20.1.248.118
As of: Sep 08, 2024 7:08am UTC |
Latest
{
"ip": "20.1.248.118",
"services": [
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 403 Forbidden\r\nContent-Type: text/html\r\nServer: Microsoft-IIS/10.0\r\nX-Powered-By: ASP.NET\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: <REDACTED>\r\nContent-Length: 1233\r\n",
"banner_hashes": [
"sha256:4c90c13e4573add13f50c62a35266bc89d8f0e61e9bdbdc782fdd89dbdcd3564"
],
"banner_hex": "485454502f312e312034303320466f7262696464656e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a5365727665723a204d6963726f736f66742d4949532f31302e300d0a582d506f77657265642d42793a204153502e4e45540d0a5374726963742d5472616e73706f72742d53656375726974793a206d61782d6167653d33313533363030303b20696e636c756465537562446f6d61696e730d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a20313233330d0a",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://20.1.248.118/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 403,
"status_reason": "Forbidden",
"headers": {
"Date": [
"<REDACTED>"
],
"_encoding": {
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"X_Powered_By": "DISPLAY_UTF8",
"Strict_Transport_Security": "DISPLAY_UTF8"
},
"Server": [
"Microsoft-IIS/10.0"
],
"Content_Length": [
"1233"
],
"Content_Type": [
"text/html"
],
"X_Powered_By": [
"ASP.NET"
],
"Strict_Transport_Security": [
"max-age=31536000; includeSubDomains"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>403 - Forbidden: Access is denied.</title>",
"<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\"/>"
],
"body_size": 1233,
"body": "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\"/>\r\n<title>403 - Forbidden: Access is denied.</title>\r\n<style type=\"text/css\">\r\n<!--\r\nbody{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}\r\nfieldset{padding:0 15px 10px 15px;} \r\nh1{font-size:2.4em;margin:0;color:#FFF;}\r\nh2{font-size:1.7em;margin:0;color:#CC0000;} \r\nh3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} \r\n#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:\"trebuchet MS\", Verdana, sans-serif;color:#FFF;\r\nbackground-color:#555555;}\r\n#content{margin:0 0 0 2%;position:relative;}\r\n.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}\r\n-->\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"header\"><h1>Server Error</h1></div>\r\n<div id=\"content\">\r\n <div class=\"content-container\"><fieldset>\r\n <h2>403 - Forbidden: Access is denied.</h2>\r\n <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>\r\n </fieldset></div>\r\n</div>\r\n</body>\r\n</html>\r\n",
"body_hashes": [
"sha256:c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736",
"sha1:a05ae51b4a3e2e0076222cbcbe9c58833cdef108"
],
"body_hash": "sha1:a05ae51b4a3e2e0076222cbcbe9c58833cdef108",
"html_title": "403 - Forbidden: Access is denied."
