197.97.76.116
As of: Mar 26, 2023 3:53pm UTC |
Latest
{
"ip": "197.97.76.116",
"services": [
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 301 Moved Permanently\r\nDate: <REDACTED>\r\nLocation: https://197.97.76.116/\r\nContent-Length: 98\r\nContent-Type: text/html\r\n",
"banner_hashes": [
"sha256:d4ec60a3b2122158af4427bb28062a3a254f295e4133461df7964bced2724fa0"
],
"banner_hex": "485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a446174653a20203c52454441435445443e0d0a4c6f636174696f6e3a2068747470733a2f2f3139372e39372e37362e3131362f0d0a436f6e74656e742d4c656e6774683a2039380d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://197.97.76.116/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 301,
"status_reason": "Moved Permanently",
"headers": {
"Content_Type": [
"text/html"
],
"_encoding": {
"Content_Type": "DISPLAY_UTF8",
"Location": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8"
},
"Location": [
"https://197.97.76.116/"
],
"Date": [
"<REDACTED>"
],
"Content_Length": [
"98"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>Object moved permanently</title>"
],
"body_size": 98,
"body": "<head><title>Object moved permanently</title></head><body><h1>Object Moved Permanently</h1></body>",
"body_hashes": [
"sha256:14e5868ad9001a22c31588737092cf89746767ff06ad036f67eca701d9c3714b",
"sha1:1103e9d41845527d534a8952a93e37293413b63b"
],
"body_hash": "sha1:1103e9d41845527d534a8952a93e37293413b63b",
"html_title": "Object moved permanently"
},
"supports_http2": false
},
"observed_at": "2023-03-26T15:53:37.536258368Z",
"perspective_id": "PERSPECTIVE_HE",
"port": 80,
"service_name": "HTTP",
"source_ip": "162.142.125.214",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Encoding: gzip\r\nLast-Modified: Wed, 08 Mar 2017 20:52:03 GMT\r\nAccept-Ranges: bytes\r\nETag: \"7223fcd64d98d21:0\"\r\nVary: Accept-Encoding\r\nServer:XXXXXXXXXXXXXXXXXXX\r\nX-Powered-By:XXXXXXXX\r\nDate: <REDACTED>\r\nContent-Length: 555\r\nSet-Cookie: cookiesession1=678A3E15E43B47453264F9803551E893;Expires=Mon, 25 Mar 2024 15:47:38 GMT;Path=/;HttpOnly\r\n",
"banner_hashes": [
"sha256:04daabaada4b35c27970d8daeb49fbe5f6e3fe569fff0ac2406f39f00d8dfe6e"
],
"banner_hex": "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",
"certificate": "3601ea791aaa2fae6551b668131093ef47aa4490d9f2e9eaf7915354ce5498de",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://197.97.76.116/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Etag": [
"\"7223fcd64d98d21:0\""
],
"_encoding": {
"Etag": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Vary": "DISPLAY_UTF8",
"X_Powered_By": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Accept_Ranges": "DISPLAY_UTF8",
"Last_Modified": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Set_Cookie": "DISPLAY_UTF8"
},
"Content_Type": [
"text/html"
],
"Vary": [
"Accept-Encoding"
],
"X_Powered_By": [
"XXXXXXXX"
],
"Server": [
"XXXXXXXXXXXXXXXXXXX"
],
"Accept_Ranges": [
"bytes"
],
