104.94.110.25
As of: Jun 21, 2025 1:43am UTC |
Latest
{
"ip": "104.94.110.25",
"services": [
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 312\r\nExpires: Sat, 21 Jun 2025 01:32:53 GMT\r\nDate: <REDACTED>\r\nConnection: close\r\n",
"banner_hashes": [
"sha256:4e2bc98e0aa1d0fff92c89fdc97f7f8fe7ce534cdc1771e9db0bb30cc8917ac5"
],
"banner_hex": "485454502f312e30203430302042616420526571756573740d0a5365727665723a20416b616d616947486f73740d0a4d696d652d56657273696f6e3a20312e300d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203331320d0a457870697265733a205361742c203231204a756e20323032352030313a33323a353320474d540d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://104.94.110.25/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.0",
"status_code": 400,
"status_reason": "Bad Request",
"headers": {
"Server": [
"AkamaiGHost"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Expires": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Mime_Version": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8"
},
"Content_Length": [
"312"
],
"Expires": [
"Sat, 21 Jun 2025 01:32:53 GMT"
],
"Content_Type": [
"text/html"
],
"Connection": [
"close"
],
"Mime_Version": [
"1.0"
],
"Date": [
"<REDACTED>"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<TITLE>Invalid URL</TITLE>"
],
"body_size": 312,
"body": "<HTML><HEAD>\n<TITLE>Invalid URL</TITLE>\n</HEAD><BODY>\n<H1>Invalid URL</H1>\nThe requested URL \"[no URL]\", is invalid.<p>\nReference #9.90743217.1750469573.123d2d98\n<P>https://errors.edgesuite.net/9.90743217.1750469573.123d2d98</P>\n</BODY></HTML>\n",
"body_hashes": [
"sha256:a7059cd797343d4d7795a89c912f50f1f78cc0b17eecff87fe61ce05b16bc440",
"sha1:ac2a33266e33f515824c596d1a75acd7397836de",
"tlsh:61e0c2e7d035e0794f99378a3e084f7b8ef369519126ff6a4068a1d85490fa04bd2096"
],
"body_hash": "sha1:ac2a33266e33f515824c596d1a75acd7397836de",
"html_title": "Invalid URL"
},
"supports_http2": false
},
"labels": [
"web-application-firewall"
],
"observed_at": "2025-06-21T01:32:50.263968508Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 80,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
"part": "o",
"product": "linux",
"source": "OSI_TRANSPORT_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:akamai:akamaighost:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Akamai",
"product": "GHost",
"source": "OSI_APPLICATION_LAYER"
},
{
"part": "o",
"vendor": "Akamai",
"other": {
"family": "Linux",
"device": "Web Proxy"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:akamai:app_and_api_protector:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Akamai",
"product": "App and API Protector",
"other": {
"device": "WAF"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "206.168.34.49",
"transport_fingerprint": {
"id": 262,
"os": "CentOS",
"raw": "65160,64,true,MSTNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 312\r\nExpires: Sat, 21 Jun 2025 01:28:31 GMT\r\nDate: <REDACTED>\r\nConnection: close\r\n",
"banner_hashes": [
"sha256:1a705ca7fc0095a45059a6edd08452c53b36c950295f7af5beda2552a4b9042a"
],
"banner_hex": "485454502f312e30203430302042616420526571756573740d0a5365727665723a20416b616d616947486f73740d0a4d696d652d56657273696f6e3a20312e300d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203331320d0a457870697265733a205361742c203231204a756e20323032352030313a32383a333120474d540d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a",
"certificate": "e6d7ce9de9365d041783cdac8da25763890d02fa747f918b8c9bf9b4c12124d0",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://104.94.110.25/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.0",
"status_code": 400,
"status_reason": "Bad Request",
"headers": {
"Server": [
"AkamaiGHost"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Expires": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Mime_Version": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8"
},
"Content_Length": [
"312"
],
"Expires": [
"Sat, 21 Jun 2025 01:28:31 GMT"
],
"Content_Type": [
"text/html"
],
"Connection": [
"close"
],
"Mime_Version": [
"1.0"
],
"Date": [
"<REDACTED>"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<TITLE>Invalid URL</TITLE>"
],
"body_size": 312,
"body": "<HTML><HEAD>\n<TITLE>Invalid URL</TITLE>\n</HEAD><BODY>\n<H1>Invalid URL</H1>\nThe requested URL \"[no URL]\", is invalid.<p>\nReference #9.90743217.1750469311.12374e27\n<P>https://errors.edgesuite.net/9.90743217.1750469311.12374e27</P>\n</BODY></HTML>\n",
"body_hashes": [
"sha256:694312f59a2583f71a662679c71fb3fc72740288344d2f3caea6135f71527e5a",