},
"supports_http2": false
},
"observed_at": "2024-09-08T03:40:54.818238524Z",
"perspective_id": "PERSPECTIVE_TATA",
"port": 80,
"service_name": "HTTP",
"software": [
{
"part": "o",
"vendor": "Microsoft",
"other": {
"family": "Windows"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:10.0:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "IIS",
"version": "10.0",
"other": {
"family": "IIS"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "ASP.NET",
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.138.56",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 403 Forbidden\r\nContent-Type: text/html\r\nServer: Microsoft-IIS/10.0\r\nX-Powered-By: ASP.NET\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: <REDACTED>\r\nContent-Length: 1233\r\n",
"banner_hashes": [
"sha256:4c90c13e4573add13f50c62a35266bc89d8f0e61e9bdbdc782fdd89dbdcd3564"
],
"banner_hex": "485454502f312e312034303320466f7262696464656e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a5365727665723a204d6963726f736f66742d4949532f31302e300d0a582d506f77657265642d42793a204153502e4e45540d0a5374726963742d5472616e73706f72742d53656375726974793a206d61782d6167653d33313533363030303b20696e636c756465537562446f6d61696e730d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a20313233330d0a",
"certificate": "71b7eed0cbf53413f43958d6029445254bc7e11f95c44e72c0a14a68bc7e4baf",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://20.1.248.118/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 403,
"status_reason": "Forbidden",
"headers": {
"Date": [
"<REDACTED>"
],
"_encoding": {
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"X_Powered_By": "DISPLAY_UTF8",
"Strict_Transport_Security": "DISPLAY_UTF8"
},
"Server": [
"Microsoft-IIS/10.0"
],
"Content_Length": [
"1233"
],
"Content_Type": [
"text/html"
],
"X_Powered_By": [
"ASP.NET"
],
"Strict_Transport_Security": [
"max-age=31536000; includeSubDomains"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>403 - Forbidden: Access is denied.</title>",
"<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\"/>"
],
"body_size": 1233,
"body": "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\"/>\r\n<title>403 - Forbidden: Access is denied.</title>\r\n<style type=\"text/css\">\r\n<!--\r\nbody{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}\r\nfieldset{padding:0 15px 10px 15px;} \r\nh1{font-size:2.4em;margin:0;color:#FFF;}\r\nh2{font-size:1.7em;margin:0;color:#CC0000;} \r\nh3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} \r\n#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:\"trebuchet MS\", Verdana, sans-serif;color:#FFF;\r\nbackground-color:#555555;}\r\n#content{margin:0 0 0 2%;position:relative;}\r\n.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}\r\n-->\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"header\"><h1>Server Error</h1></div>\r\n<div id=\"content\">\r\n <div class=\"content-container\"><fieldset>\r\n <h2>403 - Forbidden: Access is denied.</h2>\r\n <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>\r\n </fieldset></div>\r\n</div>\r\n</body>\r\n</html>\r\n",
"body_hashes": [
"sha256:c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736",
"sha1:a05ae51b4a3e2e0076222cbcbe9c58833cdef108"
],
"body_hash": "sha1:a05ae51b4a3e2e0076222cbcbe9c58833cdef108",
"html_title": "403 - Forbidden: Access is denied."
},
"supports_http2": true
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "2ad2ad0000000000002ad2ad2ad2ad0f0dcb2ae084f34cae790be1eab88c30",
"cipher_and_version_fingerprint": "2ad2ad0000000000002ad2ad2ad2ad",
"tls_extensions_sha256": "0f0dcb2ae084f34cae790be1eab88c30",
"observed_at": "2024-07-15T10:25:47.622800682Z"
},
"observed_at": "2024-09-08T05:25:57.448012876Z",
"perspective_id": "PERSPECTIVE_TATA",
