91.241.61.229

As of: Jun 21, 2025 3:47pm UTC | Latest
{
  "ip": "91.241.61.229",
  "services": [
    {
      "_decoded": "ftp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 ProFTPD Server ready.\r\n",
      "banner_hashes": [
        "sha256:17e55480c27ad104b4d87eb0d0a20bd159fd6f3494a061950487857394bb9083"
      ],
      "banner_hex": "3232302050726f46545044205365727665722072656164792e0d0a",
      "certificate": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "FTPes",
      "ftp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "auth_tls_response": "DISPLAY_UTF8"
        },
        "banner": "220 ProFTPD Server ready.\r\n",
        "auth_tls_response": "234 AUTH TLS successful\r\n",
        "status_code": 220,
        "status_meaning": "Service ready for new user.",
        "implicit_tls": false
      },
      "labels": [
        "file-sharing"
      ],
      "observed_at": "2025-06-21T02:16:20.780647244Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 21,
      "service_name": "FTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "ProFTPD Project",
          "product": "ProFTPD",
          "other": {
            "family": "ProFTPD"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.183",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
          "leaf_data": {
            "names": [
              "s4.kylos.pl"
            ],
            "subject_dn": "CN=s4.kylos.pl",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=E5",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2c273b387468e50fb6d940b30629c4dfa838a8d8b190b2c2188f30f17eaf7b58",
            "fingerprint": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
            "issuer": {
              "common_name": [
                "E5"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "s4.kylos.pl"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "pTsveQefm6d+2P0wrtVnJyBdutQpZqai8hwaMShe0Uc=",
                "y": "Ur+eZzn+306RP4GJHTw87UzQTrFsfeE3aaWPt588YSA="
              },
              "fingerprint": "7b4bd9f96b1efcc17a3bbfa493c4c01c3bebf0b00462de6122885b1a0a574d8e"
            },
            "signature": {
              "signature_algorithm": "ECDSA-SHA384",
              "self_signed": false
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "ssh",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "SSH-2.0-mod_sftp",
      "banner_hashes": [
        "sha256:cadf48767e9d8f8a2f4d3c7c0cc2950887a0fdab5cb1090402f3c2cc4e3f7313"
      ],
      "banner_hex": "5353482d322e302d6d6f645f73667470",
      "discovery_method": "PREDICTIVE_METHOD_16",
      "extended_service_name": "SSH",
      "labels": [
        "remote-access"
      ],
      "observed_at": "2025-06-21T15:47:06.872904483Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 22,
      "service_name": "SSH",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        }
      ],
      "source_ip": "167.94.138.61",
      "ssh": {
        "endpoint_id": {
          "_encoding": {
            "raw": "DISPLAY_UTF8"
          },
          "raw": "SSH-2.0-mod_sftp",
          "protocol_version": "2.0",
          "software_version": "mod_sftp"
        },
        "kex_init_message": {
          "kex_algorithms": [
            "curve25519-sha256",
            "[email protected]",
            "ecdh-sha2-nistp521",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp256",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group14-sha256",
            "diffie-hellman-group-exchange-sha256",
            "diffie-hellman-group-exchange-sha1",
            "diffie-hellman-group14-sha1",
            "rsa1024-sha1",
            "ext-info-s"
          ],
          "host_key_algorithms": [
            "rsa-sha2-512",
            "rsa-sha2-256",
            "ssh-rsa"
          ],
          "client_to_server_ciphers": [
            "aes256-ctr",
            "aes192-ctr",
            "aes128-ctr",
            "aes256-cbc",
            "aes192-cbc",
            "aes128-cbc",
            "cast128-cbc",
            "3des-ctr",
            "3des-cbc"
          ],
          "server_to_client_ciphers": [
            "aes256-ctr",
            "aes192-ctr",
            "aes128-ctr",
            "aes256-cbc",
            "aes192-cbc",
            "aes128-cbc",
            "cast128-cbc",
            "3des-ctr",
            "3des-cbc"
          ],
          "client_to_server_macs": [
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1",
            "hmac-sha1-96",
            "[email protected]",
            "[email protected]"
          ],
          "server_to_client_macs": [
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1",
            "hmac-sha1-96",
            "[email protected]",
            "[email protected]"
          ],
          "client_to_server_compression": [
            "none"
          ],
          "server_to_client_compression": [
            "none"
          ],
          "first_kex_follows": false
        },
        "algorithm_selection": {
          "kex_algorithm": "[email protected]",
          "host_key_algorithm": "ssh-rsa",
          "client_to_server_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          },
          "server_to_client_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          }
        },
        "server_host_key": {
          "fingerprint_sha256": "5eb4f876e67e131c7a9360a4f3d34842ef66ff75c805e61dbcd29b4292107caa",
          "rsa_public_key": {
            "_encoding": {
              "modulus": "DISPLAY_BASE64",
              "exponent": "DISPLAY_BASE64"
            },
