185.73.23.133
As of: Mar 24, 2025 8:16pm UTC |
Latest
{
"ip": "185.73.23.133",
"services": [
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nLast-Modified: Wed, 05 Mar 2025 10:59:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67c82eae-b90\"\r\nContent-Encoding: gzip\r\n",
"banner_hashes": [
"sha256:9d5087d2b18cbe0795d6125692a10ec386ac801bc8b51e1dcb183e1eb33b86e1"
],
"banner_hex": "485454502f312e3120323030204f4b0d0a5365727665723a206e67696e782f312e32322e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a4c6173742d4d6f6469666965643a205765642c203035204d617220323032352031303a35393a353820474d540d0a5472616e736665722d456e636f64696e673a206368756e6b65640d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a455461673a20572f2236376338326561652d623930220d0a436f6e74656e742d456e636f64696e673a20677a69700d0a",
"discovery_method": "REFRESH",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://185.73.23.133/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Server": [
"nginx/1.22.1"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Transfer_Encoding": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Content_Encoding": "DISPLAY_UTF8",
"ETag": "DISPLAY_UTF8",
"Last_Modified": "DISPLAY_UTF8"
},
"Content_Type": [
"text/html"
],
"Transfer_Encoding": [
"chunked"
],
"Connection": [
"keep-alive"
],
"Date": [
"<REDACTED>"
],
"Content_Encoding": [
"gzip"
],
"ETag": [
"W/\"67c82eae-b90\""
],
"Last_Modified": [
"Wed, 05 Mar 2025 10:59:58 GMT"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>Measurement Information and Usage Notice | Measurement Information</title>",
"<meta charset=utf-8>",
"<meta name=viewport content=\"width=device-width,initial-scale=1\">"
],
"body_size": 2960,
"body": "<!doctype html><html lang=en><head><meta charset=utf-8><meta name=viewport content=\"width=device-width,initial-scale=1\"><title>Measurement Information and Usage Notice | Measurement Information</title>\n<link rel=stylesheet href=/css/style.css><link rel=stylesheet href=/css/fonts.css></head><body><div class=logos><a href=https://informatik.rub.de alt=\"Ruhr University Bochum - Computer Science\"><img class=logo_rub_cs src=/images/rub_cs.png alt=\"Ruhr University Bochum Logo\"></img></a>\n<a href=https://casa.rub.de alt=\"DFG Excellence Cluster - Cyber Security in the Age of Large-scale Adversaries\"><img class=logo_casa src=/images/casa.png alt=\"DFG Excellence Cluster - Cyber Security in the Age of Large-scale Adversaries\"></img></a></div><div class=nav><h1>Measurement Information and Usage Notice</h1><ul class=menu></ul></div><p>This website is operated and maintained by researchers of the <a href=https://informatik.rub.de/softsec/>Chair for Software Security</a> at the <a href=https://informatik.rub.de>Faculty of Computer Science</a> at <a href=https://rub.de>Ruhr University Bochum</a>.</p><p>Most likely, you are visiting this website because you have received requests from our network range that you might consider an attack or scan.\nPlease note that the requests we are conducting from these IP addresses are benign and we are not attacking you or anyone else.</p><p>At almost all times, we are running a variety of different experiments and scans from our network to evaluate and assess the global characteristics of the Internet and its security and privacy posture.\nOur current experiments are detailed below.</p><p>We hope that the information below answers your immediate questions and ease your concerns.\nHowever, we understand that they might not answer all your questions.\nTherefore, if you wish to receive additional information about our research projects impacting you or if you wish to be excluded from our measurements, please reach out directly to us by email to <a href=mailto:[email protected]>[email protected]</a> with the relevant information (source/destination IP address, address range, what has impacted you, etc.).\nWe will be more than happy to provide more information about our research project and/or exclude you from our experiments through our blocklist.\nFinally, please note that we store collected data for research purposes only and that we only store aggregated and anonymous statistics whenever possible.</p><h1 id=current-measurements>Current Measurements</h1><ul><li>Liveness checks for selected IPv4 and IPv6 address ranges and ports.</li><li>TLS handshakes for selected IPv4 and IPv6 address ranges and ports.</li><li>DNS queries for selected domains.</li></ul><h1 id=measurement-hosts>Measurement Hosts</h1><p>We currently perform measurements from the following hosts:</p><ul><li>ports.measurements.softsec.rub.de (IPv4: 185.73.23.133)</li></ul><ul></ul><footer></footer></body></html>",