"port": 443,
"service_name": "HTTP",
"software": [
{
"part": "o",
"vendor": "Microsoft",
"other": {
"family": "Windows"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:internet_information_services:10.0:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "IIS",
"version": "10.0",
"other": {
"family": "IIS"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Microsoft",
"product": "ASP.NET",
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.138.34",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX",
"chain_fps_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "71b7eed0cbf53413f43958d6029445254bc7e11f95c44e72c0a14a68bc7e4baf",
"chain_fps_sha_256": [
"33f9731be910a66dc6acd07d9d9ca212ee8d0a9a5c78c8bf3e89bb74df8fb936"
],
"leaf_data": {
"names": [
"arc-apac.msn.com",
"arc-east.msn.com",
"arc-emea.msn.com",
"arc-west.msn.com",
"arc.msn.com",
"arcproxy.microsoft.com",
"dynmsg.modpim.com",
"dynmsgrest.modpim.com",
"fd-emea.api.iris.microsoft.com",
"fd.api.iris.microsoft.com",
"fd.api.orgmsg.microsoft.com",
"fd.msit.api.personalization.ideas.microsoft.com"
],
"subject_dn": "C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=arc.msn.com",
"issuer_dn": "C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 04",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "968485c2de682c44ba0e93bc9cb9f657dd91c433420c77944c8b3dc6dd658cbe",
"fingerprint": "71b7eed0cbf53413f43958d6029445254bc7e11f95c44e72c0a14a68bc7e4baf",
"issuer": {
"common_name": [
"Microsoft Azure RSA TLS Issuing CA 04"
],
"organization": [
"Microsoft Corporation"
],
"country": [
"US"
]
},
"subject": {
"common_name": [
"arc.msn.com"
],
"locality": [
"Redmond"
],
"organization": [
"Microsoft Corporation"
],
"province": [
"WA"
],
"country": [
"US"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "whxhYxac98H59y7JLA5/WrNFR5s9t//W6mOVXHR893UPsZEY9tG1sd5hdLAgg45t3XMZMwdd5dbWMVdLCWL8wHcwZi68vAcq67SlfghpHvKEWuJECyFkpv3ngJnaqQDwUqyFDHHJ9Ooii3g+NAfrSYLnoll3ycOlzG6ltxbusZ19D7TunBGdbgeHgO2PFVSwBsZ4jMWqh6TvNQEnlFMP9DIJkuFyLy444aZBp5CIrFE1wXIW5ExKIPg/un1xR3TYjklu7UgVzJWWSVmbhf1HetsBMyb0DiTW7/NMpWmFeORGYvaYKO0Fz5x42cvYb9jm4YVPGbxNxToXi22v2X+kiQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "06546b2584ebe265bf9506ff7f2fa6c3c6364b8382df42059163b9409f05c9d1"
},
"signature": {
"signature_algorithm": "SHA384-RSA",
"self_signed": false
}
},
"chain": [
{
"fingerprint": "33f9731be910a66dc6acd07d9d9ca212ee8d0a9a5c78c8bf3e89bb74df8fb936",
"subject_dn": "C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 04",
"issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2"
}
]
},
"server_key_exchange": {
"ec_params": {
"named_curve": 24
}
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "1d9c3e8c45ab7a2112263449a3ad9ece",
"ja4s": "t120200_c030_fee41c0d62a8",
"versions": [
{
"tls_version": "TLSv1_2",
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "1d9c3e8c45ab7a2112263449a3ad9ece",
"ja4s": "t120200_c030_fee41c0d62a8"
}
]
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nServer: Boost.Beast/181\r\nContent-Type: text/plain\r\nContent-Length: 18\r\n",
"banner_hashes": [
"sha256:efffbff753e5c6deca46d0f7fa777c0c747ac3278ad71dd5adf59144ccc81743"
],
"banner_hex": "485454502f312e3120323030204f4b0d0a5365727665723a20426f6f73742e42656173742f3138310d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2031380d0a",
"discovery_method": "PREDICTIVE_METHOD_7",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://20.1.248.118:5053/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Server": [
"Boost.Beast/181"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8"
},
"Content_Length": [
"18"
],
"Content_Type": [
"text/plain"
]
},
"body_size": 18,
"_encoding": {
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8"
