37.17.224.102

As of: Feb 09, 2023 8:03am UTC | Latest
{
  "ip": "37.17.224.102",
  "services": [
    {
      "_decoded": "ssh",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u7",
      "banner_hashes": [
        "sha256:7255311fa54230bc590914924cc13698192087e4404791f7b7d98ce9adfabb44"
      ],
      "banner_hex": "5353482d322e302d4f70656e5353485f362e3070312044656269616e2d342b646562377537",
      "extended_service_name": "SSH",
      "observed_at": "2023-02-08T17:59:54.716309080Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 22,
      "service_name": "SSH",
      "software": [
        {
          "product": "openssh",
          "other": {
            "comment": "Debian-4+deb7u7"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:openbsd:openssh:6.0p1:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "OpenBSD",
          "product": "OpenSSH",
          "version": "6.0p1",
          "other": {
            "family": "OpenSSH"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Debian",
          "product": "Linux",
          "version": "7.0",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.58",
      "ssh": {
        "endpoint_id": {
          "_encoding": {
            "raw": "DISPLAY_UTF8"
          },
          "raw": "SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u7",
          "protocol_version": "2.0",
          "software_version": "OpenSSH_6.0p1",
          "comment": "Debian-4+deb7u7"
        },
        "kex_init_message": {
          "kex_algorithms": [
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "diffie-hellman-group-exchange-sha256",
            "diffie-hellman-group-exchange-sha1",
            "diffie-hellman-group14-sha1",
            "diffie-hellman-group1-sha1"
          ],
          "host_key_algorithms": [
            "ssh-rsa",
            "ssh-dss"
          ],
          "client_to_server_ciphers": [
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "arcfour256",
            "arcfour128",
            "aes128-cbc",
            "3des-cbc",
            "blowfish-cbc",
            "cast128-cbc",
            "aes192-cbc",
            "aes256-cbc",
            "arcfour",
            "[email protected]"
          ],
          "server_to_client_ciphers": [
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "arcfour256",
            "arcfour128",
            "aes128-cbc",
            "3des-cbc",
            "blowfish-cbc",
            "cast128-cbc",
            "aes192-cbc",
            "aes256-cbc",
            "arcfour",
            "[email protected]"
          ],
          "client_to_server_macs": [
            "hmac-md5",
            "hmac-sha1",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-256-96",
            "hmac-sha2-512",
            "hmac-sha2-512-96",
            "hmac-ripemd160",
            "[email protected]",
            "hmac-sha1-96",
            "hmac-md5-96"
          ],
          "server_to_client_macs": [
            "hmac-md5",
            "hmac-sha1",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-256-96",
            "hmac-sha2-512",
            "hmac-sha2-512-96",
            "hmac-ripemd160",
            "[email protected]",
            "hmac-sha1-96",
            "hmac-md5-96"
          ],
          "client_to_server_compression": [
            "none",
            "[email protected]"
          ],
          "server_to_client_compression": [
            "none",
            "[email protected]"
          ],
          "first_kex_follows": false
        },
        "algorithm_selection": {
          "kex_algorithm": "ecdh-sha2-nistp256",
          "host_key_algorithm": "ssh-rsa",
          "client_to_server_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          },
          "server_to_client_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          }
        },
        "server_host_key": {
          "fingerprint_sha256": "6a9bd8f0d7a204b79de3e0a7ee0d8acb79bd2dfd0ca239640e43424cb17675d2",
          "rsa_public_key": {
            "_encoding": {
              "modulus": "DISPLAY_BASE64",
              "exponent": "DISPLAY_BASE64"
            },
            "modulus": "uvY9M4XJFvtwx2hJtL4ryGf7QpbBcHnoD6FEj3gBr16cv3RZh3VG1cQAs5mZNQUXwfWwv9bDd6+fKFpq605X6QhLK1UspBQdrfPzCkdi/w031+08778dJI2+bm/cHuNB0jSAFnSb10wSxqr4CovW9NfSjHLypZ2D3VOeSqe0iN96Cm5qRe4jzohs9tMx0MyF95es5RoIYGn6ILRmNgfPLmxng4mONwnsUSC992agX9pzsHTIxWrF0aVUyZN2LjBECGN0yWBK+nuKsda9OZ1MYoW1L5QA0j1A+pbZU82gcYtzuuYmyt5+6B5tCuDHnzXG5BFmX37d7SNyWR3oijcvtQ==",
            "exponent": "AAEAAQ==",
            "length": 2048
          }
        },
        "hassh_fingerprint": "ce3c327f37ea2ec21f317fbc3fd1ea43"
      },
      "transport_fingerprint": {
        "id": 6,
        "os": "Linux",
        "raw": "14480,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 200 OK\r\nDate:  <REDACTED>\r\nServer: Apache\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\nLast-Modified: Wed, 08 May 2013 09:59:09 GMT\r\nETag: \"3c820d4-b1-4dc31fc2dae20\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: sameorigin\r\nContent-Length: 146\r\nContent-Type: text/html\r\n",
