46.19.139.138

As of: Apr 18, 2025 5:21pm UTC | Latest
{
  "ip": "46.19.139.138",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 301 Moved Permanently\r\nDate:  <REDACTED>\r\nLocation: https://46.19.139.138/\r\nConnection: close\r\nContent-Type: text/html\r\nContent-Length: 56\r\n",
      "banner_hashes": [
        "sha256:238b7d2b95b1c1ee2faf1f7c1d027aa5387d59d95764c1042130e7b37a5b5c52"
      ],
      "banner_hex": "485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a446174653a20203c52454441435445443e0d0a4c6f636174696f6e3a2068747470733a2f2f34362e31392e3133392e3133382f0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a2035360d0a",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://46.19.139.138/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 301,
          "status_reason": "Moved Permanently",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "56"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Location": [
              "https://46.19.139.138/"
            ],
            "Connection": [
              "close"
            ]
          },
          "body_size": 56,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "<HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>",
          "body_hashes": [
            "sha256:24205eed13dc1d5ba6cd6a4a326a0e6264a49a5b8ed99d450af1119a65baea01",
            "sha1:dcc188320985cb95a175ca127f4ac8f3f5140149",
            "tlsh:f49002c4e72940a964473715963105b15a6c021851df40a54175a704906995725244c0"
          ],
          "body_hash": "sha1:dcc188320985cb95a175ca127f4ac8f3f5140149"
        },
        "supports_http2": false
      },
      "observed_at": "2025-04-18T17:08:27.471049638Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 80,
      "service_name": "HTTP",
      "source_ip": "167.94.146.61",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "\u0002\u0002\u0000\u0000\u0014\u0000\u0000\u0000\u0000\u0000D\u0000\u0000\u0002en\u0000\u0000\u0000\u0000",
      "banner_hashes": [
        "sha256:d6ba38a95a00dcac3a4060c29653b3328f464b2655e838ca55fd616b67276a44"
      ],
      "banner_hex": "0202000014000000000044000002656e00000000",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "SLP",
      "observed_at": "2025-04-18T17:21:41.183762392Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 427,
      "service_name": "SLP",
      "source_ip": "206.168.34.81",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "banner_grab",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "\u0002\u0002\u0000\u0000\u0014\u0000\u0000\u0000\u0000\u0000D\u0000\u0000\u0002en\u0000\u0000\u0000\u0000",
      "banner_hashes": [
        "sha256:d6ba38a95a00dcac3a4060c29653b3328f464b2655e838ca55fd616b67276a44"
      ],
      "banner_hex": "0202000014000000000044000002656e00000000",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "SLP",
      "observed_at": "2025-04-18T12:33:12.240888453Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 427,
      "service_name": "SLP",
      "source_ip": "199.45.154.133",
      "transport_protocol": "UDP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 200 OK\r\nDate:  <REDACTED>\r\nConnection: Keep-Alive\r\nContent-Security-Policy: block-all-mixed-content\r\nContent-Type: text/html\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1\r\nContent-Length: 4201\r\n",
      "banner_hashes": [
        "sha256:6723532e981d3cfd330982aeb4ddeb49ab1445a0a0931a137c2b3135c2d14979"
      ],
      "banner_hex": "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",
      "certificate": "1f51e35fb2e95c30ab7c9fe9068c2550eca08b3d8925b5b344a4cd9c274c7e5f",
      "discovery_method": "PREDICTIVE_METHOD_15",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://46.19.139.138/ui/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 200,
          "status_reason": "OK",
          "headers": {
            "X_Frame_Options": [
              "DENY"
            ],
            "_encoding": {
              "X_Frame_Options": "DISPLAY_UTF8",
              "X_XSS_Protection": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Strict_Transport_Security": "DISPLAY_UTF8",
              "X_Content_Type_Options": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Content_Security_Policy": "DISPLAY_UTF8"
            },
