5.255.126.139
As of: Jun 22, 2025 6:52am UTC |
Latest
{
"ip": "5.255.126.139",
"services": [
{
"_decoded": "ssh",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "SSH-2.0-OpenSSH_8.7",
"banner_hashes": [
"sha256:45555cb663eaed691ee601ea9829a3ecb09f649e9f580f69eccc85986a831c90"
],
"banner_hex": "5353482d322e302d4f70656e5353485f382e37",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "SSH",
"labels": [
"remote-access"
],
"observed_at": "2025-06-22T05:31:35.445595553Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 22,
"service_name": "SSH",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:openbsd:openssh:8.7:*:*:*:*:*:*:*",
"part": "a",
"vendor": "OpenBSD",
"product": "OpenSSH",
"version": "8.7",
"other": {
"family": "OpenSSH"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "206.168.34.69",
"ssh": {
"endpoint_id": {
"_encoding": {
"raw": "DISPLAY_UTF8"
},
"raw": "SSH-2.0-OpenSSH_8.7",
"protocol_version": "2.0",
"software_version": "OpenSSH_8.7"
},
"kex_init_message": {
"kex_algorithms": [
"curve25519-sha256",
"[email protected]",
"ecdh-sha2-nistp256",
"ecdh-sha2-nistp384",
"ecdh-sha2-nistp521",
"diffie-hellman-group-exchange-sha256",
"diffie-hellman-group14-sha256",
"diffie-hellman-group16-sha512",
"diffie-hellman-group18-sha512",
"[email protected]"
],
"host_key_algorithms": [
"rsa-sha2-512",
"rsa-sha2-256",
"ecdsa-sha2-nistp256",
"ssh-ed25519"
],
"client_to_server_ciphers": [
"[email protected]",
"[email protected]",
"aes256-ctr",
"[email protected]",
"aes128-ctr"
],
"server_to_client_ciphers": [
"[email protected]",
"[email protected]",
"aes256-ctr",
"[email protected]",
"aes128-ctr"
],
"client_to_server_macs": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"hmac-sha2-256",
"hmac-sha1",
"[email protected]",
"hmac-sha2-512"
],
"server_to_client_macs": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"hmac-sha2-256",
"hmac-sha1",
"[email protected]",
"hmac-sha2-512"
],
"client_to_server_compression": [
"none",
"[email protected]"
],
"server_to_client_compression": [
"none",
"[email protected]"
],
"first_kex_follows": false
},
"algorithm_selection": {
"kex_algorithm": "[email protected]",
"host_key_algorithm": "ecdsa-sha2-nistp256",
"client_to_server_alg_group": {
"cipher": "aes128-ctr",
"mac": "hmac-sha2-256",
"compression": "none"
},
"server_to_client_alg_group": {
"cipher": "aes128-ctr",
"mac": "hmac-sha2-256",
"compression": "none"
}
},
"server_host_key": {
"fingerprint_sha256": "8ac3dcc55785464bfe0ddf26518eb7e47eb15bfbf64156154b881cdc758a07cc",
"ecdsa_public_key": {
"_encoding": {
"b": "DISPLAY_BASE64",
"gx": "DISPLAY_BASE64",
"gy": "DISPLAY_BASE64",
"n": "DISPLAY_BASE64",
"p": "DISPLAY_BASE64",
"x": "DISPLAY_BASE64",
"y": "DISPLAY_BASE64"
},
"b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
"curve": "P-256",
"gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
"gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
"length": 256,
"n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
"p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
"x": "N2E81yjg6mKYq3wluK6IimKrDG8WYiMkpYFgc0FTtjQ=",
"y": "offcBUHZs5h7BNvWQZCmjQwIxipFTE19IZKGu8gQnxU="
}
},
"hassh_fingerprint": "02d7dd8ce96185733225e6f56d67fb77"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nLast-Modified: Wed, 26 Apr 2017 08:03:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"59005463-52e\"\r\nContent-Encoding: gzip\r\n",
