197.97.76.116

As of: Mar 22, 2023 5:07am UTC | Latest

Host

Attribute Value
ip 197.97.76.116
location.continent Africa
location.country South Africa
location.country_code ZA
location.city Germiston
location.postal_code 1401
location.timezone Africa/Johannesburg
location.province Gauteng
location.coordinates.latitude -26.2135
location.coordinates.longitude 28.1858
location.registered_country South Africa
location.registered_country_code ZA
location_updated_at 2023-03-09T05:16:46.003794Z
autonomous_system.asn 3741
autonomous_system.description IS
autonomous_system.bgp_prefix 197.96.0.0/13
autonomous_system.name IS
autonomous_system.country_code ZA
autonomous_system_updated_at 2023-03-21T13:26:32.341410Z
operating_system.uniform_resource_identifier cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
operating_system.part o
operating_system.vendor Microsoft
operating_system.product Windows
operating_system.other.family Windows
dns.names www.directaxis.co.za
dns.names directaxis.co.za
dns.records.directaxis.co.za.record_type A
dns.records.directaxis.co.za.resolved_at 2023-03-01T20:32:08.885162012Z
dns.records.www.directaxis.co.za.record_type A
dns.records.www.directaxis.co.za.resolved_at 2023-03-14T04:23:34.172746046Z
last_updated_at 2023-03-22T05:07:35.267Z

80/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 301 Moved Permanently\r\nDate: <REDACTED>\r\nLocation: https://197.97.76.116/\r\nContent-Length: 98\r\nContent-Type: text/html\r\n
services.banner_hashes sha256:d4ec60a3b2122158af4427bb28062a3a254f295e4133461df7964bced2724fa0
services.banner_hex 485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a446174653a20203c52454441435445443e0d0a4c6f636174696f6e3a2068747470733a2f2f3139372e39372e37362e3131362f0d0a436f6e74656e742d4c656e6774683a2039380d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a
services.extended_service_name HTTP
services.http.request.method GET
services.http.request.uri http://197.97.76.116/
services.http.request.headers.Accept */*
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.response.protocol HTTP/1.1
services.http.response.status_code 301
services.http.response.status_reason Moved Permanently
services.http.response.headers.Content_Length 98
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Content_Type text/html
services.http.response.headers.Location https://197.97.76.116/
services.http.response.html_tags <title>Object moved permanently</title>
services.http.response.body_size 98
services.http.response.body <head><title>Object moved permanently</title></head><body><h1>Object Moved Permanently</h1></body>
services.http.response.body_hashes sha256:14e5868ad9001a22c31588737092cf89746767ff06ad036f67eca701d9c3714b
services.http.response.body_hashes sha1:1103e9d41845527d534a8952a93e37293413b63b
services.http.response.body_hash sha1:1103e9d41845527d534a8952a93e37293413b63b
services.http.response.html_title Object moved permanently
services.http.supports_http2 false
services.observed_at 2023-03-22T03:18:38.524685875Z
services.perspective_id PERSPECTIVE_NTT
services.port 80
services.service_name HTTP
services.source_ip 167.248.133.35
services.transport_protocol TCP
services.truncated false

