JGScuZJmLk3UmGAUiMJAb+JqqPZj+MOl3+JfbWI3v48iKvVminRx0QCrKL5Knn88r0/PpF1Aot+cmYqugH80kQqtJcsAjW9ZjIvnBA38sTMDKRmqV/qI+dDRWGicqXLTkDqYgk/XpfwUCYHt6rSNMe/ZNw==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "98ebbdfa20acaa23cfd73dd2dc8c1eeff538a583ae9adb74b213db7becea33be"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "931aaa1ec9b2ba0fa59a82302f4f830628c86d9b2d2a50a4d1b2ce895c4cc648",
              "subject_dn": "C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis S.p.A., CN=Actalis Organization Validated Server CA G3",
              "issuer_dn": "C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "507bcb4f8187a3fb0cbc7fdfaf344f0d"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nLast-Modified: Fri, 23 May 2014 15:16:22 GMT\r\nAccept-Ranges: bytes\r\nETag: \"87c9faf49976cf1:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nX-Aruba2-Cache: NA\r\nX-Aruba-Cache: NA\r\nDate:  <REDACTED>\r\nContent-Length: 53\r\n",
      "banner_hashes": [
        "sha256:566fe271a0a4ab4d28028460f7a38a06cf824420279eace35cc98fee9c534742"
      ],
      "banner_hex": "485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a4c6173742d4d6f6469666965643a204672692c203233204d617920323031342031353a31363a323220474d540d0a4163636570742d52616e6765733a2062797465730d0a455461673a20223837633966616634393937366366313a30220d0a5365727665723a204d6963726f736f66742d4949532f382e350d0a582d506f77657265642d42793a204153502e4e45540d0a582d4172756261322d43616368653a204e410d0a582d41727562612d43616368653a204e410d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a2035330d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://31.11.34.91/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 200,
          "status_reason": "OK",
          "headers": {
            "Accept_Ranges": [
              "bytes"
            ],
            "_encoding": {
              "Accept_Ranges": "DISPLAY_UTF8",
              "Last_Modified": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Etag": "DISPLAY_UTF8",
              "X_Aruba2_Cache": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "X_Aruba_Cache": "DISPLAY_UTF8",
              "X_Powered_By": "DISPLAY_UTF8"
            },
            "Last_Modified": [
              "Fri, 23 May 2014 15:16:22 GMT"
            ],
            "Content_Length": [
              "53"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Etag": [
              "\"87c9faf49976cf1:0\""
            ],
            "X_Aruba2_Cache": [
              "NA"
            ],
            "Server": [
              "Microsoft-IIS/8.5"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "X_Aruba_Cache": [
              "NA"
            ],
            "X_Powered_By": [
              "ASP.NET"
            ]
          },
          "body_size": 53,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "<html><head></head>\r\n<body>Benvenuti!</body>\r\n</html>",
          "body_hashes": [
            "sha256:114177999b9f8a07f33c11e3ad40c120b2f934f476d0847e296ec64636c5dd28",
            "sha1:6293c50c571b895b7bd7c3d80e92b8a77d5893f9"
          ],
          "body_hash": "sha1:6293c50c571b895b7bd7c3d80e92b8a77d5893f9"
        },
        "supports_http2": false
      },
      "observed_at": "2023-01-31T20:54:41.653196292Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:8.5:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "IIS",
          "version": "8.5",
          "other": {
            "family": "IIS"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "microsoft",
          "product": "windows",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "ASP.NET",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.248.133.60",
      "transport_fingerprint": {
        "id": 310,
        "os": "Windows 2008 R2 / 2012",
        "raw": "8192,128,true,MNWST,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "ftp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 Microsoft FTP Service\r\n",
      "banner_hashes": [
        "sha256:1330121f692d2b691ce187db6f11751c54549a97efc4a317e1ab240e6229a97d"
      ],
      "banner_hex": "323230204d6963726f736f66742046545020536572766963650d0a",
      "certificate": "45a4b77fddaa1c0b297b7235768ea2f6ef71fb18e02980bad712777aca4c1a76",
      "extended_service_name": "FTPS",
      "ftp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "220 Microsoft FTP Service\r\n",
        "implicit_tls": true,
        "status_code": 220,
        "status_meaning": "Service ready for new user."
