52.85.115.38

As of: May 30, 2023 2:42am UTC | Latest
{
  "ip": "52.85.115.38",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 403 Forbidden\r\nServer: CloudFront\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 915\r\nConnection: keep-alive\r\nX-Cache: Error from cloudfront\r\nVia: 1.1 3fcabc15a7f22952dcacfedd3d2b6a14.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: HEL50-C2\r\nX-Amz-Cf-Id: ioSyoJ5v677u8glVwwItwQ-gB5X65veJkexoungsY25C4uGddCwOAw==\r\n",
      "banner_hashes": [
        "sha256:d0ca86d8ad2ece848e809173022f3789c0f5cf9b889b7bb523c009c20ccd5e88"
      ],
      "banner_hex": "485454502f312e312034303320466f7262696464656e0d0a5365727665723a20436c6f756446726f6e740d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203931350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a582d43616368653a204572726f722066726f6d20636c6f756466726f6e740d0a5669613a20312e312033666361626331356137663232393532646361636665646433643262366131342e636c6f756466726f6e742e6e65742028436c6f756446726f6e74290d0a582d416d7a2d43662d506f703a2048454c35302d43320d0a582d416d7a2d43662d49643a20696f53796f4a35763637377538676c567777497477512d67423558363576654a6b65786f756e677359323543347547646443774f41773d3d0d0a",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://52.85.115.38/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 403,
          "status_reason": "Forbidden",
          "headers": {
            "Connection": [
              "keep-alive"
            ],
            "_encoding": {
              "Connection": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "X_Amz_Cf_Id": "DISPLAY_UTF8",
              "X_Amz_Cf_Pop": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Via": "DISPLAY_UTF8",
              "X_Cache": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8"
            },
            "Server": [
              "CloudFront"
            ],
            "Content_Type": [
              "text/html"
            ],
            "X_Amz_Cf_Id": [
              "ioSyoJ5v677u8glVwwItwQ-gB5X65veJkexoungsY25C4uGddCwOAw=="
            ],
            "X_Amz_Cf_Pop": [
              "HEL50-C2"
            ],
            "Content_Length": [
              "915"
            ],
            "Via": [
              "1.1 3fcabc15a7f22952dcacfedd3d2b6a14.cloudfront.net (CloudFront)"
            ],
            "X_Cache": [
              "Error from cloudfront"
            ],
            "Date": [
              "<REDACTED>"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>ERROR: The request could not be satisfied</TITLE>",
            "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=iso-8859-1\">"
          ],
          "body_size": 915,
          "body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\">\n<HTML><HEAD><META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=iso-8859-1\">\n<TITLE>ERROR: The request could not be satisfied</TITLE>\n</HEAD><BODY>\n<H1>403 ERROR</H1>\n<H2>The request could not be satisfied.</H2>\n<HR noshade size=\"1px\">\nBad request.\nWe can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.\n<BR clear=\"all\">\nIf you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.\n<BR clear=\"all\">\n<HR noshade size=\"1px\">\n<PRE>\nGenerated by cloudfront (CloudFront)\nRequest ID: ioSyoJ5v677u8glVwwItwQ-gB5X65veJkexoungsY25C4uGddCwOAw==\n</PRE>\n<ADDRESS>\n</ADDRESS>\n</BODY></HTML>",
          "body_hashes": [
            "sha256:51806e5a01f5a9730da1f0bf81551b9f9581eb962b20e541cd03bf5bcbb30389",
            "sha1:af9d3734cc4de96ac34023408bc87e761af78eec"
          ],
          "body_hash": "sha1:af9d3734cc4de96ac34023408bc87e761af78eec",
          "html_title": "ERROR: The request could not be satisfied"
        },
        "supports_http2": false
      },
      "observed_at": "2023-05-30T02:42:10.866934085Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:amazon:amazon_cloudfront:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Amazon",
          "product": "CloudFront Load Balancer",
          "other": {
            "family": "Web Services"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.226",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 403 Forbidden\r\nServer: CloudFront\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 915\r\nConnection: keep-alive\r\nX-Cache: Error from cloudfront\r\nVia: 1.1 007499d01faac26a60f04831409d062e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: HEL50-C2\r\nX-Amz-Cf-Id: rXGQdDQ2069rsBjmpb0JWK-Oxopvdq2yXgy-5H7SgYu6yZHCm3Dhog==\r\n",