"Last_Modified": [
"Wed, 08 Mar 2017 20:52:03 GMT"
],
"Date": [
"<REDACTED>"
],
"Set_Cookie": [
"cookiesession1=678A3E15E43B47453264F9803551E893;Expires=Mon, 25 Mar 2024 15:47:38 GMT;Path=/;HttpOnly"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>IIS Windows Server</title>",
"<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />"
],
"body_size": 703,
"body": "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />\r\n<title>IIS Windows Server</title>\r\n<style type=\"text/css\">\r\n<!--\r\nbody {\r\n\tcolor:#000000;\r\n\tbackground-color:#0072C6;\r\n\tmargin:0;\r\n}\r\n\r\n#container {\r\n\tmargin-left:auto;\r\n\tmargin-right:auto;\r\n\ttext-align:center;\r\n\t}\r\n\r\na img {\r\n\tborder:none;\r\n}\r\n\r\n-->\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"container\">\r\n<a href=\"http://go.microsoft.com/fwlink/?linkid=66138&clcid=0x409\"><img src=\"iisstart.png\" alt=\"IIS\" width=\"960\" height=\"600\" /></a>\r\n</div>\r\n</body>\r\n</html>",
"body_hashes": [
"sha256:557b5e9015b4963a130c7039e077b3ec0306d401b6ee13d631721d5d969d2917",
"sha1:6e8749068fd6b842992e554b4fea32f9089318ad"
],
"body_hash": "sha1:6e8749068fd6b842992e554b4fea32f9089318ad",
"html_title": "IIS Windows Server"
},
"supports_http2": true
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "2ad2ad16d2ad2ad22c2ad2ad2ad2ad89cd2abd9b188d3b42762a4c6aa7ff72",
"cipher_and_version_fingerprint": "2ad2ad16d2ad2ad22c2ad2ad2ad2ad",
"tls_extensions_sha256": "89cd2abd9b188d3b42762a4c6aa7ff72",
"observed_at": "2023-03-07T15:07:15.398109158Z"
},
"observed_at": "2023-03-26T15:53:38.502298697Z",
"perspective_id": "PERSPECTIVE_HE",
"port": 443,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "IIS",
"other": {
"family": "IIS"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Microsoft",
"product": "Windows",
"other": {
"family": "Windows"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "162.142.125.214",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "3601ea791aaa2fae6551b668131093ef47aa4490d9f2e9eaf7915354ce5498de",
"chain_fps_sha_256": [
"75c5b3f01fd1f51a2c447ab7c785d72e69fa9c472c08571e7eadf3b8eabae70c"
],
"leaf_data": {
"names": [
"directaxis.co.za",
"www.directaxis.co.za"
],
"subject_dn": "jurisdictionCountry=ZA, businessCategory=Private Organization, C=ZA, ST=Gauteng, L=Sandton, jurisdictionCountry=ZA, O=FirstRand Bank Limited, businessCategory=Private Organization, OU=Direct Axis, serialNumber=1929/001225/06, CN=directaxis.co.za",
"issuer_dn": "C=US, O=Entrust\\, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2014 Entrust\\, Inc. - for authorized use only, CN=Entrust Certification Authority - L1M",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "d85408cbc6673b34cc2b501844585a254cbbb23a74d19e834f9e5cbe5eba6bc4",
"fingerprint": "3601ea791aaa2fae6551b668131093ef47aa4490d9f2e9eaf7915354ce5498de",
"issuer": {
"common_name": [
"Entrust Certification Authority - L1M"
],
"organization": [
"Entrust, Inc."