            "modulus": "7vUKBzcsIfgHEpslun6HhuuZQTGT+Bg3fgh0QOWmpQeDpbQDNNFY/pWovWEojt7HEmkpvJ1PpoPkOyyh5VZJ7N747fvXGIp/sLEOIbj+MSmJytMQrNR9+z66t+Z5rm5rlV5QN+KoDQ1CiW8HC/QfOoLWVIrmhIcM+tPeRUsIqPAQyf17z40GShk14QgkbP1PCke/qvSh6HGL4gzrsVPV8wt4g/q13+zy+1nRh/bbCrgzCqCv1jQahx/l8M+vPP6Y4LXFj+TVNKckqZw54DSXe/xjuja9RH1i/ooIQHi3FWZRtKGV+XVL2OE/CPPvpbODPV1yKiFe3/Qe/nrZL0MQGQ1l+D42DLbX8kpAAkP1LE13TRbd/SIqWE+Cm8wmw8it7r9E56xxFzGQwZB/SxRVz16LNeFoA7j3py7KgFWjfcuxU1wCIGtbreirb4RKAvgfcVl/DCLzDNIKX+pGtN1+5K8nk0Vjqfza3dj31wIEkgNvU3TeccQnvr7Ylm4uZI0Z",
            "exponent": "AAEAAQ==",
            "length": 3072
          }
        },
        "hassh_fingerprint": "c50225b2c8ae374279fe0cd982aecadc"
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "smtp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 s4.kylos.pl ESMTP Exim 4.98.2 Sat, 21 Jun 2025 09:36:10 +0200\r\n",
      "banner_hashes": [
        "sha256:5a928185d17603d4b0336dc732ecedcd3400588bfa0e245ea6d69134ee0b86d4"
      ],
      "banner_hex": "3232302073342e6b796c6f732e706c2045534d5450204578696d20342e39382e32205361742c203231204a756e20323032352030393a33363a3130202b303230300d0a",
      "certificate": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "SMTP-STARTTLS",
      "labels": [
        "email"
      ],
      "observed_at": "2025-06-21T07:36:09.906772510Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 25,
      "service_name": "SMTP",
      "smtp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "ehlo": "DISPLAY_UTF8",
          "start_tls": "DISPLAY_UTF8"
        },
        "banner": "220 s4.kylos.pl ESMTP Exim 4.98.2 Sat, 21 Jun 2025 09:36:10 +0200\r\n",
        "ehlo": "250-s4.kylos.pl Hello www.censys.io [167.94.138.62]\r\n250-SIZE 52428800\r\n250-LIMITS MAILMAX=100 RCPTMAX=150\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250-STARTTLS\r\n250 HELP\r\n",
        "start_tls": "220 TLS go ahead\r\n"
      },
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:exim:exim:4.98.2:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "exim",
          "product": "exim",
          "version": "4.98.2",
          "other": {
            "family": "exim"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.62",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
          "chain_fps_sha_256": [
            "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb"
          ],
          "leaf_data": {
            "names": [
              "s4.kylos.pl"
            ],
            "subject_dn": "CN=s4.kylos.pl",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=E5",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2c273b387468e50fb6d940b30629c4dfa838a8d8b190b2c2188f30f17eaf7b58",
            "fingerprint": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
            "issuer": {
              "common_name": [
                "E5"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "s4.kylos.pl"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "pTsveQefm6d+2P0wrtVnJyBdutQpZqai8hwaMShe0Uc=",
                "y": "Ur+eZzn+306RP4GJHTw87UzQTrFsfeE3aaWPt588YSA="
              },
              "fingerprint": "7b4bd9f96b1efcc17a3bbfa493c4c01c3bebf0b00462de6122885b1a0a574d8e"
            },
            "signature": {
              "signature_algorithm": "ECDSA-SHA384",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb",
              "subject_dn": "C=US, O=Let's Encrypt, CN=E5",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250"
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 403 Forbidden\r\nDate:  <REDACTED>\r\nServer: Apache/2\r\nContent-Length: 199\r\nContent-Type: text/html; charset=iso-8859-1\r\n",
      "banner_hashes": [
        "sha256:60ffb654906b867ad8ce4b9e2992b220dfff982200132ebc4665818fcbf0875d"
      ],
      "banner_hex": "485454502f312e312034303320466f7262696464656e0d0a446174653a20203c52454441435445443e0d0a5365727665723a204170616368652f320d0a436f6e74656e742d4c656e6774683a203139390d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d69736f2d383835392d310d0a",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://91.241.61.229/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 403,
          "status_reason": "Forbidden",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8"
            },
            "Server": [
              "Apache/2"
            ],
            "Content_Length": [
              "199"
            ],
            "Content_Type": [
              "text/html; charset=iso-8859-1"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>403 Forbidden</title>"
          ],
          "body_size": 199,
          "body": "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>403 Forbidden</title>\n</head><body>\n<h1>Forbidden</h1>\n<p>You don't have permission to access this resource.</p>\n</body></html>\n",
          "body_hashes": [
            "sha256:5b13fb5957b84ef7bb9d0b6cd509c947ff6a37d67efdac2b896ddd3b908aad10",
            "sha1:832e403d42aac1fec93e4f602338544d3fd2e4f1",
            "tlsh:2ed022afe28f1029562323c02ac316c164111274b88308cc9e0af48391445bd810a55c"
          ],
          "body_hash": "sha1:832e403d42aac1fec93e4f602338544d3fd2e4f1",
          "html_title": "403 Forbidden"
        },
        "supports_http2": true
      },
      "observed_at": "2025-06-20T20:01:11.898736832Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Apache",
          "product": "HTTPD",
          "other": {
            "family": "Apache"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.145.106",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "pop3",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "+OK Dovecot DA ready.\r\n",