            "X_XSS_Protection": [
              "1"
            ],
            "Content_Length": [
              "4201"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Strict_Transport_Security": [
              "max-age=31536000"
            ],
            "X_Content_Type_Options": [
              "nosniff"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Connection": [
              "Keep-Alive"
            ],
            "Content_Security_Policy": [
              "block-all-mixed-content"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title ng-bind=\"$root.title\"></title>",
            "<meta charset=\"utf-8\">",
            "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">",
            "<meta http-equiv=\"cache-control\" content=\"max-age=0\" />",
            "<meta http-equiv=\"cache-control\" content=\"no-cache\" />",
            "<meta http-equiv=\"expires\" content=\"0\" />",
            "<meta http-equiv=\"expires\" content=\"Tue, 01 Jan 1980 1:00:00 GMT\" />",
            "<meta http-equiv=\"pragma\" content=\"no-cache\" />",
            "<meta name=\"description\" content=\"\">",
            "<meta name=\"viewport\" content=\"\n       width=device-width,\n       initial-scale=0.5001,\n       minimum-scale=1.0001,\n       maximum-scale=5.0001,\n       user-scalable=yes\"/>",
            "<meta name=\"mobile-web-app-capable\" content=\"yes\">",
            "<meta name=\"apple-mobile-web-app-capable\" content=\"yes\" />",
            "<meta name=\"apple-mobile-web-app-status-bar-style\" content=\"black-translucent\" />"
          ],
          "body_size": 4201,
          "body": "<!doctype html>\n<html class=\"no-js vui-layout-html\" ng-app=\"esxUiApp\">\n\n<head>\n    <title ng-bind=\"$root.title\"></title>\n\n    <meta charset=\"utf-8\">\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n    <meta http-equiv=\"cache-control\" content=\"max-age=0\" />\n    <meta http-equiv=\"cache-control\" content=\"no-cache\" />\n    <meta http-equiv=\"expires\" content=\"0\" />\n    <meta http-equiv=\"expires\" content=\"Tue, 01 Jan 1980 1:00:00 GMT\" />\n    <meta http-equiv=\"pragma\" content=\"no-cache\" />\n    <meta name=\"description\" content=\"\">\n\n    <!-- The initial, max and min scale settings -->\n    <meta name=\"viewport\" content=\"\n       width=device-width,\n       initial-scale=0.5001,\n       minimum-scale=1.0001,\n       maximum-scale=5.0001,\n       user-scalable=yes\"/>\n\n    <!-- The following will hide the chrome on mobile Safari and Chrome on Android\n         if the user has added a shortcut to their home screen. -->\n    <meta name=\"mobile-web-app-capable\" content=\"yes\">\n    <meta name=\"apple-mobile-web-app-capable\" content=\"yes\" />\n    <meta name=\"apple-mobile-web-app-status-bar-style\" content=\"black-translucent\" />\n\n    <link rel=\"stylesheet\" href=\"bower_components/vui-bootstrap/css/vui-bootstrap.min.css\" />\n    <link rel=\"stylesheet\" href=\"bower_components/jquery-ui/themes/base/jquery-ui.min.css\" />\n    <link rel=\"stylesheet\" href=\"bower_components/codemirror/lib/codemirror.css\" />\n    <link rel=\"stylesheet\" href=\"bower_components/codemirror/theme/mdn-like.css\" />\n    <link rel=\"stylesheet\" href=\"bower_components/nvd3/build/nv.d3.min.css\" />\n    <link rel=\"stylesheet\" href=\"bower_components/eonasdan-bootstrap-datetimepicker/build/css/bootstrap-datetimepicker.min.css\" />\n    <link rel=\"icon\" type=\"image/x-icon\" href=\"favicon.ico\">\n    <link rel=\"apple-touch-icon\" href=\"apple-touch-icon.png\" />\n\n    <link rel=\"stylesheet\" href=\"./thirdparty/vfeed-custom/vfeed.css\" />\n\n    <!-- build:css(.tmp) styles/main.css -->\n    <link rel=\"stylesheet\" href=\"styles/main.css\">\n    <!-- endbuild -->\n\n    <!-- we use vendor.css to allow partner customizations, normally it is empty -->\n    <link rel=\"stylesheet\" href=\"styles/vendor.css\">\n</head>\n\n<body ng-app=\"esxUiApp\" class=\"base-app-style\">\n    <!--[if lt IE 7]>\n    <p class=\"browsehappy\">\n       You are using an <strong>outdated</strong> browser.\n       Please <a href=\"http://browsehappy.com/\">upgrade your browser</a> to\n       improve your experience.\n    </p>\n    <![endif]-->\n\n    <!