37.17.224.102
As of: Feb 09, 2023 8:03am UTC |
Latest
{
"ip": "37.17.224.102",
"services": [
{
"_decoded": "ssh",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u7",
"banner_hashes": [
"sha256:7255311fa54230bc590914924cc13698192087e4404791f7b7d98ce9adfabb44"
],
"banner_hex": "5353482d322e302d4f70656e5353485f362e3070312044656269616e2d342b646562377537",
"extended_service_name": "SSH",
"observed_at": "2023-02-08T17:59:54.716309080Z",
"perspective_id": "PERSPECTIVE_TELIA",
"port": 22,
"service_name": "SSH",
"software": [
{
"product": "openssh",
"other": {
"comment": "Debian-4+deb7u7"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:openbsd:openssh:6.0p1:*:*:*:*:*:*:*",
"part": "a",
"vendor": "OpenBSD",
"product": "OpenSSH",
"version": "6.0p1",
"other": {
"family": "OpenSSH"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Debian",
"product": "Linux",
"version": "7.0",
"other": {
"family": "Linux"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.146.58",
"ssh": {
"endpoint_id": {
"_encoding": {
"raw": "DISPLAY_UTF8"
},
"raw": "SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u7",
"protocol_version": "2.0",
"software_version": "OpenSSH_6.0p1",
"comment": "Debian-4+deb7u7"
},
"kex_init_message": {
"kex_algorithms": [
"ecdh-sha2-nistp256",
"ecdh-sha2-nistp384",
"ecdh-sha2-nistp521",
"diffie-hellman-group-exchange-sha256",
"diffie-hellman-group-exchange-sha1",
"diffie-hellman-group14-sha1",
"diffie-hellman-group1-sha1"
],
"host_key_algorithms": [
"ssh-rsa",
"ssh-dss"
],
"client_to_server_ciphers": [
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"arcfour256",
"arcfour128",
"aes128-cbc",
"3des-cbc",
"blowfish-cbc",
"cast128-cbc",
"aes192-cbc",
"aes256-cbc",
"arcfour",
"[email protected]"
],
"server_to_client_ciphers": [
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"arcfour256",
"arcfour128",
"aes128-cbc",
"3des-cbc",
"blowfish-cbc",
"cast128-cbc",
"aes192-cbc",
"aes256-cbc",
"arcfour",
"[email protected]"
],
"client_to_server_macs": [
"hmac-md5",
"hmac-sha1",
"[email protected]",
"hmac-sha2-256",
"hmac-sha2-256-96",
"hmac-sha2-512",
"hmac-sha2-512-96",
"hmac-ripemd160",
"[email protected]",
"hmac-sha1-96",
"hmac-md5-96"
],
"server_to_client_macs": [
"hmac-md5",
"hmac-sha1",
"[email protected]",
"hmac-sha2-256",
"hmac-sha2-256-96",
"hmac-sha2-512",
"hmac-sha2-512-96",
"hmac-ripemd160",
"[email protected]",
"hmac-sha1-96",
"hmac-md5-96"
],
"client_to_server_compression": [
"none",
"[email protected]"
],
"server_to_client_compression": [
"none",
"[email protected]"
],
"first_kex_follows": false
},
"algorithm_selection": {
"kex_algorithm": "ecdh-sha2-nistp256",
"host_key_algorithm": "ssh-rsa",
"client_to_server_alg_group": {
"cipher": "aes128-ctr",
"mac": "hmac-sha2-256",
"compression": "none"
},
"server_to_client_alg_group": {
"cipher": "aes128-ctr",
"mac": "hmac-sha2-256",
"compression": "none"
}
},
"server_host_key": {
"fingerprint_sha256": "6a9bd8f0d7a204b79de3e0a7ee0d8acb79bd2dfd0ca239640e43424cb17675d2",
"rsa_public_key": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "uvY9M4XJFvtwx2hJtL4ryGf7QpbBcHnoD6FEj3gBr16cv3RZh3VG1cQAs5mZNQUXwfWwv9bDd6+fKFpq605X6QhLK1UspBQdrfPzCkdi/w031+08778dJI2+bm/cHuNB0jSAFnSb10wSxqr4CovW9NfSjHLypZ2D3VOeSqe0iN96Cm5qRe4jzohs9tMx0MyF95es5RoIYGn6ILRmNgfPLmxng4mONwnsUSC992agX9pzsHTIxWrF0aVUyZN2LjBECGN0yWBK+nuKsda9OZ1MYoW1L5QA0j1A+pbZU82gcYtzuuYmyt5+6B5tCuDHnzXG5BFmX37d7SNyWR3oijcvtQ==",
"exponent": "AAEAAQ==",
"length": 2048
}
},
