65.108.233.120

As of: Feb 24, 2024 11:56am UTC | Latest
{
  "ip": "65.108.233.120",
  "services": [
    {
      "_decoded": "ftp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\r\n220-You are user number 1 of 50 allowed.\r\n220-Local time is now 12:09. Server port: 21.\r\n220-This is a private system - No anonymous login\r\n220-IPv6 connections are also welcome on this server.\r\n220 You will be disconnected after 15 minutes of inactivity.\r\n",
      "banner_hashes": [
        "sha256:2cfbfdb185ab4d115151b0d614d71214f3007fbcee11c03d9a49698b560581c9"
      ],
      "banner_hex": "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",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "FTPes",
      "ftp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "auth_tls_response": "DISPLAY_UTF8"
        },
        "banner": "220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\r\n220-You are user number 1 of 50 allowed.\r\n220-Local time is now 12:09. Server port: 21.\r\n220-This is a private system - No anonymous login\r\n220-IPv6 connections are also welcome on this server.\r\n220 You will be disconnected after 15 minutes of inactivity.\r\n",
        "auth_tls_response": "234 AUTH TLS OK.\r\n",
        "status_code": 220,
        "status_meaning": "Service ready for new user.",
        "implicit_tls": false
      },
      "labels": [
        "file-sharing"
      ],
      "observed_at": "2024-02-24T11:09:48.993825814Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 21,
      "service_name": "FTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:pureftpd:pure\\-ftpd:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "PureFTPd",
          "product": "Pure-FTPd",
          "other": {
            "family": "Pure-FTPd"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "product": "pureftpd",
          "other": {
            "config": "[privsep] [TLS"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.213",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036"
      },
      "transport_fingerprint": {
        "id": 72,
        "os": "Ubuntu / Debian / CentOS",
        "raw": "28960,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "ssh",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "SSH-2.0-OpenSSH_8.0",
      "banner_hashes": [
        "sha256:2fa65f39c579f8943b13b6208b128f8a97dc339255bac4cf79a0d6a5cd4e6b54"
      ],
      "banner_hex": "5353482d322e302d4f70656e5353485f382e30",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "SSH",
      "labels": [
        "remote-access"
      ],
      "observed_at": "2024-02-24T06:00:57.565251548Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 22,
      "service_name": "SSH",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:openbsd:openssh:8.0:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "OpenBSD",
          "product": "OpenSSH",
          "version": "8.0",
          "other": {
            "family": "OpenSSH"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.56",
      "ssh": {
        "endpoint_id": {
          "_encoding": {
            "raw": "DISPLAY_UTF8"
          },
          "raw": "SSH-2.0-OpenSSH_8.0",
          "protocol_version": "2.0",
          "software_version": "OpenSSH_8.0"
        },
        "kex_init_message": {
          "kex_algorithms": [
            "curve25519-sha256",
            "[email protected]",
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "diffie-hellman-group-exchange-sha256",
            "diffie-hellman-group14-sha256",
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group-exchange-sha1",
            "diffie-hellman-group14-sha1"
          ],
          "host_key_algorithms": [
            "rsa-sha2-512",
            "rsa-sha2-256",
            "ssh-rsa",
            "ecdsa-sha2-nistp256",
            "ssh-ed25519"
          ],
          "client_to_server_ciphers": [
            "[email protected]",
            "[email protected]",
            "aes256-ctr",
            "aes256-cbc",
            "[email protected]",
            "aes128-ctr",
            "aes128-cbc"
          ],
          "server_to_client_ciphers": [
            "[email protected]",
            "[email protected]",
            "aes256-ctr",
            "aes256-cbc",
            "[email protected]",
            "aes128-ctr",
            "aes128-cbc"
          ],