-- Add your site or application content here -->\n    <div>\n      <div ui-view></div>\n    </div>\n\n    <!-- Fixes required for electron -->\n    <script>\n        var _loc = String(window.location);\n        if (_loc && _loc.indexOf('file:///') >= 0) {\n            // requireJS has a bit of a crippled exporting mechanism for node, so we need to pull\n            // these objects up into global scope.\n            require('./bower_components/es6-promise/es6-promise.min.js');\n            window.$ = window.jQuery = require('./bower_components/jquery/dist/jquery.min');\n            require('./bower_components/jquery-ui/jquery-ui.min');\n            window.I18n = require('./bower_components/i18n-js/app/assets/javascripts/i18n.js')\n            window.vsphere = require('./thirdparty/vspherejs/index.js')\n            window.ipaddr = require('./bower_components/ipaddr/ipaddr.min.js');\n        }\n    </script>\n    <!-- end electron -->\n\n    <!-- build:js(.) scripts/oldieshim.js -->\n    <!--[if lt IE 9]>\n    <script src=\"bower_components/es5-shim/es5-shim.js\"></script>\n    <script src=\"bower_components/json3/lib/json3.js\"></script>\n    <![endif]-->\n    <!-- endbuild -->\n\n    <script src=\"bower_components/jxon/jxon.min.js\"></script>\n\n    <script>\n      JXON.config({\n         valueKey: 'keyValue',\n         attrKey: 'keyAttributes',\n         attrPrefix: '',\n         lowerCaseTags: true,\n         trueIsempty: true\n      });\n    </script>\n    <script src=\"bower_components/i18n-js/app/assets/javascripts/i18n.js\"></script>\n    <script src=\"bower_components/es6-shim/es6-shim.min.js\"></script>\n\n    <!-- The main entry point for Angular -->\n    <script src=\"bower_components/requirejs/require.js\" data-main=\"scripts/main\"></script>\n</body>\n\n</html>\n",
          "body_hashes": [
            "sha256:e61da463d889f18a91cc480571e79f9c9256c578bea8df166f79329cce5a7639",
            "sha1:50a2b706b26f0cc948d6d45a272b59c6022c2666",
            "tlsh:4381626a0ee0941a21c016a9b7fab413d8c6a497869494a4b48e41bc0fe2bf945e7df4"
          ],
          "body_hash": "sha1:50a2b706b26f0cc948d6d45a272b59c6022c2666"
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "2ad2ad0002ad2ad0002ad2ad2ad2ad755a2cec4b52fb1bce1ac7f1e48c8a7d",
        "cipher_and_version_fingerprint": "2ad2ad0002ad2ad0002ad2ad2ad2ad",
        "tls_extensions_sha256": "755a2cec4b52fb1bce1ac7f1e48c8a7d",
        "observed_at": "2025-04-04T03:22:17.960079369Z"
      },
      "labels": [
        "angularjs",
        "hypervisor",
        "nvd3",
        "requirejs"
      ],
      "observed_at": "2025-04-17T12:18:26.773676024Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "VMware",
          "product": "VMware ESXi Server",
          "other": {
            "family": "VMware ESX/ESXi",
            "device": "Hypervisor"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "part": "h",
          "other": {
            "device": "Hypervisor"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "206.168.34.75",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "1f51e35fb2e95c30ab7c9fe9068c2550eca08b3d8925b5b344a4cd9c274c7e5f",
          "leaf_data": {
            "names": [
              "localhost.localdomain"
            ],
            "subject_dn": "C=US, ST=California, L=Palo Alto, O=VMware\\, Inc, OU=VMware ESX Server Default Certificate, [email protected], CN=localhost.localdomain, unstructuredName=1743529653\\,564d7761726520496e632e",
            "issuer_dn": "O=VMware Installer",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "923d28f9ff3df707fdb846d58b1bfb472fc62b74059be1b4dd8d8d409b296e04",
            "fingerprint": "1f51e35fb2e95c30ab7c9fe9068c2550eca08b3d8925b5b344a4cd9c274c7e5f",
            "issuer": {
              "organization": [
                "VMware Installer"
              ]
            },
            "subject": {
              "common_name": [
                "localhost.localdomain"
              ],
              "locality": [
                "Palo Alto"
              ],
              "organization": [
                "VMware, Inc"
              ],
              "organizational_unit": [
                "VMware ESX Server Default Certificate"
              ],
              "province": [
                "California"
