34.203.131.52

As of: Apr 16, 2024 11:50pm UTC | Latest
{
  "ip": "34.203.131.52",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\ndate:  <REDACTED>\r\nserver: istio-envoy\r\ncontent-length: 0\r\n",
      "banner_hashes": [
        "sha256:ab23238d6ddc7c00589b93d8592863dbce70627e3ddd1c2a2d6dc45a0f9fa284"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a646174653a20203c52454441435445443e0d0a7365727665723a20697374696f2d656e766f790d0a636f6e74656e742d6c656e6774683a20300d0a",
      "discovery_method": "PREDICTIVE_METHOD_20",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://34.203.131.52/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "date": "DISPLAY_UTF8",
              "server": "DISPLAY_UTF8",
              "content_length": "DISPLAY_UTF8"
            },
            "server": [
              "istio-envoy"
            ],
            "content_length": [
              "0"
            ]
          },
          "body_size": 0
        },
        "supports_http2": true
      },
      "observed_at": "2024-04-14T22:47:01.281830836Z",
      "pending_removal_since": "2024-04-16T22:06:36.497540810Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:istio:envoy:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Istio",
          "product": "Envoy",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.223",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 404 Not Found\r\ndate:  <REDACTED>\r\nserver: istio-envoy\r\ncontent-length: 0\r\n",
      "banner_hashes": [
        "sha256:ab23238d6ddc7c00589b93d8592863dbce70627e3ddd1c2a2d6dc45a0f9fa284"
      ],
      "banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a646174653a20203c52454441435445443e0d0a7365727665723a20697374696f2d656e766f790d0a636f6e74656e742d6c656e6774683a20300d0a",
      "certificate": "bd86743dbed4b65746d684f829c14a9f5342077e00047c9429ef0d4776ca6992",
      "discovery_method": "PREDICTIVE_METHOD_24",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://34.203.131.52/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 404,
          "status_reason": "Not Found",
          "headers": {
            "server": [
              "istio-envoy"
            ],
            "_encoding": {
              "server": "DISPLAY_UTF8",
              "date": "DISPLAY_UTF8",
              "content_length": "DISPLAY_UTF8"
            },
            "date": [
              "<REDACTED>"
            ],
            "content_length": [
              "0"
            ]
          },
          "body_size": 0
        },
        "supports_http2": true
      },
      "observed_at": "2024-04-16T15:53:22.962763358Z",
      "perspective_id": "PERSPECTIVE_PCCW",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:istio:envoy:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Istio",
          "product": "Envoy",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "199.45.154.53",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "bd86743dbed4b65746d684f829c14a9f5342077e00047c9429ef0d4776ca6992",
          "chain_fps_sha_256": [
            "b0f330a31a0c50987e1c3a7bb02c2dda682991d3165b517bd44fba4a6020bd94",
            "87dcd4dc74640a322cd205552506d1be64f12596258096544986b4850bc72706",
            "28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996"
          ],
          "leaf_data": {
            "names": [
              "*.dev.attentivemobile.com"
            ],
            "subject_dn": "CN=*.dev.attentivemobile.com",
            "issuer_dn": "C=US, O=Amazon, CN=Amazon RSA 2048 M02",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "bc09bd0822efdaa1e176755dc0e34b1119b783ebc76dd20b780e8e152ac650ea",
            "fingerprint": "bd86743dbed4b65746d684f829c14a9f5342077e00047c9429ef0d4776ca6992",
            "issuer": {
              "common_name": [
                "Amazon RSA 2048 M02"
              ],
              "organization": [
                "Amazon"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "*.dev.attentivemobile.com"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "nTttImsFpptfXDsrz2HMalqh9sZ9GkMLaX0hEuZnb5bh8W1M4fZXOAawFX+FUwDpURg910ZOfIqjt/mX/pDn1g8rEfnNUsQ7DTYjaWA9aRoY9VCFtF6DOEuhDuMv1JnaYdscAhpV+BN9sPfNfCZWUebQ5LQ7hnR2WfRc8GiW2hjCX9xHxzDP4nKYD6GD1KxpEIrprF7JttOH1fBSDlfrzU8tg5qbTjlArhorMV+RkcTNjPFcIMx2PPaMZzv5yFBqO/sJuQpzylcJrVNwBxaukVxaDzbHyqKgwC/of3Av4vPUyW+ba9Majy/5uDCu8VHx7VBOl2W04eZzQxzw3ThIxQ==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "287aa3e6fcbe87239f9f96008a0a0ae873a3110a58da29303d98ac7835ffbbfd"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "b0f330a31a0c50987e1c3a7bb02c2dda682991d3165b517bd44fba4a6020bd94",
              "subject_dn": "C=US, O=Amazon, CN=Amazon RSA 2048 M02",
              "issuer_dn": "C=US, O=Amazon, CN=Amazon Root CA 1"
            },
            {
              "fingerprint": "87dcd4dc74640a322cd205552506d1be64f12596258096544986b4850bc72706",
              "subject_dn": "C=US, O=Amazon, CN=Amazon Root CA 1",
              "issuer_dn": "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies\\, Inc., CN=Starfield Services Root Certificate Authority - G2"
            },
            {
              "fingerprint": "28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996",
              "subject_dn": "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies\\, Inc., CN=Starfield Services Root Certificate Authority - G2",