          "client_to_server_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha1",
            "[email protected]",
            "hmac-sha2-512"
          ],
          "server_to_client_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha1",
            "[email protected]",
            "hmac-sha2-512"
          ],
          "client_to_server_compression": [
            "none",
            "[email protected]"
          ],
          "server_to_client_compression": [
            "none",
            "[email protected]"
          ],
          "first_kex_follows": false
        },
        "algorithm_selection": {
          "kex_algorithm": "[email protected]",
          "host_key_algorithm": "ecdsa-sha2-nistp256",
          "client_to_server_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          },
          "server_to_client_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          }
        },
        "server_host_key": {
          "fingerprint_sha256": "ff11dbd9c09a361ed6cdb481b67521603f81e0e29d0ac75bab733be028ae1206",
          "ecdsa_public_key": {
            "_encoding": {
              "b": "DISPLAY_BASE64",
              "gx": "DISPLAY_BASE64",
              "gy": "DISPLAY_BASE64",
              "n": "DISPLAY_BASE64",
              "p": "DISPLAY_BASE64",
              "x": "DISPLAY_BASE64",
              "y": "DISPLAY_BASE64"
            },
            "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
            "curve": "P-256",
            "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
            "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
            "length": 256,
            "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
            "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
            "x": "658u6MZum5IgUKrLzrup+3IT3x4ka1u7ziT/r/+5X0I=",
            "y": "1N+/0uA4u/58VOIGWhIiE8JQheLFh+J2ZtBpTQQNI1c="
          }
        },
        "hassh_fingerprint": "f64043bfb57b94caaffcf99ca8a5eb0f"
      },
      "transport_fingerprint": {
        "id": 72,
        "os": "Ubuntu / Debian / CentOS",
        "raw": "28960,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "smtp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 server-65-108-233-120.da.direct ESMTP Exim 4.96-58-g4e9ed49f8 Sat, 24 Feb 2024 12:56:26 +0100\r\n",
      "banner_hashes": [
        "sha256:ae03672fbfcfc8e08802c38e4c7527a1c25e9bbe1e08a2bb13359fa9d3830ca2"
      ],
      "banner_hex": "323230207365727665722d36352d3130382d3233332d3132302e64612e6469726563742045534d5450204578696d20342e39362d35382d67346539656434396638205361742c2032342046656220323032342031323a35363a3236202b303130300d0a",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "SMTP-STARTTLS",
      "labels": [
        "email"
      ],
      "observed_at": "2024-02-24T11:56:25.851259806Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 25,
      "service_name": "SMTP",
      "smtp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "ehlo": "DISPLAY_UTF8",
          "start_tls": "DISPLAY_UTF8"
        },
        "banner": "220 server-65-108-233-120.da.direct ESMTP Exim 4.96-58-g4e9ed49f8 Sat, 24 Feb 2024 12:56:26 +0100\r\n",
        "ehlo": "250-server-65-108-233-120.da.direct Hello scanner-07.ch1.censys-scanner.com [167.94.138.49]\r\n250-SIZE 52428800\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250-STARTTLS\r\n250 HELP\r\n",
        "start_tls": "220 TLS go ahead\r\n"
      },
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "exim",
          "product": "exim",
          "other": {
            "family": "exim"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.49",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036"
      },
      "transport_fingerprint": {
        "id": 72,
        "os": "Ubuntu / Debian / CentOS",
        "raw": "28960,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "dns",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "9.11.36-RedHat-9.11.36-8.el8",
      "banner_hashes": [
        "sha256:ec37c76e87497f59ffee0e2e98f4c7ceffa7cdb1d8fbfa92f734d0bef47a4538"
      ],
      "banner_hex": "392e31312e33362d5265644861742d392e31312e33362d382e656c38",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "dns": {
        "version": "9.11.36-RedHat-9.11.36-8.el8",
        "server_type": "AUTHORITATIVE",
        "r_code": "REFUSED",
        "resolves_correctly": false
      },
      "extended_service_name": "DNS",
