91.231.1.41

As of: Jul 22, 2024 8:14am UTC | Latest
{
  "ip": "91.231.1.41",
  "services": [
    {
      "_decoded": "pop3",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "+OK Dovecot (Ubuntu) ready.\r\n",
      "banner_hashes": [
        "sha256:5f1d48ad9e6f4f2b3f6ff82753726dee0c030c0a8798fcc2ae96fcd7a53384f5"
      ],
      "banner_hex": "2b4f4b20446f7665636f7420285562756e7475292072656164792e0d0a",
      "certificate": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
      "extended_service_name": "POP3S",
      "labels": [
        "email"
      ],
      "observed_at": "2024-07-22T02:14:00.686062046Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "pop3": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "start_tls": "DISPLAY_UTF8"
        },
        "banner": "+OK Dovecot (Ubuntu) ready.\r\n",
        "start_tls": "+OK Begin TLS negotiation now.\r\n"
      },
      "port": 110,
      "service_name": "POP3",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Ubuntu",
          "product": "Linux",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "206.168.34.63",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
          "leaf_data": {
            "names": [
              "mail.segodnya.ua"
            ],
            "subject_dn": "C=CN, ST=GuangDong, L=ShenZhen, O=mail.segodnya.ua, OU=IT, CN=mail.segodnya.ua, [email protected]",
            "issuer_dn": "C=CN, ST=GuangDong, L=ShenZhen, O=mail.segodnya.ua, OU=IT, CN=mail.segodnya.ua, [email protected]",
            "pubkey_bit_size": 4096,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "26a92fbd4734f1d11a7d930664e9e493e16cecf219f954f2bc8786af3c538f36",
            "fingerprint": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
            "issuer": {
              "common_name": [
                "mail.segodnya.ua"
              ],
              "locality": [
                "ShenZhen"
              ],
              "organization": [
                "mail.segodnya.ua"
              ],
              "organizational_unit": [
                "IT"
              ],
              "province": [
                "GuangDong"
              ],
              "country": [
                "CN"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "subject": {
              "common_name": [
                "mail.segodnya.ua"
              ],
              "locality": [
                "ShenZhen"
              ],
              "organization": [
                "mail.segodnya.ua"
              ],
              "organizational_unit": [
                "IT"
              ],
              "province": [
                "GuangDong"
              ],
              "country": [
                "CN"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "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",
                "exponent": "AAEAAQ==",
                "length": 512
              },
              "fingerprint": "dd7448ed4ddcdc7b624bb714afa8e6a8ec63ca8039f5b928b1ecd3da74b1c8a5"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250"
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "imap",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS LOGINDISABLED] Dovecot (Ubuntu) ready.\r\n",
      "banner_hashes": [
        "sha256:625400f57eaf5651fdd647fffc9d69d5ca2268754bb4f99345d3c813e7cf1754"
      ],
      "banner_hex": "2a204f4b205b4341504142494c49545920494d41503472657631204c49544552414c2b205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45205354415254544c53204c4f47494e44495341424c45445d20446f7665636f7420285562756e7475292072656164792e0d0a",
      "certificate": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
      "extended_service_name": "IMAPS",
      "imap": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS LOGINDISABLED] Dovecot (Ubuntu) ready.\r\n",
        "start_tls": "a001 OK Begin TLS negotiation now.\r\n"
      },
      "labels": [
        "email"
      ],
      "observed_at": "2024-07-21T20:24:14.535820949Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 143,
      "service_name": "IMAP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Ubuntu",
          "product": "Linux",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.196",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
          "leaf_data": {
            "names": [
              "mail.segodnya.ua"
            ],
            "subject_dn": "C=CN, ST=GuangDong, L=ShenZhen, O=mail.segodnya.ua, OU=IT, CN=mail.segodnya.ua, [email protected]",
            "issuer_dn": "C=CN, ST=GuangDong, L=ShenZhen, O=mail.segodnya.ua, OU=IT, CN=mail.segodnya.ua, [email protected]",
            "pubkey_bit_size": 4096,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "26a92fbd4734f1d11a7d930664e9e493e16cecf219f954f2bc8786af3c538f36",
            "fingerprint": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
            "issuer": {
              "common_name": [
                "mail.segodnya.ua"
              ],
              "locality": [
                "ShenZhen"
              ],
              "organization": [