"body_hashes": [
"sha256:5fa230e16223aed94c4e068f8cd0258152b6626a10397c75459dc784ea8bdb87",
"sha1:6dc8ac762fbfcd78c26eeb1c3854623a641a6776",
"tlsh:1e51a70bb145211b824516963d4732eafb4f90eca3b8c95a1edd840d2365e5863363d7"
],
"body_hash": "sha1:6dc8ac762fbfcd78c26eeb1c3854623a641a6776",
"html_title": "Measurement Information and Usage Notice | Measurement Information"
},
"supports_http2": false
},
"observed_at": "2025-03-24T20:15:41.158100558Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 80,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:f5:nginx:1.22.1:*:*:*:*:*:*:*",
"part": "a",
"vendor": "nginx",
"product": "nginx",
"version": "1.22.1",
"other": {
"family": "nginx"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "162.142.125.33",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nLast-Modified: Wed, 05 Mar 2025 10:59:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67c82eae-b90\"\r\nContent-Encoding: gzip\r\n",
"banner_hashes": [
"sha256:9d5087d2b18cbe0795d6125692a10ec386ac801bc8b51e1dcb183e1eb33b86e1"
],
"banner_hex": "485454502f312e3120323030204f4b0d0a5365727665723a206e67696e782f312e32322e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a4c6173742d4d6f6469666965643a205765642c203035204d617220323032352031303a35393a353820474d540d0a5472616e736665722d456e636f64696e673a206368756e6b65640d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a455461673a20572f2236376338326561652d623930220d0a436f6e74656e742d456e636f64696e673a20677a69700d0a",
"certificate": "eee3d5fd2c4f0675127ea5f73610d50a4bb5a94ef199d0597afe266ef1c5eced",
"discovery_method": "PREDICTIVE_METHOD_18",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://185.73.23.133/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Server": [
"nginx/1.22.1"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Transfer_Encoding": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Content_Encoding": "DISPLAY_UTF8",
"ETag": "DISPLAY_UTF8",
"Last_Modified": "DISPLAY_UTF8"
},
"Content_Type": [
"text/html"
],
"Transfer_Encoding": [
"chunked"
],
"Connection": [
"keep-alive"
],
"Date": [
"<REDACTED>"
],
"Content_Encoding": [
"gzip"
],
"ETag": [
"W/\"67c82eae-b90\""
],
"Last_Modified": [
"Wed, 05 Mar 2025 10:59:58 GMT"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>Measurement Information and Usage Notice | Measurement Information</title>",
"<meta charset=utf-8>",
"<meta name=viewport content=\"width=device-width,initial-scale=1\">"
],
"body_size": 2960,
"body": "<!doctype html><html lang=en><head><meta charset=utf-8><meta name=viewport content=\"width=device-width,initial-scale=1\"><title>Measurement Information and Usage Notice | Measurement Information</title>\n<link rel=stylesheet href=/css/style.css><link rel=stylesheet href=/css/fonts.css></head><body><div class=logos><a href=https://informatik.rub.de alt=\"Ruhr University Bochum - Computer Science\"><img class=logo_rub_cs src=/images/rub_cs.png alt=\"Ruhr University Bochum Logo\"></img></a>\n<a href=https://casa.rub.de alt=\"DFG Excellence Cluster - Cyber Security in the Age of Large-scale Adversaries\"><img class=logo_casa src=/images/casa.png alt=\"DFG Excellence Cluster - Cyber Security in the Age of Large-scale Adversaries\"></img></a></div><div class=nav><h1>Measurement Information and Usage Notice</h1><ul class=menu></ul></div><p>This website is operated and maintained by researchers of the <a href=https://informatik.rub.de/softsec/>Chair for Software Security</a> at the <a href=https://informatik.rub.de>Faculty of Computer Science</a> at <a href=https://rub.de>Ruhr University Bochum</a>.</p><p>Most likely, you are visiting this website because you have received requests from our network range that you might consider an attack or scan.