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "26d26d16d26d26d00026d26d26d26dd3b67dd3674d9af9dd91c1955a35d0e9",
        "cipher_and_version_fingerprint": "26d26d16d26d26d00026d26d26d26d",
        "tls_extensions_sha256": "d3b67dd3674d9af9dd91c1955a35d0e9",
        "observed_at": "2023-01-16T17:26:13.775091331Z"
      },
      "observed_at": "2023-02-01T07:48:18.353491804Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 990,
      "service_name": "FTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "IIS",
          "other": {
            "family": "IIS"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.248.133.63",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "45a4b77fddaa1c0b297b7235768ea2f6ef71fb18e02980bad712777aca4c1a76",
          "chain_fps_sha_256": [
            "931aaa1ec9b2ba0fa59a82302f4f830628c86d9b2d2a50a4d1b2ce895c4cc648"
          ],
          "leaf_data": {
            "names": [
              "*.aruba.it",
              "aruba.it"
            ],
            "subject_dn": "C=IT, ST=Bergamo, L=Ponte San Pietro, O=Aruba S.p.A., CN=*.aruba.it",
            "issuer_dn": "C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis S.p.A., CN=Actalis Organization Validated Server CA G3",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "89bc04e01f680dd99fd36ac6fbefcc332cf765209aca3810613d969fc74b625c",
            "fingerprint": "45a4b77fddaa1c0b297b7235768ea2f6ef71fb18e02980bad712777aca4c1a76",
            "issuer": {
              "common_name": [
                "Actalis Organization Validated Server CA G3"
              ],
              "locality": [
                "Ponte San Pietro"
              ],
              "organization": [
                "Actalis S.p.A."
              ],
              "province": [
                "Bergamo"
              ],
              "country": [
                "IT"
              ]
            },
            "subject": {
              "common_name": [
                "*.aruba.it"
              ],
              "locality": [
                "Ponte San Pietro"
              ],
              "organization": [
                "Aruba S.p.A."
              ],
              "province": [
                "Bergamo"
              ],
              "country": [
                "IT"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "xOxY4F+m0gS9rRwfaMnXvuflO4yoLzmNixzwgLvN4JDMjvKpZmXa7BuRdDxIqdvwwPMZpgYzMFbv9mjDaoigb1eVEx63knowqkuftSwswHWsxIxrRR4bX5VYfWlsiulfDacp0ASS1pTCq01VYgEZ79/iGe4zQRJUF9uW37jsh4eI6yJK7W3ngvnuSCj7JGScuZJmLk3UmGAUiMJAb+JqqPZj+MOl3+JfbWI3v48iKvVminRx0QCrKL5Knn88r0/PpF1Aot+cmYqugH80kQqtJcsAjW9ZjIvnBA38sTMDKRmqV/qI+dDRWGicqXLTkDqYgk/XpfwUCYHt6rSNMe/ZNw==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "98ebbdfa20acaa23cfd73dd2dc8c1eeff538a583ae9adb74b213db7becea33be"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "931aaa1ec9b2ba0fa59a82302f4f830628c86d9b2d2a50a4d1b2ce895c4cc648",
              "subject_dn": "C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis S.p.A., CN=Actalis Organization Validated Server CA G3",
              "issuer_dn": "C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "507bcb4f8187a3fb0cbc7fdfaf344f0d"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\nServer: Microsoft-IIS/8.5\r\nDate:  <REDACTED>\r\nConnection: close\r\nContent-Length: 0\r\n",
      "banner_hashes": [
        "sha256:612ef95648216f1f3fa8c63362bc568f399dfa25d46bb2f29b7d8990af801650"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a5365727665723a204d6963726f736f66742d4949532f382e350d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d4c656e6774683a20300d0a",
      "certificate": "45a4b77fddaa1c0b297b7235768ea2f6ef71fb18e02980bad712777aca4c1a76",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://31.11.34.91:8172/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "Content_Length": [
              "0"
            ],
            "_encoding": {
              "Content_Length": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8"
            },
            "Server": [
              "Microsoft-IIS/8.5"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Connection": [
              "close"
            ]
          },
          "body_size": 0
        },
        "supports_http2": false
      },
      "observed_at": "2023-02-01T18:03:36.435798235Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 8172,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:8.5:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Microsoft",
          "product": "IIS",
          "version": "8.5",
          "other": {
            "family": "IIS"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2",
          "other": {
            "family": "Windows"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.8",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "45a4b77fddaa1c0b297b7235768ea2f6ef71fb18e02980bad712777aca4c1a76",
          "chain_fps_sha_256": [
            "931aaa1ec9b2ba0fa59a82302f4f830628c86d9b2d2a50a4d1b2ce895c4cc648"
          ],
          "leaf_data": {
            "names": [
              "*.aruba.it",
              "aruba.it"
            ],
            "subject_dn": "C=IT, ST=Bergamo, L=Ponte San Pietro, O=Aruba S.p.A., CN=*.aruba.it",
            "issuer_dn": "C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis S.p.A., CN=Actalis Organization Validated Server CA G3",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "89bc04e01f680dd99fd36ac6fbefcc332cf765209aca3810613d969fc74b625c",
            "fingerprint": "45a4b77fddaa1c0b297b7235768ea2f6ef71fb18e02980bad712777aca4c1a76",
            "issuer": {
              "common_name": [
                "Actalis Organization Validated Server CA G3"
              ],
              "locality": [
                "Ponte San Pietro"
              ],
              "organization": [
                "Actalis S.p.A."
