52.85.115.81

As of: Jul 22, 2024 5:22pm UTC | Latest
{
  "ip": "52.85.115.81",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 403 Forbidden\r\nServer: CloudFront\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 915\r\nConnection: keep-alive\r\nX-Cache: Error from cloudfront\r\nVia: 1.1 007499d01faac26a60f04831409d062e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: HEL50-C2\r\nX-Amz-Cf-Id: 8Kx5uTwU-w-m2LApOfg7dJC6Pd9jBcKTZb_URHEuiwvjcg53JkbMnw==\r\n",
      "banner_hashes": [
        "sha256:1a42e54e3d80ca0ecb41f5ec2649755153b36b68566639846c1bf3f8ad3fda5b"
      ],
      "banner_hex": "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",
      "discovery_method": "IPV4_WALK_CLOUD_PRIORITY_1",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://52.85.115.81/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 403,
          "status_reason": "Forbidden",
          "headers": {
            "Server": [
              "CloudFront"
            ],
            "_encoding": {
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Via": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "X_Amz_Cf_Id": "DISPLAY_UTF8",
              "X_Cache": "DISPLAY_UTF8",
              "X_Amz_Cf_Pop": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "915"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Via": [
              "1.1 007499d01faac26a60f04831409d062e.cloudfront.net (CloudFront)"
            ],
            "Connection": [
              "keep-alive"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "X_Amz_Cf_Id": [
              "8Kx5uTwU-w-m2LApOfg7dJC6Pd9jBcKTZb_URHEuiwvjcg53JkbMnw=="
            ],
            "X_Cache": [
              "Error from cloudfront"
            ],
            "X_Amz_Cf_Pop": [
              "HEL50-C2"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>ERROR: The request could not be satisfied</TITLE>",
            "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=iso-8859-1\">"
          ],
          "body_size": 915,
          "body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\">\n<HTML><HEAD><META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=iso-8859-1\">\n<TITLE>ERROR: The request could not be satisfied</TITLE>\n</HEAD><BODY>\n<H1>403 ERROR</H1>\n<H2>The request could not be satisfied.</H2>\n<HR noshade size=\"1px\">\nBad request.\nWe can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.\n<BR clear=\"all\">\nIf you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.\n<BR clear=\"all\">\n<HR noshade size=\"1px\">\n<PRE>\nGenerated by cloudfront (CloudFront)\nRequest ID: 8Kx5uTwU-w-m2LApOfg7dJC6Pd9jBcKTZb_URHEuiwvjcg53JkbMnw==\n</PRE>\n<ADDRESS>\n</ADDRESS>\n</BODY></HTML>",
          "body_hashes": [
            "sha256:663109a52d2da88fc6bfe1965046068ef7f89276e1deab667596a780a9f4b410",
            "sha1:8df5592ccca30a701b668c8f1bcc38405d8e321e"
          ],
          "body_hash": "sha1:8df5592ccca30a701b668c8f1bcc38405d8e321e",
          "html_title": "ERROR: The request could not be satisfied"
        },
        "supports_http2": false
      },
      "observed_at": "2024-07-22T11:33:23.671826737Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 80,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:amazon:amazon_cloudfront:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Amazon",
          "product": "CloudFront Load Balancer",
          "other": {
            "family": "Web Services"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.123",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 403 Forbidden\r\nServer: CloudFront\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 915\r\nConnection: keep-alive\r\nX-Cache: Error from cloudfront\r\nVia: 1.1 16a997ff6fbe7c67cad69373ff69353c.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: HEL50-C2\r\nX-Amz-Cf-Id: Inmt7c6Eyu-xrkFWBvp-oFwYu9QcgaJtGNX0po4tJiF4FppZfNZW2Q==\r\n",
      "banner_hashes": [
        "sha256:499e61babf2184c62edb46b25b7499cd12cfb7ec48332f6f3d216949f7316399"
      ],
      "banner_hex": "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",
      "certificate": "eee7b4becd9cd5915f7b45dbaf56fc184889dde72fe694d998bc2541749df07a",
      "discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://52.85.115.81/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 403,
          "status_reason": "Forbidden",
          "headers": {
