Returning 10 result(s) out of 7,636,516 in 0.093 second(s)

  • 192.185.73.145:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:16 UTC

    • IP
      192.185.73.145
      Alternative IP(s)
      192.185.93.75
      Network
      192.185.64.0/18
      Domain(s)
      websitewelcome.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      ns412.websitewelcome.com
      ASN
      AS19871
      Organization
      NETWORK-SOLUTIONS-HOSTING
      Protocol
      imap Cert not expired imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Sectigo RSA Domain Validation Secure Server CA
      Issuer Organization
      Sectigo Limited
      Subject Common Name
      *.websitewelcome.com
      Subject Alt Name
      *.websitewelcome.com websitewelcome.com
      SHA256 Fingerprint
      a939420cd005be915c873a28dd6ce71ad9d31f28f1852d37a895e2982f3c90ff
      Validity Not Before
      2024-09-03T00:00:00Z
      Validity Not After
      2025-09-03T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8c74d9dabaf6baef8f7e300cf9173a8d
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:16.000Z",
         "alternativeip" : [
            "192.185.93.75"
         ],
         "app" : {
            "length" : 124
         },
         "asn" : "AS19871",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
         "datamd5" : "8c74d9dabaf6baef8f7e300cf9173a8d",
         "datammh3" : -1126255565,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "websitewelcome.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "1a27990b6b70418c54db2a75ee2760ae",
            "sha1" : "5894e073fac0e5108658520ff58e807c368ebe41",
            "sha256" : "a939420cd005be915c873a28dd6ce71ad9d31f28f1852d37a895e2982f3c90ff"
         },
         "geolocus" : {
            "asn" : "AS19871",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "endurance.com",
               "hostgator.com",
               "unifiedlayer.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HGBLOCK-10",
            "organization" : "HostGator.com LLC",
            "subnet" : "192.185.64.0/18"
         },
         "host" : [
            "ns412"
         ],
         "hostname" : [
            "ns412.websitewelcome.com",
            "websitewelcome.com"
         ],
         "ip" : "192.185.73.145",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Salford",
            "commonname" : "Sectigo RSA Domain Validation Secure Server CA",
            "country" : "GB",
            "organization" : "Sectigo Limited"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "NETWORK-SOLUTIONS-HOSTING",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 993,
         "product" : "Dovecot",
         "productvendor" : "Dovecot",
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "ns412.websitewelcome.com"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "6b:6d:cc:d8:d5:42:52:e3:6a:2d:01:e6:aa:ad:1a:2b",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "altname" : [
               "*.websitewelcome.com",
               "websitewelcome.com"
            ],
            "commonname" : "*.websitewelcome.com"
         },
         "subnet" : "192.185.64.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-09-03T23:59:59Z",
            "notbefore" : "2024-09-03T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 50.87.153.128:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:14 UTC

    • IP
      50.87.153.128
      Alternative IP(s)
      192.185.93.75
      Network
      50.87.0.0/16
      Domain(s)
      unifiedlayer.com websitewelcome.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      50-87-153-128.unifiedlayer.com
      ASN
      AS46606
      Organization
      UNIFIEDLAYER-AS-1
      Protocol
      imap Cert not expired imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Sectigo RSA Domain Validation Secure Server CA
      Issuer Organization
      Sectigo Limited
      Subject Common Name
      *.websitewelcome.com
      Subject Alt Name
      *.websitewelcome.com websitewelcome.com
      SHA256 Fingerprint
      a939420cd005be915c873a28dd6ce71ad9d31f28f1852d37a895e2982f3c90ff
      Validity Not Before
      2024-09-03T00:00:00Z
      Validity Not After
      2025-09-03T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8c74d9dabaf6baef8f7e300cf9173a8d
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:14.000Z",
         "alternativeip" : [
            "192.185.93.75"
         ],
         "app" : {
            "length" : 124
         },
         "asn" : "AS46606",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