              ],
              "province": [
                "Bergamo"
              ],
              "country": [
                "IT"
              ]
            },
            "subject": {
              "common_name": [
                "*.aruba.it"
              ],
              "locality": [
                "Ponte San Pietro"
              ],
              "organization": [
                "Aruba S.p.A."
              ],
              "province": [
                "Bergamo"
              ],
              "country": [
                "IT"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "xOxY4F+m0gS9rRwfaMnXvuflO4yoLzmNixzwgLvN4JDMjvKpZmXa7BuRdDxIqdvwwPMZpgYzMFbv9mjDaoigb1eVEx63knowqkuftSwswHWsxIxrRR4bX5VYfWlsiulfDacp0ASS1pTCq01VYgEZ79/iGe4zQRJUF9uW37jsh4eI6yJK7W3ngvnuSCj7JGScuZJmLk3UmGAUiMJAb+JqqPZj+MOl3+JfbWI3v48iKvVminRx0QCrKL5Knn88r0/PpF1Aot+cmYqugH80kQqtJcsAjW9ZjIvnBA38sTMDKRmqV/qI+dDRWGicqXLTkDqYgk/XpfwUCYHt6rSNMe/ZNw==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "98ebbdfa20acaa23cfd73dd2dc8c1eeff538a583ae9adb74b213db7becea33be"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "931aaa1ec9b2ba0fa59a82302f4f830628c86d9b2d2a50a4d1b2ce895c4cc648",
              "subject_dn": "C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis S.p.A., CN=Actalis Organization Validated Server CA G3",
              "issuer_dn": "C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "8529fd8de0d7f73186ef5ea8b4531a76"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Italy",
    "country_code": "IT",
    "city": "Arezzo",
    "postal_code": "52100",
    "timezone": "Europe/Rome",
    "province": "Tuscany",
    "coordinates": {
      "latitude": 43.4631,
      "longitude": 11.8783
    },
    "registered_country": "Italy",
    "registered_country_code": "IT"
  },
  "location_updated_at": "2023-01-28T21:15:22.992907Z",
  "autonomous_system": {
    "asn": 31034,
    "description": "ARUBA-ASN",
    "bgp_prefix": "31.11.32.0/21",
    "name": "ARUBA-ASN",
    "country_code": "IT"
  },
  "autonomous_system_updated_at": "2023-01-28T21:15:22.997126Z",
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
    "part": "o",
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "other": {
      "family": "Windows"
    }
  },
  "dns": {
    "names": [
      "brancacciosposa.it",
      "lucastudiodinterni.it",
      "iconografi.it",
      "tipografiarossidal1926.it",
      "risparmiosolare.it",
      "lidokammel.it",
      "tarocchiinamore.it",
      "asdsanbiagio.it",
      "ciseco.eu",
      "velaclubpalermo.it",
      "mnengineering.it",
      "privacyfoundation.eu",
      "longobardianiello.it",
      "tuboflessibilemodulare.it",
      "waterplanetservice.com",
      "netsasa.it",
      "laprovinciadimessina.com",
      "mattidapescare.com",
      "autoscuolaburan.it",
      "www.globallinegroup.it",
      "autoriparazionieuro.com",
      "romiberto.it",
      "triveneto.wine",
      "agriturismolatamerice.it",
      "bustreo.com",
      "calabria-vacanze.it",
      "donatellasarchini.it",
      "cinemastone.com",
      "fatisas.it",
      "syncros.it",
      "teatroaurelio.it",
      "resinalab.com",
      "andemas.com",
      "tuttonapolicalcio.it",
      "orchestramatteo.it",
      "pugliavillaggivacanze.it",
      "canilidiroma.it",
      "autodemolizioniveneziani.it",
      "legnoemetallo.it",
      "angelocardillo.it",
      "www.protcivpignataromaggiore.org",
      "torneriaac.eu",
      "pigolabsrl.it",
      "cortegiardino.it",