      "banner_hashes": [
        "sha256:6cb3733da810a334ebfc4354286c4d6b682ffd47ecbf1fa70176bb4956714a6c"
      ],
      "banner_hex": "2b4f4b20446f7665636f742044412072656164792e0d0a",
      "certificate": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "POP3S",
      "labels": [
        "email"
      ],
      "observed_at": "2025-06-20T23:32:18.081014809Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "pop3": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "start_tls": "DISPLAY_UTF8"
        },
        "banner": "+OK Dovecot DA ready.\r\n",
        "start_tls": "+OK Begin TLS negotiation now.\r\n"
      },
      "port": 110,
      "service_name": "POP3",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.41",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
          "chain_fps_sha_256": [
            "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb"
          ],
          "leaf_data": {
            "names": [
              "s4.kylos.pl"
            ],
            "subject_dn": "CN=s4.kylos.pl",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=E5",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2c273b387468e50fb6d940b30629c4dfa838a8d8b190b2c2188f30f17eaf7b58",
            "fingerprint": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
            "issuer": {
              "common_name": [
                "E5"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "s4.kylos.pl"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "pTsveQefm6d+2P0wrtVnJyBdutQpZqai8hwaMShe0Uc=",
                "y": "Ur+eZzn+306RP4GJHTw87UzQTrFsfeE3aaWPt588YSA="
              },
              "fingerprint": "7b4bd9f96b1efcc17a3bbfa493c4c01c3bebf0b00462de6122885b1a0a574d8e"
            },
            "signature": {
              "signature_algorithm": "ECDSA-SHA384",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb",
              "subject_dn": "C=US, O=Let's Encrypt, CN=E5",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891",
        "ja4s": "t130200_1303_a56c5b993250"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "imap",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.\r\n",
      "banner_hashes": [
        "sha256:2ba690a43e7506f88e79b4b02ce0c76902d0b1020821fa872c62937bad08a9f4"
      ],
      "banner_hex": "2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45204c49544552414c2b205354415254544c5320415554483d504c41494e5d20446f7665636f742044412072656164792e0d0a",
      "certificate": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
      "discovery_method": "REFRESH",
      "extended_service_name": "IMAPS",
      "imap": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.\r\n",
        "start_tls": "a001 OK Begin TLS negotiation now.\r\n"
      },
      "labels": [
        "email"
      ],
      "observed_at": "2025-06-21T05:46:47.819729017Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 143,
      "service_name": "IMAP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.119",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
          "chain_fps_sha_256": [
            "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb"
          ],
          "leaf_data": {
            "names": [
              "s4.kylos.pl"
            ],
            "subject_dn": "CN=s4.kylos.pl",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=E5",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2c273b387468e50fb6d940b30629c4dfa838a8d8b190b2c2188f30f17eaf7b58",
            "fingerprint": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
            "issuer": {
              "common_name": [
                "E5"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "s4.kylos.pl"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "pTsveQefm6d+2P0wrtVnJyBdutQpZqai8hwaMShe0Uc=",
                "y": "Ur+eZzn+306RP4GJHTw87UzQTrFsfeE3aaWPt588YSA="
              },
              "fingerprint": "7b4bd9f96b1efcc17a3bbfa493c4c01c3bebf0b00462de6122885b1a0a574d8e"
            },
            "signature": {
              "signature_algorithm": "ECDSA-SHA384",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb",
              "subject_dn": "C=US, O=Let's Encrypt, CN=E5",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891",
        "ja4s": "t130200_1303_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "475c9302dc42b2751db9edcac3b74891",
            "ja4s": "t130200_1303_a56c5b993250"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 403 Forbidden\r\nDate:  <REDACTED>\r\nServer: Apache/2\r\nContent-Length: 199\r\nContent-Type: text/html; charset=iso-8859-1\r\n",
      "banner_hashes": [
        "sha256:60ffb654906b867ad8ce4b9e2992b220dfff982200132ebc4665818fcbf0875d"
      ],
      "banner_hex": "485454502f312e312034303320466f7262696464656e0d0a446174653a20203c52454441435445443e0d0a5365727665723a204170616368652f320d0a436f6e74656e742d4c656e6774683a203139390d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d69736f2d383835392d310d0a",
      "certificate": "90b5f716d9b32441e2517e8cab78b64aa5f776fe1d5534e5af8d54a5f9aea8c8",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://91.241.61.229/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 403,
          "status_reason": "Forbidden",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8"
            },
            "Server": [
              "Apache/2"
            ],
            "Content_Length": [
              "199"
            ],
            "Content_Type": [