"hassh_fingerprint": "ce3c327f37ea2ec21f317fbc3fd1ea43"
},
"transport_fingerprint": {
"id": 6,
"os": "Linux",
"raw": "14480,64,true,MSTNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nDate: <REDACTED>\r\nServer: Apache\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\nLast-Modified: Wed, 08 May 2013 09:59:09 GMT\r\nETag: \"3c820d4-b1-4dc31fc2dae20\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Frame-Options: sameorigin\r\nContent-Length: 146\r\nContent-Type: text/html\r\n",
"banner_hashes": [
"sha256:718322e46851cf26c681bd43c5863de0bbe1707c9f688097d67becbcee8a2a76"
],
"banner_hex": "485454502f312e3120323030204f4b0d0a446174653a20203c52454441435445443e0d0a5365727665723a204170616368650d0a5374726963742d5472616e73706f72742d53656375726974793a206d61782d6167653d303b20696e636c756465537562446f6d61696e733b207072656c6f61640d0a4c6173742d4d6f6469666965643a205765642c203038204d617920323031332030393a35393a303920474d540d0a455461673a2022336338323064342d62312d34646333316663326461653230220d0a4163636570742d52616e6765733a2062797465730d0a566172793a204163636570742d456e636f64696e670d0a436f6e74656e742d456e636f64696e673a20677a69700d0a582d4672616d652d4f7074696f6e733a2073616d656f726967696e0d0a436f6e74656e742d4c656e6774683a203134360d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://37.17.224.102/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Last_Modified": [
"Wed, 08 May 2013 09:59:09 GMT"
],
"_encoding": {
"Last_Modified": "DISPLAY_UTF8",
"Vary": "DISPLAY_UTF8",
"Etag": "DISPLAY_UTF8",
"Strict_Transport_Security": "DISPLAY_UTF8",
"X_Frame_Options": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Accept_Ranges": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8"
},
"Vary": [
"Accept-Encoding"
],
"Etag": [
"\"3c820d4-b1-4dc31fc2dae20\""
],
"Strict_Transport_Security": [
"max-age=0; includeSubDomains; preload"
],
"X_Frame_Options": [
"sameorigin"
],
"Content_Type": [
"text/html"
],
"Accept_Ranges": [
"bytes"
],
"Date": [
"<REDACTED>"
],
"Server": [
"Apache"
]
},
"body_size": 177,
"_encoding": {
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8"
},
"body": "<html><body><h1>It works!</h1>\n<p>This is the default web page for this server.</p>\n<p>The web server software is running but no content has been added, yet.</p>\n</body></html>\n",
"body_hashes": [
"sha256:94850c4fd27e680ab5ea0800d6af86e58f42b6e2a1e20d7eca1febc1f2118c13",
"sha1:26da7547c4ac841fd1bde1dd11fc24b1494b6f7a"
],
"body_hash": "sha1:26da7547c4ac841fd1bde1dd11fc24b1494b6f7a"
},
"supports_http2": false
},
"observed_at": "2023-02-08T09:28:55.317186702Z",
"perspective_id": "PERSPECTIVE_TELIA",
"port": 80,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Apache",
"product": "HTTPD",
"other": {
"family": "Apache"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.146.58",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "ntp",
"extended_service_name": "NTP",
"ntp": {
"get_time_header": {
"version": 3,
"mode": 4,
"stratum": 3,
"poll": 3,
"precision": -23,
"_encoding": {
"reference_id": "DISPLAY_UTF8"
},
"reference_id": "\ufffdD)\ufffd",
"leap_indicator": 0
}
},
"observed_at": "2023-02-08T18:45:04.481757500Z",
"perspective_id": "PERSPECTIVE_TATA",
"port": 123,
"service_name": "NTP",
"source_ip": "167.94.138.63",
"transport_protocol": "UDP",
"truncated": false
},
{
"_decoded": "imap",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc. See COPYING for distribution information.\r\n",
"banner_hashes": [
"sha256:0a27112c93e30becba89ea2b9cba2fd1aa90533110a43f311f82a076e1edca17"