      "daludeco.com",
      "illusiafilm.com",
      "neoproject.it",
      "ppstikers.com",
      "ilfontanileristorante.it",
      "liquiriziebrilli.com",
      "guain.it",
      "vivipiscinola.it",
      "bibioneresidence.it",
      "marcellovaleri.it",
      "www.centrodentisticofiorentino.com",
      "federicolorenzin.com",
      "eker.shop",
      "mirasrl.com",
      "plexiglass-abruzzo.com",
      "giordanazuffardi.com",
      "albertonavalon.com",
      "caseificiopaese.it",
      "studiolazzarini.it",
      "areats4.com",
      "protcivpignataromaggiore.org",
      "xponics.it",
      "esmmilano.it",
      "anisapcalabria.it",
      "comproorosgr.it",
      "latavernaccia.com",
      "italianlegendbicycles.com",
      "tecnosalus.it",
      "centrostudiperilvolontariato.it",
      "software.rimini.it",
      "residencemonza.com",
      "depengineering.it",
      "mariocanci.it",
      "studiocosta.eu",
      "chiesaortodossaitaliana.it",
      "donatellamarinucci.it",
      "svsroma.it",
      "sciclubroncadelle.it",
      "iciliegi.com",
      "magiajazz.it",
      "alfatecno.com",
      "gattinipelletterie.it",
      "frlivorno.it",
      "ciennemetal.com",
      "fattoriegiannozzi.com",
      "astolinto.it",
      "kalinaun-marine-natural-park.com",
      "autotrasportiburlon.it",
      "studiolegaletoti.it",
      "websn3s081.aruba.it",
      "ilcontabilesas.eu",
      "socialtecnicaeditore.com",
      "e-u.it",
      "agentibuggiani.com",
      "ctp-group.it",
      "fet001.it"
    ],
    "records": {
      "studiocosta.eu": {
        "record_type": "A",
        "resolved_at": "2023-01-21T14:59:37.394561098Z"
      },
      "ciseco.eu": {
        "record_type": "A",
        "resolved_at": "2023-01-04T20:39:33.596493762Z"
      },
      "fet001.it": {
        "record_type": "A",
        "resolved_at": "2023-01-24T14:55:14.167809437Z"
      },
      "asdsanbiagio.it": {
        "record_type": "A",
        "resolved_at": "2023-01-26T15:29:38.303387563Z"
      },
      "daludeco.com": {
        "record_type": "A",
        "resolved_at": "2023-01-25T13:21:52.515860718Z"
      },
      "lucastudiodinterni.it": {
        "record_type": "A",
        "resolved_at": "2023-01-25T15:21:49.699793708Z"
      },
      "agentibuggiani.com": {
        "record_type": "A",
        "resolved_at": "2023-01-29T12:42:19.786384904Z"
      },
      "ilfontanileristorante.it": {
        "record_type": "A",
        "resolved_at": "2023-01-06T20:10:35.645728818Z"
      },
      "neoproject.it": {
        "record_type": "A",
        "resolved_at": "2023-01-30T15:44:58.056682007Z"
      },
      "legnoemetallo.it": {
        "record_type": "A",
        "resolved_at": "2023-01-30T14:21:15.838653190Z"
      },
      "tecnosalus.it": {
        "record_type": "A",
        "resolved_at": "2023-01-23T15:03:19.398664749Z"
      },
      "caseificiopaese.it": {
        "record_type": "A",
        "resolved_at": "2023-01-30T15:02:15.472016174Z"
      },
      "tuttonapolicalcio.it": {
        "record_type": "A",
        "resolved_at": "2023-01-16T15:41:00.321060974Z"
      },
      "ciennemetal.com": {
        "record_type": "A",
        "resolved_at": "2023-01-20T14:18:24.749765791Z"
      },
      "iconografi.it": {
        "record_type": "A",
        "resolved_at": "2023-01-23T16:05:13.270620992Z"
      },
      "autoscuolaburan.it": {
        "record_type": "A",
        "resolved_at": "2023-01-06T05:18:48.899273851Z"
      },
      "tipografiarossidal1926.it": {