      "observed_at": "2024-02-23T20:47:15.673885423Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 53,
      "service_name": "DNS",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:isc:bind:9.11.36:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "ISC",
          "product": "BIND",
          "version": "9.11.36",
          "other": {
            "family": "BIND"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:redhat:enterprise_linux:8:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Red Hat",
          "product": "Enterprise Linux",
          "version": "8",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.214",
      "transport_protocol": "UDP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 200 OK\r\netag: \"2f-6472776d-c068a;;;\"\r\nlast-modified: Sat, 27 May 2023 21:34:37 GMT\r\ncontent-type: text/html\r\ncontent-length: 47\r\naccept-ranges: bytes\r\ndate:  <REDACTED>\r\nserver: LiteSpeed\r\nconnection: Keep-Alive\r\n",
      "banner_hashes": [
        "sha256:5c2efded950ddad790e25513b2c7abaf5ae8ecf0780a270db3e4cfd03f15cb60"
      ],
      "banner_hex": "485454502f312e3120323030204f4b0d0a657461673a202232662d36343732373736642d63303638613b3b3b220d0a6c6173742d6d6f6469666965643a205361742c203237204d617920323032332032313a33343a333720474d540d0a636f6e74656e742d747970653a20746578742f68746d6c0d0a636f6e74656e742d6c656e6774683a2034370d0a6163636570742d72616e6765733a2062797465730d0a646174653a20203c52454441435445443e0d0a7365727665723a204c69746553706565640d0a636f6e6e656374696f6e3a204b6565702d416c6976650d0a",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://65.108.233.120/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 200,
          "status_reason": "OK",
          "headers": {
            "accept_ranges": [
              "bytes"
            ],
            "_encoding": {
              "accept_ranges": "DISPLAY_UTF8",
              "connection": "DISPLAY_UTF8",
              "server": "DISPLAY_UTF8",
              "date": "DISPLAY_UTF8",
              "etag": "DISPLAY_UTF8",
              "content_length": "DISPLAY_UTF8",
              "content_type": "DISPLAY_UTF8",
              "last_modified": "DISPLAY_UTF8"
            },
            "connection": [
              "Keep-Alive"
            ],
            "server": [
              "LiteSpeed"
            ],
            "date": [
              "<REDACTED>"
            ],
            "etag": [
              "\"2f-6472776d-c068a;;;\""
            ],
            "content_length": [
              "47"
            ],
            "content_type": [
              "text/html"
            ],
            "last_modified": [
              "Sat, 27 May 2023 21:34:37 GMT"
            ]
          },
          "body_size": 47,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "<html>webserver is functioning normally</html>\n",
          "body_hashes": [
            "sha256:e453ca3d892b0cc174f46b161350afee1fe9f0eb68cf343efda6fd9fcd2994de",
            "sha1:6c0680e2d97ee8ca4cfd08ce6004a5a8373c2f40"
          ],
          "body_hash": "sha1:6c0680e2d97ee8ca4cfd08ce6004a5a8373c2f40"
        },
        "supports_http2": false
      },
      "observed_at": "2024-02-23T21:34:54.027615211Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "LiteSpeed Technologies",
          "product": "LiteSpeed Web Server",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.35",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "pop3",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "+OK Dovecot DA ready.\r\n",
      "banner_hashes": [
        "sha256:6cb3733da810a334ebfc4354286c4d6b682ffd47ecbf1fa70176bb4956714a6c"
      ],
      "banner_hex": "2b4f4b20446f7665636f742044412072656164792e0d0a",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "POP3S",
      "labels": [
        "email"
      ],
      "observed_at": "2024-02-23T16:08:49.440860882Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "pop3": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "start_tls": "DISPLAY_UTF8"
        },
        "banner": "+OK Dovecot DA ready.\r\n",
        "start_tls": "+OK Begin TLS negotiation now.\r\n"
      },
      "port": 110,
      "service_name": "POP3",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.52",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891"
      },
      "transport_fingerprint": {
        "id": 72,
