104.94.110.25

As of: May 25, 2024 12:31am UTC | Latest
{
  "ip": "104.94.110.25",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 312\r\nExpires: Sat, 25 May 2024 00:31:49 GMT\r\nDate:  <REDACTED>\r\nConnection: close\r\n",
      "banner_hashes": [
        "sha256:96ea3d97afd2a3eee2d64a60dfa33c1b9b34d726dd4dc1b5bf5fd70ac4b914cc"
      ],
      "banner_hex": "485454502f312e30203430302042616420526571756573740d0a5365727665723a20416b616d616947486f73740d0a4d696d652d56657273696f6e3a20312e300d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203331320d0a457870697265733a205361742c203235204d617920323032342030303a33313a343920474d540d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://104.94.110.25/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.0",
          "status_code": 400,
          "status_reason": "Bad Request",
          "headers": {
            "Content_Type": [
              "text/html"
            ],
            "_encoding": {
              "Content_Type": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Expires": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Mime_Version": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "312"
            ],
            "Server": [
              "AkamaiGHost"
            ],
            "Expires": [
              "Sat, 25 May 2024 00:31:49 GMT"
            ],
            "Connection": [
              "close"
            ],
            "Mime_Version": [
              "1.0"
            ],
            "Date": [
              "<REDACTED>"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>Invalid URL</TITLE>"
          ],
          "body_size": 312,
          "body": "<HTML><HEAD>\n<TITLE>Invalid URL</TITLE>\n</HEAD><BODY>\n<H1>Invalid URL</H1>\nThe requested URL \"&#91;no&#32;URL&#93;\", is invalid.<p>\nReference&#32;&#35;9&#46;90743217&#46;1716597109&#46;1397536c\n<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;9&#46;90743217&#46;1716597109&#46;1397536c</P>\n</BODY></HTML>\n",
          "body_hashes": [
            "sha256:00a3588024d1c73dd0fe5232dcbbe11a13c9638c751efcb84c4d0cb1a0bee49a",
            "sha1:c05435a1388e87d3657537edd93c5d617bf92c72"
          ],
          "body_hash": "sha1:c05435a1388e87d3657537edd93c5d617bf92c72",
          "html_title": "Invalid URL"
        },
        "supports_http2": false
      },
      "observed_at": "2024-05-25T00:31:49.308513236Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:akamai:akamaighost:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Akamai",
          "product": "GHost",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "part": "o",
          "vendor": "Akamai",
          "other": {
            "device": "Web Proxy",
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.248.133.117",
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 308\r\nExpires: Fri, 24 May 2024 05:07:42 GMT\r\nDate:  <REDACTED>\r\nConnection: close\r\n",
      "banner_hashes": [
        "sha256:6e9e707955c288d0cc89f9e44853db5a90859a59795bd2480e2f2369728f1516"
      ],
      "banner_hex": "485454502f312e30203430302042616420526571756573740d0a5365727665723a20416b616d616947486f73740d0a4d696d652d56657273696f6e3a20312e300d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203330380d0a457870697265733a204672692c203234204d617920323032342030353a30373a343220474d540d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a",
      "certificate": "96513c726ba9fb784b2db880df0676af8ba8ddd23638250804345778930974b5",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://104.94.110.25/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.0",
          "status_code": 400,
          "status_reason": "Bad Request",
          "headers": {
            "Content_Type": [
              "text/html"
            ],
            "_encoding": {
              "Content_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Mime_Version": "DISPLAY_UTF8",
              "Expires": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8"
            },
            "Connection": [
              "close"
            ],
            "Server": [
              "AkamaiGHost"
            ],
            "Mime_Version": [
              "1.0"
            ],
            "Expires": [
              "Fri, 24 May 2024 05:07:42 GMT"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Content_Length": [
              "308"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>Invalid URL</TITLE>"
          ],
          "body_size": 308,
          "body": "<HTML><HEAD>\n<TITLE>Invalid URL</TITLE>\n</HEAD><BODY>\n<H1>Invalid URL</H1>\nThe requested URL \"&#91;no&#32;URL&#93;\", is invalid.<p>\nReference&#32;&#35;9&#46;a0743217&#46;1716527262&#46;d7ad05\n<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;9&#46;a0743217&#46;1716527262&#46;d7ad05</P>\n</BODY></HTML>\n",
          "body_hashes": [
            "sha256:45c71d6e58cc22078e249ca59cae1bf95665591787712f7d0f5cde65bfea1056",
            "sha1:da55cda54feb48b940ea5684ef451866a481d22f"
          ],
          "body_hash": "sha1:da55cda54feb48b940ea5684ef451866a481d22f",
          "html_title": "Invalid URL"
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "28d28d28d2ad28d00042d42d000000bd133fde671db50adc016473d0d15112",
        "cipher_and_version_fingerprint": "28d28d28d2ad28d00042d42d000000",
        "tls_extensions_sha256": "bd133fde671db50adc016473d0d15112",
        "observed_at": "2024-04-22T21:24:45.012137987Z"
      },
      "observed_at": "2024-05-24T05:07:42.505779673Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:akamai:akamaighost:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Akamai",
          "product": "GHost",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "part": "o",
          "vendor": "Akamai",
          "other": {
            "family": "Linux",
            "device": "Web Proxy"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.51",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "96513c726ba9fb784b2db880df0676af8ba8ddd23638250804345778930974b5",
          "chain_fps_sha_256": [
            "52274c57ce4dee3b49db7a7ff708c040f771898b3be88725a86fb4430182fe14"
          ],
          "leaf_data": {
            "names": [
              "a2cgateway.accretivehealth.com",
              "adhocsftp.r1rcm.com",
              "admin-ascension-visitpay.ccc.r1rcm.com",
              "admin-lifepoint-visitpay.ccc.r1rcm.com",
              "agentchat.r1rcm.com",
              "ami.r1rcm.com",
              "analytics.r1rcm.com",
              "api.r1rcm.com",
              "apicare.accretivehealth.com",
              "apicarerco.accretivehealth.com",
              "apim.r1rcm.com",
              "apps.insight.r1rcm.com",
              "batchtrack.r1rcm.com",
              "cc.accretivehealth.com",
              "cc.r1rcm.com",
              "changeregistry.r1rcm.com",
              "cmbsbilling.com",
              "cr.r1rcm.com",
              "desktop.r1rcm.com",
              "doclink.intermedix.com",
              "ed-api.intermedix.com",
              "epics.r1rcm.com",
              "gateway-r1ireview.r1rcm.com",
              "gateway.r1rcm.com",
              "hub.r1rcm.com",
              "imhwebchat.r1rcm.com",
              "indiahorizonvdi.r1rcm.com",
              "insight.r1rcm.com",
              "intermedix.com",
              "ipas.r1rcm.com",
              "ipasreview.r1rcm.com",
              "itenablement.r1rcm.com",
              "lifepoint.chartmanager.r1rcm.com",
              "litephysician.r1rcm.com",
              "mfa.prd.twilio.r1rcm.com",
              "myaccount.intermedix.global",
              "myaccount.r1rcm.com",
              "myapps-ext.r1rcm.com",
              "myapps.r1rcm.com",
              "nrva.r1rcm.com",
              "onboardingtasks.r1rcm.com",
              "optix.r1rcm.com",
              "pas.r1rcm.com",
              "pasfileservice.r1rcm.com",
              "pasintapi.r1rcm.com",
              "pasinternal.r1rcm.com",
              "paspublicapi.r1rcm.com",
              "passervicecommon.r1rcm.com",
              "passervicedsr.r1rcm.com",
              "passervicegateway.r1rcm.com",
              "passervicelog.r1rcm.com",
              "passwordreset.r1rcm.com",
              "pentas.r1rcm.com",
              "physician.r1rcm.com",
              "prd.twilio.r1rcm.com",
              "prodftp.accretivehealth.com",
              "prodftp001.accretivehealth.com",
              "prohance.r1rcm.com",
              "prohancedp.r1rcm.com",
              "pythia.r1rcm.com",
              "r1accessfileservice.r1rcm.com",
              "r1contract.r1rcm.com",
              "r1contractreports.r1rcm.com",
              "r1hub.r1rcm.com",
              "r1ireview.r1rcm.com",
              "r1rcm.com",
              "r1rcohub.r1rcm.com",
              "r1stars.r1rcm.com",
              "rcohub.r1rcm.com",
              "rcx-rs.r1rcm.com",
              "rcx.r1rcm.com",
              "rdsfarm.r1rcm.com",
              "rdsgateway.epbs.com",
              "reports.r1rcm.com",
              "servicereceiver.r1rcm.com",
              "sn.r1rcm.com",
              "st.intermedix.com",
              "textingresponseservice.r1rcm.com",
              "traininghub.r1rcm.com",
              "twilio.r1rcm.com",
              "utcrco.r1rcm.com",
              "visualization.r1rcm.com",
              "wfm.r1rcm.com",
              "www.cmbsbilling.com",
              "www.intermedix.com",
              "www.r1rcm.com",
              "www.rdsgateway.epbs.com"
            ],
            "subject_dn": "C=US, ST=Illinois, L=Chicago, O=R1 RCM Inc., CN=hub.r1rcm.com",
            "issuer_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2f3a3d65c7d76f58bda9fa81ebf93f606a82303522e13ad31bfd7ef2daca6ff0",
            "fingerprint": "96513c726ba9fb784b2db880df0676af8ba8ddd23638250804345778930974b5",
            "issuer": {
              "common_name": [
                "DigiCert TLS RSA SHA256 2020 CA1"
              ],
              "organization": [
                "DigiCert Inc"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "hub.r1rcm.com"
              ],
              "locality": [
                "Chicago"
              ],
              "organization": [
                "R1 RCM Inc."
              ],
              "province": [
                "Illinois"
              ],
              "country": [
                "US"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "JLHACwgZAFfes5cXWeXdgkad79Bx/WSIw7mFf6esIHU=",
                "y": "kfN4m1EgUjcmi4iUrL4GjgfnqEXIZcOwC6XGSSe5jr4="
              },
              "fingerprint": "3cefe0ac31886c3809e9a4b33157f1ebd513fb685540c91c3ef2c0328829ca57"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "52274c57ce4dee3b49db7a7ff708c040f771898b3be88725a86fb4430182fe14",
              "subject_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
              "issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891",
        "ja4s": "t120200_544c535f43484143484132305f504f4c59313330355f534841323536_9f090db0cf15",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "475c9302dc42b2751db9edcac3b74891",
            "ja4s": "t120200_544c535f43484143484132305f504f4c59313330355f534841323536_9f090db0cf15"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "19c85eff65714052c63bf784af832afb",
            "ja4s": "t120300_544c535f45434448455f45434453415f574954485f43484143484132305f504f4c59313330355f534841323536_c261d0470b65"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "North America",
    "country": "United States",
    "country_code": "US",
    "city": "Miami",
    "postal_code": "33101",
    "timezone": "America/New_York",
    "province": "Florida",
    "coordinates": {
      "latitude": 25.77427,
      "longitude": -80.19366
    }
  },
  "location_updated_at": "2024-05-11T06:01:30.793326373Z",
  "autonomous_system": {
    "asn": 16625,
    "description": "AKAMAI-AS",
    "bgp_prefix": "104.94.108.0/22",
    "name": "AKAMAI-AS",
    "country_code": "US"
  },
  "autonomous_system_updated_at": "2024-05-11T06:01:30.793862581Z",
  "whois": {
    "network": {
      "handle": "AIBV",
      "name": "Akamai International, BV",
      "cidrs": [
        "104.94.108.0/22"
      ],
      "created": "2015-08-12T00:00:00Z",
      "updated": "2015-08-12T00:00:00Z",
      "allocation_type": "REASSIGNMENT"
    },
    "organization": {
      "handle": "AIB-17",
      "name": "Akamai International, BV",
      "street": "Prins Bernhardplein 200",
      "city": "Amsterdam",
      "postal_code": "1097 JB",
      "country": "NL",
      "abuse_contacts": [
        {
          "handle": "NUS-ARIN",
          "name": "NOC United States",
          "email": "[email protected]"
        }
      ],
      "admin_contacts": [
        {
          "handle": "AIBVH-ARIN",
          "name": "AIBV Hostmaster",
          "email": "[email protected]"
        }
      ],
      "tech_contacts": [
        {
          "handle": "AIBVH-ARIN",
          "name": "AIBV Hostmaster",
          "email": "[email protected]"
        }
      ]
    }
  },
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
    "part": "o",
    "product": "linux",
    "source": "OSI_TRANSPORT_LAYER"
  },
  "dns": {
    "names": [
      "a104-94-110-25.deploy.static.akamaitechnologies.com"
    ],
    "records": {
      "a104-94-110-25.deploy.static.akamaitechnologies.com": {
        "record_type": "A",
        "resolved_at": "2024-05-14T13:31:28.447491739Z"
      }
    },
    "reverse_dns": {
      "names": [
        "a104-94-110-25.deploy.static.akamaitechnologies.com"
      ],
      "resolved_at": "2024-05-14T00:11:33.388573688Z"
    }
  },
  "last_updated_at": "2024-05-25T00:31:49.874Z"
}