            "Server": [
              "CloudFront"
            ],
            "_encoding": {
              "Server": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Via": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "X_Amz_Cf_Id": "DISPLAY_UTF8",
              "X_Cache": "DISPLAY_UTF8",
              "X_Amz_Cf_Pop": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "915"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Via": [
              "1.1 16a997ff6fbe7c67cad69373ff69353c.cloudfront.net (CloudFront)"
            ],
            "Connection": [
              "keep-alive"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "X_Amz_Cf_Id": [
              "Inmt7c6Eyu-xrkFWBvp-oFwYu9QcgaJtGNX0po4tJiF4FppZfNZW2Q=="
            ],
            "X_Cache": [
              "Error from cloudfront"
            ],
            "X_Amz_Cf_Pop": [
              "HEL50-C2"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<TITLE>ERROR: The request could not be satisfied</TITLE>",
            "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=iso-8859-1\">"
          ],
          "body_size": 915,
          "body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\">\n<HTML><HEAD><META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=iso-8859-1\">\n<TITLE>ERROR: The request could not be satisfied</TITLE>\n</HEAD><BODY>\n<H1>403 ERROR</H1>\n<H2>The request could not be satisfied.</H2>\n<HR noshade size=\"1px\">\nBad request.\nWe can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.\n<BR clear=\"all\">\nIf you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.\n<BR clear=\"all\">\n<HR noshade size=\"1px\">\n<PRE>\nGenerated by cloudfront (CloudFront)\nRequest ID: Inmt7c6Eyu-xrkFWBvp-oFwYu9QcgaJtGNX0po4tJiF4FppZfNZW2Q==\n</PRE>\n<ADDRESS>\n</ADDRESS>\n</BODY></HTML>",
          "body_hashes": [
            "sha256:0c5896d84c127b698e047336ce3955697533100fd0ab816d27d9daf9c7f67a49",
            "sha1:7f9b776f45094be6d0ebfceee0b9cfe25de19692"
          ],
          "body_hash": "sha1:7f9b776f45094be6d0ebfceee0b9cfe25de19692",
          "html_title": "ERROR: The request could not be satisfied"
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "29d29d00029d29d21c41d41d00041d0fc7ac8335432249e8becb757baaacec",
        "cipher_and_version_fingerprint": "29d29d00029d29d21c41d41d00041d",
        "tls_extensions_sha256": "0fc7ac8335432249e8becb757baaacec",
        "observed_at": "2024-07-19T05:19:36.134666084Z"
      },
      "observed_at": "2024-07-22T16:29:17.588998986Z",
      "perspective_id": "PERSPECTIVE_NTT_2",
      "port": 443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:a:amazon:amazon_cloudfront:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "Amazon",
          "product": "CloudFront Load Balancer",
          "other": {
            "family": "Web Services"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "199.45.155.75",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_AES_128_GCM_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "eee7b4becd9cd5915f7b45dbaf56fc184889dde72fe694d998bc2541749df07a",
          "chain_fps_sha_256": [
            "b0f330a31a0c50987e1c3a7bb02c2dda682991d3165b517bd44fba4a6020bd94",
            "87dcd4dc74640a322cd205552506d1be64f12596258096544986b4850bc72706",
            "28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996"
          ],
          "leaf_data": {
            "names": [
              "*.newscred.com",
              "*.welcomesoftware.com"
            ],
            "subject_dn": "CN=*.welcomesoftware.com",
            "issuer_dn": "C=US, O=Amazon, CN=Amazon RSA 2048 M02",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "ef601a2a7c6beb590f69ca7cf51b67ce6ed96eb47157263b5d37debc8a78e77a",
            "fingerprint": "eee7b4becd9cd5915f7b45dbaf56fc184889dde72fe694d998bc2541749df07a",
            "issuer": {
              "common_name": [
                "Amazon RSA 2048 M02"
              ],
              "organization": [
                "Amazon"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "*.welcomesoftware.com"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "wNNluuOkReIWX43njPF9lkxcDhvkZOFsV4ZbpGHdZ/0oT8qKq2zfRl/Lo+YGmiIP2N0CF7+f3aSw68M3R92q0Vybc5WtVw+hd3cLt6nyj4Ztprqj368L+b0xkmLQOOJJPRJde+MwoVftIHHJbwhoTz0NcTlcDVNazJ/VTyQxo+VNKv5DM/Q3qLxKOwunswStN6gqPlc9U2T12xuInWZ1gKh2K+6Zt9cNSANFZnoQbAPsXdzWRRyC8PYeRXeJI9ETXI3Hi0KaeQdWvScQzAT/ShBfZFiJ5nuFpFMqF47l9eryJ7iuxGoukRfGtbsWRHi4rnZ8IMfeOxkOkODejMCJrQ==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "188dc3672a1d8543e1b2f0a8eb638fb35dd6dd4bee53fba10b334376974725b7"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "b0f330a31a0c50987e1c3a7bb02c2dda682991d3165b517bd44fba4a6020bd94",