      "banner_hashes": [
        "sha256:718322e46851cf26c681bd43c5863de0bbe1707c9f688097d67becbcee8a2a76"
      ],
      "banner_hex": "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",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://37.17.224.102/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 200,
          "status_reason": "OK",
          "headers": {
            "Last_Modified": [
              "Wed, 08 May 2013 09:59:09 GMT"
            ],
            "_encoding": {
              "Last_Modified": "DISPLAY_UTF8",
              "Vary": "DISPLAY_UTF8",
              "Etag": "DISPLAY_UTF8",
              "Strict_Transport_Security": "DISPLAY_UTF8",
              "X_Frame_Options": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Accept_Ranges": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8"
            },
            "Vary": [
              "Accept-Encoding"
            ],
            "Etag": [
              "\"3c820d4-b1-4dc31fc2dae20\""
            ],
            "Strict_Transport_Security": [
              "max-age=0; includeSubDomains; preload"
            ],
            "X_Frame_Options": [
              "sameorigin"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Accept_Ranges": [
              "bytes"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Server": [
              "Apache"
            ]
          },
          "body_size": 177,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "<html><body><h1>It works!</h1>\n<p>This is the default web page for this server.</p>\n<p>The web server software is running but no content has been added, yet.</p>\n</body></html>\n",
          "body_hashes": [
            "sha256:94850c4fd27e680ab5ea0800d6af86e58f42b6e2a1e20d7eca1febc1f2118c13",
            "sha1:26da7547c4ac841fd1bde1dd11fc24b1494b6f7a"
          ],
          "body_hash": "sha1:26da7547c4ac841fd1bde1dd11fc24b1494b6f7a"
        },
        "supports_http2": false
      },
      "observed_at": "2023-02-08T09:28:55.317186702Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Apache",
          "product": "HTTPD",
          "other": {
            "family": "Apache"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.58",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "ntp",
      "extended_service_name": "NTP",
      "ntp": {
        "get_time_header": {
          "version": 3,
          "mode": 4,
          "stratum": 3,
          "poll": 3,
          "precision": -23,
          "_encoding": {
            "reference_id": "DISPLAY_UTF8"
          },
          "reference_id": "\ufffdD)\ufffd",
          "leap_indicator": 0
        }
      },
      "observed_at": "2023-02-08T18:45:04.481757500Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 123,
      "service_name": "NTP",
      "source_ip": "167.94.138.63",
      "transport_protocol": "UDP",
      "truncated": false
    },
    {
      "_decoded": "imap",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc.  See COPYING for distribution information.\r\n",
      "banner_hashes": [
        "sha256:0a27112c93e30becba89ea2b9cba2fd1aa90533110a43f311f82a076e1edca17"
      ],
      "banner_hex": "2a204f4b205b4341504142494c49545920494d4150347265763120554944504c5553204348494c4452454e204e414d455350414345205448524541443d4f5244455245445355424a454354205448524541443d5245464552454e43455320534f52542051554f54412049444c452041434c2041434c323d554e494f4e205354415254544c535d20436f75726965722d494d41502072656164792e20436f7079726967687420313939382d3230313120446f75626c6520507265636973696f6e2c20496e632e202053656520434f5059494e4720666f7220646973747269627574696f6e20696e666f726d6174696f6e2e0d0a",
      "certificate": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
      "extended_service_name": "IMAPS",
      "imap": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc.  See COPYING for distribution information.\r\n",
        "start_tls": "a001 OK Begin SSL/TLS negotiation now.\r\n"
      },
      "observed_at": "2023-02-08T18:11:51.841539111Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 143,
      "service_name": "IMAP",
      "source_ip": "167.248.133.60",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_RSA_WITH_AES_128_GCM_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
          "leaf_data": {
            "subject_dn": "[email protected], C=US, ST=NY, L=New York, O=Courier Mail Server, OU=Automatically-generated IMAP SSL key, CN=localhost, [email protected]",
            "issuer_dn": "[email protected], C=US, ST=NY, L=New York, O=Courier Mail Server, OU=Automatically-generated IMAP SSL key, CN=localhost, [email protected]",
            "pubkey_bit_size": 1024,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "0f7515452261d7e60c94f3ba04006bf9194eed2bacf500f044f26d77adecd91f",
            "fingerprint": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
            "issuer": {
