70.90.187.249
As of: Dec 04, 2023 3:53am UTC |
Latest
{
"ip": "70.90.187.249",
"services": [
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Length: 546\r\nContent-Type: text/html\r\nDate: <REDACTED>\r\nServer: UserLand Frontier/9.5-WinNT\r\n",
"banner_hashes": [
"sha256:b67f195c6cb2e62055b419299641e1506e145f6dabdb0f49447ce0c707049395"
],
"banner_hex": "485454502f312e3120323030204f4b0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d4c656e6774683a203534360d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a446174653a20203c52454441435445443e0d0a5365727665723a20557365724c616e642046726f6e746965722f392e352d57696e4e540d0a",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://70.90.187.249/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Content_Length": [
"546"
],
"_encoding": {
"Content_Length": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8"
},
"Date": [
"<REDACTED>"
],
"Server": [
"UserLand Frontier/9.5-WinNT"
],
"Content_Type": [
"text/html"
],
"Connection": [
"close"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>UserLand Frontier Server Error</title>"
],
"body_size": 546,
"body": "<html>\r\t<head>\r\t\t<title>UserLand Frontier Server Error</title>\r\t\t</head>\r\t<body>\r\t\t<blockquote>\r\t\t\t<blockquote>\r\t\t\t\t<font size=\"+2\" face=\"helvetica,arial\">\r\t\t\t\t\t<br><b><i>Sorry!</i> There was an error: </b>The attribute \"allowDirectoryListings\" must be true.\r\t\t\t\t\t</font>\r\t\t\t\t<font size=\"+0\" face=\"helvetica,arial\">\r\t\t\t\t\t<p>The error was detected by Frontier 9.5\r\t\t\t\t\t in mainResponder.respond.\r\t\t\t\t\t Webmaster: [email protected].\r\t\t\t\t\t Time: Sun, 03 Dec 2023 00:30:56 GMT.\r\t\t\t\t\t</font>\r\t\t\t\t</blockquote>\r\t\t\t</blockquote>\r\t\t</body>\r\t</html>\r",
"body_hashes": [
"sha256:079cd0749fb245f6ce50337bed71fd28ca62a6b8cce76aa2e62a095a0c8b5e34",
"sha1:e77eb1957f3649b0b7ba893117e93d0f245bab54"
],
"body_hash": "sha1:e77eb1957f3649b0b7ba893117e93d0f245bab54",
"html_title": "UserLand Frontier Server Error"
},
"supports_http2": false
},
"observed_at": "2023-12-03T00:31:57.476066592Z",
"perspective_id": "PERSPECTIVE_TATA",
"port": 80,
"service_name": "HTTP",
"source_ip": "167.94.138.52",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "rdp",
"extended_service_name": "RDP",
"labels": [
"network-administration",
"remote-access"
],
"observed_at": "2023-12-04T03:53:27.200608291Z",
"perspective_id": "PERSPECTIVE_ORANGE",
"port": 3389,
"rdp": {
"version": {
"raw": 524292,
"major": 5,
"minor": 0
},
"protocol_flags": {
"extended_client_data_supported": false,
"dynvc_graphics_pipeline": false,
"neg_resp_reserved": false,
"restricted_admin_mode": false,
"restricted_auth_mode": false
},
"selected_security_protocol": {
"standard_rdp": false,
"tls": false,
"credssp": false,
"rdstls": false,
"credssp_early_auth": false,
"error": false,
"error_ssl_required": false,
"error_ssl_forbidden": false,
"error_ssl_cert_missing": false,
"error_bad_flags": false,
"error_hybrid_required": false,
"error_ssl_user_auth_required": false,
"error_unknown": false,
"raw_value": 0
},
"x224_cc_pdu_srcref": 13330,
"connect_response": {
"domain_parameters": {
"max_channel_ids": 34,
"max_user_id_channels": 3,
"num_priorities": 1,
"max_provider_height": 1,
"max_mcspdu_size": 65528,
"domain_protocol_version": 2,
"max_token_ids": 0,
"min_throughput": 0
},
"connect_id": 0
},
"certificate_info": {
"proprietary_rsa_key": {
"magic": 826364754,
"key_length": 72,
"modulus_bitlen": 512,
"max_bytes_datalen": 63,
"public_exponent": 65537,
"modulus": "J2qUqU+v7ZvEcBuaSZdOw7QvHao/lfFHrlTYHPSPPQJgZXDbcOFP7fKyACMX+vLHZ1Zw/s6r/x6+ZWS5vAsQuQAAAAAAAAAA",