],
"organizational_unit": [
"See www.entrust.net/legal-terms",
"(c) 2014 Entrust, Inc. - for authorized use only"
],
"country": [
"US"
]
},
"subject": {
"common_name": [
"directaxis.co.za"
],
"jurisdiction_country": [
"ZA"
],
"locality": [
"Sandton"
],
"organization": [
"FirstRand Bank Limited"
],
"organizational_unit": [
"Direct Axis"
],
"province": [
"Gauteng"
],
"serial_number": [
"1929/001225/06"
],
"country": [
"ZA"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "xyl6l12lkgDEb7I9sg6WDx04bpf/qts5KN/LXe9MMIOiFxl7EfFf1nX8Y1iKG0p3NaqI8X7p0+O4BGUpQSbjqF4zSOiEzAhWVBdjKWpN0LpC8GqwkIvUK9VxvmRc4s031uXUEj0l7i+DBHu4r1SbHtYYwjFMlPXhPJhpMzpOsJizalg4tLpha9e+yvpC8gWfpPQvcNpqQSvn8s6+FCa4hpqSLsJqtXIbX0IWCHM71QCutWhkJgV1kxSC+pDq9ZvOjVmzG3drmvvdp8XHZwNdC7bUL7Wwe5fayrUH6pi81JogeHKWjSW1+Y43lkZ/71n7yyVGUOmdq5qQ5P+wCjEZDw==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "3e8793a7d8dbc7a307617725c5fec0d1dbcaf32654546b2bccb3fa39421ff2f1"
},
"signature": {
"signature_algorithm": "SHA256-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "75c5b3f01fd1f51a2c447ab7c785d72e69fa9c472c08571e7eadf3b8eabae70c",
"subject_dn": "C=US, O=Entrust\\, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2014 Entrust\\, Inc. - for authorized use only, CN=Entrust Certification Authority - L1M",
"issuer_dn": "C=US, O=Entrust\\, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust\\, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 23
}
},
"session_ticket": {
"length": 160,
"lifetime_hint": 7200
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "e35df3e00ca4ef31d42b34bebaa2f86e"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 302 Found\r\nLocation: https://197.97.76.116:8010/\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors\r\n",
"banner_hashes": [
"sha256:f583c58b95758d7fe86d04a0c5e6ea46608fc027273dd4c4b2d552de29b93fd3"
],
"banner_hex": "485454502f312e312033303220466f756e640d0a4c6f636174696f6e3a2068747470733a2f2f3139372e39372e37362e3131363a383031302f0d0a436f6e6e656374696f6e3a20636c6f73650d0a582d4672616d652d4f7074696f6e733a2053414d454f524947494e0d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a436f6e74656e742d53656375726974792d506f6c6963793a206672616d652d616e636573746f72730d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://197.97.76.116:8008/",
"headers": {
"Accept": [
"*/*"
],
"_encoding": {
"Accept": "DISPLAY_UTF8",
"User_Agent": "DISPLAY_UTF8"
},
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 302,
"status_reason": "Found",
"headers": {
"X_Xss_Protection": [
"1; mode=block"
],
"_encoding": {
"X_Xss_Protection": "DISPLAY_UTF8",
"X_Frame_Options": "DISPLAY_UTF8",
"Content_Security_Policy": "DISPLAY_UTF8",
"Location": "DISPLAY_UTF8",
"X_Content_Type_Options": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8"
},
"X_Frame_Options": [
"SAMEORIGIN"
],
"Content_Security_Policy": [
"frame-ancestors"
],
"Location": [
"https://197.97.76.116:8010/"
],
"X_Content_Type_Options": [
"nosniff"
],
"Connection": [
"close"
]
},
"body_size": 0
},
"supports_http2": false
},
"observed_at": "2023-03-25T22:47:49.066748351Z",
"perspective_id": "PERSPECTIVE_TATA",
"port": 8008,
"service_name": "HTTP",
"source_ip": "167.94.138.36",
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "Africa",
"country": "South Africa",
"country_code": "ZA",
"city": "Cape Town",
"postal_code": "7945",
"timezone": "Africa/Johannesburg",
"province": "Western Cape",
"coordinates": {
"latitude": -33.92584,
"longitude": 18.42322
}
},
"location_updated_at": "2023-03-24T11:21:22.923680Z",
"autonomous_system": {
"asn": 3741,
"description": "IS",
"bgp_prefix": "197.96.0.0/13",
"name": "IS",
"country_code": "ZA"
},
"autonomous_system_updated_at": "2023-03-21T13:26:32.341410Z",
"operating_system": {
"uniform_resource_identifier": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Microsoft",
"product": "Windows",
"other": {
"family": "Windows"
}
},
"dns": {
"names": [
"www.directaxis.co.za",
"directaxis.co.za"
],
"records": {
"www.directaxis.co.za": {
"record_type": "A",
"resolved_at": "2023-03-14T04:23:34.172746046Z"
},
"directaxis.co.za": {
"record_type": "A",
"resolved_at": "2023-03-21T07:13:57.201313398Z"
}
}
},
"last_updated_at": "2023-03-26T15:53:41.307Z"
}