         "datamd5" : "8c74d9dabaf6baef8f7e300cf9173a8d",
         "datammh3" : -1126255565,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "unifiedlayer.com",
            "websitewelcome.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "1a27990b6b70418c54db2a75ee2760ae",
            "sha1" : "5894e073fac0e5108658520ff58e807c368ebe41",
            "sha256" : "a939420cd005be915c873a28dd6ce71ad9d31f28f1852d37a895e2982f3c90ff"
         },
         "geolocus" : {
            "asn" : "AS46606",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "bluehost.com",
               "endurance.com",
               "unifiedlayer.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "UNIFIEDLAYER-NETWORK-9",
            "organization" : "Unified Layer",
            "subnet" : "50.87.0.0/16"
         },
         "host" : [
            "50-87-153-128"
         ],
         "hostname" : [
            "50-87-153-128.unifiedlayer.com",
            "websitewelcome.com"
         ],
         "ip" : "50.87.153.128",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Salford",
            "commonname" : "Sectigo RSA Domain Validation Secure Server CA",
            "country" : "GB",
            "organization" : "Sectigo Limited"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "UNIFIEDLAYER-AS-1",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 993,
         "product" : "Dovecot",
         "productvendor" : "Dovecot",
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "50-87-153-128.unifiedlayer.com"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "6b:6d:cc:d8:d5:42:52:e3:6a:2d:01:e6:aa:ad:1a:2b",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "altname" : [
               "*.websitewelcome.com",
               "websitewelcome.com"
            ],
            "commonname" : "*.websitewelcome.com"
         },
         "subnet" : "50.87.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-09-03T23:59:59Z",
            "notbefore" : "2024-09-03T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 216.238.83.252:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:13 UTC

    • IP
      216.238.83.252
      Alternative IP(s)
      104.21.45.67 172.67.210.191 2606:4700:3036:0:0:0:6815:2d43 2606:4700:3037:0:0:0:ac43:d2bf
      Network
      216.238.64.0/18
      Domain(s)
      simeccnc.com vultrusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      216.238.83.252.vultrusercontent.com
      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      imap Cert expired imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      simeccnc.com
      Issuer Organization
      Vesta Control Panel
      Subject Organization
      Vesta Control Panel
      Subject Email
      simeccnc.finanzaz@gmail.com
      Subject Common Name
      simeccnc.com
      SHA256 Fingerprint
      31434203beed6aa2c23f4d0b7590202458e2c32f7f8c5dfc7c0c2ce3ed64c548
      Validity Not Before
      2022-03-01T06:01:41Z
      Validity Not After
      2023-03-01T06:01:41Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b02f6380082424993d4810d54636953b
    • * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:13.000Z",
         "alternativeip" : [
            "104.21.45.67",
            "172.67.210.191",
            "2606:4700:3036:0:0:0:6815:2d43",
            "2606:4700:3037:0:0:0:ac43:d2bf"
         ],
         "app" : {
            "length" : 114
         },
         "asn" : "AS20473",
         "city" : "Quer\u00e9taro City",
         "country" : "MX",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
         "datamd5" : "b02f6380082424993d4810d54636953b",
         "datammh3" : 858849024,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "simeccnc.com",
            "vultrusercontent.com"
         ],
         "fingerprint" : {
            "md5" : "e97f704985594638e6d01b76ca004abd",
            "sha1" : "27768b5f21840fd17ba35f97ef9958811a645a8b",
            "sha256" : "31434203beed6aa2c23f4d0b7590202458e2c32f7f8c5dfc7c0c2ce3ed64c548"
         },
         "geolocus" : {
            "asn" : "AS20473",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "constant.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "VULTR",
            "organization" : "The Constant Company, LLC",
            "subnet" : "216.238.64.0/19"
         },
         "host" : [
            216
         ],
         "hostname" : [
            "216.238.83.252.vultrusercontent.com",
            "simeccnc.com"
         ],
         "ip" : "216.238.83.252",
         "ipv6" : "false",
         "issuer" : {
            "city" : "San Francisco",
