18.185.185.146

As of: Jul 16, 2025 5:50pm UTC | Latest
{
  "ip": "18.185.185.146",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 301 Moved Permanently\r\nContent-Type: text/html\r\nDate:  <REDACTED>\r\nLocation: https://18.185.185.146/\r\nServer: nginx\r\nContent-Length: 162\r\nConnection: keep-alive\r\n",
      "banner_hashes": [
        "sha256:5c4e935f5fbc2e4074d176beabf6749245edb75ab1315f8bfe2ae10a54abea18"
      ],
      "banner_hex": "485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a446174653a20203c52454441435445443e0d0a4c6f636174696f6e3a2068747470733a2f2f31382e3138352e3138352e3134362f0d0a5365727665723a206e67696e780d0a436f6e74656e742d4c656e6774683a203136320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a",
      "discovery_method": "PREDICTIVE_METHOD_7",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://18.185.185.146/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 301,
          "status_reason": "Moved Permanently",
          "headers": {
            "Date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8"
            },
            "Server": [
              "nginx"
            ],
            "Content_Length": [
              "162"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Location": [
              "https://18.185.185.146/"
            ],
            "Connection": [
              "keep-alive"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>301 Moved Permanently</title>"
          ],
          "body_size": 162,
          "body": "<html>\r\n<head><title>301 Moved Permanently</title></head>\r\n<body>\r\n<center><h1>301 Moved Permanently</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
          "body_hashes": [
            "sha256:9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a",
            "sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff",
            "tlsh:0bc08cadab022cc8b8a73b3861c36160e2ec80701699451101b04a07f1cf1979ec23d1"
          ],
          "body_hash": "sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff",
          "html_title": "301 Moved Permanently"
        },
        "supports_http2": false
      },
      "observed_at": "2025-07-16T08:48:49.103672737Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "nginx",
          "product": "nginx",
          "other": {
            "family": "nginx"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "206.168.34.192",
      "transport_fingerprint": {
        "raw": "26847,255,true,MSTNW,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 200 OK\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nContent-Encoding: gzip\r\nContent-Type: text/html; charset=UTF-8\r\nDate:  <REDACTED>\r\nExpires: Thu, 26 Oct 1978 00:00:00 GMT\r\nServer: nginx\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Length: 3729\r\nConnection: keep-alive\r\n",
      "banner_hashes": [
        "sha256:920a30f84c134d36c9e4d536e1bca110cc464e807998911745d25dc41c2853c5"
      ],
      "banner_hex": "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",
      "certificate": "47f92bf3766215f5b74d35f1b51d41e7cb1a4c02afb4a6a1ba84ab5be892cdca",
      "discovery_method": "IPV4_WALK_CLOUD_PRIORITY_1",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://18.185.185.146/en-US/account/login",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 200,
          "status_reason": "OK",
          "headers": {
            "Vary": [
              "Accept-Encoding"
            ],
            "_encoding": {
              "Vary": "DISPLAY_UTF8",
              "X_Frame_Options": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Expires": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Cache_Control": "DISPLAY_UTF8",
              "Strict_Transport_Security": "DISPLAY_UTF8",
              "X_Content_Type_Options": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Encoding": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8"
            },
            "X_Frame_Options": [
              "SAMEORIGIN"
            ],
            "Server": [
              "nginx"
            ],
            "Content_Length": [
              "3729"
            ],
            "Expires": [
              "Thu, 26 Oct 1978 00:00:00 GMT"
            ],
            "Content_Type": [
              "text/html; charset=UTF-8"
            ],
            "Cache_Control": [
              "no-store, no-cache, must-revalidate, max-age=0"
            ],
            "Strict_Transport_Security": [
              "max-age=31536000; includeSubDomains"
            ],
            "X_Content_Type_Options": [