],
"banner_hex": "2a204f4b205b4341504142494c49545920494d4150347265763120554944504c5553204348494c4452454e204e414d455350414345205448524541443d4f5244455245445355424a454354205448524541443d5245464552454e43455320534f52542051554f54412049444c452041434c2041434c323d554e494f4e205354415254544c535d20436f75726965722d494d41502072656164792e20436f7079726967687420313939382d3230313120446f75626c6520507265636973696f6e2c20496e632e202053656520434f5059494e4720666f7220646973747269627574696f6e20696e666f726d6174696f6e2e0d0a",
"certificate": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
"extended_service_name": "IMAPS",
"imap": {
"_encoding": {
"banner": "DISPLAY_UTF8"
},
"banner": "* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc. See COPYING for distribution information.\r\n",
"start_tls": "a001 OK Begin SSL/TLS negotiation now.\r\n"
},
"observed_at": "2023-02-08T18:11:51.841539111Z",
"perspective_id": "PERSPECTIVE_NTT",
"port": 143,
"service_name": "IMAP",
"source_ip": "167.248.133.60",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_RSA_WITH_AES_128_GCM_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
"leaf_data": {
"subject_dn": "[email protected], C=US, ST=NY, L=New York, O=Courier Mail Server, OU=Automatically-generated IMAP SSL key, CN=localhost, [email protected]",
"issuer_dn": "[email protected], C=US, ST=NY, L=New York, O=Courier Mail Server, OU=Automatically-generated IMAP SSL key, CN=localhost, [email protected]",
"pubkey_bit_size": 1024,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "0f7515452261d7e60c94f3ba04006bf9194eed2bacf500f044f26d77adecd91f",
"fingerprint": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
"issuer": {
"common_name": [
"localhost"
],
"locality": [
"New York"
],
"organization": [
"Courier Mail Server"
],
"organizational_unit": [
"Automatically-generated IMAP SSL key"
],
"province": [
"NY"
],
"country": [
"US"
],
"email_address": [
"[email protected]"
]
},
"subject": {
"common_name": [
"localhost"
],
"locality": [
"New York"
],
"organization": [
"Courier Mail Server"
],
"organizational_unit": [
"Automatically-generated IMAP SSL key"
],
"province": [
"NY"
],
"country": [
"US"
],
"email_address": [
"[email protected]"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "tYo5uEljizdv0d5HVEgAroRigjspoK0G2LDLd9KIxeRphStp9LOSdZNifkE2sdua9ixDK6r8SYm9ehMDI7J+f6k3L4Mr+d+BtwXj398nkf5eKKgn/tjPvLd8+zbFnG8Tjmp9dOCUIiFtjkUpK6JiHAfhFAdTwRaE8a7qQqS6ccs=",
"exponent": "AAEAAQ==",
"length": 128
},
"fingerprint": "0dd503100a10de217723a6c4dd5957bfd913f536cdb9b53ca8cd30ede0aab66e"
},
"signature": {
"self_signed": true,
"signature_algorithm": "SHA1-RSA"
}
}
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "ccd5709d4a9027ec272e98b9924c36f7"
},
"transport_fingerprint": {
"id": 6,
"os": "Linux",
"raw": "14480,64,true,MSTNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 301 Moved Permanently\r\nDate: <REDACTED>\r\nServer: Apache\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\nLocation: https://www.webgo.de/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 189\r\nContent-Type: text/html; charset=iso-8859-1\r\n",
"banner_hashes": [
"sha256:f7059a42146e30c2e6f486bddfb695600c2a0e74bee832afce9ba5d2d29781e0"
],
"banner_hex": "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",
"certificate": "fec51b31c72111886fc403f1dd686e76e55b6832f3357c92887bde7da192c51b",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://37.17.224.102/",
"headers": {
