{
"ip": "184.51.246.180",
"services": [
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 312\r\nExpires: Tue, 21 Jan 2025 10:17:31 GMT\r\nDate: <REDACTED>\r\nConnection: close\r\n",
"banner_hashes": [
"sha256:2424ce6c126b64e3266040c33f5c7c87b216489a33abf0ed609d5cd7a028cfaf"
],
"banner_hex": "485454502f312e30203430302042616420526571756573740d0a5365727665723a20416b616d616947486f73740d0a4d696d652d56657273696f6e3a20312e300d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203331320d0a457870697265733a205475652c203231204a616e20323032352031303a31373a333120474d540d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://184.51.246.180/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.0",
"status_code": 400,
"status_reason": "Bad Request",
"headers": {
"Server": [
"AkamaiGHost"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Expires": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Mime_Version": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8"
},
"Content_Length": [
"312"
],
"Expires": [
"Tue, 21 Jan 2025 10:17:31 GMT"
],
"Content_Type": [
"text/html"
],
"Connection": [
"close"
],
"Mime_Version": [
"1.0"
],
"Date": [
"<REDACTED>"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<TITLE>Invalid URL</TITLE>"
],
"body_size": 312,
"body": "<HTML><HEAD>\n<TITLE>Invalid URL</TITLE>\n</HEAD><BODY>\n<H1>Invalid URL</H1>\nThe requested URL \"[no URL]\", is invalid.<p>\nReference #9.c40a425f.1737454651.289b2f37\n<P>https://errors.edgesuite.net/9.c40a425f.1737454651.289b2f37</P>\n</BODY></HTML>\n",
"body_hashes": [
"sha256:a682e58ab60321033cbf58a25e8fe95f8b1c702d02d1e83b13d07c3dec615149",
"sha1:e907dde03f98f31e86a049d90be3b0aed52a7b91"
],
"body_hash": "sha1:e907dde03f98f31e86a049d90be3b0aed52a7b91",
"html_title": "Invalid URL"
},
"supports_http2": false
},
"labels": [
"web-application-firewall"
],
"observed_at": "2025-01-21T10:17:30.257325100Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 80,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:akamai:akamaighost:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Akamai",
"product": "GHost",
"source": "OSI_APPLICATION_LAYER"
},
{
"part": "o",
"vendor": "Akamai",
"other": {
"family": "Linux",
"device": "Web Proxy"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:akamai:app_and_api_protector:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Akamai",
"product": "App and API Protector",
"other": {
"device": "WAF"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.138.44",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 312\r\nExpires: Mon, 20 Jan 2025 21:39:18 GMT\r\nDate: <REDACTED>\r\nConnection: close\r\n",
"banner_hashes": [
"sha256:1884250d1b61a6b278b3cc4225e7650c2f66e2c94fcb3b2cd04f3059d87ce574"
],
"banner_hex": "485454502f312e30203430302042616420526571756573740d0a5365727665723a20416b616d616947486f73740d0a4d696d652d56657273696f6e3a20312e300d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203331320d0a457870697265733a204d6f6e2c203230204a616e20323032352032313a33393a313820474d540d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a",
"certificate": "f1427a9e35a8b1062ef85e1dbecdea7f371af6e5952a293e55da0cfb9144bfaf",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://184.51.246.180/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.0",
"status_code": 400,
"status_reason": "Bad Request",
"headers": {
"Server": [
"AkamaiGHost"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Expires": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Mime_Version": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8"
},
"Content_Length": [
"312"
],
"Expires": [
"Mon, 20 Jan 2025 21:39:18 GMT"
],
"Content_Type": [
"text/html"
],
"Connection": [
"close"
],
"Mime_Version": [
"1.0"
],
"Date": [
"<REDACTED>"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<TITLE>Invalid URL</TITLE>"
],
"body_size": 312,
"body": "<HTML><HEAD>\n<TITLE>Invalid URL</TITLE>\n</HEAD><BODY>\n<H1>Invalid URL</H1>\nThe requested URL \"[no URL]\", is invalid.<p>\nReference #9.c40a425f.1737409158.253ea1f8\n<P>https://errors.edgesuite.net/9.c40a425f.1737409158.253ea1f8</P>\n</BODY></HTML>\n",
"body_hashes": [
"sha256:7de56e371a399963b2d7ec058ff55c4c28b829a3f4fd73b0a821f53e01055f44",
"sha1:f297f53b46cf24728bdf8e0ebbf8b6188ac7f9f9"
],
"body_hash": "sha1:f297f53b46cf24728bdf8e0ebbf8b6188ac7f9f9",
"html_title": "Invalid URL"
},
"supports_http2": false
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "2ad2ad0002ad2ad00042d42d000000d71691dd6844b6fa08f9c5c2b4b882cc",
"cipher_and_version_fingerprint": "2ad2ad0002ad2ad00042d42d000000",
"tls_extensions_sha256": "d71691dd6844b6fa08f9c5c2b4b882cc",