              "nosniff"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Content_Encoding": [
              "gzip"
            ],
            "Connection": [
              "keep-alive"
            ]
          },
          "body_size": 6104,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "            <html>            <head>            <script>            function submitForm()             {                 document.forms[0].submit();             }            </script>            </head>            <body onLoad=\"submitForm()\">            <p align=\"center\">            Authenticating...            </br>            <img src=\"/en-US/static/@14/img/splunk/progress-bar-animation.gif\" align=\"center\"/>            </p>             <form method=\"post\" action=\"https://login.microsoftonline.com/0a2ef38c-bbb0-4328-a9be-2d1493d6cf12/saml2\">            <input type=\"hidden\" name=\"SAMLRequest\" value=\"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\" />            <input type=\"hidden\" name=\"RelayState\" value=\"cmV0dXJuX3RvPSZ1c2VybmFtZT0mYWNjZXB0ZWRfdG9zPQ==\" />            <!--input type=\"submit\" value=\"Submit\" /-->            </form>            </body>            </html>            ",
          "favicons": [
            {
              "size": 21386,
              "name": "https://18.185.185.146/favicon.ico",
              "md5_hash": "e60c968e8ff3cc2f4fb869588e83afc6",
              "hashes": [
                "md5:e60c968e8ff3cc2f4fb869588e83afc6",
                "sha256:eef16eb02dc68cfd7dcca0022c529b2184d264b55c4f78a5d63f5db4e6b80682"
              ],
              "shodan_hash": -316785925
            }
          ],
          "body_hashes": [
            "sha256:9850cd54e99992de5ced5eceb56503d712ec7ddca1792bac1dc333b686673780",
            "sha1:bb646817be88e55300638bc99d0d21da20f67c8c",
            "tlsh:5cc16b390dd6af68836b050ae0fe06d90f2c934b719705dcb66cbb097386a0c93c65d8"
          ],
          "body_hash": "sha1:bb646817be88e55300638bc99d0d21da20f67c8c"
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "29d29d00029d29d00029d29d29d29d755a2cec4b52fb1bce1ac7f1e48c8a7d",
        "cipher_and_version_fingerprint": "29d29d00029d29d00029d29d29d29d",
        "tls_extensions_sha256": "755a2cec4b52fb1bce1ac7f1e48c8a7d",
        "observed_at": "2025-07-15T21:39:36.082968124Z"
      },
      "observed_at": "2025-07-16T17:49:30.171578204Z",
      "perspective_id": "PERSPECTIVE_UNKNOWN",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "nginx",
          "product": "nginx",
          "other": {
            "family": "nginx"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "206.168.34.87",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "47f92bf3766215f5b74d35f1b51d41e7cb1a4c02afb4a6a1ba84ab5be892cdca",
          "chain_fps_sha_256": [
            "c8025f9fc65fdfc95b3ca8cc7867b9a587b5277973957917463fc813d0b625a9",
            "cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f"
          ],
          "leaf_data": {
            "names": [
              "*.akamai-inputs-hugoboss.splunkcloud.com",
              "*.es-hugoboss.splunkcloud.com",
              "*.http-inputs-ack-hugoboss.splunkcloud.com",
              "*.http-inputs-firehose-hugoboss.splunkcloud.com",
              "*.http-inputs-hugoboss.splunkcloud.com",
              "*.hugoboss.splunkcloud.com",
              "*.pvt.hugoboss.splunkcloud.com",
              "akamai-inputs-hugoboss.splunkcloud.com",
              "es-hugoboss.splunkcloud.com",
              "http-inputs-ack-hugoboss.splunkcloud.com",
              "http-inputs-firehose-hugoboss.splunkcloud.com",
              "http-inputs-hugoboss.splunkcloud.com",
              "hugoboss.splunkcloud.com",
              "pvt.hugoboss.splunkcloud.com"
            ],
            "subject_dn": "C=US, ST=California, L=San Francisco, O=Splunk Inc., CN=*.hugoboss.splunkcloud.com",
            "issuer_dn": "C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "c43307754022357b6a4eb9bff24a2abd06deab248f552e16ac069f0e3ae0a682",
            "fingerprint": "47f92bf3766215f5b74d35f1b51d41e7cb1a4c02afb4a6a1ba84ab5be892cdca",
            "issuer": {
              "common_name": [
                "DigiCert Global G2 TLS RSA SHA256 2020 CA1"
              ],
              "organization": [
                "DigiCert Inc"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "*.hugoboss.splunkcloud.com"
              ],
              "locality": [
                "San Francisco"
              ],
              "organization": [
                "Splunk Inc."