"Accept": [
"*/*"
],
"_encoding": {
"Accept": "DISPLAY_UTF8",
"User_Agent": "DISPLAY_UTF8"
},
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 301,
"status_reason": "Moved Permanently",
"headers": {
"Content_Type": [
"text/html; charset=iso-8859-1"
],
"_encoding": {
"Content_Type": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Strict_Transport_Security": "DISPLAY_UTF8",
"Vary": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Location": "DISPLAY_UTF8"
},
"Date": [
"<REDACTED>"
],
"Strict_Transport_Security": [
"max-age=0; includeSubDomains; preload"
],
"Vary": [
"Accept-Encoding"
],
"Server": [
"Apache"
],
"Location": [
"https://www.webgo.de/"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>301 Moved Permanently</title>"
],
"body_size": 229,
"body": "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>301 Moved Permanently</title>\n</head><body>\n<h1>Moved Permanently</h1>\n<p>The document has moved <a href=\"https://www.webgo.de/\">here</a>.</p>\n</body></html>\n",
"body_hashes": [
"sha256:72cb0bb73e97a4443199c7ad7ee9764ad7eb91daf5ab5c5114e3a43214903dd9",
"sha1:c763b2a4074527e98776068f0f54e9d4a76dbf6e"
],
"body_hash": "sha1:c763b2a4074527e98776068f0f54e9d4a76dbf6e",
"html_title": "301 Moved Permanently"
},
"supports_http2": false
},
"observed_at": "2023-02-08T18:52:19.689984978Z",
"perspective_id": "PERSPECTIVE_ORANGE",
"port": 443,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Apache",
"product": "HTTPD",
"other": {
"family": "Apache"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.145.60",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "fec51b31c72111886fc403f1dd686e76e55b6832f3357c92887bde7da192c51b",
"chain_fps_sha_256": [
"43cac31ef8e8ba1b4b16b8206e4c0a26c5badb2fc3aa09e90170e41b66c2fd64",
"68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b"
],
"leaf_data": {
"names": [
"*.webgo24.de",
"webgo24.de"
],
"subject_dn": "CN=*.webgo24.de",
"issuer_dn": "C=LV, L=Riga, O=GoGetSSL, CN=GoGetSSL RSA DV CA",
"pubkey_bit_size": 4096,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "02847f99c5eb49a092d39a190888d176b350ad75238240c865255ea8bc9acd5f",
"fingerprint": "fec51b31c72111886fc403f1dd686e76e55b6832f3357c92887bde7da192c51b",
"issuer": {
"common_name": [
"GoGetSSL RSA DV CA"
],
"locality": [
"Riga"
],
"organization": [
"GoGetSSL"
],
"country": [
"LV"
]
},
"subject": {
"common_name": [
"*.webgo24.de"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "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",
"exponent": "AAEAAQ==",
"length": 512
},
"fingerprint": "f06d2ad8baeed59135ed30ac50b0c5ffc24b2b874af03ede29677605b347dc16"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "43cac31ef8e8ba1b4b16b8206e4c0a26c5badb2fc3aa09e90170e41b66c2fd64",
"subject_dn": "C=LV, L=Riga, O=GoGetSSL, CN=GoGetSSL RSA DV CA",
"issuer_dn": "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority"
},
{
"fingerprint": "68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b",
"subject_dn": "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority",
"issuer_dn": "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"session_ticket": {
"length": 192,
"lifetime_hint": 300
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "ccc514751b175866924439bdbb5bba34"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "imap",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE AUTH=PLAIN ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc. See COPYING for distribution information.\r\n",