            "commonname" : "simeccnc.com",
            "country" : "US",
            "email" : "simeccnc.finanzaz@gmail.com",
            "organization" : "Vesta Control Panel",
            "organizationalunit" : "IT"
         },
         "latitude" : "20.5762",
         "location" : "20.5762,-100.2951",
         "longitude" : "-100.2951",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-VULTR",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 993,
         "product" : "Dovecot",
         "productvendor" : "Dovecot",
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 4096
         },
         "reverse" : [
            "216.238.83.252.vultrusercontent.com"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "df:03:f8:3a:f5:dc:65:a5",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subdomains" : [
            "238.83.252.vultrusercontent.com",
            "252.vultrusercontent.com",
            "83.252.vultrusercontent.com"
         ],
         "subject" : {
            "city" : "San Francisco",
            "commonname" : "simeccnc.com",
            "country" : "US",
            "email" : "simeccnc.finanzaz@gmail.com",
            "organization" : "Vesta Control Panel",
            "organizationalunit" : "IT"
         },
         "subnet" : "216.238.64.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2023-03-01T06:01:41Z",
            "notbefore" : "2022-03-01T06:01:41Z"
         },
         "version" : "v1",
         "wildcard" : "false"
      }
      
  • 43.153.21.30:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:12 UTC

    • IP
      43.153.21.30
      Network
      43.153.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      ASN
      AS132203
      Organization
      Tencent Building, Kejizhongyi Avenue
      Protocol
      imap Cert not expired imap
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      sh
      Issuer Organization
      sh.sh
      Subject Organization
      sh.sh
      Subject Email
      aaa@qq.com
      Subject Common Name
      sh
      SHA256 Fingerprint
      cf7700a780ec545e39c54df7a395892a5c00d2a1c16f65d9842ee920d691799f
      Validity Not Before
      2022-03-14T08:00:26Z
      Validity Not After
      2032-03-11T08:00:26Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      cd9219e6738cb1e9282c73991cbada5c
    • * OK IMAPrev1
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:12.000Z",
         "app" : {
            "length" : 15
         },
         "asn" : "AS132203",
         "ca" : "true",
         "city" : "Santa Clara",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK IMAPrev1\r\n",
         "datamd5" : "cd9219e6738cb1e9282c73991cbada5c",
         "datammh3" : -879302560,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "fingerprint" : {
            "md5" : "0353c67e184fed973c84ac7f53be2685",
            "sha1" : "a0b3188be3c691cd6eaca9efc1bb866466270997",
            "sha256" : "cf7700a780ec545e39c54df7a395892a5c00d2a1c16f65d9842ee920d691799f"
         },
         "geolocus" : {
            "asn" : "AS132203",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "ACEVILLEPTELTD-SG",
            "organization" : "ACEVILLE PTE.LTD.",
            "subnet" : "43.153.0.0/17"
         },
         "ip" : "43.153.21.30",
         "ipv6" : "false",
         "issuer" : {
            "city" : "sh",
            "commonname" : "sh",
            "country" : "cn",
            "email" : "aaa@qq.com",
            "organization" : "sh.sh",
            "organizationalunit" : "hwsjx.com"
         },
         "latitude" : "37.3530",
         "location" : "37.3530,-121.9543",
         "longitude" : "-121.9543",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Tencent Building, Kejizhongyi Avenue",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 993,
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "seen_date" : "2024-11-21",
         "serial" : "f8:e1:f4:bf:f3:34:14:1f",
         "signature" : {
            "algorithm" : "sha1WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "city" : "sh",
            "commonname" : "sh",
            "country" : "cn",
            "email" : "aaa@qq.com",
            "organization" : "sh.sh",
            "organizationalunit" : "hwsjx.com"
         },
         "subnet" : "43.153.0.0/16",
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2032-03-11T08:00:26Z",
            "notbefore" : "2022-03-14T08:00:26Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 103.130.216.39:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:12 UTC

    • IP
      103.130.216.39