"banner_hashes": [
"sha256:8ce035230449e237f673e87faf9773186bf0567d4a81219f99d91688dee0d5c5"
],
"banner_hex": "485454502f312e3120323030204f4b0d0a5365727665723a206e67696e780d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a4c6173742d4d6f6469666965643a205765642c2032362041707220323031372030383a30333a343720474d540d0a5472616e736665722d456e636f64696e673a206368756e6b65640d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a566172793a204163636570742d456e636f64696e670d0a455461673a20572f2235393030353436332d353265220d0a436f6e74656e742d456e636f64696e673a20677a69700d0a",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://5.255.126.139/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Vary": [
"Accept-Encoding"
],
"_encoding": {
"Vary": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Transfer_Encoding": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Content_Encoding": "DISPLAY_UTF8",
"ETag": "DISPLAY_UTF8",
"Last_Modified": "DISPLAY_UTF8"
},
"Server": [
"nginx"
],
"Content_Type": [
"text/html"
],
"Transfer_Encoding": [
"chunked"
],
"Connection": [
"keep-alive"
],
"Date": [
"<REDACTED>"
],
"Content_Encoding": [
"gzip"
],
"ETag": [
"W/\"59005463-52e\""
],
"Last_Modified": [
"Wed, 26 Apr 2017 08:03:47 GMT"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>\u6ca1\u6709\u627e\u5230\u7ad9\u70b9</title>",
"<meta charset=\"utf-8\">"
],
"body_size": 1326,
"body": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<title>\u6ca1\u6709\u627e\u5230\u7ad9\u70b9</title>\n<style>\n*{margin:0;padding:0;color:#444}\nbody{font-size:14px;font-family:\"\u5b8b\u4f53\"}\n.main{width:600px;margin:10% auto;}\n.title{background: #20a53a;color: #fff;font-size: 16px;height: 40px;line-height: 40px;padding-left: 20px;}\n.content{background-color:#f3f7f9; height:300px;border:1px dashed #c6d9b6;padding:20px}\n.t1{border-bottom: 1px dashed #c6d9b6;color: #ff4000;font-weight: bold; margin: 0 0 20px; padding-bottom: 18px;}\n.t2{margin-bottom:8px; font-weight:bold}\nol{margin:0 0 20px 22px;padding:0;}\nol li{line-height:30px}\n</style>\n</head>\n\n<body>\n\t<div class=\"main\">\n\t\t<div class=\"title\">\u6ca1\u6709\u627e\u5230\u7ad9\u70b9</div>\n\t\t<div class=\"content\">\n\t\t\t<p class=\"t1\">\u60a8\u7684\u8bf7\u6c42\u5728Web\u670d\u52a1\u5668\u4e2d\u6ca1\u6709\u627e\u5230\u5bf9\u5e94\u7684\u7ad9\u70b9\uff01</p>\n\t\t\t<p class=\"t2\">\u53ef\u80fd\u539f\u56e0\uff1a</p>\n\t\t\t<ol>\n\t\t\t\t<li>\u60a8\u6ca1\u6709\u5c06\u6b64\u57df\u540d\u6216IP\u7ed1\u5b9a\u5230\u5bf9\u5e94\u7ad9\u70b9!</li>\n\t\t\t\t<li>\u914d\u7f6e\u6587\u4ef6\u672a\u751f\u6548!</li>\n\t\t\t</ol>\n\t\t\t<p class=\"t2\">\u5982\u4f55\u89e3\u51b3\uff1a</p>\n\t\t\t<ol>\n\t\t\t\t<li>\u68c0\u67e5\u662f\u5426\u5df2\u7ecf\u7ed1\u5b9a\u5230\u5bf9\u5e94\u7ad9\u70b9\uff0c\u82e5\u786e\u8ba4\u5df2\u7ed1\u5b9a\uff0c\u8bf7\u5c1d\u8bd5\u91cd\u8f7dWeb\u670d\u52a1\uff1b</li>\n\t\t\t\t<li>\u68c0\u67e5\u7aef\u53e3\u662f\u5426\u6b63\u786e\uff1b</li>\n\t\t\t\t<li>\u82e5\u60a8\u4f7f\u7528\u4e86CDN\u4ea7\u54c1\uff0c\u8bf7\u5c1d\u8bd5\u6e05\u9664CDN\u7f13\u5b58\uff1b</li>\n\t\t\t\t<li>\u666e\u901a\u7f51\u7ad9\u8bbf\u5ba2\uff0c\u8bf7\u8054\u7cfb\u7f51\u7ad9\u7ba1\u7406\u5458\uff1b</li>\n\t\t\t</ol>\n\t\t</div>\n\t</div>\n</body>\n</html>\n",
"body_hashes": [
"sha256:cdf9d8eee8c4fe967fac3aa9218a7227647ae7aaaa4221c688e1aab7a9180f69",
"sha1:352cacc681aae7a7c1e7b3467c75bd7a9f75e343",