},
"body": "unsupported method",
"body_hashes": [
"sha256:3dcc14450c642ed6502a71657c9afda913eb39ca23835aea093dc782c88d3ae8",
"sha1:de7e3746dfa07d5e7de9658abd39bb92b81fefe9"
],
"body_hash": "sha1:de7e3746dfa07d5e7de9658abd39bb92b81fefe9"
},
"supports_http2": false
},
"observed_at": "2024-09-08T06:01:26.980970263Z",
"perspective_id": "PERSPECTIVE_TELIA",
"port": 5053,
"service_name": "HTTP",
"source_ip": "167.94.146.52",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nServer: Boost.Beast/181\r\nContent-Type: text/plain\r\nContent-Length: 16\r\n",
"banner_hashes": [
"sha256:22e94214d87638932011f3f8b64c74c11114e10847e74bdf69b9944ae0429441"
],
"banner_hex": "485454502f312e3120323030204f4b0d0a5365727665723a20426f6f73742e42656173742f3138310d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2031360d0a",
"discovery_method": "PREDICTIVE_METHOD_3",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://20.1.248.118:5054/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Server": [
"Boost.Beast/181"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8"
},
"Content_Length": [
"16"
],
"Content_Type": [
"text/plain"
]
},
"body_size": 16,
"_encoding": {
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8"
},
"body": "probe healthy...",
"body_hashes": [
"sha256:2b5b51ae9f47010b69c3139fef1a9d57ac524af80115bdd8bfa587ac8fadbb28",
"sha1:6c46fefe937ce06be75800dfc91684bb5f12e581"
],
"body_hash": "sha1:6c46fefe937ce06be75800dfc91684bb5f12e581"
},
"supports_http2": false
},
"observed_at": "2024-09-08T07:08:18.734758041Z",
"perspective_id": "PERSPECTIVE_PCCW",
"port": 5054,
"service_name": "HTTP",
"source_ip": "199.45.154.123",
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "North America",
"country": "United States",
"country_code": "US",
"city": "Boydton",
"postal_code": "23917",
"timezone": "America/New_York",
"province": "Virginia",
"coordinates": {
"latitude": 36.66764,
"longitude": -78.3875
}
},
"location_updated_at": "2024-09-03T01:53:21.828724962Z",
"autonomous_system": {
"asn": 8075,
"description": "MICROSOFT-CORP-MSN-AS-BLOCK",
"bgp_prefix": "20.0.0.0/11",
"name": "MICROSOFT-CORP-MSN-AS-BLOCK",
"country_code": "US"
},
"autonomous_system_updated_at": "2024-09-03T01:53:21.828863154Z",
"whois": {
"network": {
"handle": "MSFT",
"name": "Microsoft Corporation",
"cidrs": [
"20.0.0.0/11"
],
"created": "2017-10-18T00:00:00Z",
"updated": "2021-12-14T00:00:00Z",
"allocation_type": "ALLOCATION"
},
"organization": {
"handle": "MSFT",
"name": "Microsoft Corporation",
"street": "One Microsoft Way",
"city": "Redmond",
"state": "WA",
"postal_code": "98052",
"country": "US",
"abuse_contacts": [
{
"handle": "MAC74-ARIN",
"name": "Microsoft Abuse Contact",
"email": "[email protected]"
}
],
"admin_contacts": [
{
"handle": "IPHOS5-ARIN",
"name": "IPHostmaster IPHostmaster",
"email": "[email protected]"
}
],
"tech_contacts": [
{
"handle": "BEDAR6-ARIN",
"name": "Dawn Bedard",
"email": "[email protected]"
},
{
"handle": "IPHOS5-ARIN",
"name": "IPHostmaster IPHostmaster",
"email": "[email protected]"
},
{
"handle": "KIMAV-ARIN",
"name": "Avery Kim",
"email": "[email protected]"
},
{
"handle": "MRPD-ARIN",
"name": "Microsoft Routing, Peering, and DNS",
"email": "[email protected]"
},
{
"handle": "SINGH683-ARIN",
"name": "Prachi Singh",
"email": "[email protected]"
}
]
}
},
"dns": {
"names": [
"iris-de-ppe-azsc-v2-eus2.eastus2.cloudapp.azure.com",
"arc.trafficmanager.net"
],
"records": {
"arc.trafficmanager.net": {
"record_type": "CNAME",
"resolved_at": "2024-08-09T19:53:32.857001850Z"
},
"iris-de-ppe-azsc-v2-eus2.eastus2.cloudapp.azure.com": {
"record_type": "A",
"resolved_at": "2024-09-02T14:48:32.350265386Z"
}
}
},
"last_updated_at": "2024-09-08T07:08:20.734Z"
}