      Alternative IP(s)
      103.130.216.161
      Network
      103.130.216.0/22
      Domain(s)
      tino.org tino.vn
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      static-39-216-130-103.tino.vn
      ASN
      AS135951
      Organization
      Webico Company Limited
      Protocol
      imap Cert not expired imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      R11
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      h216161.tino.org
      Subject Alt Name
      h216161.tino.org
      SHA256 Fingerprint
      bebe53047af199bc690b150496e3c1f115d021bbd5f459e4fb7487ef024ba73b
      Validity Not Before
      2024-10-17T21:41:20Z
      Validity Not After
      2025-01-15T21:41:19Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8c74d9dabaf6baef8f7e300cf9173a8d
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:12.000Z",
         "alternativeip" : [
            "103.130.216.161"
         ],
         "app" : {
            "length" : 124
         },
         "asn" : "AS135951",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "VN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
         "datamd5" : "8c74d9dabaf6baef8f7e300cf9173a8d",
         "datammh3" : -1126255565,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "tino.org",
            "tino.vn"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "b15cf761e652a9d81290a228fcc4d745",
            "sha1" : "0a07065e7d84c5a67a6a12a50d8888a6c3e6c925",
            "sha256" : "bebe53047af199bc690b150496e3c1f115d021bbd5f459e4fb7487ef024ba73b"
         },
         "geolocus" : {
            "asn" : "AS135951",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "VN",
            "countryname" : "Vietnam",
            "domain" : [
               "tino.org",
               "vnnic.vn"
            ],
            "isineu" : "false",
            "latitude" : "14.058324",
            "location" : "14.058324,108.277199",
            "longitude" : "108.277199",
            "netname" : "WEBICO-VN",
            "organization" : "Vietnam Internet Network Information Center (VNNIC)",
            "subnet" : "103.130.216.0/22"
         },
         "host" : [
            "h216161",
            "static-39-216-130-103"
         ],
         "hostname" : [
            "h216161.tino.org",
            "static-39-216-130-103.tino.vn"
         ],
         "ip" : "103.130.216.39",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "R11",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "16.1667",
         "location" : "16.1667,107.8333",
         "longitude" : "107.8333",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Webico Company Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 993,
         "product" : "Dovecot",
         "productvendor" : "Dovecot",
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "static-39-216-130-103.tino.vn"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "04:af:58:f8:4e:c3:8a:cf:8e:5f:f5:5d:de:1f:36:9b:40:e4",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "altname" : [
               "h216161.tino.org"
            ],
            "commonname" : "h216161.tino.org"
         },
         "subnet" : "103.130.216.0/22",
         "tld" : [
            "org",
            "vn"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-01-15T21:41:19Z",
            "notbefore" : "2024-10-17T21:41:20Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 188.165.212.227:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:12 UTC

    • IP
      188.165.212.227
      Alternative IP(s)
      2001:41d0:2:9fe3:0:0:0:1
      Network
      188.165.0.0/16
      Domain(s)
      nerot.eu
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      cerbere.nerot.eu
      ASN
      AS16276
      Organization
      OVH SAS
      Protocol
      imap Cert not expired imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Courier Courier
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      R10
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      cerbere.nerot.eu
      Subject Alt Name
      cerbere.nerot.eu
      SHA256 Fingerprint
      75cf638b93e882750d5d4ebeea172f4bf3412a29c94870a3bf5ff03af1eb3cbc
      Validity Not Before
      2024-10-22T00:50:40Z
      Validity Not After
      2025-01-20T00:50:39Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      18b4fa9830a6050db54f92b7483c1bca
    • * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE AUTH=PLAIN ACL ACL2=UNION ENABLE UTF8=ACCEPT] Courier-IMAP ready. Copyright 1998-2022 Double Precision, Inc.  See COPYING for distribution information.
