The new Censys Platform is live! Free, Solo & Teams users can try it now — Enterprise customers, contact your rep.
Try it today!

185.73.23.133

As of: Mar 20, 2025 9:26pm UTC | Latest

Host

Attribute Value
ip 185.73.23.133
location.continent Europe
location.country Germany
location.country_code DE
location.city Bochum
location.postal_code 44787
location.timezone Europe/Berlin
location.province North Rhine-Westphalia
location.coordinates.latitude 51.48165
location.coordinates.longitude 7.21648
location_updated_at 2025-03-09T09:04:50.135742674Z
autonomous_system.asn 29484
autonomous_system.description RUB-AS
autonomous_system.bgp_prefix 185.73.23.0/24
autonomous_system.name RUB-AS
autonomous_system.country_code DE
autonomous_system_updated_at 2025-03-09T09:04:50.136395147Z
whois.network.handle RUB-LIR-INET2
whois.network.name Ruhr-Universitaet Bochum
whois.network.cidrs 185.73.23.0/24
whois.network.created 2022-03-02T00:00:00Z
whois.network.updated 2022-03-02T00:00:00Z
whois.organization.handle ORG-RB43-RIPE
whois.organization.name Ruhr-Universitaet Bochum
whois.organization.address Universitaetsstr. 150\n44801\nBochum\nGERMANY
whois.organization.abuse_contacts.handle RUB8-RIPE
whois.organization.abuse_contacts.name RUB Network Operation Center
whois.organization.abuse_contacts.email [email protected]
whois.organization.admin_contacts.handle AJ3630-RIPE
whois.organization.admin_contacts.name Andreas Jobs
whois.organization.admin_contacts.handle RD8973-RIPE
whois.organization.admin_contacts.name Robin Daermann
whois.organization.admin_contacts.email [email protected]
dns.names ports.measurements.softsec.rub.de
dns.names ports-measurements.softsec.rub.de
dns.names ports-measurements.softsec.ruhr-uni-bochum.de
dns.names ports.measurements.softsec.ruhr-uni-bochum.de
dns.records.ports-measurements.softsec.ruhr-uni-bochum.de.record_type A
dns.records.ports-measurements.softsec.ruhr-uni-bochum.de.resolved_at 2025-02-27T21:30:41.335261463Z
dns.records.ports.measurements.softsec.rub.de.record_type CNAME
dns.records.ports.measurements.softsec.rub.de.resolved_at 2025-03-17T20:15:54.941370661Z
dns.records.ports-measurements.softsec.rub.de.record_type A
dns.records.ports-measurements.softsec.rub.de.resolved_at 2025-03-13T19:37:37.852767853Z
dns.records.ports.measurements.softsec.ruhr-uni-bochum.de.record_type CNAME
dns.records.ports.measurements.softsec.ruhr-uni-bochum.de.resolved_at 2025-03-17T20:15:38.730996212Z
dns.reverse_dns.names ports-measurements.softsec.ruhr-uni-bochum.de
dns.reverse_dns.resolved_at 2025-03-20T21:25:24.760118096Z
last_updated_at 2025-03-20T21:26:36.787Z
labels remote-access

