88.99.61.208
As of: Dec 07, 2023 4:01pm UTC |
Latest
{
"ip": "88.99.61.208",
"services": [
{
"_decoded": "ssh",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.9",
"banner_hashes": [
"sha256:ae564f7096b0264330dd5989c12bb8ee4499442e39d18b390af8f7c307b8552a"
],
"banner_hex": "5353482d322e302d4f70656e5353485f382e327031205562756e74752d347562756e7475302e39",
"extended_service_name": "SSH",
"labels": [
"remote-access"
],
"observed_at": "2023-12-07T09:47:20.727525673Z",
"perspective_id": "PERSPECTIVE_TATA",
"port": 22,
"service_name": "SSH",
"software": [
{
"product": "openssh",
"other": {
"comment": "Ubuntu-4ubuntu0.9"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
"part": "o",
"product": "linux",
"source": "OSI_TRANSPORT_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Ubuntu",
"product": "Linux",
"version": "20.04",
"other": {
"family": "Linux"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:openbsd:openssh:8.2:p1:*:*:*:*:*:*",
"part": "a",
"vendor": "OpenBSD",
"product": "OpenSSH",
"version": "8.2",
"update": "p1",
"other": {
"family": "OpenSSH"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.138.124",
"ssh": {
"endpoint_id": {
"_encoding": {
"raw": "DISPLAY_UTF8"
},
"raw": "SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.9",
"protocol_version": "2.0",
"software_version": "OpenSSH_8.2p1",
"comment": "Ubuntu-4ubuntu0.9"
},
"kex_init_message": {
"kex_algorithms": [
"curve25519-sha256",
"[email protected]",
"ecdh-sha2-nistp256",
"ecdh-sha2-nistp384",
"ecdh-sha2-nistp521",
"diffie-hellman-group-exchange-sha256",
"diffie-hellman-group16-sha512",
"diffie-hellman-group18-sha512",
"diffie-hellman-group14-sha256"
],
"host_key_algorithms": [
"rsa-sha2-512",
"rsa-sha2-256",
"ssh-rsa",
"ecdsa-sha2-nistp256",
"ssh-ed25519"
],
"client_to_server_ciphers": [
"[email protected]",
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"[email protected]",
"[email protected]"
],
"server_to_client_ciphers": [
"[email protected]",
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"[email protected]",
"[email protected]"
],
"client_to_server_macs": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"hmac-sha2-256",
"hmac-sha2-512",
"hmac-sha1"
],
"server_to_client_macs": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"hmac-sha2-256",
"hmac-sha2-512",
"hmac-sha1"
],
"client_to_server_compression": [
"none",
"[email protected]"
],
"server_to_client_compression": [
"none",
"[email protected]"
],
"first_kex_follows": false
},
"algorithm_selection": {
"kex_algorithm": "[email protected]",
"host_key_algorithm": "ecdsa-sha2-nistp256",
"client_to_server_alg_group": {
"cipher": "aes128-ctr",
"mac": "hmac-sha2-256",
"compression": "none"
},
"server_to_client_alg_group": {
"cipher": "aes128-ctr",
"mac": "hmac-sha2-256",
"compression": "none"
}
},
"server_host_key": {
"fingerprint_sha256": "448b99b5747d13382349cc56e17c46438be7c090fb5a30afe356cb9e46e1c948",
"ecdsa_public_key": {
"_encoding": {
"b": "DISPLAY_BASE64",
"gx": "DISPLAY_BASE64",
"gy": "DISPLAY_BASE64",
"n": "DISPLAY_BASE64",
"p": "DISPLAY_BASE64",
"x": "DISPLAY_BASE64",
"y": "DISPLAY_BASE64"
},
"b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
"curve": "P-256",
"gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
"gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
"length": 256,
"n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
"p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
"x": "FhOAA8OOR/tRKO/c1ZJdlpVOJFo6eZTQ8z5Ekz1+G6w=",
"y": "jGS2wPFT1ZKzdjwYw/FshCSk9lMb0zaR7uVPpKb+uhc="
}
},
"hassh_fingerprint": "3ccd1778a76049721c71ad7d2bf62bbc"
},
"transport_fingerprint": {
"id": 262,
"os": "CentOS",
"raw": "65160,64,true,MSTNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "dns",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "dnsmasq-2.80",
"banner_hashes": [
"sha256:cf97464f3dd7c62bef303010a3c73445571731a9388a708922287cd5fe87c6f2"