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:12.000Z",
         "alternativeip" : [
            "2001:41d0:2:9fe3:0:0:0:1"
         ],
         "app" : {
            "length" : 263
         },
         "asn" : "AS16276",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "FR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE AUTH=PLAIN ACL ACL2=UNION ENABLE UTF8=ACCEPT] Courier-IMAP ready. Copyright 1998-2022 Double Precision, Inc.  See COPYING for distribution information.\r\n",
         "datamd5" : "18b4fa9830a6050db54f92b7483c1bca",
         "datammh3" : -1825757308,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "nerot.eu"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "8d0a19a009dc634a9f5ffa6d55403789",
            "sha1" : "d291eca2c9a9cbb30cb359597e8a625f8752f61b",
            "sha256" : "75cf638b93e882750d5d4ebeea172f4bf3412a29c94870a3bf5ff03af1eb3cbc"
         },
         "geolocus" : {
            "asn" : "AS16276",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "FR",
            "countryname" : "France",
            "domain" : [
               "ovh.net"
            ],
            "isineu" : "true",
            "latitude" : "46.227638",
            "location" : "46.227638,2.213749",
            "longitude" : "2.213749",
            "netname" : "OVH",
            "organization" : "OVH ISP",
            "subnet" : "188.165.192.0/18"
         },
         "host" : [
            "cerbere"
         ],
         "hostname" : [
            "cerbere.nerot.eu"
         ],
         "ip" : "188.165.212.227",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "R10",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "48.8582",
         "location" : "48.8582,2.3387",
         "longitude" : "2.3387",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "OVH SAS",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 993,
         "product" : "Courier",
         "productvendor" : "Courier",
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 4096
         },
         "reverse" : [
            "cerbere.nerot.eu"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "03:4e:a8:93:0d:ab:d1:e3:5b:1d:09:56:d5:89:a0:02:85:e5",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "altname" : [
               "cerbere.nerot.eu"
            ],
            "commonname" : "cerbere.nerot.eu"
         },
         "subnet" : "188.165.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "eu"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-01-20T00:50:39Z",
            "notbefore" : "2024-10-22T00:50:40Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 45.38.230.60:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:12 UTC

    • IP
      45.38.230.60
      Network
      45.38.230.0/24
      Domain(s)
      example.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      ASN
      AS18779
      Organization
      EGIHOSTING
      Protocol
      imap Cert expired imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      imap.example.com
      Subject Email
      postmaster@example.com
      Subject Common Name
      imap.example.com
      SHA256 Fingerprint
      b1a54e55e7583212bcbe958bc104eeeace98c897e9eb090bdb0518da7fd3b8dc
      Validity Not Before
      2023-11-15T10:08:32Z
      Validity Not After
      2024-11-14T10:08:32Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b02f6380082424993d4810d54636953b
    • * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:12.000Z",
         "app" : {
            "length" : 114
         },
         "asn" : "AS18779",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
         "datamd5" : "b02f6380082424993d4810d54636953b",
         "datammh3" : 858849024,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "example.com"
         ],
         "fingerprint" : {
            "md5" : "a6f099c4b61093c1501f13caf2a6a252",
            "sha1" : "932aa2d36310e931b7dc64498045a4111396e771",
            "sha256" : "b1a54e55e7583212bcbe958bc104eeeace98c897e9eb090bdb0518da7fd3b8dc"
         },
         "geolocus" : {
            "asn" : "AS136787",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "egihosting.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "EGN-22",
            "organization" : "EGIHosting",
            "subnet" : "45.38.230.0/24"
         },
         "host" : [
            "imap"
         ],
         "hostname" : [
            "imap.example.com"
         ],
         "ip" : "45.38.230.60",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "imap.example.com",
            "email" : "postmaster@example.com",
            "organizationalunit" : "IMAP server"
         },
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "EGIHOSTING",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 993,
         "product" : "Dovecot",
         "productvendor" : "Dovecot",
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 3072
         },
         "seen_date" : "2024-11-21",
         "serial" : "89:fb:20:fb:9f:de:28:77",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "commonname" : "imap.example.com",
            "email" : "postmaster@example.com",
            "organizationalunit" : "IMAP server"
         },
         "subnet" : "45.38.230.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2024-11-14T10:08:32Z",
            "notbefore" : "2023-11-15T10:08:32Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 192.169.148.219:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:12 UTC

    • IP
      192.169.148.219
      Network
      192.169.144.0/20
      Domain(s)
      secureserver.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      219.148.169.192.host.secureserver.net
      ASN
      AS398101
      Organization
      GO-DADDY-COM-LLC
      Protocol
      imap Cert not expired imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Starfield Secure Certificate Authority - G2
      Issuer Organization
      Starfield Technologies, Inc.