\nPlease note that the requests we are conducting from these IP addresses are benign and we are not attacking you or anyone else.</p><p>At almost all times, we are running a variety of different experiments and scans from our network to evaluate and assess the global characteristics of the Internet and its security and privacy posture.\nOur current experiments are detailed below.</p><p>We hope that the information below answers your immediate questions and ease your concerns.\nHowever, we understand that they might not answer all your questions.\nTherefore, if you wish to receive additional information about our research projects impacting you or if you wish to be excluded from our measurements, please reach out directly to us by email to <a href=mailto:[email protected]>[email protected]</a> with the relevant information (source/destination IP address, address range, what has impacted you, etc.).\nWe will be more than happy to provide more information about our research project and/or exclude you from our experiments through our blocklist.\nFinally, please note that we store collected data for research purposes only and that we only store aggregated and anonymous statistics whenever possible.</p><h1 id=current-measurements>Current Measurements</h1><ul><li>Liveness checks for selected IPv4 and IPv6 address ranges and ports.</li><li>TLS handshakes for selected IPv4 and IPv6 address ranges and ports.</li><li>DNS queries for selected domains.</li></ul><h1 id=measurement-hosts>Measurement Hosts</h1><p>We currently perform measurements from the following hosts:</p><ul><li>ports.measurements.softsec.rub.de (IPv4: 185.73.23.133)</li></ul><ul></ul><footer></footer></body></html>",
"body_hashes": [
"sha256:5fa230e16223aed94c4e068f8cd0258152b6626a10397c75459dc784ea8bdb87",
"sha1:6dc8ac762fbfcd78c26eeb1c3854623a641a6776",
"tlsh:1e51a70bb145211b824516963d4732eafb4f90eca3b8c95a1edd840d2365e5863363d7"
],
"body_hash": "sha1:6dc8ac762fbfcd78c26eeb1c3854623a641a6776",
"html_title": "Measurement Information and Usage Notice | Measurement Information"
},
"supports_http2": false
},
"observed_at": "2025-03-24T08:29:18.820949418Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 443,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:f5:nginx:1.22.1:*:*:*:*:*:*:*",
"part": "a",
"vendor": "nginx",
"product": "nginx",
"version": "1.22.1",
"other": {
"family": "nginx"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "162.142.125.45",
"tls": {
"version_selected": "TLSv1_3",
"cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "eee3d5fd2c4f0675127ea5f73610d50a4bb5a94ef199d0597afe266ef1c5eced",
"chain_fps_sha_256": [
"76e9e288aafc0e37f4390cbf946aad997d5c1c901b3ce513d3d8fadbabe2ab85"
],
"leaf_data": {
"names": [
"ports-measurements.softsec.rub.de",
"ports-measurements.softsec.ruhr-uni-bochum.de",
"ports.measurements.softsec.rub.de",
"ports.measurements.softsec.ruhr-uni-bochum.de"
],
"subject_dn": "CN=ports.measurements.softsec.rub.de",
"issuer_dn": "C=US, O=Let's Encrypt, CN=E6",
"pubkey_bit_size": 256,
"pubkey_algorithm": "ECDSA",
"tbs_fingerprint": "d9ef4a52b97c5115a7c767635bdd5f500878198600ad6d2a01457a396e1816a5",
"fingerprint": "eee3d5fd2c4f0675127ea5f73610d50a4bb5a94ef199d0597afe266ef1c5eced",
"issuer": {
"common_name": [
"E6"
],
"organization": [
"Let's Encrypt"
],
"country": [
"US"
]
},
"subject": {
"common_name": [
"ports.measurements.softsec.rub.de"
]
},
"public_key": {
"key_algorithm": "ECDSA",
"ecdsa": {
"_encoding": {
"b": "DISPLAY_BASE64",
"gx": "DISPLAY_BASE64",
"gy": "DISPLAY_BASE64",
"n": "DISPLAY_BASE64",
"p": "DISPLAY_BASE64",
"x": "DISPLAY_BASE64",
"y": "DISPLAY_BASE64"
},
"b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
"curve": "P-256",
"gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
"gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
"length": 256,
"n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
"p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
"x": "3qKPUzhZZtUcHR99X2oVTPTX+Jbt0TMc8nSgiPCkekE=",
"y": "GcEtw3krKQgBnHC1MkL5SttXSQlWJDKyyZ96NcMg1mQ="
},
"fingerprint": "b86c535ec2f2eba479309e871f1aafb035940d5f80eeaba25408c97f2e8cf46b"