        "record_type": "A",
        "resolved_at": "2023-01-11T15:21:55.391687189Z"
      },
      "tarocchiinamore.it": {
        "record_type": "A",
        "resolved_at": "2023-01-16T21:11:49.255077799Z"
      },
      "studiolegaletoti.it": {
        "record_type": "A",
        "resolved_at": "2023-01-22T14:58:55.053389615Z"
      },
      "romiberto.it": {
        "record_type": "A",
        "resolved_at": "2023-01-31T15:26:53.056272743Z"
      },
      "bibioneresidence.it": {
        "record_type": "A",
        "resolved_at": "2023-01-06T14:57:50.266770651Z"
      },
      "socialtecnicaeditore.com": {
        "record_type": "A",
        "resolved_at": "2023-01-14T14:02:04.117736174Z"
      },
      "resinalab.com": {
        "record_type": "A",
        "resolved_at": "2023-01-19T13:36:52.872030688Z"
      },
      "fattoriegiannozzi.com": {
        "record_type": "A",
        "resolved_at": "2023-01-12T13:16:00.381378386Z"
      },
      "velaclubpalermo.it": {
        "record_type": "A",
        "resolved_at": "2023-01-29T16:18:24.109194536Z"
      },
      "mnengineering.it": {
        "record_type": "A",
        "resolved_at": "2023-01-16T15:36:39.834898249Z"
      },
      "giordanazuffardi.com": {
        "record_type": "A",
        "resolved_at": "2023-01-10T13:16:10.098845359Z"
      },
      "autotrasportiburlon.it": {
        "record_type": "A",
        "resolved_at": "2023-01-18T15:11:51.822328800Z"
      },
      "orchestramatteo.it": {
        "record_type": "A",
        "resolved_at": "2023-01-06T14:58:51.505986507Z"
      },
      "vivipiscinola.it": {
        "record_type": "A",
        "resolved_at": "2023-02-02T00:49:17.750044250Z"
      },
      "anisapcalabria.it": {
        "record_type": "A",
        "resolved_at": "2023-01-27T16:26:07.588288860Z"
      },
      "calabria-vacanze.it": {
        "record_type": "A",
        "resolved_at": "2023-01-24T14:53:39.322834491Z"
      },
      "cinemastone.com": {
        "record_type": "A",
        "resolved_at": "2023-01-24T13:03:58.829471839Z"
      },
      "ppstikers.com": {
        "record_type": "A",
        "resolved_at": "2023-01-26T14:07:00.745377311Z"
      },
      "agriturismolatamerice.it": {
        "record_type": "A",
        "resolved_at": "2023-01-24T14:55:00.694693171Z"
      },
      "mattidapescare.com": {
        "record_type": "A",
        "resolved_at": "2023-01-10T13:27:57.530479094Z"
      },
      "pigolabsrl.it": {
        "record_type": "A",
        "resolved_at": "2023-01-16T15:36:32.292324171Z"
      },
      "canilidiroma.it": {
        "record_type": "A",
        "resolved_at": "2023-01-29T15:22:45.438932053Z"
      },
      "waterplanetservice.com": {
        "record_type": "A",
        "resolved_at": "2023-01-01T14:06:33.915254916Z"
      },
      "centrostudiperilvolontariato.it": {
        "record_type": "A",
        "resolved_at": "2023-01-07T23:57:17.332525889Z"
      },
      "triveneto.wine": {
        "record_type": "A",
        "resolved_at": "2023-01-12T16:09:40.409212027Z"
      },
      "syncros.it": {
        "record_type": "A",
        "resolved_at": "2023-01-25T15:22:34.400887378Z"
      },
      "www.protcivpignataromaggiore.org": {
        "record_type": "A",
        "resolved_at": "2023-01-31T17:19:24.591057985Z"
      },
      "laprovinciadimessina.com": {
        "record_type": "A",
        "resolved_at": "2023-01-30T13:32:06.284948489Z"
      },
      "donatellasarchini.it": {
        "record_type": "A",