      Subject Common Name
      *.prod.phx3.secureserver.net
      Subject Alt Name
      *.prod.phx3.secureserver.net prod.phx3.secureserver.net
      SHA256 Fingerprint
      d53a2eeb58dc99df4a623b606a967bae6d8dc40c46407be617a96a9a141d0346
      Validity Not Before
      2024-02-15T21:45:33Z
      Validity Not After
      2025-03-18T21:45:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8c74d9dabaf6baef8f7e300cf9173a8d
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:12.000Z",
         "app" : {
            "length" : 124
         },
         "asn" : "AS398101",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
         "datamd5" : "8c74d9dabaf6baef8f7e300cf9173a8d",
         "datammh3" : -1126255565,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "secureserver.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "8f2c6fb954159534174d537ca1bd989d",
            "sha1" : "6b61301cf7cce6a63cfbe37a4cff59d4a77cde5d",
            "sha256" : "d53a2eeb58dc99df4a623b606a967bae6d8dc40c46407be617a96a9a141d0346"
         },
         "geolocus" : {
            "asn" : "AS398101",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "godaddy.com",
               "secureserver.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "GO-DADDY-COM-LLC",
            "organization" : "GoDaddy.com, LLC",
            "subnet" : "192.169.144.0/20"
         },
         "host" : [
            219,
            "prod"
         ],
         "hostname" : [
            "219.148.169.192.host.secureserver.net",
            "prod.phx3.secureserver.net"
         ],
         "ip" : "192.169.148.219",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Scottsdale",
            "commonname" : "Starfield Secure Certificate Authority - G2",
            "country" : "US",
            "organization" : "Starfield Technologies, Inc.",
            "organizationalunit" : "http://certs.starfieldtech.com/repository/"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "GO-DADDY-COM-LLC",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 993,
         "product" : "Dovecot",
         "productvendor" : "Dovecot",
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "219.148.169.192.host.secureserver.net"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "09:63:b0:73:d6:70:b9:ef",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subdomains" : [
            "148.169.192.host.secureserver.net",
            "169.192.host.secureserver.net",
            "192.host.secureserver.net",
            "host.secureserver.net",
            "phx3.secureserver.net",
            "prod.phx3.secureserver.net"
         ],
         "subject" : {
            "altname" : [
               "*.prod.phx3.secureserver.net",
               "prod.phx3.secureserver.net"
            ],
            "commonname" : "*.prod.phx3.secureserver.net"
         },
         "subnet" : "192.169.144.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-03-18T21:45:33Z",
            "notbefore" : "2024-02-15T21:45:33Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 79.96.25.198:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:11 UTC

    • IP
      79.96.25.198
      Alternative IP(s)
      212.85.96.183 2a02:25a9:0:e1c6:0:0:0:1
      Network
      79.96.0.0/16
      Domain(s)
      home.pl
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      cloudserver057348.home.pl
      ASN
      AS12824
      Organization
      home.pl S.A.
      Protocol
      imap Cert not expired imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Certyfikat SSL
      Issuer Organization
      home.pl S.A.
      Subject Common Name
      *.home.pl
      Subject Alt Name
      *.home.pl home.pl
      SHA256 Fingerprint
      1c12ea601b0bf59cc7ba2a74fffdd93691d97bcd2af411df7f1b4e7dc36214d8
      Validity Not Before
      2024-05-22T06:16:06Z
      Validity Not After
      2025-06-21T06:16:05Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c77334c10cdd4496e4d56cee8421ecf
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:11.000Z",
         "alternativeip" : [
            "212.85.96.183",
            "2a02:25a9:0:e1c6:0:0:0:1"
         ],
         "app" : {
            "length" : 114
         },
         "asn" : "AS12824",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "PL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
         "datamd5" : "2c77334c10cdd4496e4d56cee8421ecf",
         "datammh3" : -1988388553,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "home.pl"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "3cb3495faefd5a71e8e53d41332f1a18",
            "sha1" : "81df355ee26c67e11ddaf24175c426cb8f3d3c0c",
            "sha256" : "1c12ea601b0bf59cc7ba2a74fffdd93691d97bcd2af411df7f1b4e7dc36214d8"
         },
         "host" : [
            "cloudserver057348"
         ],
         "hostname" : [
            "cloudserver057348.home.pl",
            "home.pl"
         ],
         "ip" : "79.96.25.198",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Certyfikat SSL",
            "country" : "PL",
            "organization" : "home.pl S.A."