              ],
              "province": [
                "California"
              ],
              "country": [
                "US"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "trDVY7ckNUaBlUjoFVtn1TqimyCsIpSzdIPly1chGERCGOLu/Eu20mk5yPTWgHIETdSQzPN/EkzxKTwzT9znJTCVTa72zlcTkiro2+iIrZP05GL8Xnn+/uadaEPp+K4oKBd/B5Nc0SicPMLjHkuthot8TdL5I5eHThZ3z2ofoybOwg1R0wqAZgOcKNhswEoZo5CeWutOhMAa0nton7/mUbR1h3X0dzwXq8BAXR4Sy5hRii9LMyrBX+9Wtd2HD907JPftgWah6f8b3ELhHumpVydgavdpv4DfDwVh6dPxvek+xoK9cyYSXvggEdydqPTGZWfwbDhWGHKltgfcV7KtjQ==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "c4aeb10f06868a4d2c47c86a953e9427104ac561390edf59efa36a776f97a459"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "c8025f9fc65fdfc95b3ca8cc7867b9a587b5277973957917463fc813d0b625a9",
              "subject_dn": "C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1",
              "issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2"
            },
            {
              "fingerprint": "cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f",
              "subject_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2",
              "issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "303951d4c50efb2e991652225a6f02b1",
        "ja4s": "t120200_c02f_344b4dce5a52",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "303951d4c50efb2e991652225a6f02b1",
            "ja4s": "t120200_c02f_344b4dce5a52"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Germany",
    "country_code": "DE",
    "city": "Frankfurt am Main",
    "postal_code": "60306",
    "timezone": "Europe/Berlin",
    "province": "Hesse",
    "coordinates": {
      "latitude": 50.11552,
      "longitude": 8.68417
    }
  },
  "location_updated_at": "2025-07-12T23:12:36.064526156Z",
  "autonomous_system": {
    "asn": 16509,
    "description": "AMAZON-02",
    "bgp_prefix": "18.184.0.0/15",
    "name": "AMAZON-02",
    "country_code": "US"
  },
  "autonomous_system_updated_at": "2025-07-12T23:12:36.064571066Z",
  "whois": {
    "network": {
      "handle": "AMAZO-ZFRA",
      "name": "A100 ROW GmbH",
      "cidrs": [
        "18.184.0.0/15"
      ],
      "created": "2018-02-22T00:00:00Z",
      "updated": "2021-02-10T00:00:00Z",
      "allocation_type": "REALLOCATION"
    },
    "organization": {
      "handle": "RG-123",
      "name": "A100 ROW GmbH",
      "street": "Marcel-Breuer-Strasse 10",
      "city": "Munchen",
      "postal_code": "80807",
      "country": "DE",
      "abuse_contacts": [
        {
          "handle": "AEA8-ARIN",
          "name": "Amazon EC2 Abuse",
          "email": "[email protected]"
        }
      ],
      "admin_contacts": [
        {
          "handle": "IPMAN40-ARIN",
          "name": "IP Management",
          "email": "[email protected]"
        }
      ],
      "tech_contacts": [
        {
          "handle": "ANO24-ARIN",
          "name": "Amazon EC2 Network Operations",
          "email": "[email protected]"
        }
      ]
    }
  },
  "dns": {
    "names": [
      "hugoboss.splunkcloud.com"
    ],
    "records": {
      "hugoboss.splunkcloud.com": {
        "record_type": "A",
        "resolved_at": "2025-07-04T18:57:55.032285945Z"
      }
    }
  },
  "last_updated_at": "2025-07-16T17:50:35.878Z"
}