        "resolved_at": "2023-01-09T15:02:19.507661782Z"
      },
      "depengineering.it": {
        "record_type": "A",
        "resolved_at": "2023-01-27T05:34:34.386607141Z"
      },
      "magiajazz.it": {
        "record_type": "A",
        "resolved_at": "2023-01-22T01:52:57.953007490Z"
      },
      "eker.shop": {
        "record_type": "A",
        "resolved_at": "2023-01-05T17:08:59.151874944Z"
      },
      "tuboflessibilemodulare.it": {
        "record_type": "A",
        "resolved_at": "2023-01-07T15:16:45.238696715Z"
      },
      "sciclubroncadelle.it": {
        "record_type": "A",
        "resolved_at": "2023-02-01T11:49:19.749858973Z"
      },
      "esmmilano.it": {
        "record_type": "A",
        "resolved_at": "2023-01-29T15:23:17.855991466Z"
      },
      "software.rimini.it": {
        "record_type": "A",
        "resolved_at": "2023-01-05T15:14:15.499303288Z"
      },
      "teatroaurelio.it": {
        "record_type": "A",
        "resolved_at": "2023-01-21T15:20:49.657616071Z"
      },
      "comproorosgr.it": {
        "record_type": "A",
        "resolved_at": "2023-01-12T14:36:14.622227312Z"
      },
      "mirasrl.com": {
        "record_type": "A",
        "resolved_at": "2023-01-23T13:33:04.172842830Z"
      },
      "longobardianiello.it": {
        "record_type": "A",
        "resolved_at": "2023-01-02T14:52:30.991756708Z"
      },
      "lidokammel.it": {
        "record_type": "A",
        "resolved_at": "2023-01-08T14:51:32.224415782Z"
      },
      "angelocardillo.it": {
        "record_type": "A",
        "resolved_at": "2023-01-08T14:50:54.952555270Z"
      },
      "latavernaccia.com": {
        "record_type": "A",
        "resolved_at": "2023-01-30T11:58:26.348663980Z"
      },
      "kalinaun-marine-natural-park.com": {
        "record_type": "A",
        "resolved_at": "2023-01-22T13:30:40.587860886Z"
      },
      "protcivpignataromaggiore.org": {
        "record_type": "A",
        "resolved_at": "2023-01-07T16:56:42.177129515Z"
      },
      "ilcontabilesas.eu": {
        "record_type": "A",
        "resolved_at": "2023-01-08T14:34:15.147816556Z"
      },
      "marcellovaleri.it": {
        "record_type": "A",
        "resolved_at": "2023-01-12T14:36:53.740642285Z"
      },
      "astolinto.it": {
        "record_type": "A",
        "resolved_at": "2023-01-19T21:17:36.610732743Z"
      },
      "illusiafilm.com": {
        "record_type": "A",
        "resolved_at": "2023-01-05T17:07:13.646554243Z"
      },
      "www.centrodentisticofiorentino.com": {
        "record_type": "A",
        "resolved_at": "2023-01-04T13:06:05.797547986Z"
      },
      "chiesaortodossaitaliana.it": {
        "record_type": "A",
        "resolved_at": "2023-01-29T00:55:47.594923904Z"
      },
      "torneriaac.eu": {
        "record_type": "A",
        "resolved_at": "2023-01-25T15:00:28.286003041Z"
      },
      "studiolazzarini.it": {
        "record_type": "A",
        "resolved_at": "2023-01-31T15:27:01.196951061Z"
      },
      "donatellamarinucci.it": {
        "record_type": "A",
        "resolved_at": "2023-01-06T18:06:09.518745209Z"
      },
      "federicolorenzin.com": {
        "record_type": "A",
        "resolved_at": "2023-01-29T13:26:04.599475433Z"
      },
      "privacyfoundation.eu": {
        "record_type": "A",
        "resolved_at": "2023-01-29T00:23:15.925330270Z"
      },
      "pugliavillaggivacanze.it": {
        "record_type": "A",