"banner_hashes": [
"sha256:f220d6f78b241e6834b25c2262b3d86ecd4015b021a74f383935fcfefda53389"
],
"banner_hex": "2a204f4b205b4341504142494c49545920494d4150347265763120554944504c5553204348494c4452454e204e414d455350414345205448524541443d4f5244455245445355424a454354205448524541443d5245464552454e43455320534f52542051554f54412049444c4520415554483d504c41494e2041434c2041434c323d554e494f4e5d20436f75726965722d494d41502072656164792e20436f7079726967687420313939382d3230313120446f75626c6520507265636973696f6e2c20496e632e202053656520434f5059494e4720666f7220646973747269627574696f6e20696e666f726d6174696f6e2e0d0a",
"certificate": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
"extended_service_name": "IMAPS",
"imap": {
"_encoding": {
"banner": "DISPLAY_UTF8"
},
"banner": "* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE AUTH=PLAIN ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2011 Double Precision, Inc. See COPYING for distribution information.\r\n"
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "06d10d00006d06d06c06d10d06d06d9674c6b4e623ae36cc2d998e99e2262e",
"cipher_and_version_fingerprint": "06d10d00006d06d06c06d10d06d06d",
"tls_extensions_sha256": "9674c6b4e623ae36cc2d998e99e2262e",
"observed_at": "2023-02-04T15:20:36.487747306Z"
},
"observed_at": "2023-02-09T05:19:51.200650295Z",
"perspective_id": "PERSPECTIVE_ORANGE",
"port": 993,
"service_name": "IMAP",
"source_ip": "167.94.145.60",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_RSA_WITH_AES_128_GCM_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
"leaf_data": {
"subject_dn": "[email protected], C=US, ST=NY, L=New York, O=Courier Mail Server, OU=Automatically-generated IMAP SSL key, CN=localhost, [email protected]",
"issuer_dn": "[email protected], C=US, ST=NY, L=New York, O=Courier Mail Server, OU=Automatically-generated IMAP SSL key, CN=localhost, [email protected]",
"pubkey_bit_size": 1024,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "0f7515452261d7e60c94f3ba04006bf9194eed2bacf500f044f26d77adecd91f",
"fingerprint": "c6aa63b651f5b4ef9723b6cdc4ea16605987f049b7d66317d3f668aa765327d7",
"issuer": {
"common_name": [
"localhost"
],
"locality": [
"New York"
],
"organization": [
"Courier Mail Server"
],
"organizational_unit": [
"Automatically-generated IMAP SSL key"
],
"province": [
"NY"
],
"country": [
"US"
],
"email_address": [
"[email protected]"
]
},
"subject": {
"common_name": [
"localhost"
],
"locality": [
"New York"
],
"organization": [
"Courier Mail Server"
],
"organizational_unit": [
"Automatically-generated IMAP SSL key"
],
"province": [
"NY"
],
"country": [
"US"
],
"email_address": [
"[email protected]"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "tYo5uEljizdv0d5HVEgAroRigjspoK0G2LDLd9KIxeRphStp9LOSdZNifkE2sdua9ixDK6r8SYm9ehMDI7J+f6k3L4Mr+d+BtwXj398nkf5eKKgn/tjPvLd8+zbFnG8Tjmp9dOCUIiFtjkUpK6JiHAfhFAdTwRaE8a7qQqS6ccs=",
"exponent": "AAEAAQ==",
"length": 128
},
"fingerprint": "0dd503100a10de217723a6c4dd5957bfd913f536cdb9b53ca8cd30ede0aab66e"
},
"signature": {
"self_signed": true,
"signature_algorithm": "SHA1-RSA"
}
}
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "ccd5709d4a9027ec272e98b9924c36f7"
},
"transport_fingerprint": {
"id": 6,
"os": "Linux",
"raw": "14480,64,true,MSTNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 503 Service Unavailable\r\nServer: Varnish\r\nContent-Type: text/html; charset=utf-8\r\nRetry-After: 5\r\nContent-Length: 418\r\nAccept-Ranges: bytes\r\nDate: <REDACTED>\r\nX-Varnish: 822492445\r\nAge: 0\r\nVia: 1.1 varnish\r\nConnection: close\r\n",