              "text/html; charset=iso-8859-1"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>403 Forbidden</title>"
          ],
          "body_size": 199,
          "body": "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>403 Forbidden</title>\n</head><body>\n<h1>Forbidden</h1>\n<p>You don't have permission to access this resource.</p>\n</body></html>\n",
          "body_hashes": [
            "sha256:5b13fb5957b84ef7bb9d0b6cd509c947ff6a37d67efdac2b896ddd3b908aad10",
            "sha1:832e403d42aac1fec93e4f602338544d3fd2e4f1",
            "tlsh:2ed022afe28f1029562323c02ac316c164111274b88308cc9e0af48391445bd810a55c"
          ],
          "body_hash": "sha1:832e403d42aac1fec93e4f602338544d3fd2e4f1",
          "html_title": "403 Forbidden"
        },
        "supports_http2": true
      },
      "observed_at": "2025-06-21T14:08:15.158383653Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Apache",
          "product": "HTTPD",
          "other": {
            "family": "Apache"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.119",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "90b5f716d9b32441e2517e8cab78b64aa5f776fe1d5534e5af8d54a5f9aea8c8",
          "chain_fps_sha_256": [
            "821cc55ce7ec5c74febb42f624eb6a36c478215a31ed67e3cf723a67e8c75eba",
            "38392f17ce7b682c198d29c6e71d2740964a2074c8d2558e6cff64c27823f129"
          ],
          "leaf_data": {
            "names": [
              "adamedtechnology.kylos.pl",
              "autodiscover.adamedtechnology.kylos.pl",
              "cpanel.adamedtechnology.kylos.pl",
              "cpcalendars.adamedtechnology.kylos.pl",
              "cpcontacts.adamedtechnology.kylos.pl",
              "mail.adamedtechnology.kylos.pl",
              "webdisk.adamedtechnology.kylos.pl",
              "webmail.adamedtechnology.kylos.pl",
              "www.adamedtechnology.kylos.pl"
            ],
            "subject_dn": "CN=adamedtechnology.kylos.pl",
            "issuer_dn": "C=US, ST=TX, L=Houston, O=cPanel\\, Inc., CN=cPanel\\, Inc. Certification Authority",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "f6700cacd5ecb7dcccc439b8c1177de01843a84ae4cdd73fff6da14b1c30cffa",
            "fingerprint": "90b5f716d9b32441e2517e8cab78b64aa5f776fe1d5534e5af8d54a5f9aea8c8",
            "issuer": {
              "common_name": [
                "cPanel, Inc. Certification Authority"
              ],
              "locality": [
                "Houston"
              ],
              "organization": [
                "cPanel, Inc."
              ],
              "province": [
                "TX"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "adamedtechnology.kylos.pl"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "pDB1B4hq2D5gYCE1lGNkWGfxRKmTcoIB6ANybXJcCn4O6Q2tQ8W6LvOtHACDv24P50bczh3KM89hMfgTHjnbi0Yn7P2MDyULuqAN/EEGIOJAxEblzzICwnEBVHr/SxdKrD8oiMtcNUqzJuT90O3XwK5EuvKazLd/jfNp+tPywD3JdyNlfQd6bKW40mIrapbQXKUeS9Z/I+unG+5sA+W1AKDBG/P45Huc+R8zSHUNTd+Bt2t1E0vIuSSf/4qFYjefyyihTmcjYYZ6IIAKSaxyS61KAwu+bj+QpAox6PP4yaSx0T72vD1o+ZRES3vxGCZT6EOaQ8BNyzEZwEW8LI/Qcw==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "7d98a1b38f1823758b38f5e61362c61eb79f9dbec2be918638fa3309282f7293"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "821cc55ce7ec5c74febb42f624eb6a36c478215a31ed67e3cf723a67e8c75eba",
              "subject_dn": "C=US, ST=TX, L=Houston, O=cPanel\\, Inc., CN=cPanel\\, Inc. Certification Authority",
              "issuer_dn": "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority"
            },
            {
              "fingerprint": "38392f17ce7b682c198d29c6e71d2740964a2074c8d2558e6cff64c27823f129",
              "subject_dn": "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority",
              "issuer_dn": "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "15af977ce25de452b96affa2addb1036",
            "ja4s": "t130200_1302_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "303951d4c50efb2e991652225a6f02b1",
            "ja4s": "t120200_c02f_344b4dce5a52"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "smtp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 s4.kylos.pl ESMTP Exim 4.98.2 Sat, 21 Jun 2025 08:37:25 +0200\r\n",
      "banner_hashes": [
        "sha256:390ce86a94a2313c59a79e905451402aaa26c97ac38360c81cdfb46895e29611"
      ],
      "banner_hex": "3232302073342e6b796c6f732e706c2045534d5450204578696d20342e39382e32205361742c203231204a756e20323032352030383a33373a3235202b303230300d0a",
      "certificate": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "SMTPS",
      "labels": [
        "email"
      ],
      "observed_at": "2025-06-21T06:37:24.940044095Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 465,
      "service_name": "SMTP",
      "smtp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "ehlo": "DISPLAY_UTF8"
        },
        "banner": "220 s4.kylos.pl ESMTP Exim 4.98.2 Sat, 21 Jun 2025 08:37:25 +0200\r\n",
        "ehlo": "250-s4.kylos.pl Hello www.censys.io [167.94.146.61]\r\n250-SIZE 52428800\r\n250-LIMITS MAILMAX=100 RCPTMAX=150\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250 HELP\r\n"
      },
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:exim:exim:4.98.2:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "exim",
          "product": "exim",
          "version": "4.98.2",
          "other": {
            "family": "exim"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.61",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
          "chain_fps_sha_256": [
            "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb"