        "resolved_at": "2023-02-01T17:19:31.923032787Z"
      },
      "alfatecno.com": {
        "record_type": "A",
        "resolved_at": "2023-01-22T12:41:27.063572729Z"
      },
      "guain.it": {
        "record_type": "A",
        "resolved_at": "2023-01-14T15:10:20.808382778Z"
      },
      "cortegiardino.it": {
        "record_type": "A",
        "resolved_at": "2023-01-16T15:35:37.846236839Z"
      },
      "websn3s081.aruba.it": {
        "record_type": "A",
        "resolved_at": "2023-01-30T15:01:08.755697393Z"
      },
      "ctp-group.it": {
        "record_type": "A",
        "resolved_at": "2023-01-30T21:05:18.541162681Z"
      },
      "autodemolizioniveneziani.it": {
        "record_type": "A",
        "resolved_at": "2023-01-30T15:02:02.456462494Z"
      },
      "albertonavalon.com": {
        "record_type": "A",
        "resolved_at": "2023-01-16T12:48:52.727096932Z"
      },
      "autoriparazionieuro.com": {
        "record_type": "A",
        "resolved_at": "2023-01-14T11:36:26.441549392Z"
      },
      "risparmiosolare.it": {
        "record_type": "A",
        "resolved_at": "2023-01-01T03:52:01.716361139Z"
      },
      "frlivorno.it": {
        "record_type": "A",
        "resolved_at": "2023-01-27T15:15:38.222186507Z"
      },
      "xponics.it": {
        "record_type": "A",
        "resolved_at": "2023-01-31T01:56:02.831793583Z"
      },
      "bustreo.com": {
        "record_type": "A",
        "resolved_at": "2023-01-28T13:08:59.415021392Z"
      },
      "netsasa.it": {
        "record_type": "A",
        "resolved_at": "2023-01-07T15:14:57.528456666Z"
      },
      "italianlegendbicycles.com": {
        "record_type": "A",
        "resolved_at": "2023-01-24T13:19:46.061979191Z"
      },
      "iciliegi.com": {
        "record_type": "A",
        "resolved_at": "2023-01-30T20:15:09.123639824Z"
      },
      "gattinipelletterie.it": {
        "record_type": "A",
        "resolved_at": "2023-02-01T22:51:28.415886568Z"
      },
      "e-u.it": {
        "record_type": "A",
        "resolved_at": "2023-01-06T14:58:10.047240172Z"
      },
      "areats4.com": {
        "record_type": "A",
        "resolved_at": "2023-01-31T13:02:10.551338174Z"
      },
      "fatisas.it": {
        "record_type": "A",
        "resolved_at": "2023-01-03T17:46:19.748467008Z"
      },
      "www.globallinegroup.it": {
        "record_type": "A",
        "resolved_at": "2023-01-01T14:48:30.368467248Z"
      },
      "liquiriziebrilli.com": {
        "record_type": "A",
        "resolved_at": "2023-01-31T13:45:36.959516278Z"
      },
      "brancacciosposa.it": {
        "record_type": "A",
        "resolved_at": "2023-01-09T15:02:25.107302649Z"
      },
      "mariocanci.it": {
        "record_type": "A",
        "resolved_at": "2023-01-05T15:13:58.346815323Z"
      },
      "plexiglass-abruzzo.com": {
        "record_type": "A",
        "resolved_at": "2023-01-21T13:52:03.181246822Z"
      },
      "residencemonza.com": {
        "record_type": "A",
        "resolved_at": "2023-01-22T13:52:21.707217864Z"
      },
      "andemas.com": {
        "record_type": "A",
        "resolved_at": "2023-02-01T12:54:41.883074833Z"
      },
      "svsroma.it": {
        "record_type": "A",
        "resolved_at": "2023-01-26T15:31:09.854443918Z"
      }
    },
    "reverse_dns": {
      "names": [
        "websn3s081.aruba.it"
      ],
      "resolved_at": "2023-01-25T23:04:28.319676883Z"
    }
  },
  "last_updated_at": "2023-02-02T00:49:18.311Z"
}