              ],
              "country": [
                "US"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "kAfXXk/4nWYQyIn9aUOPhMnrloWOCk19Y0R4syl6ejh8L+X1JmPV4gqx8eH0uJeHbD9nNdB/x8qpaBTMcYVs0F7gGG8JS38mZrZY1Gy1fykoNzsBXThLX1Bc2g9FpiUAxLWKFtO4Y/z03Knl3a/iYdUFShecm6bdaW3vzcmE7snj/xGJ8WGV6qQB1yrkP4wN0/Eewsu67BaXHaB+l7FlT2LiC6Jnwz+N5jK6snz69Yns98thtiahTkikFz5Txx18Iu6j/mEZdSPaCnTOX8dNFwgQY3lA39SossaWD+YspeIq1xI0Iq706D+7XgBaSV3nYNwzkoPo4HvmVOxa11LSKQ==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "3d4b8e2aa88769009984f56f438eac60aac34868531ca0e71b28045231a93360"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          }
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "0debd3853f330c574b05e0b6d882dc27",
        "ja4s": "t120200_c030_344b4dce5a52",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "0debd3853f330c574b05e0b6d882dc27",
            "ja4s": "t120200_c030_344b4dce5a52"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "smtp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 VMware Authentication Daemon Version 1.10: SSL Required, ServerDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , VMXARGS supported, NFCSSL supported/t\r\n",
      "banner_hashes": [
        "sha256:43b1f8fa13ae2b04fcd1f141a6ebbbbe9b8c854566eb4d32bc54c746d104d4cc"
      ],
      "banner_hex": "32323020564d776172652041757468656e7469636174696f6e204461656d6f6e2056657273696f6e20312e31303a2053534c2052657175697265642c205365727665724461656d6f6e50726f746f636f6c3a534f41502c204d4b53446973706c617950726f746f636f6c3a564e43202c20564d584152475320737570706f727465642c204e464353534c20737570706f727465642f740d0a",
      "discovery_method": "PREDICTIVE_METHOD_15",
      "extended_service_name": "SMTP",
      "labels": [
        "email"
      ],
      "observed_at": "2025-04-18T16:42:45.342048272Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 902,
      "service_name": "SMTP",
      "smtp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "220 VMware Authentication Daemon Version 1.10: SSL Required, ServerDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , VMXARGS supported, NFCSSL supported/t\r\n"
      },
      "source_ip": "167.94.138.192",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 202 Accepted\r\nServer: gSOAP/2.8\r\nContent-Type: text/xml\r\nContent-Length: 0\r\nConnection: close\r\n",
      "banner_hashes": [
        "sha256:1c8576b88199171c361e47076940461e87835f03fe6b3ea07bfc4bae627cfdda"
      ],
      "banner_hex": "485454502f312e31203230322041636365707465640d0a5365727665723a2067534f41502f322e380d0a436f6e74656e742d547970653a20746578742f786d6c0d0a436f6e74656e742d4c656e6774683a20300d0a436f6e6e656374696f6e3a20636c6f73650d0a",
      "certificate": "1f51e35fb2e95c30ab7c9fe9068c2550eca08b3d8925b5b344a4cd9c274c7e5f",
      "discovery_method": "PREDICTIVE_METHOD_15",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://46.19.139.138:9080/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 202,
          "status_reason": "Accepted",
          "headers": {
            "Server": [
              "gSOAP/2.8"
            ],
            "_encoding": {
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "0"
            ],
            "Content_Type": [
              "text/xml"
            ],
            "Connection": [
              "close"
            ]
          },
          "body_size": 0
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "21d14d00021d21d00021d14d21d21dedc34fa25010764f91c4fbc0f8ced721",
        "cipher_and_version_fingerprint": "21d14d00021d21d00021d14d21d21d",
        "tls_extensions_sha256": "edc34fa25010764f91c4fbc0f8ced721",
        "observed_at": "2025-04-04T03:31:10.111426331Z"
      },
      "labels": [
        "hypervisor"
      ],
      "observed_at": "2025-04-18T16:38:28.005789265Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 9080,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:genivia:gsoap:2.8:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Genivia",
          "product": "gSOAP",
          "version": "2.8",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "VMware",
          "product": "VMware ESXi Server",
          "other": {
            "family": "VMware ESX/ESXi",
            "device": "Hypervisor"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "part": "h",
