whois.handle: LU-GCORELABS-20110513
whois.name: G-Core Labs S.A.
whois.cidrs: 103.22.192.0/24
whois.created: 2022-05-24T00:00:00.000000
whois.updated: 2022-05-24T00:00:00.000000
whois.handle: ORG-WIG6-RIPE
whois.name: G-Core Labs S.A.
whois.address: 2-4, rue Edmond Reuter\nL-5326\nContern\nLUXEMBOURG
whois.handle: AC23417-RIPE
whois.name: ABUSE CONTACT
whois.email: abuse@gcore.lu
services.protocol: FTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T03:12:46.434152
services.banner: 220 ProFTPD Server (Debian) [::ffff:103.22.192.60]
  
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: ProFTPD Project
services.product: ProFTPD
services.cpe: cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.value: file-sharing
services.banner: 220 ProFTPD Server (Debian) [::ffff:103.22.192.60]
  
services.auth_tls_response: 500 AUTH not understood
  
services.auth_ssl_response: 500 AUTH not understood
  
services.status_meaning: Service ready for new user.
services.protocol: SSH
services.transport_protocol: TCP
services.scan_time: 2025-07-27T11:17:37.872343
services.banner: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: OpenBSD
services.product: OpenSSH
services.version: 8.9p1
services.cpe: cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Ubuntu
services.product: Linux
services.cpe: cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
services.value: remote-access
services.raw: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13
services.protocol_version: 2.0
services.software_version: OpenSSH_8.9p1
services.comment: Ubuntu-3ubuntu0.13
services.kex_algorithms: curve25519-sha256 curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 sntrup761x25519-sha512@openssh.com diffie-hellman-group-exchange-sha256 diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 diffie-hellman-group14-sha256 kex-strict-s-v00@openssh.com
services.host_key_algorithms: rsa-sha2-512 rsa-sha2-256 ecdsa-sha2-nistp256 ssh-ed25519
services.client_to_server_ciphers: chacha20-poly1305@openssh.com aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com aes256-gcm@openssh.com
services.server_to_client_ciphers: chacha20-poly1305@openssh.com aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com aes256-gcm@openssh.com
services.client_to_server_macs: umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha1-etm@openssh.com umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-sha1
services.server_to_client_macs: umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha1-etm@openssh.com umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-sha1
services.client_to_server_compression: none zlib@openssh.com
services.server_to_client_compression: none zlib@openssh.com
services.kex_algorithm: curve25519-sha256@libssh.org
services.host_key_algorithm: ecdsa-sha2-nistp256
services.cipher: aes128-ctr
services.mac: hmac-sha2-256
services.compression: none
services.cipher: aes128-ctr
services.mac: hmac-sha2-256
services.compression: none
services.curve: P-256
services.hassh_fingerprint: 41ff3ecd1458b0bf86e1b4891636213e
services.protocol: SMTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T15:41:13.454683
services.banner: 421 Too many concurrent SMTP connections; please try again later.
  
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.value: email
services.banner: 421 Too many concurrent SMTP connections; please try again later.
  
services.protocol: DNS
services.transport_protocol: UDP
services.scan_time: 2025-07-28T02:34:10.327760
services.banner: 9.18.30-0ubuntu0.22.04.2-Ubuntu
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: ISC
services.product: BIND
services.version: 9.18.30
services.cpe: cpe:2.3:a:isc:bind:9.18.30:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Ubuntu
services.product: Linux
services.cpe: cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
services.version: 9.18.30-0ubuntu0.22.04.2-Ubuntu
services.server_type: AUTHORITATIVE
services.r_code: REFUSED
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T01:31:13.352464
services.banner: HTTP/1.1 301 Moved Permanently
  Server: nginx/1.18.0 (Ubuntu)
  Date:  <REDACTED>
  Content-Type: text/html
  Transfer-Encoding: chunked
  Connection: keep-alive
  Location: https://103.22.192.60:443/
  