              "common_name": [
                "localhost"
              ],
              "locality": [
                "New York"
              ],
              "organization": [
                "Courier Mail Server"
              ],
              "organizational_unit": [
                "Automatically-generated IMAP SSL key"
              ],
              "province": [
                "NY"
              ],
              "country": [
                "US"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "subject": {
              "common_name": [
                "localhost"
              ],
              "locality": [
                "New York"
              ],
              "organization": [
                "Courier Mail Server"
              ],
              "organizational_unit": [
                "Automatically-generated IMAP SSL key"
              ],
              "province": [
                "NY"
              ],
              "country": [
                "US"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "tYo5uEljizdv0d5HVEgAroRigjspoK0G2LDLd9KIxeRphStp9LOSdZNifkE2sdua9ixDK6r8SYm9ehMDI7J+f6k3L4Mr+d+BtwXj398nkf5eKKgn/tjPvLd8+zbFnG8Tjmp9dOCUIiFtjkUpK6JiHAfhFAdTwRaE8a7qQqS6ccs=",
                "exponent": "AAEAAQ==",
                "length": 128
              },
              "fingerprint": "0dd503100a10de217723a6c4dd5957bfd913f536cdb9b53ca8cd30ede0aab66e"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA1-RSA"
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "ccd5709d4a9027ec272e98b9924c36f7"
      },
      "transport_fingerprint": {
        "id": 6,
        "os": "Linux",
        "raw": "14480,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 301 Moved Permanently\r\nDate:  <REDACTED>\r\nServer: Apache\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\nLocation: https://www.webgo.de/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 189\r\nContent-Type: text/html; charset=iso-8859-1\r\n",
      "banner_hashes": [
        "sha256:f7059a42146e30c2e6f486bddfb695600c2a0e74bee832afce9ba5d2d29781e0"
      ],
      "banner_hex": "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",
      "certificate": "fec51b31c72111886fc403f1dd686e76e55b6832f3357c92887bde7da192c51b",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://37.17.224.102/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 301,
          "status_reason": "Moved Permanently",
          "headers": {
            "Content_Type": [
              "text/html; charset=iso-8859-1"
            ],
            "_encoding": {
              "Content_Type": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Strict_Transport_Security": "DISPLAY_UTF8",
              "Vary": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8"
            },
            "Date": [
              "<REDACTED>"
            ],
            "Strict_Transport_Security": [
              "max-age=0; includeSubDomains; preload"
            ],
            "Vary": [
              "Accept-Encoding"
            ],
            "Server": [
              "Apache"
            ],
            "Location": [
              "https://www.webgo.de/"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>301 Moved Permanently</title>"
          ],
          "body_size": 229,
          "body": "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>301 Moved Permanently</title>\n</head><body>\n<h1>Moved Permanently</h1>\n<p>The document has moved <a href=\"https://www.webgo.de/\">here</a>.</p>\n</body></html>\n",
          "body_hashes": [
            "sha256:72cb0bb73e97a4443199c7ad7ee9764ad7eb91daf5ab5c5114e3a43214903dd9",
            "sha1:c763b2a4074527e98776068f0f54e9d4a76dbf6e"
          ],
          "body_hash": "sha1:c763b2a4074527e98776068f0f54e9d4a76dbf6e",
          "html_title": "301 Moved Permanently"
        },
        "supports_http2": false
      },
      "observed_at": "2023-02-08T18:52:19.689984978Z",
      "perspective_id": "PERSPECTIVE_ORANGE",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Apache",
          "product": "HTTPD",
          "other": {
            "family": "Apache"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.145.60",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "fec51b31c72111886fc403f1dd686e76e55b6832f3357c92887bde7da192c51b",
          "chain_fps_sha_256": [
            "43cac31ef8e8ba1b4b16b8206e4c0a26c5badb2fc3aa09e90170e41b66c2fd64",
            "68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b"
          ],
          "leaf_data": {
            "names": [
              "*.webgo24.de",
              "webgo24.de"
            ],
            "subject_dn": "CN=*.webgo24.de",
            "issuer_dn": "C=LV, L=Riga, O=GoGetSSL, CN=GoGetSSL RSA DV CA",
            "pubkey_bit_size": 4096,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "02847f99c5eb49a092d39a190888d176b350ad75238240c865255ea8bc9acd5f",
            "fingerprint": "fec51b31c72111886fc403f1dd686e76e55b6832f3357c92887bde7da192c51b",