      "banner_hashes": [
        "sha256:3fe3caac0d2a44695db9f6c603430edcaa5ae7afe9269b8f5bfbbed3213efdc1"
      ],
      "banner_hex": "485454502f312e312034303320466f7262696464656e0d0a5365727665723a20436c6f756446726f6e740d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203931350d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a582d43616368653a204572726f722066726f6d20636c6f756466726f6e740d0a5669613a20312e312030303734393964303166616163323661363066303438333134303964303632652e636c6f756466726f6e742e6e65742028436c6f756446726f6e74290d0a582d416d7a2d43662d506f703a2048454c35302d43320d0a582d416d7a2d43662d49643a2072584751644451323036397273426a6d7062304a574b2d4f786f7076647132795867792d3548375367597536795a48436d3344686f673d3d0d0a",
      "certificate": "0808966b5cb676485dd067f78a1a6687f027e88ffffb4064ab6f8d0e61521d58",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://52.85.115.38/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 403,
          "status_reason": "Forbidden",
          "headers": {
            "Via": [
              "1.1 007499d01faac26a60f04831409d062e.cloudfront.net (CloudFront)"
            ],
            "_encoding": {
              "Via": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "X_Amz_Cf_Id": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "X_Cache": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "X_Amz_Cf_Pop": "DISPLAY_UTF8"
            },
            "Date": [
              "<REDACTED>"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Connection": [
              "keep-alive"
            ],
            "X_Amz_Cf_Id": [
              "rXGQdDQ2069rsBjmpb0JWK-Oxopvdq2yXgy-5H7SgYu6yZHCm3Dhog=="
            ],
            "Server": [
              "CloudFront"
            ],
            "X_Cache": [
              "Error from cloudfront"
            ],
            "Content_Length": [
              "915"
            ],
            "X_Amz_Cf_Pop": [
              "HEL50-C2"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>ERROR: The request could not be satisfied</TITLE>",
            "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=iso-8859-1\">"
          ],
          "body_size": 915,
          "body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\">\n<HTML><HEAD><META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=iso-8859-1\">\n<TITLE>ERROR: The request could not be satisfied</TITLE>\n</HEAD><BODY>\n<H1>403 ERROR</H1>\n<H2>The request could not be satisfied.</H2>\n<HR noshade size=\"1px\">\nBad request.\nWe can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.\n<BR clear=\"all\">\nIf you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.\n<BR clear=\"all\">\n<HR noshade size=\"1px\">\n<PRE>\nGenerated by cloudfront (CloudFront)\nRequest ID: rXGQdDQ2069rsBjmpb0JWK-Oxopvdq2yXgy-5H7SgYu6yZHCm3Dhog==\n</PRE>\n<ADDRESS>\n</ADDRESS>\n</BODY></HTML>",
          "body_hashes": [
            "sha256:f2ef40f2c4e428f538980757d7edf4bae98276e9137f6796fa53eb585d54659f",
            "sha1:c155fc39907ff09d482f83758a13e98a29ec51a5"
          ],
          "body_hash": "sha1:c155fc39907ff09d482f83758a13e98a29ec51a5",
          "html_title": "ERROR: The request could not be satisfied"
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "29d29d00029d29d21c41d41d00041d0fc7ac8335432249e8becb757baaacec",
        "cipher_and_version_fingerprint": "29d29d00029d29d21c41d41d00041d",
        "tls_extensions_sha256": "0fc7ac8335432249e8becb757baaacec",
        "observed_at": "2023-05-22T13:25:31.964380477Z"
      },
      "observed_at": "2023-05-29T18:32:06.095823952Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:amazon:amazon_cloudfront:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Amazon",
          "product": "CloudFront Load Balancer",
          "other": {
            "family": "Web Services"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "162.142.125.224",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_128_GCM_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "0808966b5cb676485dd067f78a1a6687f027e88ffffb4064ab6f8d0e61521d58",
          "chain_fps_sha_256": [
            "111006378afbe8e99bb02ba87390ca429fca2773f74d7f7eb5744f5ddf68014b",
            "4f32d5dc00f715250abcc486511e37f501a899deb3bf7ea8adbbd3aef1c412da",
            "687fa451382278fff0c8b11f8d43d576671c6eb2bceab413fb83d965d06d2ff2"