443/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Encoding: gzip\r\nLast-Modified: Wed, 08 Mar 2017 20:58:34 GMT\r\nAccept-Ranges: bytes\r\nETag: "7daddebf4e98d21:0"\r\nVary: Accept-Encoding\r\nServer:XXXXXXXXXXXXXXXXXXX\r\nX-Powered-By:XXXXXXXX\r\nDate: <REDACTED>\r\nContent-Length: 555\r\nSet-Cookie: cookiesession1=678A3E15D1A9749A16BEBC9CC66B5687;Expires=Thu, 21 Mar 2024 03:12:50 GMT;Path=/;HttpOnly\r\n
services.banner_hashes sha256:d31a697f57d98765bbe1b5493100d0fb352474aa198e23f479e8c34ff07c5118
services.banner_hex 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
services.certificate 3601ea791aaa2fae6551b668131093ef47aa4490d9f2e9eaf7915354ce5498de
services.extended_service_name HTTPS
services.http.request.method GET
services.http.request.uri https://197.97.76.116/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 200
services.http.response.status_reason OK
services.http.response.headers.Vary Accept-Encoding
services.http.response.headers.Last_Modified Wed, 08 Mar 2017 20:58:34 GMT
services.http.response.headers.Server XXXXXXXXXXXXXXXXXXX
services.http.response.headers.Content_Type text/html
services.http.response.headers.Date <REDACTED>
services.http.response.headers.X_Powered_By XXXXXXXX
services.http.response.headers.Set_Cookie cookiesession1=678A3E15D1A9749A16BEBC9CC66B5687;Expires=Thu, 21 Mar 2024 03:12:50 GMT;Path=/;HttpOnly
services.http.response.headers.Accept_Ranges bytes
services.http.response.headers.Etag "7daddebf4e98d21:0"
services.http.response.html_tags <title>IIS Windows Server</title>
services.http.response.html_tags <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
services.http.response.body_size 703
services.http.response.body <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">\r\n<html xmlns="http://www.w3.org/1999/xhtml">\r\n<head>\r\n<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />\r\n<title>IIS Windows Server</title>\r\n<style type="text/css">\r\n<!--\r\nbody {\r\n\tcolor:#000000;\r\n\tbackground-color:#0072C6;\r\n\tmargin:0;\r\n}\r\n\r\n#container {\r\n\tmargin-left:auto;\r\n\tmargin-right:auto;\r\n\ttext-align:center;\r\n\t}\r\n\r\na img {\r\n\tborder:none;\r\n}\r\n\r\n-->\r\n</style>\r\n</head>\r\n<body>\r\n<div id="container">\r\n<a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iisstart.png" alt="IIS" width="960" height="600" /></a>\r\n</div>\r\n</body>\r\n</html>
services.http.response.body_hashes sha256:557b5e9015b4963a130c7039e077b3ec0306d401b6ee13d631721d5d969d2917
services.http.response.body_hashes sha1:6e8749068fd6b842992e554b4fea32f9089318ad
services.http.response.body_hash sha1:6e8749068fd6b842992e554b4fea32f9089318ad
services.http.response.html_title IIS Windows Server
services.http.supports_http2 true
services.jarm.fingerprint 2ad2ad16d2ad2ad22c2ad2ad2ad2ad89cd2abd9b188d3b42762a4c6aa7ff72
services.jarm.cipher_and_version_fingerprint 2ad2ad16d2ad2ad22c2ad2ad2ad2ad
services.jarm.tls_extensions_sha256 89cd2abd9b188d3b42762a4c6aa7ff72
services.jarm.observed_at 2023-03-07T15:07:15.398109158Z
services.observed_at 2023-03-22T03:18:39.605230529Z
services.perspective_id PERSPECTIVE_NTT
services.port 443
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Microsoft
services.software.product IIS
services.software.other.family IIS
services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.software.part o
services.software.vendor Microsoft
services.software.product Windows
services.software.other.family Windows
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.248.133.35
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
services.tls.certificates.leaf_fp_sha_256 3601ea791aaa2fae6551b668131093ef47aa4490d9f2e9eaf7915354ce5498de
services.tls.certificates.chain_fps_sha_256 75c5b3f01fd1f51a2c447ab7c785d72e69fa9c472c08571e7eadf3b8eabae70c
services.tls.certificates.leaf_data.names directaxis.co.za
services.tls.certificates.leaf_data.names www.directaxis.co.za
services.tls.certificates.leaf_data.subject_dn jurisdictionCountry=ZA, businessCategory=Private Organization, C=ZA, ST=Gauteng, L=Sandton, jurisdictionCountry=ZA, O=FirstRand Bank Limited, businessCategory=Private Organization, OU=Direct Axis, serialNumber=1929/001225/06, CN=directaxis.co.za
services.tls.certificates.leaf_data.issuer_dn C=US, O=Entrust\, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2014 Entrust\, Inc. - for authorized use only, CN=Entrust Certification Authority - L1M
services.tls.certificates.leaf_data.pubkey_bit_size 2048
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint d85408cbc6673b34cc2b501844585a254cbbb23a74d19e834f9e5cbe5eba6bc4
services.tls.certificates.leaf_data.fingerprint 3601ea791aaa2fae6551b668131093ef47aa4490d9f2e9eaf7915354ce5498de
services.tls.certificates.leaf_data.issuer.common_name Entrust Certification Authority - L1M
services.tls.certificates.leaf_data.issuer.organization Entrust, Inc.
services.tls.certificates.leaf_data.issuer.organizational_unit See www.entrust.net/legal-terms
services.tls.certificates.leaf_data.issuer.organizational_unit (c) 2014 Entrust, Inc. - for authorized use only
services.tls.certificates.leaf_data.issuer.country US
services.tls.certificates.leaf_data.subject.common_name directaxis.co.za
services.tls.certificates.leaf_data.subject.jurisdiction_country ZA
services.tls.certificates.leaf_data.subject.locality Sandton
services.tls.certificates.leaf_data.subject.organization FirstRand Bank Limited
services.tls.certificates.leaf_data.subject.organizational_unit Direct Axis
services.tls.certificates.leaf_data.subject.province Gauteng
services.tls.certificates.leaf_data.subject.serial_number 1929/001225/06
services.tls.certificates.leaf_data.subject.country ZA
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus xyl6l12lkgDEb7I9sg6WDx04bpf/qts5KN/LXe9MMIOiFxl7EfFf1nX8Y1iKG0p3NaqI8X7p0+O4BGUpQSbjqF4zSOiEzAhWVBdjKWpN0LpC8GqwkIvUK9VxvmRc4s031uXUEj0l7i+DBHu4r1SbHtYYwjFMlPXhPJhpMzpOsJizalg4tLpha9e+yvpC8gWfpPQvcNpqQSvn8s6+FCa4hpqSLsJqtXIbX0IWCHM71QCutWhkJgV1kxSC+pDq9ZvOjVmzG3drmvvdp8XHZwNdC7bUL7Wwe5fayrUH6pi81JogeHKWjSW1+Y43lkZ/71n7yyVGUOmdq5qQ5P+wCjEZDw==
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 256
services.tls.certificates.leaf_data.public_key.fingerprint 3e8793a7d8dbc7a307617725c5fec0d1dbcaf32654546b2bccb3fa39421ff2f1
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint 75c5b3f01fd1f51a2c447ab7c785d72e69fa9c472c08571e7eadf3b8eabae70c
services.tls.certificates.chain.subject_dn C=US, O=Entrust\, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2014 Entrust\, Inc. - for authorized use only, CN=Entrust Certification Authority - L1M
services.tls.certificates.chain.issuer_dn C=US, O=Entrust\, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust\, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.session_ticket.length 160
services.tls.session_ticket.lifetime_hint 7200
services.tls.ja3s e35df3e00ca4ef31d42b34bebaa2f86e
services.transport_protocol TCP
services.truncated false