        "os": "Ubuntu / Debian / CentOS",
        "raw": "28960,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "imap",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.\r\n",
      "banner_hashes": [
        "sha256:2ba690a43e7506f88e79b4b02ce0c76902d0b1020821fa872c62937bad08a9f4"
      ],
      "banner_hex": "2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45204c49544552414c2b205354415254544c5320415554483d504c41494e5d20446f7665636f742044412072656164792e0d0a",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "IMAPS",
      "imap": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.\r\n",
        "start_tls": "a001 OK Begin TLS negotiation now.\r\n"
      },
      "labels": [
        "email"
      ],
      "observed_at": "2024-02-23T09:13:55.164718657Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 143,
      "service_name": "IMAP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.52",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891"
      },
      "transport_fingerprint": {
        "id": 72,
        "os": "Ubuntu / Debian / CentOS",
        "raw": "28960,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 200 OK\r\netag: \"2f-6472776d-c068a;;;\"\r\nlast-modified: Sat, 27 May 2023 21:34:37 GMT\r\ncontent-type: text/html\r\ncontent-length: 47\r\naccept-ranges: bytes\r\ndate:  <REDACTED>\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nconnection: Keep-Alive\r\n",
      "banner_hashes": [
        "sha256:9a1f8ede798fadf027c3c7484b86c77fe00f45907d7fa45ee57f216817b3b9e3"
      ],
      "banner_hex": "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",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://65.108.233.120/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 200,
          "status_reason": "OK",
          "headers": {
            "date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "date": "DISPLAY_UTF8",
              "content_length": "DISPLAY_UTF8",
              "server": "DISPLAY_UTF8",
              "accept_ranges": "DISPLAY_UTF8",
              "etag": "DISPLAY_UTF8",
              "last_modified": "DISPLAY_UTF8",
              "content_type": "DISPLAY_UTF8",
              "alt_svc": "DISPLAY_UTF8",
              "connection": "DISPLAY_UTF8"
            },
            "content_length": [
              "47"
            ],
            "server": [
              "LiteSpeed"
            ],
            "accept_ranges": [
              "bytes"
            ],
            "etag": [
              "\"2f-6472776d-c068a;;;\""
            ],
            "last_modified": [
              "Sat, 27 May 2023 21:34:37 GMT"
            ],
            "content_type": [
              "text/html"
            ],
            "alt_svc": [
              "h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\""
            ],
            "connection": [
              "Keep-Alive"
            ]
          },
          "body_size": 47,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "<html>webserver is functioning normally</html>\n",
          "body_hashes": [
            "sha256:e453ca3d892b0cc174f46b161350afee1fe9f0eb68cf343efda6fd9fcd2994de",
            "sha1:6c0680e2d97ee8ca4cfd08ce6004a5a8373c2f40"
          ],
          "body_hash": "sha1:6c0680e2d97ee8ca4cfd08ce6004a5a8373c2f40"
        },
        "supports_http2": true
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "27d27d27d00027d00042d43d00041dba951fb796b4b956c9799ba19149e94a",
        "cipher_and_version_fingerprint": "27d27d27d00027d00042d43d00041d",
        "tls_extensions_sha256": "ba951fb796b4b956c9799ba19149e94a",
        "observed_at": "2024-01-25T15:57:56.792778737Z"
      },
      "observed_at": "2024-02-24T01:04:28.041485816Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "LiteSpeed Technologies",
          "product": "LiteSpeed Web Server",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.49",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "d75f9129bb5d05492a65ff78e081bcb2"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "smtp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 server-65-108-233-120.da.direct ESMTP Exim 4.96-58-g4e9ed49f8 Sat, 24 Feb 2024 09:34:56 +0100\r\n",
      "banner_hashes": [
        "sha256:03848ae707871921e850ff1bfc203b85db73da81e27e0afdfbe07da77098dd5c"
      ],