            "issuer": {
              "common_name": [
                "GoGetSSL RSA DV CA"
              ],
              "locality": [
                "Riga"
              ],
              "organization": [
                "GoGetSSL"
              ],
              "country": [
                "LV"
              ]
            },
            "subject": {
              "common_name": [
                "*.webgo24.de"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "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",
                "exponent": "AAEAAQ==",
                "length": 512
              },
              "fingerprint": "f06d2ad8baeed59135ed30ac50b0c5ffc24b2b874af03ede29677605b347dc16"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "43cac31ef8e8ba1b4b16b8206e4c0a26c5badb2fc3aa09e90170e41b66c2fd64",
              "subject_dn": "C=LV, L=Riga, O=GoGetSSL, CN=GoGetSSL RSA DV CA",
              "issuer_dn": "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority"
            },
            {
              "fingerprint": "68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b",
              "subject_dn": "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority",
              "issuer_dn": "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "session_ticket": {
          "length": 192,
          "lifetime_hint": 300
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "ccc514751b175866924439bdbb5bba34"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "imap",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE AUTH=PLAIN ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc.  See COPYING for distribution information.\r\n",
      "banner_hashes": [
        "sha256:f220d6f78b241e6834b25c2262b3d86ecd4015b021a74f383935fcfefda53389"
      ],
      "banner_hex": "2a204f4b205b4341504142494c49545920494d4150347265763120554944504c5553204348494c4452454e204e414d455350414345205448524541443d4f5244455245445355424a454354205448524541443d5245464552454e43455320534f52542051554f54412049444c4520415554483d504c41494e2041434c2041434c323d554e494f4e5d20436f75726965722d494d41502072656164792e20436f7079726967687420313939382d3230313120446f75626c6520507265636973696f6e2c20496e632e202053656520434f5059494e4720666f7220646973747269627574696f6e20696e666f726d6174696f6e2e0d0a",
      "certificate": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
      "extended_service_name": "IMAPS",
      "imap": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE AUTH=PLAIN ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc.  See COPYING for distribution information.\r\n"
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "06d10d00006d06d06c06d10d06d06d9674c6b4e623ae36cc2d998e99e2262e",
        "cipher_and_version_fingerprint": "06d10d00006d06d06c06d10d06d06d",
        "tls_extensions_sha256": "9674c6b4e623ae36cc2d998e99e2262e",
        "observed_at": "2023-02-04T15:20:36.487747306Z"
      },
      "observed_at": "2023-02-09T05:19:51.200650295Z",
      "perspective_id": "PERSPECTIVE_ORANGE",
      "port": 993,
      "service_name": "IMAP",
      "source_ip": "167.94.145.60",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_RSA_WITH_AES_128_GCM_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
          "leaf_data": {
            "subject_dn": "[email protected], C=US, ST=NY, L=New York, O=Courier Mail Server, OU=Automatically-generated IMAP SSL key, CN=localhost, [email protected]",
            "issuer_dn": "[email protected], C=US, ST=NY, L=New York, O=Courier Mail Server, OU=Automatically-generated IMAP SSL key, CN=localhost, [email protected]",
            "pubkey_bit_size": 1024,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "0f7515452261d7e60c94f3ba04006bf9194eed2bacf500f044f26d77adecd91f",
            "fingerprint": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
            "issuer": {
              "common_name": [
                "localhost"
              ],
              "locality": [
                "New York"
              ],
              "organization": [
                "Courier Mail Server"
              ],
              "organizational_unit": [
                "Automatically-generated IMAP SSL key"
              ],
              "province": [
                "NY"
              ],
              "country": [
                "US"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "subject": {
              "common_name": [
                "localhost"
              ],
              "locality": [
                "New York"
              ],
              "organization": [
                "Courier Mail Server"
              ],
              "organizational_unit": [
                "Automatically-generated IMAP SSL key"
              ],
              "province": [
                "NY"
              ],
              "country": [
                "US"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "tYo5uEljizdv0d5HVEgAroRigjspoK0G2LDLd9KIxeRphStp9LOSdZNifkE2sdua9ixDK6r8SYm9ehMDI7J+f6k3L4Mr+d+BtwXj398nkf5eKKgn/tjPvLd8+zbFnG8Tjmp9dOCUIiFtjkUpK6JiHAfhFAdTwRaE8a7qQqS6ccs=",