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "52.2394",
         "location" : "52.2394,21.0362",
         "longitude" : "21.0362",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "home.pl S.A.",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 993,
         "product" : "Dovecot",
         "productvendor" : "Dovecot",
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "cloudserver057348.home.pl"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "5f:86:b9:ff:df:24:40:21:f7:62:a2:46:70:65:14:cf",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "altname" : [
               "*.home.pl",
               "home.pl"
            ],
            "commonname" : "*.home.pl"
         },
         "subnet" : "79.96.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "pl"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-06-21T06:16:05Z",
            "notbefore" : "2024-05-22T06:16:06Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 103.125.232.114:993 (tcp/imap/tls) - last seen on 2024-11-21 at 08:33:11 UTC

    • IP
      103.125.232.114
      Alternative IP(s)
      2403:2c80:8:0:0:0:da2e:435f
      Network
      103.125.232.0/23
      Domain(s)
      rayfalling.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Ubuntu
      ASN
      AS9312
      Organization
      xTom
      Protocol
      imap Cert not expired imap
      Source
      datascan
    • Operating System
      Linux Linux Ubuntu
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      R11
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      imap.rayfalling.com
      Subject Alt Name
      imap.rayfalling.com mail.rayfalling.com pop3.rayfalling.com smtp.rayfalling.com
      SHA256 Fingerprint
      959849ec345fea5367d24b34eaeaef7c6929a0d23aad0664c1ec7c6f54ac5b3f
      Validity Not Before
      2024-10-08T02:08:37Z
      Validity Not After
      2025-01-06T02:08:36Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      370293611e83bc792d983546e06d2f6d
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready.
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:11.000Z",
         "alternativeip" : [
            "2403:2c80:8:0:0:0:da2e:435f"
         ],
         "app" : {
            "length" : 123
         },
         "asn" : "AS9312",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready.\r\n",
         "datamd5" : "370293611e83bc792d983546e06d2f6d",
         "datammh3" : -1830708146,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "rayfalling.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "15f2d06cfe889a3205a8b71428476be1",
            "sha1" : "72ec1c0a43b7a116980f4bfd7551255aae9b079b",
            "sha256" : "959849ec345fea5367d24b34eaeaef7c6929a0d23aad0664c1ec7c6f54ac5b3f"
         },
         "geolocus" : {
            "asn" : "AS9312",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "owl.net"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "OWL-HK-01",
            "organization" : "Owl Limited",
            "subnet" : "103.125.232.0/23"
         },
         "host" : [
            "imap",
            "mail",
            "pop3",
            "smtp"
         ],
         "hostname" : [
            "imap.rayfalling.com",
            "mail.rayfalling.com",
            "pop3.rayfalling.com",
            "smtp.rayfalling.com"
         ],
         "ip" : "103.125.232.114",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "R11",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "xTom",
         "os" : "Linux",
         "osdistribution" : "Ubuntu",
         "osvendor" : "Linux",
         "port" : 993,
         "product" : "Dovecot",
         "productvendor" : "Dovecot",
         "protocol" : "imap",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "seen_date" : "2024-11-21",
         "serial" : "04:66:a4:aa:b6:37:99:26:57:97:c7:58:61:bd:ba:1c:c5:65",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "altname" : [
               "imap.rayfalling.com",
               "mail.rayfalling.com",
               "pop3.rayfalling.com",
               "smtp.rayfalling.com"
            ],
            "commonname" : "imap.rayfalling.com"
         },
         "subnet" : "103.125.232.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-01-06T02:08:36Z",
            "notbefore" : "2024-10-08T02:08:37Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }