104.94.110.25

As of: Jun 21, 2025 1:43am UTC | Latest
{
  "ip": "104.94.110.25",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 312\r\nExpires: Sat, 21 Jun 2025 01:32:53 GMT\r\nDate:  <REDACTED>\r\nConnection: close\r\n",
      "banner_hashes": [
        "sha256:4e2bc98e0aa1d0fff92c89fdc97f7f8fe7ce534cdc1771e9db0bb30cc8917ac5"
      ],
      "banner_hex": "485454502f312e30203430302042616420526571756573740d0a5365727665723a20416b616d616947486f73740d0a4d696d652d56657273696f6e3a20312e300d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203331320d0a457870697265733a205361742c203231204a756e20323032352030313a33323a353320474d540d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://104.94.110.25/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.0",
          "status_code": 400,
          "status_reason": "Bad Request",
          "headers": {
            "Server": [
              "AkamaiGHost"
            ],
            "_encoding": {
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Expires": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Mime_Version": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "312"
            ],
            "Expires": [
              "Sat, 21 Jun 2025 01:32:53 GMT"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Connection": [
              "close"
            ],
            "Mime_Version": [
              "1.0"
            ],
            "Date": [
              "<REDACTED>"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>Invalid URL</TITLE>"
          ],
          "body_size": 312,
          "body": "<HTML><HEAD>\n<TITLE>Invalid URL</TITLE>\n</HEAD><BODY>\n<H1>Invalid URL</H1>\nThe requested URL \"&#91;no&#32;URL&#93;\", is invalid.<p>\nReference&#32;&#35;9&#46;90743217&#46;1750469573&#46;123d2d98\n<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;9&#46;90743217&#46;1750469573&#46;123d2d98</P>\n</BODY></HTML>\n",
          "body_hashes": [
            "sha256:a7059cd797343d4d7795a89c912f50f1f78cc0b17eecff87fe61ce05b16bc440",
            "sha1:ac2a33266e33f515824c596d1a75acd7397836de",
            "tlsh:61e0c2e7d035e0794f99378a3e084f7b8ef369519126ff6a4068a1d85490fa04bd2096"
          ],
          "body_hash": "sha1:ac2a33266e33f515824c596d1a75acd7397836de",
          "html_title": "Invalid URL"
        },
        "supports_http2": false
      },
      "labels": [
        "web-application-firewall"
      ],
      "observed_at": "2025-06-21T01:32:50.263968508Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "linux",
          "source": "OSI_TRANSPORT_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:akamai:akamaighost:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Akamai",
          "product": "GHost",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "part": "o",
          "vendor": "Akamai",
          "other": {
            "family": "Linux",
            "device": "Web Proxy"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:akamai:app_and_api_protector:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Akamai",
          "product": "App and API Protector",
          "other": {
            "device": "WAF"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "206.168.34.49",
      "transport_fingerprint": {
        "id": 262,
        "os": "CentOS",
        "raw": "65160,64,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 312\r\nExpires: Sat, 21 Jun 2025 01:28:31 GMT\r\nDate:  <REDACTED>\r\nConnection: close\r\n",
      "banner_hashes": [
        "sha256:1a705ca7fc0095a45059a6edd08452c53b36c950295f7af5beda2552a4b9042a"
      ],
      "banner_hex": "485454502f312e30203430302042616420526571756573740d0a5365727665723a20416b616d616947486f73740d0a4d696d652d56657273696f6e3a20312e300d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203331320d0a457870697265733a205361742c203231204a756e20323032352030313a32383a333120474d540d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a",
      "certificate": "e6d7ce9de9365d041783cdac8da25763890d02fa747f918b8c9bf9b4c12124d0",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://104.94.110.25/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.0",
          "status_code": 400,
          "status_reason": "Bad Request",
          "headers": {
            "Server": [
              "AkamaiGHost"
            ],
            "_encoding": {
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Expires": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Mime_Version": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "312"
            ],
            "Expires": [
              "Sat, 21 Jun 2025 01:28:31 GMT"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Connection": [
              "close"
            ],
            "Mime_Version": [
              "1.0"
            ],
            "Date": [
              "<REDACTED>"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>Invalid URL</TITLE>"
          ],
          "body_size": 312,
          "body": "<HTML><HEAD>\n<TITLE>Invalid URL</TITLE>\n</HEAD><BODY>\n<H1>Invalid URL</H1>\nThe requested URL \"&#91;no&#32;URL&#93;\", is invalid.<p>\nReference&#32;&#35;9&#46;90743217&#46;1750469311&#46;12374e27\n<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;9&#46;90743217&#46;1750469311&#46;12374e27</P>\n</BODY></HTML>\n",
          "body_hashes": [
            "sha256:694312f59a2583f71a662679c71fb3fc72740288344d2f3caea6135f71527e5a",
            "sha1:3e4e803b195f781b4bfd129da819d072cd41446e",
            "tlsh:34e0c2e7c031d1964f9833c92e088f7fcaf31b918025fbaa40ac92996490eb04ad2092"
          ],
          "body_hash": "sha1:3e4e803b195f781b4bfd129da819d072cd41446e",
          "html_title": "Invalid URL"
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "28d28d28d2ad28d00042d42d000000bd133fde671db50adc016473d0d15112",
        "cipher_and_version_fingerprint": "28d28d28d2ad28d00042d42d000000",
        "tls_extensions_sha256": "bd133fde671db50adc016473d0d15112",
        "observed_at": "2025-06-17T12:26:29.752351555Z"
      },
      "labels": [
        "web-application-firewall"
      ],
      "observed_at": "2025-06-21T01:28:31.444543518Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:akamai:akamaighost:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Akamai",
          "product": "GHost",
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "part": "o",
          "vendor": "Akamai",
          "other": {
            "family": "Linux",
            "device": "Web Proxy"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:akamai:app_and_api_protector:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Akamai",
          "product": "App and API Protector",
          "other": {
            "device": "WAF"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.145.109",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "e6d7ce9de9365d041783cdac8da25763890d02fa747f918b8c9bf9b4c12124d0",
          "chain_fps_sha_256": [
            "52274c57ce4dee3b49db7a7ff708c040f771898b3be88725a86fb4430182fe14"
          ],
          "leaf_data": {
            "names": [
              "a2cgateway.accretivehealth.com",
              "adhocsftp.r1rcm.com",
              "admin-ascension-visitpay.ccc.r1rcm.com",
              "admin-lifepoint-visitpay.ccc.r1rcm.com",
              "agentchat.r1rcm.com",
              "ami.r1rcm.com",
              "analytics.r1rcm.com",
              "api.r1rcm.com",
              "apicare.accretivehealth.com",
              "apicarerco.accretivehealth.com",
              "apiconflator.r1rcm.com",
              "apiiam.r1rcm.com",
              "apim.r1rcm.com",
              "apiorganizations.r1rcm.com",
              "apisonder.r1rcm.com",
              "apps.insight.r1rcm.com",
              "cc.accretivehealth.com",
              "cc.r1rcm.com",
              "changeregistry.r1rcm.com",
              "chartmanager.r1rcm.com",
              "cmbsbilling.com",
              "cmnextaccount.r1rcm.com",
              "conflator.r1rcm.com",
              "cr.r1rcm.com",
              "decision-spa.r1rcm.com",
              "decision.r1rcm.com",
              "desktop.r1rcm.com",
              "doclink.intermedix.com",
              "ed-api.intermedix.com",
              "epics.r1rcm.com",
              "gateway-r1ireview.r1rcm.com",
              "gateway.r1rcm.com",
              "hub.r1rcm.com",
              "iam.r1rcm.com",
              "imhwebchat.r1rcm.com",
              "insight.r1rcm.com",
              "intermedix.com",
              "ipas.r1rcm.com",
              "ipasreview.r1rcm.com",
              "itenablement.r1rcm.com",
              "lifepoint.chartmanager.r1rcm.com",
              "litephysician.r1rcm.com",
              "mfa.prd.twilio.r1rcm.com",
              "myaccount.intermedix.global",
              "myaccount.r1rcm.com",
              "nrva.r1rcm.com",
              "onboardingtasks.r1rcm.com",
              "optix.r1rcm.com",
              "organizations.r1rcm.com",
              "pas.r1rcm.com",
              "pasdocument.r1rcm.com",
              "pasfileservice.r1rcm.com",
              "pasintapi.r1rcm.com",
              "pasinternal.r1rcm.com",
              "paspublicapi.r1rcm.com",
              "passervicecommon.r1rcm.com",
              "passervicedsr.r1rcm.com",
              "passervicegateway.r1rcm.com",
              "passervicelog.r1rcm.com",
              "passwordreset.r1rcm.com",
              "pentas.r1rcm.com",
              "physician.r1rcm.com",
              "prd.twilio.r1rcm.com",
              "prodftp.accretivehealth.com",
              "prodftp001.accretivehealth.com",
              "prohance.r1rcm.com",
              "pythia.r1rcm.com",
              "r1access.r1rcm.com",
              "r1accessfileservice.r1rcm.com",
              "r1accessrco.r1rcm.com",
              "r1contract.r1rcm.com",
              "r1contractreports.r1rcm.com",
              "r1decision.r1rcm.com",
              "r1decisionrco.r1rcm.com",
              "r1descision.r1rcm.com",
              "r1hub.r1rcm.com",
              "r1ireview.r1rcm.com",
              "r1rcm.com",
              "r1rcohub.r1rcm.com",
              "r1sftp.r1rcm.com",
              "r1stars.r1rcm.com",
              "rcohub.r1rcm.com",
              "rcx-rs.r1rcm.com",
              "rcx.r1rcm.com",
              "rdsgateway.epbs.com",
              "reports.r1rcm.com",
              "servicereceiver.r1rcm.com",
              "sn.r1rcm.com",
              "sonder.r1rcm.com",
              "st.intermedix.com",
              "textingresponseservice.r1rcm.com",
              "traininghub.r1rcm.com",
              "twilio.r1rcm.com",
              "utcrco.r1rcm.com",
              "visualization.r1rcm.com",
              "wfm.r1rcm.com",
              "www.cmbsbilling.com",
              "www.intermedix.com",
              "www.r1rcm.com",
              "www.rdsgateway.epbs.com"
            ],
            "subject_dn": "C=US, ST=Illinois, L=Chicago, O=R1 RCM Inc., CN=hub.r1rcm.com",
            "issuer_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
            "pubkey_bit_size": 256,
            "pubkey_algorithm": "ECDSA",
            "tbs_fingerprint": "2522c16ccf0d2c652e5df042083e7c33d902252b64a4e9dbb0d637a82611ebc1",
            "fingerprint": "e6d7ce9de9365d041783cdac8da25763890d02fa747f918b8c9bf9b4c12124d0",
            "issuer": {
              "common_name": [
                "DigiCert TLS RSA SHA256 2020 CA1"
              ],
              "organization": [
                "DigiCert Inc"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "hub.r1rcm.com"
              ],
              "locality": [
                "Chicago"
              ],
              "organization": [
                "R1 RCM Inc."