"observed_at": "2025-01-05T19:14:46.950136592Z"
},
"labels": [
"web-application-firewall"
],
"observed_at": "2025-01-20T21:39:10.389370432Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 443,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:akamai:akamaighost:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Akamai",
"product": "GHost",
"source": "OSI_APPLICATION_LAYER"
},
{
"part": "o",
"vendor": "Akamai",
"other": {
"family": "Linux",
"device": "Web Proxy"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:akamai:app_and_api_protector:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Akamai",
"product": "App and API Protector",
"other": {
"device": "WAF"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "206.168.34.218",
"tls": {
"version_selected": "TLSv1_3",
"cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "f1427a9e35a8b1062ef85e1dbecdea7f371af6e5952a293e55da0cfb9144bfaf",
"chain_fps_sha_256": [
"72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0"
],
"leaf_data": {
"names": [
"dgt.api.aircanada.com",
"eip.api.aircanada.com",
"ntp.api.aircanada.com",
"pss.api.aircanada.com"
],
"subject_dn": "C=CA, ST=Quebec, O=Air Canada, CN=eip.api.aircanada.com",
"issuer_dn": "C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "27227f04428455ceead52c5fe2adb946a24931f4ccfebfad787c7e890b0c5598",
"fingerprint": "f1427a9e35a8b1062ef85e1dbecdea7f371af6e5952a293e55da0cfb9144bfaf",
"issuer": {
"common_name": [
"Sectigo RSA Organization Validation Secure Server CA"
],
"locality": [
"Salford"
],
"organization": [
"Sectigo Limited"
],
"province": [
"Greater Manchester"
],
"country": [
"GB"
]
},
"subject": {
"common_name": [
"eip.api.aircanada.com"
],
"organization": [
"Air Canada"
],
"province": [
"Quebec"
],
"country": [
"CA"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "vn2GvDw0U68Yv1i6c3tx2aCtq3az92UyrU7fpollgTStMDaENa1pY2IRJQw9utoGmQh8BwC24oG8uqY3aLi7pvxw/ImgPI9bKWWAsC4Nkfpjn6lb67H4Ip3gUvSQnzVEA6PMPmzlyo1OBSth5LBb5jTwVnoiOdF7Bim2Dr1qsd320Vw76LjzKslOQHN0k5v4L/GyELyG7PKYyq1eJZt/+BeyQVoZnehE12+njpoh3v0cvrbk8u+1ouZn5wXmxvb6JDmMGvK4OfG6Iw4rESHRfy5I3GwiR/5bCWz8+x+D/cx7EiISewIc008OudbPzVhe0XuSkF2iH0OjAzPYRfhf2Q==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "0e9ef0079a28d39bd3c2b1cf3153948ab82ff580d96e2716d51ca771445d805f"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0",
"subject_dn": "C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA",
"issuer_dn": "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority"
}
]
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "475c9302dc42b2751db9edcac3b74891",
"ja4s": "t130200_1303_a56c5b993250",
"versions": [
{
"tls_version": "TLSv1_3",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "475c9302dc42b2751db9edcac3b74891",
"ja4s": "t130200_1303_a56c5b993250"
},
{
"tls_version": "TLSv1_2",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "269a96c9d615229909f4c0c1056681dc",
"ja4s": "t120300_c030_cbb8871a0652"
}
]
},
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "Asia",
"country": "Kuwait",
"country_code": "KW",
"city": "Kuwait City",
"timezone": "Asia/Kuwait",
"province": "Al Asimah",
"coordinates": {
"latitude": 29.36972,
"longitude": 47.97833
}
},
"location_updated_at": "2025-01-10T19:01:13.239134247Z",
"autonomous_system": {
"asn": 42961,
"description": "GPRS-AS ZAIN",
"bgp_prefix": "184.51.244.0/22",
"name": "GPRS-AS ZAIN",
"country_code": "KW"
},
"autonomous_system_updated_at": "2025-01-10T19:01:13.239271511Z",
"whois": {
"network": {
"handle": "AKAMAI",
"name": "Akamai Technologies, Inc.",
"cidrs": [
"184.50.0.0/15"
],
"created": "2009-10-22T00:00:00Z",
"updated": "2012-03-02T00:00:00Z",
"allocation_type": "ALLOCATION"
},
"organization": {
"handle": "AKAMAI",
"name": "Akamai Technologies, Inc.",
"street": "145 Broadway",
"city": "Cambridge",
"state": "MA",
"postal_code": "02142",
"country": "US",
"abuse_contacts": [
{
"handle": "NUS-ARIN",
"name": "NOC United States",
"email": "[email protected]"
}
],
"admin_contacts": [
{
"handle": "IPADM11-ARIN",
"name": "ipadmin",
"email": "[email protected]"
}
],
"tech_contacts": [
{
"handle": "IPADM11-ARIN",
"name": "ipadmin",
"email": "[email protected]"
},
{
"handle": "SJS98-ARIN",
"name": "Steven Schecter",
"email": "[email protected]"
}
]
}
},
"dns": {
"names": [
"a184-51-246-180.deploy.static.akamaitechnologies.com"
],
"records": {
"a184-51-246-180.deploy.static.akamaitechnologies.com": {
"record_type": "A",
"resolved_at": "2025-01-08T13:45:58.524589558Z"
}
},
"reverse_dns": {
"names": [
"a184-51-246-180.deploy.static.akamaitechnologies.com"
],
"resolved_at": "2025-01-11T07:40:29.661269495Z"
}
},
"labels": [
"web-application-firewall"
]
}