          ],
          "leaf_data": {
            "names": [
              "s4.kylos.pl"
            ],
            "subject_dn": "CN=s4.kylos.pl",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=E5",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2c273b387468e50fb6d940b30629c4dfa838a8d8b190b2c2188f30f17eaf7b58",
            "fingerprint": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
            "issuer": {
              "common_name": [
                "E5"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "s4.kylos.pl"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "pTsveQefm6d+2P0wrtVnJyBdutQpZqai8hwaMShe0Uc=",
                "y": "Ur+eZzn+306RP4GJHTw87UzQTrFsfeE3aaWPt588YSA="
              },
              "fingerprint": "7b4bd9f96b1efcc17a3bbfa493c4c01c3bebf0b00462de6122885b1a0a574d8e"
            },
            "signature": {
              "signature_algorithm": "ECDSA-SHA384",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb",
              "subject_dn": "C=US, O=Let's Encrypt, CN=E5",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "15af977ce25de452b96affa2addb1036",
            "ja4s": "t130200_1302_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "f9a66afdd1f499d415ca470974ec00c8",
            "ja4s": "t120200_c02b_344b4dce5a52"
          }
        ]
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "smtp",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "220 s4.kylos.pl ESMTP Exim 4.98.2 Sat, 21 Jun 2025 14:35:54 +0200\r\n",
      "banner_hashes": [
        "sha256:a762aad7304ab87b7baaa82b987ce4a4d3a114c6e95cc25b784d15ebe6bf6a05"
      ],
      "banner_hex": "3232302073342e6b796c6f732e706c2045534d5450204578696d20342e39382e32205361742c203231204a756e20323032352031343a33353a3534202b303230300d0a",
      "certificate": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "SMTP-STARTTLS",
      "labels": [
        "email"
      ],
      "observed_at": "2025-06-21T12:35:54.257438752Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 587,
      "service_name": "SMTP",
      "smtp": {
        "_encoding": {
          "banner": "DISPLAY_UTF8",
          "ehlo": "DISPLAY_UTF8",
          "start_tls": "DISPLAY_UTF8"
        },
        "banner": "220 s4.kylos.pl ESMTP Exim 4.98.2 Sat, 21 Jun 2025 14:35:54 +0200\r\n",
        "ehlo": "250-s4.kylos.pl Hello www.censys.io [167.94.138.48]\r\n250-SIZE 52428800\r\n250-LIMITS MAILMAX=100 RCPTMAX=150\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-PIPECONNECT\r\n250-AUTH PLAIN LOGIN\r\n250-STARTTLS\r\n250 HELP\r\n",
        "start_tls": "220 TLS go ahead\r\n"
      },
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:exim:exim:4.98.2:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "exim",
          "product": "exim",
          "version": "4.98.2",
          "other": {
            "family": "exim"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.48",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
          "chain_fps_sha_256": [
            "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb"
          ],
          "leaf_data": {
            "names": [
              "s4.kylos.pl"
            ],
            "subject_dn": "CN=s4.kylos.pl",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=E5",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2c273b387468e50fb6d940b30629c4dfa838a8d8b190b2c2188f30f17eaf7b58",
            "fingerprint": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
            "issuer": {
              "common_name": [
                "E5"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "s4.kylos.pl"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "pTsveQefm6d+2P0wrtVnJyBdutQpZqai8hwaMShe0Uc=",
                "y": "Ur+eZzn+306RP4GJHTw87UzQTrFsfeE3aaWPt588YSA="
              },
              "fingerprint": "7b4bd9f96b1efcc17a3bbfa493c4c01c3bebf0b00462de6122885b1a0a574d8e"
            },
            "signature": {
              "signature_algorithm": "ECDSA-SHA384",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb",
              "subject_dn": "C=US, O=Let's Encrypt, CN=E5",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "15af977ce25de452b96affa2addb1036",
        "ja4s": "t130200_1302_a56c5b993250"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "imap",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot DA ready.\r\n",
      "banner_hashes": [
        "sha256:05a2eae234f0f23ce6ca35ca261ed34ddbfe17b9854892a7d7e00cde59c98d0f"
      ],
      "banner_hex": "2a204f4b205b4341504142494c49545920494d41503472657631205341534c2d4952204c4f47494e2d524546455252414c5320494420454e41424c452049444c45204c49544552414c2b20415554483d504c41494e5d20446f7665636f742044412072656164792e0d0a",
      "certificate": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
      "extended_service_name": "IMAPS",
      "imap": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot DA ready.\r\n"
      },
      "labels": [
        "email"
      ],
      "observed_at": "2025-06-21T03:58:24.752043872Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 993,
      "service_name": "IMAP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.48",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
          "chain_fps_sha_256": [
            "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb"
          ],
          "leaf_data": {
            "names": [
              "s4.kylos.pl"
            ],