80/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nLast-Modified: Wed, 05 Mar 2025 10:59:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/"67c82eae-b90"\r\nContent-Encoding: gzip\r\n
services.banner_hashes sha256:9d5087d2b18cbe0795d6125692a10ec386ac801bc8b51e1dcb183e1eb33b86e1
services.banner_hex 485454502f312e3120323030204f4b0d0a5365727665723a206e67696e782f312e32322e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a4c6173742d4d6f6469666965643a205765642c203035204d617220323032352031303a35393a353820474d540d0a5472616e736665722d456e636f64696e673a206368756e6b65640d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a455461673a20572f2236376338326561652d623930220d0a436f6e74656e742d456e636f64696e673a20677a69700d0a
services.discovery_method REFRESH
services.extended_service_name HTTP
services.http.request.method GET
services.http.request.uri http://185.73.23.133/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 200
services.http.response.status_reason OK
services.http.response.headers.Server nginx/1.22.1
services.http.response.headers.Content_Type text/html
services.http.response.headers.Transfer_Encoding chunked
services.http.response.headers.Connection keep-alive
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Content_Encoding gzip
services.http.response.headers.ETag W/"67c82eae-b90"
services.http.response.headers.Last_Modified Wed, 05 Mar 2025 10:59:58 GMT
services.http.response.html_tags <title>Measurement Information and Usage Notice | Measurement Information</title>
services.http.response.html_tags <meta charset=utf-8>
services.http.response.html_tags <meta name=viewport content="width=device-width,initial-scale=1">
services.http.response.body_size 2960
services.http.response.body <!doctype html><html lang=en><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Measurement Information and Usage Notice | Measurement Information</title>\n<link rel=stylesheet href=/css/style.css><link rel=stylesheet href=/css/fonts.css></head><body><div class=logos><a href=https://informatik.rub.de alt="Ruhr University Bochum - Computer Science"><img class=logo_rub_cs src=/images/rub_cs.png alt="Ruhr University Bochum Logo"></img></a>\n<a href=https://casa.rub.de alt="DFG Excellence Cluster - Cyber Security in the Age of Large-scale Adversaries"><img class=logo_casa src=/images/casa.png alt="DFG Excellence Cluster - Cyber Security in the Age of Large-scale Adversaries"></img></a></div><div class=nav><h1>Measurement Information and Usage Notice</h1><ul class=menu></ul></div><p>This website is operated and maintained by researchers of the <a href=https://informatik.rub.de/softsec/>Chair for Software Security</a> at the <a href=https://informatik.rub.de>Faculty of Computer Science</a> at <a href=https://rub.de>Ruhr University Bochum</a>.</p><p>Most likely, you are visiting this website because you have received requests from our network range that you might consider an attack or scan.\nPlease note that the requests we are conducting from these IP addresses are benign and we are not attacking you or anyone else.</p><p>At almost all times, we are running a variety of different experiments and scans from our network to evaluate and assess the global characteristics of the Internet and its security and privacy posture.\nOur current experiments are detailed below.</p><p>We hope that the information below answers your immediate questions and ease your concerns.\nHowever, we understand that they might not answer all your questions.\nTherefore, if you wish to receive additional information about our research projects impacting you or if you wish to be excluded from our measurements, please reach out directly to us by email to <a href=mailto:[email protected]>[email protected]</a> with the relevant information (source/destination IP address, address range, what has impacted you, etc.).\nWe will be more than happy to provide more information about our research project and/or exclude you from our experiments through our blocklist.\nFinally, please note that we store collected data for research purposes only and that we only store aggregated and anonymous statistics whenever possible.</p><h1 id=current-measurements>Current Measurements</h1><ul><li>Liveness checks for selected IPv4 and IPv6 address ranges and ports.</li><li>TLS handshakes for selected IPv4 and IPv6 address ranges and ports.</li><li>DNS queries for selected domains.</li></ul><h1 id=measurement-hosts>Measurement Hosts</h1><p>We currently perform measurements from the following hosts:</p><ul><li>ports.measurements.softsec.rub.de (IPv4: 185.73.23.133)</li></ul><ul></ul><footer></footer></body></html>
services.http.response.body_hashes sha256:5fa230e16223aed94c4e068f8cd0258152b6626a10397c75459dc784ea8bdb87
services.http.response.body_hashes sha1:6dc8ac762fbfcd78c26eeb1c3854623a641a6776
services.http.response.body_hashes tlsh:1e51a70bb145211b824516963d4732eafb4f90eca3b8c95a1edd840d2365e5863363d7
services.http.response.body_hash sha1:6dc8ac762fbfcd78c26eeb1c3854623a641a6776
services.http.response.html_title Measurement Information and Usage Notice | Measurement Information
services.http.supports_http2 false
services.observed_at 2025-03-20T06:32:12.993362534Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 80
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:f5:nginx:1.22.1:*:*:*:*:*:*:*
services.software.part a
services.software.vendor nginx
services.software.product nginx
services.software.version 1.22.1
services.software.other.family nginx
services.software.source OSI_APPLICATION_LAYER
services.source_ip 162.142.125.197
services.transport_protocol TCP
services.truncated false