      "banner_hex": "323230207365727665722d36352d3130382d3233332d3132302e64612e6469726563742045534d5450204578696d20342e39362d35382d67346539656434396638205361742c2032342046656220323032342030393a33343a3536202b303130300d0a",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "SMTPS",
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "27d27d27d00027d00042d42d000000b906c61c02c1194a121d828bc93b5bd3",
        "cipher_and_version_fingerprint": "27d27d27d00027d00042d42d000000",
        "tls_extensions_sha256": "b906c61c02c1194a121d828bc93b5bd3",
        "observed_at": "2024-01-25T16:14:24.333018830Z"
      },
      "labels": [
        "email"
      ],
      "observed_at": "2024-02-24T08:34:55.650071785Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 465,
      "service_name": "SMTP",
      "smtp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "ehlo": "DISPLAY_UTF8"
        },
        "banner": "220 server-65-108-233-120.da.direct ESMTP Exim 4.96-58-g4e9ed49f8 Sat, 24 Feb 2024 09:34:56 +0100\r\n",
        "ehlo": "250-server-65-108-233-120.da.direct Hello scanner-04.ch1.censys-scanner.com [162.142.125.13]\r\n250-SIZE 52428800\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250 HELP\r\n"
      },
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "exim",
          "product": "exim",
          "other": {
            "family": "exim"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.13",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036"
      },
      "transport_fingerprint": {
        "id": 72,
        "os": "Ubuntu / Debian / CentOS",
        "raw": "28960,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "smtp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 server-65-108-233-120.da.direct ESMTP Exim 4.96-58-g4e9ed49f8 Fri, 23 Feb 2024 23:33:28 +0100\r\n",
      "banner_hashes": [
        "sha256:398b5700857c7cd27cb4c1aed8012550a6f20549e6da9f299e271591ab7ace2d"
      ],
      "banner_hex": "323230207365727665722d36352d3130382d3233332d3132302e64612e6469726563742045534d5450204578696d20342e39362d35382d67346539656434396638204672692c2032332046656220323032342032333a33333a3238202b303130300d0a",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "SMTP-STARTTLS",
      "labels": [
        "email"
      ],
      "observed_at": "2024-02-23T22:33:28.122424595Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 587,
      "service_name": "SMTP",
      "smtp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "ehlo": "DISPLAY_UTF8",
          "start_tls": "DISPLAY_UTF8"
        },
        "banner": "220 server-65-108-233-120.da.direct ESMTP Exim 4.96-58-g4e9ed49f8 Fri, 23 Feb 2024 23:33:28 +0100\r\n",
        "ehlo": "250-server-65-108-233-120.da.direct Hello scanner-09.ch1.censys-scanner.com [167.248.133.49]\r\n250-SIZE 52428800\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250-STARTTLS\r\n250 HELP\r\n",
        "start_tls": "220 TLS go ahead\r\n"
      },
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "exim",
          "product": "exim",
          "other": {
            "family": "exim"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.248.133.49",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036"
      },
      "transport_fingerprint": {
        "id": 72,
        "os": "Ubuntu / Debian / CentOS",
        "raw": "28960,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "imap",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot DA ready.\r\n",
      "banner_hashes": [
        "sha256:05a2eae234f0f23ce6ca35ca261ed34ddbfe17b9854892a7d7e00cde59c98d0f"
      ],
      "banner_hex": "2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45204c49544552414c2b20415554483d504c41494e5d20446f7665636f742044412072656164792e0d0a",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "IMAPS",
      "imap": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot DA ready.\r\n"
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "27d40d40d00040d00042d43d00000051af7d8070a18e002eaaedf620fa118c",
        "cipher_and_version_fingerprint": "27d40d40d00040d00042d43d000000",
        "tls_extensions_sha256": "51af7d8070a18e002eaaedf620fa118c",
        "observed_at": "2024-02-13T04:07:25.517167905Z"
      },
      "labels": [
        "email"
      ],
      "observed_at": "2024-02-23T19:50:45.062164050Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 993,
      "service_name": "IMAP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.36",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891"