            "subject_dn": "CN=s4.kylos.pl",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=E5",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2c273b387468e50fb6d940b30629c4dfa838a8d8b190b2c2188f30f17eaf7b58",
            "fingerprint": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
            "issuer": {
              "common_name": [
                "E5"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "s4.kylos.pl"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "pTsveQefm6d+2P0wrtVnJyBdutQpZqai8hwaMShe0Uc=",
                "y": "Ur+eZzn+306RP4GJHTw87UzQTrFsfeE3aaWPt588YSA="
              },
              "fingerprint": "7b4bd9f96b1efcc17a3bbfa493c4c01c3bebf0b00462de6122885b1a0a574d8e"
            },
            "signature": {
              "signature_algorithm": "ECDSA-SHA384",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb",
              "subject_dn": "C=US, O=Let's Encrypt, CN=E5",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891",
        "ja4s": "t130200_1303_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "475c9302dc42b2751db9edcac3b74891",
            "ja4s": "t130200_1303_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "954f7e9207d4c9012fd0692885732b12",
            "ja4s": "t120200_cca9_344b4dce5a52"
          }
        ]
      },
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "pop3",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "+OK Dovecot DA ready.\r\n",
      "banner_hashes": [
        "sha256:6cb3733da810a334ebfc4354286c4d6b682ffd47ecbf1fa70176bb4956714a6c"
      ],
      "banner_hex": "2b4f4b20446f7665636f742044412072656164792e0d0a",
      "certificate": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
      "discovery_method": "PREDICTIVE_METHOD_7",
      "extended_service_name": "POP3S",
      "labels": [
        "email"
      ],
      "observed_at": "2025-06-21T08:03:02.195861903Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "pop3": {
        "_encoding": {
          "banner": "DISPLAY_UTF8"
        },
        "banner": "+OK Dovecot DA ready.\r\n"
      },
      "port": 995,
      "service_name": "POP3",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Dovecot",
          "product": "Dovecot",
          "other": {
            "family": "Dovecot"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.208",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
          "chain_fps_sha_256": [
            "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb"
          ],
          "leaf_data": {
            "names": [
              "s4.kylos.pl"
            ],
            "subject_dn": "CN=s4.kylos.pl",
            "issuer_dn": "C=US, O=Let's Encrypt, CN=E5",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2c273b387468e50fb6d940b30629c4dfa838a8d8b190b2c2188f30f17eaf7b58",
            "fingerprint": "c8b05471d8fcea6d4c4a8fc14f1dc204504bf6a3887f1f73e5770ee56f8fb3d0",
            "issuer": {
              "common_name": [
                "E5"
              ],
              "organization": [
                "Let's Encrypt"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "s4.kylos.pl"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "pTsveQefm6d+2P0wrtVnJyBdutQpZqai8hwaMShe0Uc=",
                "y": "Ur+eZzn+306RP4GJHTw87UzQTrFsfeE3aaWPt588YSA="
              },
              "fingerprint": "7b4bd9f96b1efcc17a3bbfa493c4c01c3bebf0b00462de6122885b1a0a574d8e"
            },
            "signature": {
              "signature_algorithm": "ECDSA-SHA384",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "5dfdb3cf31b26f23d87c09f3a0cef642f64069a9fb7cfe29270bb5dc0f1e16bb",
              "subject_dn": "C=US, O=Let's Encrypt, CN=E5",
              "issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891",
        "ja4s": "t130200_1303_a56c5b993250"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.0 400 Bad Request\r\nx-use-https: yes\r\nConent-Type: text/html\r\n",
      "banner_hashes": [
        "sha256:779214d682d10ff2786013add238ae98ae5a8725faf5e4dfd573b36ab114e153"
      ],
      "banner_hex": "485454502f312e30203430302042616420526571756573740d0a782d7573652d68747470733a207965730d0a436f6e656e742d547970653a20746578742f68746d6c0d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://91.241.61.229:2222/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.0",
          "status_code": 400,
          "status_reason": "Bad Request",
          "headers": {
            "x_use_https": [
              "yes"
            ],
            "_encoding": {
              "x_use_https": "DISPLAY_UTF8",
              "Conent_Type": "DISPLAY_UTF8"
            },
            "Conent_Type": [
              "text/html"
            ]
          },
          "body_size": 70,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "<html>use https\r<script>location.protocol = \"https:\";</script></html>\n",
          "body_hashes": [
            "sha256:a84ed39e9ff568d1847d756c4f3be41eef89ffea01e4d659b0ffad802f8f4663",
            "sha1:a4a5f557e06961af95dacc60100678307357488c",
            "tlsh:07a002ea5d29d2941ac115c1dce8f10de63f408d9951e92779d2902055053fd0e46484"
          ],
          "body_hash": "sha1:a4a5f557e06961af95dacc60100678307357488c"
        },
        "supports_http2": false
      },
      "observed_at": "2025-06-21T10:19:52.289957637Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 2222,
      "service_name": "HTTP",
      "source_ip": "167.94.138.37",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "mysql",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "5.5.5-10.6.22-MariaDB",
      "banner_hashes": [
        "sha256:dfe46d77e709ecf98b8c464f2aeca1ce7f551fa5e6f53e7f5a5ed8e9ae76e7af"