              "subject_dn": "C=US, O=Amazon, CN=Amazon RSA 2048 M02",
              "issuer_dn": "C=US, O=Amazon, CN=Amazon Root CA 1"
            },
            {
              "fingerprint": "87dcd4dc74640a322cd205552506d1be64f12596258096544986b4850bc72706",
              "subject_dn": "C=US, O=Amazon, CN=Amazon Root CA 1",
              "issuer_dn": "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies\\, Inc., CN=Starfield Services Root Certificate Authority - G2"
            },
            {
              "fingerprint": "28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996",
              "subject_dn": "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies\\, Inc., CN=Starfield Services Root Certificate Authority - G2",
              "issuer_dn": "C=US, O=Starfield Technologies\\, Inc., OU=Starfield Class 2 Certification Authority"
            }
          ]
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "f4febc55ea12b31ae17cfb7e614afda8",
        "ja4s": "t130200_1301_a56c5b993250",
        "versions": [
          {
            "tls_version": "TLSv1_3",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "f4febc55ea12b31ae17cfb7e614afda8",
            "ja4s": "t130200_1301_a56c5b993250"
          },
          {
            "tls_version": "TLSv1_2",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "bd364195fb7a993701e47e6b14670f68",
            "ja4s": "t120300_c02f_11cd7d0ae790"
          },
          {
            "tls_version": "TLSv1_1",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "8ee319ea6443b863a3e32226810aa714",
            "ja4s": "t110300_c013_11cd7d0ae790"
          },
          {
            "tls_version": "TLSv1_0",
            "_encoding": {
              "ja3s": "DISPLAY_HEX"
            },
            "ja3s": "171cb911c3fe3165cd0a1ab4da573fb4",
            "ja4s": "t100200_c013_8fe157b277d7"
          },
          {
            "tls_version": "SSLv3"
          }
        ]
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Finland",
    "country_code": "FI",
    "city": "Helsinki",
    "postal_code": "00100",
    "timezone": "Europe/Helsinki",
    "province": "Uusimaa",
    "coordinates": {
      "latitude": 60.16952,
      "longitude": 24.93545
    }
  },
  "location_updated_at": "2024-07-17T02:16:19.096962701Z",
  "autonomous_system": {
    "asn": 16509,
    "description": "AMAZON-02",
    "bgp_prefix": "52.85.112.0/22",
    "name": "AMAZON-02",
    "country_code": "US"
  },
  "autonomous_system_updated_at": "2024-07-17T02:16:19.097037658Z",
  "whois": {
    "network": {
      "handle": "AMAZO-CF",
      "name": "Amazon.com, Inc.",
      "cidrs": [
        "52.84.0.0/15"
      ],
      "created": "2020-05-19T00:00:00Z",
      "updated": "2020-09-23T00:00:00Z",
      "allocation_type": "REALLOCATION"
    },
    "organization": {
      "handle": "AMAZON-4",
      "name": "Amazon.com, Inc.",
      "street": "1918 8th Ave",
      "city": "SEATTLE",
      "state": "WA",
      "postal_code": "98101-1244",
      "country": "US",
      "abuse_contacts": [
        {
          "handle": "AEA8-ARIN",
          "name": "Amazon EC2 Abuse",
          "email": "[email protected]"
        }
      ],
      "admin_contacts": [
        {
          "handle": "IPMAN40-ARIN",
          "name": "IP Management",
          "email": "[email protected]"
        }
      ],
      "tech_contacts": [
        {
          "handle": "ANO24-ARIN",
          "name": "Amazon EC2 Network Operations",
          "email": "[email protected]"
        }
      ]
    }
  },
  "dns": {
    "names": [
      "server-52-85-115-81.hel50.r.cloudfront.net"
    ],
    "records": {
      "server-52-85-115-81.hel50.r.cloudfront.net": {
        "record_type": "A",
        "resolved_at": "2024-07-15T00:04:59.823748954Z"
      }
    },
    "reverse_dns": {
      "names": [
        "server-52-85-115-81.hel50.r.cloudfront.net"
      ],
      "resolved_at": "2024-07-22T12:17:08.657934021Z"
    }
  },
  "last_updated_at": "2024-07-22T17:22:49.354Z"
}