          ],
          "leaf_data": {
            "names": [
              "*.media.prod.xhwholesale.xfinityhome.com",
              "media.prod.xhwholesale.xfinityhome.com"
            ],
            "subject_dn": "C=US, postalCode=19103, ST=PA, L=Philadelphia, street=1 Comcast Center, O=Comcast Corporation, OU=Xfinty Home, OU=Hosted by Comcast Corporation, OU=PlatinumSSL Wildcard, CN=*.media.prod.xhwholesale.xfinityhome.com",
            "issuer_dn": "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "08eff19f3f27e91dacf8cedece89ba8b69424c66fcde6b4e29dcab6a2e5356e5",
            "fingerprint": "0808966b5cb676485dd067f78a1a6687f027e88ffffb4064ab6f8d0e61521d58",
            "issuer": {
              "common_name": [
                "COMODO RSA Organization Validation Secure Server CA"
              ],
              "locality": [
                "Salford"
              ],
              "organization": [
                "COMODO CA Limited"
              ],
              "province": [
                "Greater Manchester"
              ],
              "country": [
                "GB"
              ]
            },
            "subject": {
              "common_name": [
                "*.media.prod.xhwholesale.xfinityhome.com"
              ],
              "locality": [
                "Philadelphia"
              ],
              "organization": [
                "Comcast Corporation"
              ],
              "organizational_unit": [
                "Xfinty Home",
                "Hosted by Comcast Corporation",
                "PlatinumSSL Wildcard"
              ],
              "postal_code": [
                "19103"
              ],
              "province": [
                "PA"
              ],
              "street_address": [
                "1 Comcast Center"
              ],
              "country": [
                "US"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "6iMhIl1rOAGk7TXA/9jTvaZ50mVH3Qa7Zh84ESy3x5i6+EKb/iJtrthK70aItyog9ZoWm8ulyF7S0luHGAaQVzb/DNLthtIvskfwBxxJkMbhTanKeJR6+mf409mAXdMLSURqA1dt0kwPWN0M8prW1gdJPkjaKyh0SuCEIvj4GxMrGKRDheBI3ravlo9BTC/YjXJLgchds1+97j7qSgpIlfO2R2y+I+RWKm85TpqCF3avGXc65YL7IWDKF93O8rAGePyiscrK0GeJ8FDKQ+NS99YKIdIWsf3tnhYY0cFUB9DLCxYzCBxlYMEFAaZfVVzWBPtU2J3cAisXz3ge3WBIDQ==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "1d4c15ecd708955f0c3549d013fe7b3a4f9b67f5e3c37d13a03c7b8003ddfdf2"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "111006378afbe8e99bb02ba87390ca429fca2773f74d7f7eb5744f5ddf68014b",
              "subject_dn": "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA",
              "issuer_dn": "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority"
            },
            {
              "fingerprint": "4f32d5dc00f715250abcc486511e37f501a899deb3bf7ea8adbbd3aef1c412da",
              "subject_dn": "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority",
              "issuer_dn": "C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root"
            },
            {
              "fingerprint": "687fa451382278fff0c8b11f8d43d576671c6eb2bceab413fb83d965d06d2ff2",
              "subject_dn": "C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root",
              "issuer_dn": "C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "f4febc55ea12b31ae17cfb7e614afda8"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Finland",
    "country_code": "FI",
    "city": "Helsinki",
    "postal_code": "00100",
    "timezone": "Europe/Helsinki",
    "province": "Uusimaa",
    "coordinates": {
      "latitude": 60.16952,
      "longitude": 24.93545
    }
  },
  "location_updated_at": "2023-05-22T13:25:50.978300Z",
  "autonomous_system": {
    "asn": 16509,
    "description": "AMAZON-02",
    "bgp_prefix": "52.85.112.0/22",
    "name": "AMAZON-02",
    "country_code": "US"
  },
  "autonomous_system_updated_at": "2023-05-16T08:17:06.938015Z",
  "dns": {
    "names": [
      "server-52-85-115-38.hel50.r.cloudfront.net"
    ],
    "records": {
      "server-52-85-115-38.hel50.r.cloudfront.net": {
        "record_type": "A",
        "resolved_at": "2023-05-27T20:01:34.156065923Z"
      }
    },
    "reverse_dns": {
      "names": [
        "server-52-85-115-38.hel50.r.cloudfront.net"
      ],
      "resolved_at": "2023-05-22T06:16:38.857913367Z"
    }
  },
  "last_updated_at": "2023-05-30T02:42:11.406Z"
}