443/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nLast-Modified: Wed, 05 Mar 2025 10:59:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/"67c82eae-b90"\r\nContent-Encoding: gzip\r\n
services.banner_hashes sha256:9d5087d2b18cbe0795d6125692a10ec386ac801bc8b51e1dcb183e1eb33b86e1
services.banner_hex 485454502f312e3120323030204f4b0d0a5365727665723a206e67696e782f312e32322e310d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a4c6173742d4d6f6469666965643a205765642c203035204d617220323032352031303a35393a353820474d540d0a5472616e736665722d456e636f64696e673a206368756e6b65640d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a455461673a20572f2236376338326561652d623930220d0a436f6e74656e742d456e636f64696e673a20677a69700d0a
services.certificate eee3d5fd2c4f0675127ea5f73610d50a4bb5a94ef199d0597afe266ef1c5eced
services.discovery_method PREDICTIVE_METHOD_18
services.extended_service_name HTTPS
services.http.request.method GET
services.http.request.uri https://185.73.23.133/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 200
services.http.response.status_reason OK
services.http.response.headers.Server nginx/1.22.1
services.http.response.headers.Content_Type text/html
services.http.response.headers.Transfer_Encoding chunked
services.http.response.headers.Connection keep-alive
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Content_Encoding gzip
services.http.response.headers.ETag W/"67c82eae-b90"
services.http.response.headers.Last_Modified Wed, 05 Mar 2025 10:59:58 GMT
services.http.response.html_tags <title>Measurement Information and Usage Notice | Measurement Information</title>
services.http.response.html_tags <meta charset=utf-8>
services.http.response.html_tags <meta name=viewport content="width=device-width,initial-scale=1">
services.http.response.body_size 2960
services.http.response.body <!doctype html><html lang=en><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Measurement Information and Usage Notice | Measurement Information</title>\n<link rel=stylesheet href=/css/style.css><link rel=stylesheet href=/css/fonts.css></head><body><div class=logos><a href=https://informatik.rub.de alt="Ruhr University Bochum - Computer Science"><img class=logo_rub_cs src=/images/rub_cs.png alt="Ruhr University Bochum Logo"></img></a>\n<a href=https://casa.rub.de alt="DFG Excellence Cluster - Cyber Security in the Age of Large-scale Adversaries"><img class=logo_casa src=/images/casa.png alt="DFG Excellence Cluster - Cyber Security in the Age of Large-scale Adversaries"></img></a></div><div class=nav><h1>Measurement Information and Usage Notice</h1><ul class=menu></ul></div><p>This website is operated and maintained by researchers of the <a href=https://informatik.rub.de/softsec/>Chair for Software Security</a> at the <a href=https://informatik.rub.de>Faculty of Computer Science</a> at <a href=https://rub.de>Ruhr University Bochum</a>.</p><p>Most likely, you are visiting this website because you have received requests from our network range that you might consider an attack or scan.\nPlease note that the requests we are conducting from these IP addresses are benign and we are not attacking you or anyone else.</p><p>At almost all times, we are running a variety of different experiments and scans from our network to evaluate and assess the global characteristics of the Internet and its security and privacy posture.\nOur current experiments are detailed below.</p><p>We hope that the information below answers your immediate questions and ease your concerns.\nHowever, we understand that they might not answer all your questions.\nTherefore, if you wish to receive additional information about our research projects impacting you or if you wish to be excluded from our measurements, please reach out directly to us by email to <a href=mailto:[email protected]>[email protected]</a> with the relevant information (source/destination IP address, address range, what has impacted you, etc.).\nWe will be more than happy to provide more information about our research project and/or exclude you from our experiments through our blocklist.\nFinally, please note that we store collected data for research purposes only and that we only store aggregated and anonymous statistics whenever possible.</p><h1 id=current-measurements>Current Measurements</h1><ul><li>Liveness checks for selected IPv4 and IPv6 address ranges and ports.</li><li>TLS handshakes for selected IPv4 and IPv6 address ranges and ports.</li><li>DNS queries for selected domains.</li></ul><h1 id=measurement-hosts>Measurement Hosts</h1><p>We currently perform measurements from the following hosts:</p><ul><li>ports.measurements.softsec.rub.de (IPv4: 185.73.23.133)</li></ul><ul></ul><footer></footer></body></html>
services.http.response.body_hashes sha256:5fa230e16223aed94c4e068f8cd0258152b6626a10397c75459dc784ea8bdb87
services.http.response.body_hashes sha1:6dc8ac762fbfcd78c26eeb1c3854623a641a6776
services.http.response.body_hashes tlsh:1e51a70bb145211b824516963d4732eafb4f90eca3b8c95a1edd840d2365e5863363d7
services.http.response.body_hash sha1:6dc8ac762fbfcd78c26eeb1c3854623a641a6776
services.http.response.html_title Measurement Information and Usage Notice | Measurement Information
services.http.supports_http2 false
services.observed_at 2025-03-19T23:08:01.290056808Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 443
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:f5:nginx:1.22.1:*:*:*:*:*:*:*
services.software.part a
services.software.vendor nginx
services.software.product nginx
services.software.version 1.22.1
services.software.other.family nginx
services.software.source OSI_APPLICATION_LAYER
services.source_ip 162.142.125.197
services.tls.version_selected TLSv1_3
services.tls.cipher_selected TLS_CHACHA20_POLY1305_SHA256
services.tls.certificates.leaf_fp_sha_256 eee3d5fd2c4f0675127ea5f73610d50a4bb5a94ef199d0597afe266ef1c5eced
services.tls.certificates.chain_fps_sha_256 76e9e288aafc0e37f4390cbf946aad997d5c1c901b3ce513d3d8fadbabe2ab85
services.tls.certificates.leaf_data.names ports-measurements.softsec.rub.de
services.tls.certificates.leaf_data.names ports-measurements.softsec.ruhr-uni-bochum.de
services.tls.certificates.leaf_data.names ports.measurements.softsec.rub.de
services.tls.certificates.leaf_data.names ports.measurements.softsec.ruhr-uni-bochum.de
services.tls.certificates.leaf_data.subject_dn CN=ports.measurements.softsec.rub.de
services.tls.certificates.leaf_data.issuer_dn C=US, O=Let's Encrypt, CN=E6
services.tls.certificates.leaf_data.pubkey_bit_size 256
services.tls.certificates.leaf_data.pubkey_algorithm ECDSA
services.tls.certificates.leaf_data.tbs_fingerprint d9ef4a52b97c5115a7c767635bdd5f500878198600ad6d2a01457a396e1816a5
services.tls.certificates.leaf_data.fingerprint eee3d5fd2c4f0675127ea5f73610d50a4bb5a94ef199d0597afe266ef1c5eced
services.tls.certificates.leaf_data.issuer.common_name E6
services.tls.certificates.leaf_data.issuer.organization Let's Encrypt
services.tls.certificates.leaf_data.issuer.country US
services.tls.certificates.leaf_data.subject.common_name ports.measurements.softsec.rub.de
services.tls.certificates.leaf_data.public_key.key_algorithm ECDSA
services.tls.certificates.leaf_data.public_key.ecdsa.b WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=
services.tls.certificates.leaf_data.public_key.ecdsa.curve P-256
services.tls.certificates.leaf_data.public_key.ecdsa.gx axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=
services.tls.certificates.leaf_data.public_key.ecdsa.gy T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=
services.tls.certificates.leaf_data.public_key.ecdsa.length 256
services.tls.certificates.leaf_data.public_key.ecdsa.n /////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=
services.tls.certificates.leaf_data.public_key.ecdsa.p /////wAAAAEAAAAAAAAAAAAAAAD///////////////8=
services.tls.certificates.leaf_data.public_key.ecdsa.x 3qKPUzhZZtUcHR99X2oVTPTX+Jbt0TMc8nSgiPCkekE=
services.tls.certificates.leaf_data.public_key.ecdsa.y GcEtw3krKQgBnHC1MkL5SttXSQlWJDKyyZ96NcMg1mQ=
services.tls.certificates.leaf_data.public_key.fingerprint b86c535ec2f2eba479309e871f1aafb035940d5f80eeaba25408c97f2e8cf46b
services.tls.certificates.leaf_data.signature.signature_algorithm ECDSA-SHA384
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint 76e9e288aafc0e37f4390cbf946aad997d5c1c901b3ce513d3d8fadbabe2ab85
services.tls.certificates.chain.subject_dn C=US, O=Let's Encrypt, CN=E6
services.tls.certificates.chain.issuer_dn C=US, O=Internet Security Research Group, CN=ISRG Root X1
services.tls.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_3
services.tls.versions.ja3s 475c9302dc42b2751db9edcac3b74891
services.tls.versions.ja4s t130200_1303_a56c5b993250
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s 954f7e9207d4c9012fd0692885732b12
services.tls.versions.ja4s t120200_cca9_344b4dce5a52
services.transport_protocol TCP
services.truncated false