              "issuer_dn": "C=US, O=Starfield Technologies\\, Inc., OU=Starfield Class 2 Certification Authority"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "ea615e28cb25adfb2f261151eab3314f",
        "ja4s": "t120200_544c535f45434448455f5253415f574954485f4145535f3132385f47434d5f534841323536_46d4f1c77e73",
        "versions": [
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "ea615e28cb25adfb2f261151eab3314f",
            "ja4s": "t120200_544c535f45434448455f5253415f574954485f4145535f3132385f47434d5f534841323536_46d4f1c77e73"
          },
          {
            "tls_version": "TLSv1_1",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "4887e172ec56727ac02b1b40d0cb3ae2",
            "ja4s": "t110200_544c535f45434448455f5253415f574954485f4145535f3132385f4342435f534841_46d4f1c77e73"
          },
          {
            "tls_version": "TLSv1_0",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "171cb911c3fe3165cd0a1ab4da573fb4",
            "ja4s": "t100200_544c535f45434448455f5253415f574954485f4145535f3132385f4342435f534841_46d4f1c77e73"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 400 Bad Request\r\ncontent-length: 11\r\ncontent-type: text/plain\r\ndate:  <REDACTED>\r\nserver: envoy\r\nconnection: close\r\n",
      "banner_hashes": [
        "sha256:437bf5b9b0744af29cd465a9dfc002bf6872e21bd6d9b0ef4c2687777463c66a"
      ],
      "banner_hex": "485454502f312e31203430302042616420526571756573740d0a636f6e74656e742d6c656e6774683a2031310d0a636f6e74656e742d747970653a20746578742f706c61696e0d0a646174653a20203c52454441435445443e0d0a7365727665723a20656e766f790d0a636f6e6e656374696f6e3a20636c6f73650d0a",
      "discovery_method": "PREDICTIVE_METHOD_11",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://34.203.131.52:15021/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 400,
          "status_reason": "Bad Request",
          "headers": {
            "date": [
              "<REDACTED>"
            ],
            "_encoding": {
              "date": "DISPLAY_UTF8",
              "server": "DISPLAY_UTF8",
              "connection": "DISPLAY_UTF8",
              "content_length": "DISPLAY_UTF8",
              "content_type": "DISPLAY_UTF8"
            },
            "server": [
              "envoy"
            ],
            "connection": [
              "close"
            ],
            "content_length": [
              "11"
            ],
            "content_type": [
              "text/plain"
            ]
          },
          "body_size": 11,
          "_encoding": {
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8"
          },
          "body": "Bad Request",
          "body_hashes": [
            "sha256:7c41b898c5da0cfa4aa049b65ef50248bce9a72d24bef4c723786431921b75aa",
            "sha1:10588307553e766ab3c7d328d948dc6754893cef"
          ],
          "body_hash": "sha1:10588307553e766ab3c7d328d948dc6754893cef"
        },
        "supports_http2": false
      },
      "labels": [
        "proxy"
      ],
      "observed_at": "2024-04-15T06:31:39.497973741Z",
      "pending_removal_since": "2024-04-16T22:18:41.774518519Z",
      "perspective_id": "PERSPECTIVE_NTT_2",
      "port": 15021,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Envoy Proxy",
          "product": "Envoy",
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "199.45.155.19",
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "North America",
    "country": "United States",
    "country_code": "US",
    "city": "Ashburn",
    "postal_code": "20147",
    "timezone": "America/New_York",
    "province": "Virginia",
    "coordinates": {
      "latitude": 39.04372,
      "longitude": -77.48749
    }
  },
  "location_updated_at": "2024-04-06T02:59:54.484248652Z",
  "autonomous_system": {
    "asn": 14618,
    "description": "AMAZON-AES",
    "bgp_prefix": "34.192.0.0/12",
    "name": "AMAZON-AES",
    "country_code": "US"
  },
  "autonomous_system_updated_at": "2024-04-06T03:00:54.745152580Z",
  "whois": {
    "network": {
      "handle": "NET34",
      "name": "American Registry for Internet Numbers",
      "cidrs": [
        "34.0.0.0/8"
      ]
    },
    "organization": {
      "handle": "ARIN",
      "name": "American Registry for Internet Numbers",
      "street": "PO Box 232290",
      "city": "Centreville",
      "state": "VA",
      "postal_code": "20120",
      "country": "US",
      "abuse_contacts": [
        {
          "handle": "ARIN-HOSTMASTER",
          "name": "Registration Services Department",
          "email": "[email protected]"
        }
      ],
      "admin_contacts": [
        {
          "handle": "ARIN-HOSTMASTER",
          "name": "Registration Services Department",
          "email": "[email protected]"
        }
      ],
      "tech_contacts": [
        {
          "handle": "ARIN-HOSTMASTER",
          "name": "Registration Services Department",
          "email": "[email protected]"
        }
      ]
    }
  },
  "dns": {
    "names": [
      "ec2-34-203-131-52.compute-1.amazonaws.com"
    ],
    "records": {
      "ec2-34-203-131-52.compute-1.amazonaws.com": {
        "record_type": "A",
        "resolved_at": "2024-04-08T13:55:28.352672332Z"
      }
    },
    "reverse_dns": {
      "names": [
        "ec2-34-203-131-52.compute-1.amazonaws.com"
      ],
      "resolved_at": "2024-04-16T15:53:12.788500899Z"
    }
  },
  "last_updated_at": "2024-04-16T23:50:26.834Z",
  "labels": [
    "proxy"
  ]
}