"tlsh:0321781422585c1fa36662d13eea63c4334bbc0ad0538fb241b30274e4cb8d16d0fb6d"
],
"body_hash": "sha1:352cacc681aae7a7c1e7b3467c75bd7a9f75e343",
"html_title": "\u6ca1\u6709\u627e\u5230\u7ad9\u70b9"
},
"supports_http2": false
},
"observed_at": "2025-06-21T19:57:56.472740043Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 80,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "nginx",
"product": "nginx",
"other": {
"family": "nginx"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.138.206",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n",
"banner_hashes": [
"sha256:2584d2702600e977a52d8a5828ac2451807e731013082395adce056fc53b2efa"
],
"banner_hex": "485454502f312e312034303320466f7262696464656e0d0a5365727665723a206e67696e780d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203134360d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a",
"discovery_method": "PREDICTIVE_METHOD_12",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://5.255.126.139:888/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 403,
"status_reason": "Forbidden",
"headers": {
"Date": [
"<REDACTED>"
],
"_encoding": {
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8"
},
"Server": [
"nginx"
],
"Content_Length": [
"146"
],
"Content_Type": [
"text/html"
],
"Connection": [
"keep-alive"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>403 Forbidden</title>"
],
"body_size": 146,
"body": "<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body>\r\n<center><h1>403 Forbidden</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
"body_hashes": [
"sha256:32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864",
"sha1:4d7b3cb41e90618358d0ee066c45c76227a13747",
"tlsh:2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315"
],
"body_hash": "sha1:4d7b3cb41e90618358d0ee066c45c76227a13747",
"html_title": "403 Forbidden"
},
"supports_http2": false
},
"observed_at": "2025-06-22T06:52:14.375022007Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 888,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "nginx",
"product": "nginx",
"other": {
"family": "nginx"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "206.168.34.43",
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "Europe",
"country": "Netherlands",
"country_code": "NL",
"city": "Dronten",
"postal_code": "8251",
"timezone": "Europe/Amsterdam",
"province": "Flevoland",
"coordinates": {
"latitude": 52.525,
"longitude": 5.71806
}
},
"location_updated_at": "2025-06-14T12:17:31.287414703Z",
"autonomous_system": {
"asn": 60404,
"description": "LITESERVER",
"bgp_prefix": "5.255.96.0/19",
"name": "LITESERVER",
"country_code": "NL"
},
"autonomous_system_updated_at": "2025-06-14T12:17:31.287505573Z",
"whois": {
"network": {
"handle": "TIG",
"name": "The Infrastructure Group B.V.",
"cidrs": [
"5.255.126.0/24"
],
"created": "2023-04-06T00:00:00Z",
"updated": "2023-04-06T00:00:00Z"
},
"organization": {
"handle": "ORG-TIGB3-RIPE",
"name": "The Infrastructure Group B.V.",
"address": "Havinghastraat 32\\n1817DA\\nAlkmaar\\nNETHERLANDS",
"abuse_contacts": [
{
"handle": "AR56650-RIPE",
"name": "Abuse-C Role",
"email": "[email protected]"
}
],
"admin_contacts": [
{
"handle": "TIGB2-RIPE",
"name": "The Infrastructure Group B.V. - NOC Department",
"email": "[email protected]"
}
]
}
},
"dns": {},
"last_updated_at": "2025-06-22T06:52:23.751Z",
"labels": [
"remote-access"
]
}