"sha1:3e4e803b195f781b4bfd129da819d072cd41446e",
"tlsh:34e0c2e7c031d1964f9833c92e088f7fcaf31b918025fbaa40ac92996490eb04ad2092"
],
"body_hash": "sha1:3e4e803b195f781b4bfd129da819d072cd41446e",
"html_title": "Invalid URL"
},
"supports_http2": false
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "28d28d28d2ad28d00042d42d000000bd133fde671db50adc016473d0d15112",
"cipher_and_version_fingerprint": "28d28d28d2ad28d00042d42d000000",
"tls_extensions_sha256": "bd133fde671db50adc016473d0d15112",
"observed_at": "2025-06-17T12:26:29.752351555Z"
},
"labels": [
"web-application-firewall"
],
"observed_at": "2025-06-21T01:28:31.444543518Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 443,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:akamai:akamaighost:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Akamai",
"product": "GHost",
"source": "OSI_APPLICATION_LAYER"
},
{
"part": "o",
"vendor": "Akamai",
"other": {
"family": "Linux",
"device": "Web Proxy"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:akamai:app_and_api_protector:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Akamai",
"product": "App and API Protector",
"other": {
"device": "WAF"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.145.109",
"tls": {
"version_selected": "TLSv1_3",
"cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "e6d7ce9de9365d041783cdac8da25763890d02fa747f918b8c9bf9b4c12124d0",
"chain_fps_sha_256": [
"52274c57ce4dee3b49db7a7ff708c040f771898b3be88725a86fb4430182fe14"
],
"leaf_data": {
"names": [
"a2cgateway.accretivehealth.com",
"adhocsftp.r1rcm.com",
"admin-ascension-visitpay.ccc.r1rcm.com",
"admin-lifepoint-visitpay.ccc.r1rcm.com",
"agentchat.r1rcm.com",
"ami.r1rcm.com",
"analytics.r1rcm.com",
"api.r1rcm.com",
"apicare.accretivehealth.com",
"apicarerco.accretivehealth.com",
"apiconflator.r1rcm.com",
"apiiam.r1rcm.com",
"apim.r1rcm.com",
"apiorganizations.r1rcm.com",
"apisonder.r1rcm.com",
"apps.insight.r1rcm.com",
"cc.accretivehealth.com",
"cc.r1rcm.com",
"changeregistry.r1rcm.com",
"chartmanager.r1rcm.com",
"cmbsbilling.com",
"cmnextaccount.r1rcm.com",
"conflator.r1rcm.com",
"cr.r1rcm.com",
"decision-spa.r1rcm.com",
"decision.r1rcm.com",
"desktop.r1rcm.com",
"doclink.intermedix.com",
"ed-api.intermedix.com",
"epics.r1rcm.com",
"gateway-r1ireview.r1rcm.com",
"gateway.r1rcm.com",
"hub.r1rcm.com",
"iam.r1rcm.com",
"imhwebchat.r1rcm.com",
"insight.r1rcm.com",
"intermedix.com",
"ipas.r1rcm.com",
"ipasreview.r1rcm.com",
"itenablement.r1rcm.com",
"lifepoint.chartmanager.r1rcm.com",
"litephysician.r1rcm.com",
"mfa.prd.twilio.r1rcm.com",
"myaccount.intermedix.global",
"myaccount.r1rcm.com",
"nrva.r1rcm.com",
"onboardingtasks.r1rcm.com",
"optix.r1rcm.com",
"organizations.r1rcm.com",
"pas.r1rcm.com",
"pasdocument.r1rcm.com",
"pasfileservice.r1rcm.com",
"pasintapi.r1rcm.com",
"pasinternal.r1rcm.com",
"paspublicapi.r1rcm.com",
"passervicecommon.r1rcm.com",
"passervicedsr.r1rcm.com",
"passervicegateway.r1rcm.com",
"passervicelog.r1rcm.com",
"passwordreset.r1rcm.com",
"pentas.r1rcm.com",
"physician.r1rcm.com",
"prd.twilio.r1rcm.com",
"prodftp.accretivehealth.com",
"prodftp001.accretivehealth.com",
"prohance.r1rcm.com",
"pythia.r1rcm.com",
"r1access.r1rcm.com",
"r1accessfileservice.r1rcm.com",
"r1accessrco.r1rcm.com",
"r1contract.r1rcm.com",
"r1contractreports.r1rcm.com",
"r1decision.r1rcm.com",
"r1decisionrco.r1rcm.com",
"r1descision.r1rcm.com",
"r1hub.r1rcm.com",
"r1ireview.r1rcm.com",
"r1rcm.com",
"r1rcohub.r1rcm.com",
"r1sftp.r1rcm.com",
"r1stars.r1rcm.com",
"rcohub.r1rcm.com",
"rcx-rs.r1rcm.com",
"rcx.r1rcm.com",
"rdsgateway.epbs.com",
"reports.r1rcm.com",
"servicereceiver.r1rcm.com",
"sn.r1rcm.com",
"sonder.r1rcm.com",
"st.intermedix.com",
"textingresponseservice.r1rcm.com",
"traininghub.r1rcm.com",
"twilio.r1rcm.com",
"utcrco.r1rcm.com",
"visualization.r1rcm.com",
"wfm.r1rcm.com",
"www.cmbsbilling.com",
"www.intermedix.com",
"www.r1rcm.com",
"www.rdsgateway.epbs.com"
],
"subject_dn": "C=US, ST=Illinois, L=Chicago, O=R1 RCM Inc., CN=hub.r1rcm.com",
"issuer_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
"pubkey_bit_size": 256,
"pubkey_algorithm": "ECDSA",
"tbs_fingerprint": "2522c16ccf0d2c652e5df042083e7c33d902252b64a4e9dbb0d637a82611ebc1",
"fingerprint": "e6d7ce9de9365d041783cdac8da25763890d02fa747f918b8c9bf9b4c12124d0",
"issuer": {
"common_name": [
"DigiCert TLS RSA SHA256 2020 CA1"
],
"organization": [
"DigiCert Inc"
],
"country": [
"US"
]
},
"subject": {
"common_name": [
"hub.r1rcm.com"
],
"locality": [
"Chicago"
],
"organization": [
"R1 RCM Inc."