"signature": "zmcpxz0xKQdbuLLiqMB9EkwoDyiGXj7t6gydngUCN0ZAD+etiWg5VlPLhQdNE+OyFtXXwGdx1GnENd8mIYQUegAAAAAAAAAA"
}
}
},
"service_name": "RDP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
"part": "o",
"vendor": "microsoft",
"product": "windows_xp",
"source": "OSI_TRANSPORT_LAYER"
}
],
"source_ip": "167.94.145.54",
"transport_fingerprint": {
"id": 332,
"os": "Windows XP / 2003",
"raw": "16384,128,false,MNWNNTNNS,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 401 Unauthorized\r\nConnection: close\r\nContent-Length: 158\r\nContent-Type: text/html\r\nDate: <REDACTED>\r\nServer: UserLand Frontier/9.5-WinNT\r\nWWW-Authenticate: Basic realm=\"Frontier Admin\"\r\n",
"banner_hashes": [
"sha256:3df39594011eff1125cfbe04e420a9c8b3374265772fbd470316ceb544370308"
],
"banner_hex": "485454502f312e312034303120556e617574686f72697a65640d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d4c656e6774683a203135380d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a446174653a20203c52454441435445443e0d0a5365727665723a20557365724c616e642046726f6e746965722f392e352d57696e4e540d0a5757572d41757468656e7469636174653a204261736963207265616c6d3d2246726f6e746965722041646d696e220d0a",
"discovery_method": "PREDICTIVE_METHOD_12",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://70.90.187.249:5336/",
"headers": {
"Accept": [
"*/*"
],
"_encoding": {
"Accept": "DISPLAY_UTF8",
"User_Agent": "DISPLAY_UTF8"
},
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 401,
"status_reason": "Unauthorized",
"headers": {
"Content_Type": [
"text/html"
],
"_encoding": {
"Content_Type": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"WWW_Authenticate": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8"
},
"Date": [
"<REDACTED>"
],
"Connection": [
"close"
],
"Content_Length": [
"158"
],
"WWW_Authenticate": [
"Basic realm=\"Frontier Admin\""
],
"Server": [
"UserLand Frontier/9.5-WinNT"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<TITLE>401 UNAUTHORIZED</TITLE>"
],
"body_size": 158,
"body": "<HTML><HEAD><TITLE>401 UNAUTHORIZED</TITLE></HEAD><BODY><H1>401 UNAUTHORIZED</H1><P>You must be authenticated before accessing this service.</P></BODY></HTML>",
"body_hashes": [
"sha256:3964a209ff6b70ecb73a66a392c0d76f9f1ba511e011045c8aeb9d096caf37ac",
"sha1:345888e773747cf04bb0d5be9ff0e7162b4f5d08"
],
"body_hash": "sha1:345888e773747cf04bb0d5be9ff0e7162b4f5d08",
"html_title": "401 UNAUTHORIZED"
},
"supports_http2": false
},
"observed_at": "2023-12-03T17:43:46.605436257Z",
"perspective_id": "PERSPECTIVE_HE",
"port": 5336,
"service_name": "HTTP",
"source_ip": "162.142.125.216",
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "North America",
"country": "United States",
"country_code": "US",
"city": "Seattle",
"postal_code": "98117",
"timezone": "America/Los_Angeles",
"province": "Washington",
"coordinates": {
"latitude": 47.6873,
"longitude": -122.3772
}
},
"location_updated_at": "2023-11-21T18:06:49.833445Z",
"autonomous_system": {
"asn": 33650,
"description": "COMCAST-33650",
"bgp_prefix": "70.90.176.0/20",
"name": "COMCAST-33650",
"country_code": "US"
},
"autonomous_system_updated_at": "2023-11-21T18:06:49.833526Z",
"operating_system": {
"uniform_resource_identifier": "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
"part": "o",
"vendor": "microsoft",
"product": "windows_xp",
"source": "OSI_TRANSPORT_LAYER"
},
"dns": {
"reverse_dns": {
"names": [
"smtp.netversed.com"
],
"resolved_at": "2023-11-22T06:12:55.382593055Z"
}
},
"last_updated_at": "2023-12-04T03:53:28.409Z",
"labels": [
"network-administration",
"remote-access"
]
}