      ],
      "banner_hex": "352e352e352d31302e362e32322d4d617269614442",
      "discovery_method": "PREDICTIVE_METHOD_7",
      "extended_service_name": "MYSQL",
      "labels": [
        "database"
      ],
      "mysql": {
        "protocol_version": 10,
        "server_version": "5.5.5-10.6.22-MariaDB",
        "connection_id": 4557009,
        "_encoding": {
          "auth_plugin_data": "DISPLAY_HEX"
        },
        "auth_plugin_data": "6a282626293c342f2e39704d6f683c312255657b00",
        "character_set": 8,
        "status_flags": {
          "SERVER_STATUS_AUTOCOMMIT": true
        },
        "capability_flags": {
          "CLIENT_RESERVED": true,
          "CLIENT_MULTI_STATEMENTS": true,
          "CLIENT_PROTOCOL_41": true,
          "CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS": true,
          "CLIENT_CONNECT_WITH_DB": true,
          "CLIENT_SECURE_CONNECTION": true,
          "CLIENT_ODBC": true,
          "CLIENT_LOCAL_FILES": true,
          "CLIENT_IGNORE_SPACE": true,
          "CLIENT_PLUGIN_AUTH_LEN_ENC_CLIENT_DATA": true,
          "CLIENT_IGNORE_SIGPIPE": true,
          "CLIENT_DEPRECATED_EOF": true,
          "CLIENT_FOUND_ROWS": true,
          "CLIENT_SESSION_TRACK": true,
          "CLIENT_INTERACTIVE": true,
          "CLIENT_PLUGIN_AUTH": true,
          "CLIENT_MULTI_RESULTS": true,
          "CLIENT_CONNECT_ATTRS": true,
          "CLIENT_LONG_FLAG": true,
          "CLIENT_TRANSACTIONS": true,
          "CLIENT_COMPRESS": true,
          "CLIENT_PS_MULTI_RESULTS": true,
          "CLIENT_NO_SCHEMA": true
        },
        "auth_plugin_name": "mysql_native_password",
        "error_code": 0
      },
      "observed_at": "2025-06-21T01:45:31.449563099Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 3306,
      "service_name": "MYSQL",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:mariadb:mariadb:10.6.22:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "MariaDB",
          "product": "MariaDB",
          "version": "10.6.22",
          "other": {
            "family": "MySQL"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.61",
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "ssh",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u5",
      "banner_hashes": [
        "sha256:2edfe89e36e2ad0e65d92b0a55b2dc1365a4b7cbdc7794ae3dbae2310a5075c0"
      ],
      "banner_hex": "5353482d322e302d4f70656e5353485f382e3470312044656269616e2d352b64656231317535",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_3",
      "extended_service_name": "SSH",
      "labels": [
        "remote-access"
      ],
      "observed_at": "2025-06-20T20:41:48.905504732Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 40022,
      "service_name": "SSH",
      "source_ip": "162.142.125.117",
      "ssh": {
        "endpoint_id": {
          "_encoding": {
            "raw": "DISPLAY_UTF8"
          },
          "raw": "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u5",
          "protocol_version": "2.0",
          "software_version": "OpenSSH_8.4p1",
          "comment": "Debian-5+deb11u5"
        },
        "kex_init_message": {
          "kex_algorithms": [
            "curve25519-sha256",
            "[email protected]",
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "diffie-hellman-group-exchange-sha256",
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group14-sha256",
            "[email protected]"
          ],
          "host_key_algorithms": [
            "rsa-sha2-512",
            "rsa-sha2-256",
            "ssh-rsa",
            "ecdsa-sha2-nistp256",
            "ssh-ed25519"
          ],
          "client_to_server_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]"
          ],
          "server_to_client_ciphers": [
            "[email protected]",
            "aes128-ctr",
            "aes192-ctr",
            "aes256-ctr",
            "[email protected]",
            "[email protected]"
          ],
          "client_to_server_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "server_to_client_macs": [
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "[email protected]",
            "hmac-sha2-256",
            "hmac-sha2-512",
            "hmac-sha1"
          ],
          "client_to_server_compression": [
            "none",
            "[email protected]"
          ],
          "server_to_client_compression": [
            "none",
            "[email protected]"
          ],
          "first_kex_follows": false
        },
        "algorithm_selection": {
          "kex_algorithm": "[email protected]",
          "host_key_algorithm": "ecdsa-sha2-nistp256",
          "client_to_server_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          },
          "server_to_client_alg_group": {
            "cipher": "aes128-ctr",
            "mac": "hmac-sha2-256",
            "compression": "none"
          }
        },
        "server_host_key": {
          "fingerprint_sha256": "03f966149bf6f68eb676ed6af1c6e2639ed695bc5fff581b85f5527c64b898da",
          "ecdsa_public_key": {
            "_encoding": {
              "b": "DISPLAY_BASE64",
              "gx": "DISPLAY_BASE64",
              "gy": "DISPLAY_BASE64",
              "n": "DISPLAY_BASE64",
              "p": "DISPLAY_BASE64",
              "x": "DISPLAY_BASE64",
              "y": "DISPLAY_BASE64"
            },
            "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
            "curve": "P-256",
            "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