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: nginx
services.product: nginx
services.version: 1.18.0
services.cpe: cpe:2.3:a:f5:nginx:1.18.0:*:*:*:*:*:*:*
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-28T01:31:13.352464
services.uri: http://103.22.192.60/
services.protocol: HTTP/1.1
services.status_reason: Moved Permanently
services.key: Location
services.headers: https://103.22.192.60:443/
services.key: Transfer-Encoding
services.headers: chunked
services.key: Server
services.headers: nginx/1.18.0 (Ubuntu)
services.key: Connection
services.headers: keep-alive
services.key: Content-Type
services.headers: text/html
services.key: Date
services.headers: <REDACTED>
services.html_tags: <title>301 Moved Permanently</title>
services.body: <html>
  <head><title>301 Moved Permanently</title></head>
  <body>
  <center><h1>301 Moved Permanently</h1></center>
  <hr><center>nginx/1.18.0 (Ubuntu)</center>
  </body>
  </html>
  
services.body_hash_sha1: sha1:733c05da132193d6cf1d8e242d12e2525c03bab4
services.supported_versions: HTTP/1.1
services.protocol: POP3
services.transport_protocol: TCP
services.scan_time: 2025-07-28T02:51:56.126708
services.banner: +OK Dovecot (Ubuntu) ready.
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.ja4s: t130200_1303_a56c5b993250
services.names: peru.brands
services.issuer_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.subject_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Dovecot
services.product: Dovecot
services.cpe: cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Ubuntu
services.product: Linux
services.cpe: cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
services.value: email
services.banner: +OK Dovecot (Ubuntu) ready.
  
services.start_tls: +OK Begin TLS negotiation now.
  
services.protocol: NTP
services.transport_protocol: UDP
services.scan_time: 2025-07-27T11:05:20.912013
services.protocol: IMAP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T02:42:40.928459
services.banner: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot (Ubuntu) ready.
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.ja4s: t130200_1303_a56c5b993250
services.version: TLSv1_3
services.ja4s: t130200_1303_a56c5b993250
services.names: peru.brands
services.issuer_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.subject_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Dovecot
services.product: Dovecot
services.cpe: cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Ubuntu
services.product: Linux
services.cpe: cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
services.value: email
services.banner: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot (Ubuntu) ready.
  
services.start_tls: a001 OK Begin TLS negotiation now.
  
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T01:31:20.895573
services.banner: HTTP/1.1 301 Moved Permanently
  Server: nginx/1.18.0 (Ubuntu)
  Date:  <REDACTED>
  Content-Type: text/html; charset=UTF-8
  Transfer-Encoding: chunked
  Connection: keep-alive
  Set-Cookie: pll_language=nz; expires=Tue, 28-Jul-2026 01:31:21 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
  X-Redirect-By: WordPress
  Location: https://casinochan.co.nz/
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_AES_256_GCM_SHA384
services.fingerprint_sha256: 591e9ce6c863d3a079e9fabe1478c7339a26b21269dde795211361024ae31a44
services.subject_dn: C=US, O=Let's Encrypt, CN=R11
services.issuer_dn: C=US, O=Internet Security Research Group, CN=ISRG Root X1
services.ja4s: t130200_1302_a56c5b993250
services.version: TLSv1_3
services.ja4s: t130200_1302_a56c5b993250
services.version: TLSv1_2
services.ja4s: t120200_cca8_344b4dce5a52
services.names: casinochan.co.nz www.casinochan.co.nz
services.issuer_dn: C=US, O=Let's Encrypt, CN=R11
services.common_name: R11
services.country: US
services.organization: Let's Encrypt
services.subject_dn: CN=casinochan.co.nz
services.common_name: casinochan.co.nz
services.scan_time: 2025-07-23T04:10:16.363827
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: nginx
services.product: nginx
services.version: 1.18.0
services.cpe: cpe:2.3:a:f5:nginx:1.18.0:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.value: polylang
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-28T01:31:20.895573
services.uri: https://103.22.192.60/
services.protocol: HTTP/1.1
services.status_reason: Moved Permanently
services.key: Location
services.headers: https://casinochan.co.nz/
services.key: Transfer-Encoding
services.headers: chunked
services.key: Server
services.headers: nginx/1.18.0 (Ubuntu)
services.key: X-Redirect-By
services.headers: WordPress
services.key: Connection
services.headers: keep-alive
services.key: Content-Type
services.headers: text/html; charset=UTF-8
services.key: Date
services.headers: <REDACTED>
services.key: Set-Cookie
services.headers: pll_language=nz; expires=Tue, 28-Jul-2026 01:31:21 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
services.supported_versions: HTTP/1.1
services.protocol: SMTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T13:33:53.959563
services.banner: 220 peru.brands ESMTP Exim 4.95 Ubuntu Sun, 27 Jul 2025 13:33:58 +0000
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.ja4s: t130200_1303_234ea6891581
services.version: TLSv1_3
services.ja4s: t130200_1303_234ea6891581
services.version: TLSv1_1
services.ja4s: t110200_c013_8fe157b277d7
services.version: TLSv1_0
services.ja4s: t100200_c013_8fe157b277d7
services.names: peru.brands
services.issuer_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.subject_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: exim
services.product: exim
services.version: 4.95
services.cpe: cpe:2.3:a:exim:exim:4.95:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Ubuntu
services.product: Linux
services.cpe: cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
services.value: email
services.banner: 220 peru.brands ESMTP Exim 4.95 Ubuntu Sun, 27 Jul 2025 13:33:58 +0000
  
