whois.handle: LINODE
whois.name: Linode
whois.cidrs: 172.104.0.0/16 172.105.0.0/17 172.105.128.0/20 172.105.144.0/23 172.105.146.0/24
whois.created: 2022-12-21T00:00:00.000000
whois.updated: 2023-09-18T00:00:00.000000
whois.allocation_type: REASSIGNMENT
whois.handle: LINOD
whois.name: Linode
whois.street: 249 Arch St
whois.city: Philadelphia
whois.state: PA
whois.postal_code: 19106
whois.country: US
whois.handle: LAS12-ARIN
whois.name: Linode Abuse Support
whois.email: abuse@linode.com
whois.handle: LNO21-ARIN
whois.name: Linode Network Operations
whois.email: support@linode.com
whois.handle: IPADM11-ARIN
whois.name: ipadmin
whois.email: ip-admin@akamai.com
whois.handle: LNO21-ARIN
whois.name: Linode Network Operations
whois.email: support@linode.com
services.protocol: SSH
services.transport_protocol: TCP
services.scan_time: 2025-07-28T08:02:08.630177
services.banner: SSH-2.0-OpenSSH_10.0
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: OpenBSD
services.product: OpenSSH
services.version: 10.0
services.cpe: cpe:2.3:a:openbsd:openssh:10.0:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.value: remote-access
services.raw: SSH-2.0-OpenSSH_10.0
services.protocol_version: 2.0
services.software_version: OpenSSH_10.0
services.kex_algorithms: mlkem768x25519-sha256 sntrup761x25519-sha512 sntrup761x25519-sha512@openssh.com curve25519-sha256 curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 ext-info-s kex-strict-s-v00@openssh.com
services.host_key_algorithms: rsa-sha2-512 rsa-sha2-256 ecdsa-sha2-nistp256 ssh-ed25519
services.client_to_server_ciphers: chacha20-poly1305@openssh.com aes128-gcm@openssh.com aes256-gcm@openssh.com aes128-ctr aes192-ctr aes256-ctr
services.server_to_client_ciphers: chacha20-poly1305@openssh.com aes128-gcm@openssh.com aes256-gcm@openssh.com aes128-ctr aes192-ctr aes256-ctr
services.client_to_server_macs: umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha1-etm@openssh.com umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-sha1
services.server_to_client_macs: umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha1-etm@openssh.com umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-sha1
services.client_to_server_compression: none zlib@openssh.com
services.server_to_client_compression: none zlib@openssh.com
services.kex_algorithm: curve25519-sha256@libssh.org
services.host_key_algorithm: ecdsa-sha2-nistp256
services.cipher: aes128-ctr
services.mac: hmac-sha2-256
services.compression: none
services.cipher: aes128-ctr
services.mac: hmac-sha2-256
services.compression: none
services.curve: P-256
services.hassh_fingerprint: 671c5858369db8e0a60108d866bbf8ec
services.protocol: UNKNOWN
services.transport_protocol: TCP
services.scan_time: 2025-07-27T23:33:14.886734
services.banner: HTTP/1.1 400 Bad Request
  Server: nginx/1.11.4
  Date: Sun, 27 Jul 2025 23:33:27 GMT
  Content-Type: text/html
  Content-Length: 173
  Connection: close
  
  <html>
  <head><title>400 Bad Request</title></head>
  <body bgcolor="white">
  <center><h1>400 Bad Request</h1></center>
  <hr><center>nginx/1.11.4</center>
  </body>
  </html>
  
services.protocol: UNKNOWN
services.transport_protocol: TCP
services.scan_time: 2025-07-28T08:31:50.026783
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
services.fingerprint_sha256: 67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd
services.subject_dn: C=US, O=Let's Encrypt, CN=R3
services.issuer_dn: C=US, O=Internet Security Research Group, CN=ISRG Root X1
services.fingerprint_sha256: 6d99fb265eb1c5b3744765fcbc648f3cd8e1bffafdc4c2f99b9d47cf7ff1c24f
services.subject_dn: C=US, O=Internet Security Research Group, CN=ISRG Root X1
services.issuer_dn: O=Digital Signature Trust Co., CN=DST Root CA X3
services.ja4s: t120200_c02f_344b4dce5a52
services.version: TLSv1_2
services.ja4s: t120200_c02f_344b4dce5a52
services.version: TLSv1_1
services.ja4s: t110200_c013_344b4dce5a52
services.names: malfatto.net
services.issuer_dn: C=US, O=Let's Encrypt, CN=R3
services.common_name: R3
services.country: US
services.organization: Let's Encrypt
services.subject_dn: CN=malfatto.net
services.common_name: malfatto.net
services.scan_time: 2025-07-28T09:22:41.266164
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T08:18:43.561343
services.banner: HTTP/1.1 301 Moved Permanently
  Location: http://www.google.com:1489/
  Content-Type: text/html; charset=UTF-8
  Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-URr36CfREqXHfkJw1Ro_Ew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
  Date:  <REDACTED>
  Expires: Wed, 27 Aug 2025 08:18:53 GMT
  Cache-Control: public, max-age=2592000
  Server: gws
  Content-Length: 224
  X-XSS-Protection: 0
  X-Frame-Options: SAMEORIGIN
  Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.ja4s: t130200_1303_234ea6891581
services.version: TLSv1_3
services.ja4s: t130200_1303_234ea6891581
services.version: TLSv1_2
services.ja4s: t120200_cca8_344b4dce5a52
services.version: TLSv1_1
services.ja4s: t110200_c013_344b4dce5a52
services.version: TLSv1_0
services.ja4s: t100200_c013_344b4dce5a52
services.names: invalid2.invalid
services.issuer_dn: OU=No SNI provided\; please fix your client., CN=invalid2.invalid
services.common_name: invalid2.invalid
services.organizational_unit: No SNI provided; please fix your client.
services.subject_dn: OU=No SNI provided\; please fix your client., CN=invalid2.invalid
services.common_name: invalid2.invalid
services.organizational_unit: No SNI provided; please fix your client.
services.scan_time: 2025-07-16T00:08:38.238351
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Google
services.product: Google Web Services
services.cpe: cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-28T08:18:43.561343
services.uri: https://172.104.159.132:1489/
services.protocol: HTTP/1.1
services.status_reason: Moved Permanently
services.key: Location
services.headers: http://www.google.com:1489/
services.key: Content-Length
services.headers: 224
services.key: Cache-Control
services.headers: public, max-age=2592000
services.key: Content-Type
services.headers: text/html; charset=UTF-8
services.key: Date
services.headers: <REDACTED>
services.key: Server
services.headers: gws
services.key: Content-Security-Policy-Report-Only
services.headers: object-src 'none';base-uri 'self';script-src 'nonce-URr36CfREqXHfkJw1Ro_Ew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
services.key: Alt-Svc
services.headers: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
services.key: X-Frame-Options
services.headers: SAMEORIGIN
services.key: X-XSS-Protection
services.headers: 0
services.key: Expires
services.headers: Wed, 27 Aug 2025 08:18:53 GMT
services.html_tags: <TITLE>301 Moved</TITLE> <meta http-equiv="content-type" content="text/html;charset=utf-8">
services.body: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
  <TITLE>301 Moved</TITLE></HEAD><BODY>
  <H1>301 Moved</H1>
  The document has moved
  <A HREF="http://www.google.com:1489/">here</A>.
  </BODY></HTML>
  
services.body_hash_sha1: sha1:e4f90937b2fbac0be2bf89b8596444b6ae78ced2
services.supported_versions: HTTP/1.1 HTTP/2
[binary data, 31 values, 796 bytes]