            "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
            "length": 256,
            "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
            "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
            "x": "3thIBAA626i3xKEJohB7+XyhpKehynHEYCQEfhTp9Bw=",
            "y": "hUGqTpzUbWvxOcwfvwuKiluR1IaHjePllqbkD+c3p8E="
          }
        },
        "hassh_fingerprint": "779664e66160bf75999f091fce5edb5a"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Poland",
    "country_code": "PL",
    "city": "Jaworzno",
    "postal_code": "43-600",
    "timezone": "Europe/Warsaw",
    "province": "Silesia",
    "coordinates": {
      "latitude": 50.20528,
      "longitude": 19.27498
    }
  },
  "location_updated_at": "2025-06-09T13:50:48.385921699Z",
  "autonomous_system": {
    "asn": 203417,
    "description": "LH",
    "bgp_prefix": "91.241.60.0/22",
    "name": "LH",
    "country_code": "PL"
  },
  "autonomous_system_updated_at": "2025-06-10T16:47:59.299268464Z",
  "whois": {
    "network": {
      "handle": "KDC-NET1",
      "name": "Kylos sp. z o.o.",
      "cidrs": [
        "91.241.60.0/22"
      ],
      "created": "2012-07-12T00:00:00Z",
      "updated": "2022-04-06T00:00:00Z"
    },
    "organization": {
      "handle": "ORG-KA174-RIPE",
      "name": "Kylos sp. z o.o.",
      "address": "ul. Wroblewskiego 18\\n93-578 Lodz\\nPoland",
      "abuse_contacts": [
        {
          "handle": "AR24765-RIPE",
          "name": "Abuse-C Role",
          "email": "[email protected]"
        }
      ],
      "admin_contacts": [
        {
          "handle": "MN48505-RIPE",
          "name": "Mariusz Nowosielski",
          "email": "[email protected]"
        },
        {
          "handle": "TK815-RIPE",
          "name": "Tomasz Kacprzak",
          "email": "[email protected]"
        }
      ]
    }
  },
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
    "part": "o",
    "product": "linux",
    "source": "OSI_TRANSPORT_LAYER"
  },
  "dns": {
    "names": [
      "cpcalendars.adamedtechnology.kylos.pl",
      "ftp.adamedtechnology.com",
      "cpanel.adamedtechnology.kylos.pl",
      "www.adamedtechnology.com",
      "adamedtechnology.com.adamedtechnology.kylos.pl",
      "adamedtechnology.com",
      "smtp.adamedtechnology.com",
      "pop.adamedtechnology.com",
      "ip-91.241.61.229.kylos.net.pl",
      "adamedtechnology.kylos.pl",
      "www.adamedtechnology.com.adamedtechnology.kylos.pl",
      "cpcontacts.adamedtechnology.kylos.pl",
      "www.adamedtechnology.kylos.pl",
      "autodiscover.adamedtechnology.kylos.pl",
      "webmail.adamedtechnology.kylos.pl",
      "mail.adamedtechnology.com",
      "mail.adamedtechnology.kylos.pl",
      "webdisk.adamedtechnology.kylos.pl"
    ],
    "records": {
      "cpcalendars.adamedtechnology.kylos.pl": {
        "record_type": "A",
        "resolved_at": "2025-06-09T23:39:41.599521367Z"
      },
      "www.adamedtechnology.kylos.pl": {
        "record_type": "CNAME",
        "resolved_at": "2025-06-19T01:16:09.884997001Z"
      },
      "autodiscover.adamedtechnology.kylos.pl": {
        "record_type": "A",
        "resolved_at": "2025-06-12T01:42:56.050391188Z"
      },
      "ftp.adamedtechnology.com": {
        "record_type": "A",
        "resolved_at": "2025-06-14T13:53:02.369117683Z"
      },
      "webdisk.adamedtechnology.kylos.pl": {
        "record_type": "A",
        "resolved_at": "2025-06-15T02:48:50.043104905Z"
      },
      "smtp.adamedtechnology.com": {
        "record_type": "A",
        "resolved_at": "2025-06-08T14:00:24.449230767Z"
      },
      "mail.adamedtechnology.kylos.pl": {
        "record_type": "CNAME",
        "resolved_at": "2025-06-09T23:39:41.931580367Z"
      },
      "www.adamedtechnology.com.adamedtechnology.kylos.pl": {
        "record_type": "A",
        "resolved_at": "2025-06-17T02:05:27.035964036Z"
      },
      "cpanel.adamedtechnology.kylos.pl": {
        "record_type": "A",
        "resolved_at": "2025-05-24T00:24:14.601144828Z"
      },
      "pop.adamedtechnology.com": {
        "record_type": "A",
        "resolved_at": "2025-06-06T13:21:25.364743219Z"
      },
      "adamedtechnology.kylos.pl": {
        "record_type": "A",
        "resolved_at": "2025-06-15T02:48:49.644806333Z"
      },
      "webmail.adamedtechnology.kylos.pl": {
        "record_type": "A",
        "resolved_at": "2025-06-15T02:48:50.305235911Z"
      },
      "cpcontacts.adamedtechnology.kylos.pl": {
        "record_type": "A",
        "resolved_at": "2025-06-07T00:47:38.829576354Z"
      },
      "adamedtechnology.com": {
        "record_type": "A",
        "resolved_at": "2025-06-09T14:14:37.444935689Z"
      },
      "ip-91.241.61.229.kylos.net.pl": {
        "record_type": "A",
        "resolved_at": "2025-06-11T01:08:18.861119417Z"
      },
      "www.adamedtechnology.com": {
        "record_type": "A",
        "resolved_at": "2025-06-20T13:52:38.534572285Z"
      },
      "adamedtechnology.com.adamedtechnology.kylos.pl": {
        "record_type": "A",
        "resolved_at": "2025-06-07T00:47:37.723331171Z"
      },
      "mail.adamedtechnology.com": {
        "record_type": "A",
        "resolved_at": "2025-06-18T14:05:04.950162102Z"
      }
    },
    "reverse_dns": {
      "names": [
        "ip-91.241.61.229.kylos.net.pl"
      ],
      "resolved_at": "2025-05-30T14:45:57.366480009Z"
    }
  },
  "last_updated_at": "2025-06-21T15:47:17.454Z",
  "labels": [
    "database",
    "email",
    "file-sharing",
    "remote-access"
  ]
}