"banner_hashes": [
"sha256:e9a9b648ff8c234857f5cca782f3f377bfb94355ee2510041b5b956a42cbde4c"
],
"banner_hex": "485454502f312e3120353033205365727669636520556e617661696c61626c650d0a5365727665723a205661726e6973680d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d7574662d380d0a52657472792d41667465723a20350d0a436f6e74656e742d4c656e6774683a203431380d0a4163636570742d52616e6765733a2062797465730d0a446174653a20203c52454441435445443e0d0a582d5661726e6973683a203832323439323434350d0a4167653a20300d0a5669613a20312e31207661726e6973680d0a436f6e6e656374696f6e3a20636c6f73650d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://37.17.224.102:6081/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 503,
"status_reason": "Service Unavailable",
"headers": {
"Server": [
"Varnish"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Via": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Retry_After": "DISPLAY_UTF8",
"Accept_Ranges": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"X_Varnish": "DISPLAY_UTF8",
"Age": "DISPLAY_UTF8"
},
"Via": [
"1.1 varnish"
],
"Date": [
"<REDACTED>"
],
"Retry_After": [
"5"
],
"Accept_Ranges": [
"bytes"
],
"Content_Type": [
"text/html; charset=utf-8"
],
"Content_Length": [
"418"
],
"Connection": [
"close"
],
"X_Varnish": [
"822492445"
],
"Age": [
"0"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>503 Service Unavailable</title>"
],
"body_size": 418,
"body": "\n<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\"\n \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\n<html>\n <head>\n <title>503 Service Unavailable</title>\n </head>\n <body>\n <h1>Error 503 Service Unavailable</h1>\n <p>Service Unavailable</p>\n <h3>Guru Meditation:</h3>\n <p>XID: 822492445</p>\n <hr>\n <p>Varnish cache server</p>\n </body>\n</html>\n",
"body_hashes": [
"sha256:ad41d30195895a115a906b87072e8d3c9cb5a09d10d5d9f9c2f49b97cab1d141",
"sha1:a78e8f8c2cf3d1a1d1da544e43d6380c5151e978"
],
"body_hash": "sha1:a78e8f8c2cf3d1a1d1da544e43d6380c5151e978",
"html_title": "503 Service Unavailable"
},
"supports_http2": false
},
"observed_at": "2023-02-07T21:43:14.281484579Z",
"perspective_id": "PERSPECTIVE_NTT",
"port": 6081,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:varnish\\-cache:varnish:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Varnish-cache",
"product": "Varnish",
"other": {
"family": "Varnish"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.248.133.47",
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "Europe",
"country": "Germany",
"country_code": "DE",
"postal_code": "",
"timezone": "Europe/Berlin",
"coordinates": {
"latitude": 51.2993,
"longitude": 9.491
},
"registered_country": "Germany",
"registered_country_code": "DE"
},
"location_updated_at": "2023-01-31T11:18:02.093584Z",
"autonomous_system": {
"asn": 48324,
"description": "DE-WEBGO www.webgo.de",
"bgp_prefix": "37.17.224.0/21",
"name": "DE-WEBGO www.webgo.de",
"country_code": "DE"
},
"autonomous_system_updated_at": "2023-01-27T01:54:21.089474Z",
"operating_system": {
"uniform_resource_identifier": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Debian",
"product": "Linux",
"version": "7.0",
"other": {
"family": "Linux"
}
},
"dns": {
"names": [
"website.webgo24.de"
],
"records": {
"website.webgo24.de": {
"record_type": "A",
"resolved_at": "2023-02-05T14:47:28.227930386Z"
}
}
},
"last_updated_at": "2023-02-09T08:03:14.684Z"
}