                "mail.segodnya.ua"
              ],
              "organizational_unit": [
                "IT"
              ],
              "province": [
                "GuangDong"
              ],
              "country": [
                "CN"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "subject": {
              "common_name": [
                "mail.segodnya.ua"
              ],
              "locality": [
                "ShenZhen"
              ],
              "organization": [
                "mail.segodnya.ua"
              ],
              "organizational_unit": [
                "IT"
              ],
              "province": [
                "GuangDong"
              ],
              "country": [
                "CN"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "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",
                "exponent": "AAEAAQ==",
                "length": 512
              },
              "fingerprint": "dd7448ed4ddcdc7b624bb714afa8e6a8ec63ca8039f5b928b1ecd3da74b1c8a5"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "15af977ce25de452b96affa2addb1036",
            "ja4s": "t130200_1302_a56c5b993250"
          }
        ]
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "imap",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready.\r\n",
      "banner_hashes": [
        "sha256:f4e79828be4f5e4d5f16617f03e2e92725e78ec0afda189f6c45aa455daff14c"
      ],
      "banner_hex": "2a204f4b205b4341504142494c49545920494d41503472657631204c49544552414c2b205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c4520415554483d504c41494e20415554483d4c4f47494e5d20446f7665636f7420285562756e7475292072656164792e0d0a",
      "certificate": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
      "extended_service_name": "IMAPS",
      "imap": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready.\r\n"
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "2ad2ad16d2ad2ad22c42d42d000000dc2b105e4dda975fa70719c0cae5d0ce",
        "cipher_and_version_fingerprint": "2ad2ad16d2ad2ad22c42d42d000000",
        "tls_extensions_sha256": "dc2b105e4dda975fa70719c0cae5d0ce",
        "observed_at": "2024-06-29T19:01:33.672877584Z"
      },
      "labels": [
        "email"
      ],
      "observed_at": "2024-07-21T10:24:28.635199340Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 993,
      "service_name": "IMAP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Ubuntu",
          "product": "Linux",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.201",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
          "leaf_data": {
            "names": [
              "mail.segodnya.ua"
            ],
            "subject_dn": "C=CN, ST=GuangDong, L=ShenZhen, O=mail.segodnya.ua, OU=IT, CN=mail.segodnya.ua, [email protected]",
            "issuer_dn": "C=CN, ST=GuangDong, L=ShenZhen, O=mail.segodnya.ua, OU=IT, CN=mail.segodnya.ua, [email protected]",
            "pubkey_bit_size": 4096,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "26a92fbd4734f1d11a7d930664e9e493e16cecf219f954f2bc8786af3c538f36",
            "fingerprint": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
            "issuer": {
              "common_name": [
                "mail.segodnya.ua"
              ],
              "locality": [
                "ShenZhen"
              ],
              "organization": [
                "mail.segodnya.ua"
              ],
              "organizational_unit": [
                "IT"
              ],
              "province": [
                "GuangDong"
              ],
              "country": [
                "CN"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "subject": {
              "common_name": [
                "mail.segodnya.ua"
              ],
              "locality": [
                "ShenZhen"
              ],
              "organization": [
                "mail.segodnya.ua"
              ],
              "organizational_unit": [
                "IT"
              ],
              "province": [
                "GuangDong"
              ],
              "country": [
                "CN"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "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",
                "exponent": "AAEAAQ==",
                "length": 512
              },
              "fingerprint": "dd7448ed4ddcdc7b624bb714afa8e6a8ec63ca8039f5b928b1ecd3da74b1c8a5"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "15af977ce25de452b96affa2addb1036",
            "ja4s": "t130200_1302_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "0debd3853f330c574b05e0b6d882dc27",
            "ja4s": "t120200_c030_344b4dce5a52"
          },
          {
            "tls_version": "TLSv1_1",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "ce815ab6e37127ab1cb9fe33d3ba250d",
            "ja4s": "t110200_c014_344b4dce5a52"
          },
          {
            "tls_version": "TLSv1_0",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "623de93db17d313345d7ea481e7443cf",