],
"province": [
"Illinois"
],
"country": [
"US"
]
},
"public_key": {
"key_algorithm": "ECDSA",
"ecdsa": {
"_encoding": {
"b": "DISPLAY_BASE64",
"gx": "DISPLAY_BASE64",
"gy": "DISPLAY_BASE64",
"n": "DISPLAY_BASE64",
"p": "DISPLAY_BASE64",
"x": "DISPLAY_BASE64",
"y": "DISPLAY_BASE64"
},
"b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
"curve": "P-256",
"gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
"gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
"length": 256,
"n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
"p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
"x": "pnDoEAD4g3Gex916qnY0cVq+wGuqQtURAp/b0hKc+t4=",
"y": "3t09t0oqYXFUb5tNS7zweR+7dsdIDDCJrTtjhuFQXmE="
},
"fingerprint": "1c9572a465a6dbe665931cf8710155a79e2748ff055aecee67c6081ddbbde448"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "52274c57ce4dee3b49db7a7ff708c040f771898b3be88725a86fb4430182fe14",
"subject_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
"issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
}
]
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "475c9302dc42b2751db9edcac3b74891",
"ja4s": "t130200_1303_a56c5b993250",
"versions": [
{
"tls_version": "TLSv1_3",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "475c9302dc42b2751db9edcac3b74891",
"ja4s": "t130200_1303_a56c5b993250"
},
{
"tls_version": "TLSv1_2",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "19c85eff65714052c63bf784af832afb",
"ja4s": "t120300_cca9_cbb8871a0652"
}
]
},
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "North America",
"country": "United States",
"country_code": "US",
"city": "Miami",
"postal_code": "33101",
"timezone": "America/New_York",
"province": "Florida",
"coordinates": {
"latitude": 25.77427,
"longitude": -80.19366
}
},
"location_updated_at": "2025-06-16T12:47:45.504584837Z",
"autonomous_system": {
"asn": 16625,
"description": "AKAMAI-AS",
"bgp_prefix": "104.94.108.0/22",
"name": "AKAMAI-AS",
"country_code": "US"
},
"autonomous_system_updated_at": "2025-06-16T12:47:45.504584757Z",
"whois": {
"network": {
"handle": "AIBV",
"name": "Akamai International, BV",
"cidrs": [
"104.94.108.0/22"
],
"created": "2015-08-12T00:00:00Z",
"updated": "2015-08-12T00:00:00Z",
"allocation_type": "REASSIGNMENT"
},
"organization": {
"handle": "AIB-17",
"name": "Akamai International, BV",
"street": "Prins Bernhardplein 200",
"city": "Amsterdam",
"postal_code": "1097 JB",
"country": "NL",
"abuse_contacts": [
{
"handle": "NUS-ARIN",
"name": "NOC United States",
"email": "[email protected]"
}
],
"admin_contacts": [
{
"handle": "AIBVH-ARIN",
"name": "AIBV Hostmaster",
"email": "[email protected]"
}
],
"tech_contacts": [
{
"handle": "AIBVH-ARIN",
"name": "AIBV Hostmaster",
"email": "[email protected]"
}
]
}
},
"operating_system": {
"uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
"part": "o",
"product": "linux",
"source": "OSI_TRANSPORT_LAYER"
},
"dns": {
"names": [
"a104-94-110-25.deploy.static.akamaitechnologies.com"
],
"records": {
"a104-94-110-25.deploy.static.akamaitechnologies.com": {
"record_type": "A",
"resolved_at": "2025-06-17T13:42:03.420350158Z"
}
},
"reverse_dns": {
"names": [
"a104-94-110-25.deploy.static.akamaitechnologies.com"
],
"resolved_at": "2025-06-19T06:41:44.494301196Z"
}
},
"last_updated_at": "2025-06-21T01:43:13.492Z",
"labels": [
"web-application-firewall"
]
}