              ],
              "province": [
                "Illinois"
              ],
              "country": [
                "US"
              ]
            },
            "public_key": {
              "key_algorithm": "ECDSA",
              "ecdsa": {
                "_encoding": {
                  "b": "DISPLAY_BASE64",
                  "gx": "DISPLAY_BASE64",
                  "gy": "DISPLAY_BASE64",
                  "n": "DISPLAY_BASE64",
                  "p": "DISPLAY_BASE64",
                  "x": "DISPLAY_BASE64",
                  "y": "DISPLAY_BASE64"
                },
                "b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
                "curve": "P-256",
                "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
                "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
                "length": 256,
                "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
                "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
                "x": "pnDoEAD4g3Gex916qnY0cVq+wGuqQtURAp/b0hKc+t4=",
                "y": "3t09t0oqYXFUb5tNS7zweR+7dsdIDDCJrTtjhuFQXmE="
              },
              "fingerprint": "1c9572a465a6dbe665931cf8710155a79e2748ff055aecee67c6081ddbbde448"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "52274c57ce4dee3b49db7a7ff708c040f771898b3be88725a86fb4430182fe14",
              "subject_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
              "issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891",
        "ja4s": "t130200_1303_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "475c9302dc42b2751db9edcac3b74891",
            "ja4s": "t130200_1303_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "19c85eff65714052c63bf784af832afb",
            "ja4s": "t120300_cca9_cbb8871a0652"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "North America",
    "country": "United States",
    "country_code": "US",
    "city": "Miami",
    "postal_code": "33101",
    "timezone": "America/New_York",
    "province": "Florida",
    "coordinates": {
      "latitude": 25.77427,
      "longitude": -80.19366
    }
  },
  "location_updated_at": "2025-06-16T12:47:45.504584837Z",
  "autonomous_system": {
    "asn": 16625,
    "description": "AKAMAI-AS",
    "bgp_prefix": "104.94.108.0/22",
    "name": "AKAMAI-AS",
    "country_code": "US"
  },
  "autonomous_system_updated_at": "2025-06-16T12:47:45.504584757Z",
  "whois": {
    "network": {
      "handle": "AIBV",
      "name": "Akamai International, BV",
      "cidrs": [
        "104.94.108.0/22"
      ],
      "created": "2015-08-12T00:00:00Z",
      "updated": "2015-08-12T00:00:00Z",
      "allocation_type": "REASSIGNMENT"
    },
    "organization": {
      "handle": "AIB-17",
      "name": "Akamai International, BV",
      "street": "Prins Bernhardplein 200",
      "city": "Amsterdam",
      "postal_code": "1097 JB",
      "country": "NL",
      "abuse_contacts": [
        {
          "handle": "NUS-ARIN",
          "name": "NOC United States",
          "email": "[email protected]"
        }
      ],
      "admin_contacts": [
        {
          "handle": "AIBVH-ARIN",
          "name": "AIBV Hostmaster",
          "email": "[email protected]"
        }
      ],
      "tech_contacts": [
        {
          "handle": "AIBVH-ARIN",
          "name": "AIBV Hostmaster",
          "email": "[email protected]"
        }
      ]
    }
  },
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
    "part": "o",
    "product": "linux",
    "source": "OSI_TRANSPORT_LAYER"
  },
  "dns": {
    "names": [
      "a104-94-110-25.deploy.static.akamaitechnologies.com"
    ],
    "records": {
      "a104-94-110-25.deploy.static.akamaitechnologies.com": {
        "record_type": "A",
        "resolved_at": "2025-06-17T13:42:03.420350158Z"
      }
    },
    "reverse_dns": {
      "names": [
        "a104-94-110-25.deploy.static.akamaitechnologies.com"
      ],
      "resolved_at": "2025-06-19T06:41:44.494301196Z"
    }
  },
  "last_updated_at": "2025-06-21T01:43:13.492Z",
  "labels": [
    "web-application-firewall"
  ]
}