            "ja4s": "t100200_c014_344b4dce5a52"
          }
        ]
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "pop3",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "+OK Dovecot (Ubuntu) ready.\r\n",
      "banner_hashes": [
        "sha256:5f1d48ad9e6f4f2b3f6ff82753726dee0c030c0a8798fcc2ae96fcd7a53384f5"
      ],
      "banner_hex": "2b4f4b20446f7665636f7420285562756e7475292072656164792e0d0a",
      "certificate": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "POP3S",
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "2ad2ad16d2ad2ad22c42d42d000000dc2b105e4dda975fa70719c0cae5d0ce",
        "cipher_and_version_fingerprint": "2ad2ad16d2ad2ad22c42d42d000000",
        "tls_extensions_sha256": "dc2b105e4dda975fa70719c0cae5d0ce",
        "observed_at": "2024-07-06T09:19:20.958975446Z"
      },
      "labels": [
        "email"
      ],
      "observed_at": "2024-07-21T13:56:06.485594337Z",
      "perspective_id": "PERSPECTIVE_HE",
      "pop3": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "+OK Dovecot (Ubuntu) ready.\r\n"
      },
      "port": 995,
      "service_name": "POP3",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "vendor": "Ubuntu",
          "product": "Linux",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.43",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
          "leaf_data": {
            "names": [
              "mail.segodnya.ua"
            ],
            "subject_dn": "C=CN, ST=GuangDong, L=ShenZhen, O=mail.segodnya.ua, OU=IT, CN=mail.segodnya.ua, [email protected]",
            "issuer_dn": "C=CN, ST=GuangDong, L=ShenZhen, O=mail.segodnya.ua, OU=IT, CN=mail.segodnya.ua, [email protected]",
            "pubkey_bit_size": 4096,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "26a92fbd4734f1d11a7d930664e9e493e16cecf219f954f2bc8786af3c538f36",
            "fingerprint": "f7a6504648eff926c88bb69cc0b048772331f806d56a74eaf9531e9158d336b4",
            "issuer": {
              "common_name": [
                "mail.segodnya.ua"
              ],
              "locality": [
                "ShenZhen"
              ],
              "organization": [
                "mail.segodnya.ua"
              ],
              "organizational_unit": [
                "IT"
              ],
              "province": [
                "GuangDong"
              ],
              "country": [
                "CN"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "subject": {
              "common_name": [
                "mail.segodnya.ua"
              ],
              "locality": [
                "ShenZhen"
              ],
              "organization": [
                "mail.segodnya.ua"
              ],
              "organizational_unit": [
                "IT"
              ],
              "province": [
                "GuangDong"
              ],
              "country": [
                "CN"
              ],
              "email_address": [
                "[email protected]"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "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",
                "exponent": "AAEAAQ==",
                "length": 512
              },
              "fingerprint": "dd7448ed4ddcdc7b624bb714afa8e6a8ec63ca8039f5b928b1ecd3da74b1c8a5"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Ukraine",
    "country_code": "UA",
    "city": "Kyiv",
    "postal_code": "03027",
    "timezone": "Europe/Kyiv",
    "province": "Kyiv City",
    "coordinates": {
      "latitude": 50.45466,
      "longitude": 30.5238
    }
  },
  "location_updated_at": "2024-07-22T08:13:08.378624715Z",
  "autonomous_system": {
    "asn": 198224,
    "description": "SEGODNYA-AS",
    "bgp_prefix": "91.231.1.0/24",
    "name": "SEGODNYA-AS",
    "country_code": "UA"
  },
  "autonomous_system_updated_at": "2024-07-18T04:52:43.911401943Z",
  "whois": {
    "network": {
      "handle": "SEG-NET",
      "name": "PAT Segodnya Multimedia",
      "cidrs": [
        "91.231.1.0/24"
      ],
      "created": "2011-11-18T00:00:00Z",
      "updated": "2020-07-15T00:00:00Z"
    },
    "organization": {
      "handle": "ORG-PM12-RIPE",
      "name": "PAT \"Segodnya Multimedia\"",
      "address": "Borshagovska str., 152-B\\nKiev, 03056, Ukraine",
      "abuse_contacts": [
        {
          "handle": "AR21423-RIPE",
          "name": "Abuse-C Role",
          "email": "[email protected]"
        }
      ],
      "admin_contacts": [
        {
          "handle": "SMRA1-RIPE",
          "name": "Segodnya Multimedia Role Account",
          "email": "[email protected]"
        }
      ]
    }
  },
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
    "part": "o",
    "vendor": "Ubuntu",
    "product": "Linux",
    "other": {
      "family": "Linux"
    }
  },
  "dns": {
    "names": [
      "mail.segodnya.ua"
    ],
    "records": {
      "mail.segodnya.ua": {
        "record_type": "A",
        "resolved_at": "2024-07-04T00:35:14.349587199Z"
      }
    }
  },
  "last_updated_at": "2024-07-22T08:14:09.281Z",
  "labels": [
    "email"
  ]
}