services.ehlo: 250-peru.brands Hello www.censys.io [206.168.34.84]
  250-SIZE 52428800
  250-8BITMIME
  250-PIPELINING
  250-PIPE_CONNECT
  250-AUTH PLAIN LOGIN CRAM-MD5
  250-CHUNKING
  250-SMTPUTF8
  250 HELP
  
services.protocol: SMTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T09:39:59.359804
services.banner: 220 peru.brands ESMTP Exim 4.95 Ubuntu Mon, 28 Jul 2025 09:40:00 +0000
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.ja4s: t130200_1303_234ea6891581
services.names: peru.brands
services.issuer_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.subject_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: exim
services.product: exim
services.version: 4.95
services.cpe: cpe:2.3:a:exim:exim:4.95:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Ubuntu
services.product: Linux
services.cpe: cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
services.value: email
services.banner: 220 peru.brands ESMTP Exim 4.95 Ubuntu Mon, 28 Jul 2025 09:40:00 +0000
  
services.ehlo: 250-peru.brands Hello www.censys.io [167.94.138.123]
  250-SIZE 52428800
  250-8BITMIME
  250-PIPELINING
  250-PIPE_CONNECT
  250-AUTH PLAIN LOGIN CRAM-MD5
  250-CHUNKING
  250-STARTTLS
  250-SMTPUTF8
  250 HELP
  
services.start_tls: 220 TLS go ahead
  
services.protocol: IMAP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T20:19:36.185827
services.banner: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot (Ubuntu) ready.
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.ja4s: t130200_1303_a56c5b993250
services.version: TLSv1_3
services.ja4s: t130200_1303_a56c5b993250
services.version: TLSv1_2
services.ja4s: t120200_cca8_344b4dce5a52
services.names: peru.brands
services.issuer_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.subject_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.scan_time: 2025-07-23T04:29:43.751910
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Dovecot
services.product: Dovecot
services.cpe: cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Ubuntu
services.product: Linux
services.cpe: cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
services.value: email
services.banner: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot (Ubuntu) ready.
  
services.protocol: POP3
services.transport_protocol: TCP
services.scan_time: 2025-07-28T05:58:33.639659
services.banner: +OK Dovecot (Ubuntu) ready.
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.ja4s: t130200_1303_a56c5b993250
services.names: peru.brands
services.issuer_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.subject_dn: C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=peru.brands, emailAddress=root@peru.brands
services.common_name: peru.brands
services.country: XX
services.locality: XX
services.province: XX
services.organization: XX
services.organizational_unit: XX
services.email_address: root@peru.brands
services.scan_time: 2025-07-28T06:22:56.311457
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Dovecot
services.product: Dovecot
services.cpe: cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Ubuntu
services.product: Linux
services.cpe: cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
services.value: email
services.banner: +OK Dovecot (Ubuntu) ready.
  
[binary data, 60 values, 1,550 bytes]