          "other": {
            "device": "Hypervisor"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.187",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "1f51e35fb2e95c30ab7c9fe9068c2550eca08b3d8925b5b344a4cd9c274c7e5f",
          "chain_fps_sha_256": [
            "f271f1a2483a5009f9175b1c2d6fa0fc96b1dcb7be09931eac04cf0da2dda99f"
          ],
          "leaf_data": {
            "names": [
              "localhost.localdomain"
            ],
            "subject_dn": "C=US, ST=California, L=Palo Alto, O=VMware\\, Inc, OU=VMware ESX Server Default Certificate, [email protected], CN=localhost.localdomain, unstructuredName=1743529653\\,564d7761726520496e632e",
            "issuer_dn": "O=VMware Installer",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "923d28f9ff3df707fdb846d58b1bfb472fc62b74059be1b4dd8d8d409b296e04",
            "fingerprint": "1f51e35fb2e95c30ab7c9fe9068c2550eca08b3d8925b5b344a4cd9c274c7e5f",
            "issuer": {
              "organization": [
                "VMware Installer"
              ]
            },
            "subject": {
              "common_name": [
                "localhost.localdomain"
              ],
              "locality": [
                "Palo Alto"
              ],
              "organization": [
                "VMware, Inc"
              ],
              "organizational_unit": [
                "VMware ESX Server Default Certificate"
              ],
              "province": [
                "California"
              ],
              "country": [
                "US"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "kAfXXk/4nWYQyIn9aUOPhMnrloWOCk19Y0R4syl6ejh8L+X1JmPV4gqx8eH0uJeHbD9nNdB/x8qpaBTMcYVs0F7gGG8JS38mZrZY1Gy1fykoNzsBXThLX1Bc2g9FpiUAxLWKFtO4Y/z03Knl3a/iYdUFShecm6bdaW3vzcmE7snj/xGJ8WGV6qQB1yrkP4wN0/Eewsu67BaXHaB+l7FlT2LiC6Jnwz+N5jK6snz69Yns98thtiahTkikFz5Txx18Iu6j/mEZdSPaCnTOX8dNFwgQY3lA39SossaWD+YspeIq1xI0Iq706D+7XgBaSV3nYNwzkoPo4HvmVOxa11LSKQ==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "3d4b8e2aa88769009984f56f438eac60aac34868531ca0e71b28045231a93360"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "f271f1a2483a5009f9175b1c2d6fa0fc96b1dcb7be09931eac04cf0da2dda99f",
              "subject_dn": "O=VMware Installer",
              "issuer_dn": "O=VMware Installer"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "303951d4c50efb2e991652225a6f02b1",
        "ja4s": "t120200_c02f_344b4dce5a52",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "303951d4c50efb2e991652225a6f02b1",
            "ja4s": "t120200_c02f_344b4dce5a52"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Switzerland",
    "country_code": "CH",
    "city": "Lugano",
    "postal_code": "6900",
    "timezone": "Europe/Zurich",
    "province": "Ticino",
    "coordinates": {
      "latitude": 46.01008,
      "longitude": 8.96004
    }
  },
  "location_updated_at": "2025-04-17T12:18:12.714590122Z",
  "autonomous_system": {
    "asn": 51852,
    "description": "PLI-AS",
    "bgp_prefix": "46.19.136.0/21",
    "name": "PLI-AS",
    "country_code": "PA"
  },
  "autonomous_system_updated_at": "2025-04-17T12:18:12.714663096Z",
  "whois": {
    "network": {
      "handle": "CLIENTID7608",
      "name": "CLIENTID7608",
      "cidrs": [
        "46.19.139.136/30"
      ],
      "created": "2013-07-30T00:00:00Z",
      "updated": "2013-07-30T00:00:00Z"
    },
    "organization": {
      "handle": "ORG-PLI2-RIPE",
      "name": "Private Layer INC",
      "address": "Panama City\\n00000\\nPanama\\nPANAMA",
      "abuse_contacts": [
        {
          "handle": "AR15077-RIPE",
          "name": "Abuse-C Role",
          "email": "[email protected]"
        }
      ]
    }
  },
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*",
    "part": "o",
    "vendor": "VMware",
    "product": "VMware ESXi Server",
    "other": {
      "family": "VMware ESX/ESXi",
      "device": "Hypervisor"
    }
  },
  "dns": {
    "reverse_dns": {
      "names": [
        "hostedby.privatelayer.com"
      ],
      "resolved_at": "2025-04-08T13:27:33.137904345Z"
    }
  },
  "last_updated_at": "2025-04-18T17:21:58.175Z",
  "labels": [
    "angularjs",
    "email",
    "hypervisor",
    "nvd3",
    "requirejs"
  ]
}