      },
      "transport_fingerprint": {
        "id": 72,
        "os": "Ubuntu / Debian / CentOS",
        "raw": "28960,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "pop3",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "+OK Dovecot DA ready.\r\n",
      "banner_hashes": [
        "sha256:6cb3733da810a334ebfc4354286c4d6b682ffd47ecbf1fa70176bb4956714a6c"
      ],
      "banner_hex": "2b4f4b20446f7665636f742044412072656164792e0d0a",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "POP3S",
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "27d40d40d00040d00042d43d00000051af7d8070a18e002eaaedf620fa118c",
        "cipher_and_version_fingerprint": "27d40d40d00040d00042d43d000000",
        "tls_extensions_sha256": "51af7d8070a18e002eaaedf620fa118c",
        "observed_at": "2024-02-10T09:56:51.164003950Z"
      },
      "labels": [
        "email"
      ],
      "observed_at": "2024-02-23T17:48:14.497084309Z",
      "perspective_id": "PERSPECTIVE_ORANGE",
      "pop3": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "+OK Dovecot DA ready.\r\n"
      },
      "port": 995,
      "service_name": "POP3",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.145.59",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891"
      },
      "transport_fingerprint": {
        "id": 72,
        "os": "Ubuntu / Debian / CentOS",
        "raw": "28960,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 302 Found\r\nContent-Encoding: gzip\r\nContent-Type: text/html; charset=utf-8\r\nLocation: /\r\nVary: Origin\r\nVary: Accept-Encoding\r\nX-Frame-Options: sameorigin\r\nDate:  <REDACTED>\r\nContent-Length: 48\r\n",
      "banner_hashes": [
        "sha256:879c97878566aa2a0bd5c2e78b9f895f136935b2c70acab7d3553a84ea86eba5"
      ],
      "banner_hex": "485454502f312e312033303220466f756e640d0a436f6e74656e742d456e636f64696e673a20677a69700d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d7574662d380d0a4c6f636174696f6e3a202f0d0a566172793a204f726967696e0d0a566172793a204163636570742d456e636f64696e670d0a582d4672616d652d4f7074696f6e733a2073616d656f726967696e0d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a2034380d0a",
      "certificate": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://65.108.233.120:2222/evo",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 302,
          "status_reason": "Found",
          "headers": {
            "Location": [
              "/"
            ],
            "_encoding": {
              "Location": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "X_Frame_Options": "DISPLAY_UTF8",
              "Vary": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Encoding": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8"
            },
            "Date": [
              "<REDACTED>"
            ],
            "X_Frame_Options": [
              "sameorigin"
            ],
            "Vary": [
              "Origin",
              "Accept-Encoding"
            ],
            "Content_Length": [
              "48"
            ],
            "Content_Encoding": [
              "gzip"
            ],
            "Content_Type": [
              "text/html; charset=utf-8"
            ]
          },
          "body_size": 24,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "<a href=\"/\">Found</a>.\n\n",
          "body_hashes": [
            "sha256:5bdd19de1ad3c04f1a88334882b16565cef8ac274902e671a72ebebdb35c697c",
            "sha1:90d910869fbe5e0f79b7f7e58f59f5303f46ad78"
          ],
          "body_hash": "sha1:90d910869fbe5e0f79b7f7e58f59f5303f46ad78"
        },
        "supports_http2": true
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "40d40d40d00000000043d40d40d43d684d61a135bd962c8dd9c541ddbaefa8",
        "cipher_and_version_fingerprint": "40d40d40d00000000043d40d40d43d",
        "tls_extensions_sha256": "684d61a135bd962c8dd9c541ddbaefa8",
        "observed_at": "2024-02-07T05:25:23.810860521Z"
      },
      "observed_at": "2024-02-23T16:12:36.874447274Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 2222,
      "service_name": "HTTP",
      "source_ip": "167.94.138.50",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
          "chain_fps_sha_256": [
            "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd"
          ],
          "leaf_data": {