                "exponent": "AAEAAQ==",
                "length": 128
              },
              "fingerprint": "0dd503100a10de217723a6c4dd5957bfd913f536cdb9b53ca8cd30ede0aab66e"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA1-RSA"
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "ccd5709d4a9027ec272e98b9924c36f7"
      },
      "transport_fingerprint": {
        "id": 6,
        "os": "Linux",
        "raw": "14480,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 503 Service Unavailable\r\nServer: Varnish\r\nContent-Type: text/html; charset=utf-8\r\nRetry-After: 5\r\nContent-Length: 418\r\nAccept-Ranges: bytes\r\nDate:  <REDACTED>\r\nX-Varnish: 822492445\r\nAge: 0\r\nVia: 1.1 varnish\r\nConnection: close\r\n",
      "banner_hashes": [
        "sha256:e9a9b648ff8c234857f5cca782f3f377bfb94355ee2510041b5b956a42cbde4c"
      ],
      "banner_hex": "485454502f312e3120353033205365727669636520556e617661696c61626c650d0a5365727665723a205661726e6973680d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d7574662d380d0a52657472792d41667465723a20350d0a436f6e74656e742d4c656e6774683a203431380d0a4163636570742d52616e6765733a2062797465730d0a446174653a20203c52454441435445443e0d0a582d5661726e6973683a203832323439323434350d0a4167653a20300d0a5669613a20312e31207661726e6973680d0a436f6e6e656374696f6e3a20636c6f73650d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://37.17.224.102:6081/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 503,
          "status_reason": "Service Unavailable",
          "headers": {
            "Server": [
              "Varnish"
            ],
            "_encoding": {
              "Server": "DISPLAY_UTF8",
              "Via": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Retry_After": "DISPLAY_UTF8",
              "Accept_Ranges": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "X_Varnish": "DISPLAY_UTF8",
              "Age": "DISPLAY_UTF8"
            },
            "Via": [
              "1.1 varnish"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Retry_After": [
              "5"
            ],
            "Accept_Ranges": [
              "bytes"
            ],
            "Content_Type": [
              "text/html; charset=utf-8"
            ],
            "Content_Length": [
              "418"
            ],
            "Connection": [
              "close"
            ],
            "X_Varnish": [
              "822492445"
            ],
            "Age": [
              "0"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>503 Service Unavailable</title>"
          ],
          "body_size": 418,
          "body": "\n<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\"\n \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\n<html>\n  <head>\n    <title>503 Service Unavailable</title>\n  </head>\n  <body>\n    <h1>Error 503 Service Unavailable</h1>\n    <p>Service Unavailable</p>\n    <h3>Guru Meditation:</h3>\n    <p>XID: 822492445</p>\n    <hr>\n    <p>Varnish cache server</p>\n  </body>\n</html>\n",
          "body_hashes": [
            "sha256:ad41d30195895a115a906b87072e8d3c9cb5a09d10d5d9f9c2f49b97cab1d141",
            "sha1:a78e8f8c2cf3d1a1d1da544e43d6380c5151e978"
          ],
          "body_hash": "sha1:a78e8f8c2cf3d1a1d1da544e43d6380c5151e978",
          "html_title": "503 Service Unavailable"
        },
        "supports_http2": false
      },
      "observed_at": "2023-02-07T21:43:14.281484579Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 6081,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:varnish\\-cache:varnish:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Varnish-cache",
          "product": "Varnish",
          "other": {
            "family": "Varnish"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.248.133.47",
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Germany",
    "country_code": "DE",
    "postal_code": "",
    "timezone": "Europe/Berlin",
    "coordinates": {
      "latitude": 51.2993,
      "longitude": 9.491
    },
    "registered_country": "Germany",
    "registered_country_code": "DE"
  },
  "location_updated_at": "2023-01-31T11:18:02.093584Z",
  "autonomous_system": {
    "asn": 48324,
    "description": "DE-WEBGO www.webgo.de",
    "bgp_prefix": "37.17.224.0/21",
    "name": "DE-WEBGO www.webgo.de",
    "country_code": "DE"
  },
  "autonomous_system_updated_at": "2023-01-27T01:54:21.089474Z",
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
    "part": "o",
    "vendor": "Debian",
    "product": "Linux",
    "version": "7.0",
    "other": {
      "family": "Linux"
    }
  },
  "dns": {
    "names": [
      "website.webgo24.de"
    ],
    "records": {
      "website.webgo24.de": {
        "record_type": "A",
        "resolved_at": "2023-02-05T14:47:28.227930386Z"
      }
    }
  },
  "last_updated_at": "2023-02-09T08:03:14.684Z"
}