8008/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 302 Found\r\nLocation: https://197.97.76.116:8010/\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors\r\n
services.banner_hashes sha256:f583c58b95758d7fe86d04a0c5e6ea46608fc027273dd4c4b2d552de29b93fd3
services.banner_hex 485454502f312e312033303220466f756e640d0a4c6f636174696f6e3a2068747470733a2f2f3139372e39372e37362e3131363a383031302f0d0a436f6e6e656374696f6e3a20636c6f73650d0a582d4672616d652d4f7074696f6e733a2053414d454f524947494e0d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a436f6e74656e742d53656375726974792d506f6c6963793a206672616d652d616e636573746f72730d0a
services.extended_service_name HTTP
services.http.request.method GET
services.http.request.uri http://197.97.76.116:8008/
services.http.request.headers.Accept */*
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.response.protocol HTTP/1.1
services.http.response.status_code 302
services.http.response.status_reason Found
services.http.response.headers.Content_Security_Policy frame-ancestors
services.http.response.headers.X_Xss_Protection 1; mode=block
services.http.response.headers.Location https://197.97.76.116:8010/
services.http.response.headers.X_Content_Type_Options nosniff
services.http.response.headers.X_Frame_Options SAMEORIGIN
services.http.response.headers.Connection close
services.http.response.body_size 0
services.http.supports_http2 false
services.observed_at 2023-03-21T23:55:10.149291943Z
services.perspective_id PERSPECTIVE_HE
services.port 8008
services.service_name HTTP
services.source_ip 162.142.125.223
services.transport_protocol TCP
services.truncated false