            "names": [
              "server-65-108-233-120.da.direct"
            ],
            "subject_dn": "CN=server-65-108-233-120.da.direct",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=R3",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "e38f9780f96cf42d7a3f4d93b167a464dd2b700c3396413ee65514fe20698f63",
            "fingerprint": "99edbf50a2acb4bc6341226e9f30f9dfaf7379578a2aa9e13a56d1c537010e76",
            "issuer": {
              "common_name": [
                "R3"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "server-65-108-233-120.da.direct"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "m8uSaYgl1AAymfn9RBEqw8CpSQl7ucTnQmA+6b/OqX0=",
                "y": "u3IJr8DXoC4P7DDN3qH1sVsYFd3HJzfDftQGkfyg0mE="
              },
              "fingerprint": "1e0d7bfb9889c76f86bf6ecbf5a3a28a907f409a8dc88d742b307cc410ba393c"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd",
              "subject_dn": "C=US, O=Let's Encrypt, CN=R3",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Finland",
    "country_code": "FI",
    "city": "Helsinki",
    "postal_code": "00100",
    "timezone": "Europe/Helsinki",
    "province": "Uusimaa",
    "coordinates": {
      "latitude": 60.16952,
      "longitude": 24.93545
    }
  },
  "location_updated_at": "2024-02-22T23:10:24.092570245Z",
  "autonomous_system": {
    "asn": 24940,
    "description": "HETZNER-AS",
    "bgp_prefix": "65.108.0.0/16",
    "name": "HETZNER-AS",
    "country_code": "DE"
  },
  "autonomous_system_updated_at": "2024-02-22T23:10:24.092767659Z",
  "whois": {
    "network": {
      "handle": "DE-HETZNER-20010209",
      "name": "Hetzner Online GmbH"
    },
    "organization": {
      "handle": "ORG-HOA1-RIPE",
      "name": "Hetzner Online GmbH",
      "address": "Industriestrasse 25\\nD-91710\\nGunzenhausen\\nGERMANY",
      "abuse_contacts": [
        {
          "handle": "HOAC1-RIPE",
          "name": "Hetzner Online GmbH - Contact Role",
          "email": "[email protected]"
        }
      ],
      "admin_contacts": [
        {
          "handle": "GM834-RIPE",
          "name": "Guenther Mueller",
          "email": "[email protected]"
        },
        {
          "handle": "HOAC1-RIPE",
          "name": "Hetzner Online GmbH - Contact Role",
          "email": "[email protected]"
        },
        {
          "handle": "MF1400-RIPE",
          "name": "Martin Fritzsche",
          "email": "[email protected]"
        },
        {
          "handle": "MH375-RIPE",
          "name": "Martin Hetzner",
          "email": "[email protected]"
        },
        {
          "handle": "SK2374-RIPE",
          "name": "Stephan Konvickova",
          "email": "[email protected]"
        }
      ]
    }
  },
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:redhat:enterprise_linux:8:*:*:*:*:*:*:*",
    "part": "o",
    "vendor": "Red Hat",
    "product": "Enterprise Linux",
    "version": "8",
    "other": {
      "family": "Linux"
    }
  },
  "dns": {
    "names": [
      "static.120.233.108.65.clients.your-server.de",
      "65-108-233-120.cprapid.com",
      "mail.65-108-233-120.cprapid.com",
      "www.65-108-233-120.cprapid.com",
      "server-65-108-233-120.da.direct",
      "met-world.com"
    ],
    "records": {
      "server-65-108-233-120.da.direct": {
        "record_type": "A",
        "resolved_at": "2024-02-12T18:15:05.447404323Z"
      },
      "mail.65-108-233-120.cprapid.com": {
        "record_type": "A",
        "resolved_at": "2024-02-03T15:24:49.919763238Z"
      },
      "65-108-233-120.cprapid.com": {
        "record_type": "A",
        "resolved_at": "2024-01-31T15:24:52.418939446Z"
      },
      "www.65-108-233-120.cprapid.com": {
        "record_type": "A",
        "resolved_at": "2024-02-20T15:13:25.472948749Z"
      },
      "met-world.com": {
        "record_type": "A",
        "resolved_at": "2024-02-17T16:24:00.267042963Z"
      },
      "static.120.233.108.65.clients.your-server.de": {
        "record_type": "A",
        "resolved_at": "2024-02-04T17:29:03.476062297Z"
      }
    },
    "reverse_dns": {
      "names": [
        "static.120.233.108.65.clients.your-server.de"
      ],
      "resolved_at": "2024-02-19T08:52:07.402660846Z"
    }
  },
  "last_updated_at": "2024-02-24T11:56:26.960Z",
  "labels": [
    "email",
    "file-sharing",
    "remote-access"
  ]
}