},
"signature": {
"signature_algorithm": "ECDSA-SHA384",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "76e9e288aafc0e37f4390cbf946aad997d5c1c901b3ce513d3d8fadbabe2ab85",
"subject_dn": "C=US, O=Let's Encrypt, CN=E6",
"issuer_dn": "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
}
]
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "475c9302dc42b2751db9edcac3b74891",
"ja4s": "t130200_1303_a56c5b993250",
"versions": [
{
"tls_version": "TLSv1_3",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "475c9302dc42b2751db9edcac3b74891",
"ja4s": "t130200_1303_a56c5b993250"
},
{
"tls_version": "TLSv1_2",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "954f7e9207d4c9012fd0692885732b12",
"ja4s": "t120200_cca9_344b4dce5a52"
}
]
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "ssh",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u5",
"banner_hashes": [
"sha256:b6bde9c6a302e014bf55da7711bbf53835f069c7c38e38b7272097f726cb05bf"
],
"banner_hex": "5353482d322e302d4f70656e5353485f392e3270312044656269616e2d322b64656231327535",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "SSH",
"labels": [
"remote-access"
],
"observed_at": "2025-03-24T20:14:53.964651912Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 2222,
"service_name": "SSH",
"source_ip": "162.142.125.125",
"ssh": {
"endpoint_id": {
"_encoding": {
"raw": "DISPLAY_UTF8"
},
"raw": "SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u5",
"protocol_version": "2.0",
"software_version": "OpenSSH_9.2p1",
"comment": "Debian-2+deb12u5"
},
"kex_init_message": {
"kex_algorithms": [
"curve25519-sha256",
"[email protected]",
"[email protected]"
],
"host_key_algorithms": [
"ssh-ed25519"
],
"client_to_server_ciphers": [
"[email protected]"
],
"server_to_client_ciphers": [
"[email protected]"
],
"client_to_server_macs": [
"[email protected]"
],
"server_to_client_macs": [
"[email protected]"
],
"client_to_server_compression": [
"none",
"[email protected]"
],
"server_to_client_compression": [
"none",
"[email protected]"
],
"first_kex_follows": false
},
"hassh_fingerprint": "fcf2c214fc6ac5f43bc9f7871dd1a336"
},
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "Europe",
"country": "Germany",
"country_code": "DE",
"city": "Bochum",
"postal_code": "44787",
"timezone": "Europe/Berlin",
"province": "North Rhine-Westphalia",
"coordinates": {
"latitude": 51.48165,
"longitude": 7.21648
}
},
"location_updated_at": "2025-03-24T20:15:16.514249895Z",
"autonomous_system": {
"asn": 29484,
"description": "RUB-AS",
"bgp_prefix": "185.73.23.0/24",
"name": "RUB-AS",
"country_code": "DE"
},
"autonomous_system_updated_at": "2025-03-24T20:15:16.514679548Z",
"whois": {
"network": {
"handle": "RUB-LIR-INET2",
"name": "Ruhr-Universitaet Bochum",
"cidrs": [
"185.73.23.0/24"
],
"created": "2022-03-02T00:00:00Z",
"updated": "2022-03-02T00:00:00Z"
},
"organization": {
"handle": "ORG-RB43-RIPE",
"name": "Ruhr-Universitaet Bochum",
"address": "Universitaetsstr. 150\\n44801\\nBochum\\nGERMANY",
"abuse_contacts": [
{
"handle": "RUB8-RIPE",
"name": "RUB Network Operation Center",
"email": "[email protected]"
}
],
"admin_contacts": [
{
"handle": "AJ3630-RIPE",
"name": "Andreas Jobs"
},
{
"handle": "RD8973-RIPE",
"name": "Robin Daermann",
"email": "[email protected]"
}
]
}
},
"dns": {
"names": [
"ports.measurements.softsec.rub.de",
"ports-measurements.softsec.rub.de",
"ports-measurements.softsec.ruhr-uni-bochum.de",
"ports.measurements.softsec.ruhr-uni-bochum.de"
],
"records": {
"ports-measurements.softsec.ruhr-uni-bochum.de": {
"record_type": "A",
"resolved_at": "2025-02-27T21:30:41.335261463Z"
},
"ports.measurements.softsec.rub.de": {
"record_type": "CNAME",
"resolved_at": "2025-03-17T20:15:54.941370661Z"
},
"ports-measurements.softsec.rub.de": {
"record_type": "A",
"resolved_at": "2025-03-13T19:37:37.852767853Z"
},
"ports.measurements.softsec.ruhr-uni-bochum.de": {
"record_type": "CNAME",
"resolved_at": "2025-03-17T20:15:38.730996212Z"
}
},
"reverse_dns": {
"names": [
"ports-measurements.softsec.ruhr-uni-bochum.de"
],
"resolved_at": "2025-03-20T21:25:24.760118096Z"
}
},
"last_updated_at": "2025-03-24T20:16:00.225Z",
"labels": [
"remote-access"
]
}