2222/SSH TCP View Definition

Attribute Value
services.banner SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u5
services.banner_hashes sha256:b6bde9c6a302e014bf55da7711bbf53835f069c7c38e38b7272097f726cb05bf
services.banner_hex 5353482d322e302d4f70656e5353485f392e3270312044656269616e2d322b64656231327535
services.discovery_method IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name SSH
services.labels remote-access
services.observed_at 2025-03-20T06:31:41.216690001Z
services.perspective_id PERSPECTIVE_UNKNOWN
services.port 2222
services.service_name SSH
services.source_ip 162.142.125.209
services.ssh.endpoint_id.raw SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u5
services.ssh.endpoint_id.protocol_version 2.0
services.ssh.endpoint_id.software_version OpenSSH_9.2p1
services.ssh.endpoint_id.comment Debian-2+deb12u5
services.ssh.kex_init_message.kex_algorithms curve25519-sha256
services.ssh.kex_init_message.kex_algorithms [email protected]
services.ssh.kex_init_message.kex_algorithms [email protected]
services.ssh.kex_init_message.host_key_algorithms ssh-ed25519
services.ssh.kex_init_message.client_to_server_ciphers [email protected]
services.ssh.kex_init_message.server_to_client_ciphers [email protected]
services.ssh.kex_init_message.client_to_server_macs [email protected]
services.ssh.kex_init_message.server_to_client_macs [email protected]
services.ssh.kex_init_message.client_to_server_compression none
services.ssh.kex_init_message.client_to_server_compression [email protected]
services.ssh.kex_init_message.server_to_client_compression none
services.ssh.kex_init_message.server_to_client_compression [email protected]
services.ssh.kex_init_message.first_kex_follows false
services.ssh.hassh_fingerprint fcf2c214fc6ac5f43bc9f7871dd1a336
services.transport_protocol TCP
services.truncated false