],
"banner_hex": "646e736d6173712d322e3830",
"dns": {
"version": "dnsmasq-2.80",
"server_type": "FORWARDING",
"resolves_correctly": true,
"answers": [
{
"name": "ip.parrotdns.com.",
"response": "172.70.249.114",
"type": "A"
},
{
"name": "ip.parrotdns.com.",
"response": "35.202.119.40",
"type": "A"
}
],
"questions": [
{
"name": "ip.parrotdns.com.",
"response": ";ip.parrotdns.com.\tIN\t A",
"type": "A"
}
],
"edns": {
"do": true,
"udp": 1232,
"version": 0
},
"r_code": "SUCCESS"
},
"extended_service_name": "DNS",
"observed_at": "2023-12-07T07:28:42.681056592Z",
"perspective_id": "PERSPECTIVE_HE",
"port": 53,
"service_name": "DNS",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:thekelleys:dnsmasq:2.80:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Thekelleys",
"product": "Dnsmasq",
"version": "2.80",
"other": {
"family": "Dnsmasq"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "162.142.125.213",
"transport_protocol": "UDP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"certificate": "DISPLAY_HEX",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: <REDACTED>\r\nContent-Type: application/json\r\nContent-Length: 67\r\nLast-Modified: Sat, 24 Sep 2022 09:32:06 GMT\r\nConnection: keep-alive\r\nETag: \"632ece96-43\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains\r\nAccept-Ranges: bytes\r\n",
"banner_hashes": [
"sha256:06735125427580c08af108569f8d0efe108a93889121bd9a94f07202be88ea75"
],
"banner_hex": "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",
"certificate": "50b211d18334fc08a46684c431f9a9f048cb6563ec2a9a1cfb90ef234ed0199b",
"extended_service_name": "HTTPS",
"http": {
"request": {
"method": "GET",
"uri": "https://88.99.61.208/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Strict_Transport_Security": [
"max-age=63072000; includeSubdomains"
],
"_encoding": {
"Strict_Transport_Security": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Accept_Ranges": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Last_Modified": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"ETag": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8"
},
"Server": [
"nginx/1.18.0 (Ubuntu)"
],
"Accept_Ranges": [
"bytes"
],
"Connection": [
"keep-alive"
],
"Content_Type": [
"application/json"
],
"Last_Modified": [
"Sat, 24 Sep 2022 09:32:06 GMT"
],
"Content_Length": [
"67"
],
"ETag": [
"\"632ece96-43\""
],
"Date": [
"<REDACTED>"
]
},
"body_size": 67,
"_encoding": {
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8"
},
"body": "{\"status\":404,\"message\":\"Invalid api address\",\"version\":\"2.9.120\"}\n",
"body_hashes": [
"sha256:76e16b2d4710b960ea23ec17030682a4baaf7bc4c55112624d70a685280d035c",
"sha1:9572aa5187aeffc7af4cb44ff9d27425ef7a7cb6"
],
"body_hash": "sha1:9572aa5187aeffc7af4cb44ff9d27425ef7a7cb6"
},
"supports_http2": false
},
"jarm": {
"_encoding": {
"fingerprint": "DISPLAY_HEX",
"cipher_and_version_fingerprint": "DISPLAY_HEX",
"tls_extensions_sha256": "DISPLAY_HEX"
},
"fingerprint": "2ad2ad16d2ad2ad0002ad2ad2ad2ad13962a56ecbfc3caaf51829946ab7fbe",
"cipher_and_version_fingerprint": "2ad2ad16d2ad2ad0002ad2ad2ad2ad",
"tls_extensions_sha256": "13962a56ecbfc3caaf51829946ab7fbe",
"observed_at": "2023-11-25T21:08:26.718140288Z"
},
"observed_at": "2023-12-07T13:01:07.753172669Z",
"perspective_id": "PERSPECTIVE_TATA",
"port": 443,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:f5:nginx:1.18.0:*:*:*:*:*:*:*",
"part": "a",
"vendor": "nginx",
"product": "nginx",
"version": "1.18.0",
"other": {
"family": "nginx"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.138.52",
"tls": {
"version_selected": "TLSv1_2",
"cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"certificates": {
"_encoding": {
"leaf_fp_sha_256": "DISPLAY_HEX"
},
"leaf_fp_sha_256": "50b211d18334fc08a46684c431f9a9f048cb6563ec2a9a1cfb90ef234ed0199b",
"leaf_data": {
"subject_dn": "C=IR, ST=TH, O=AIP",
"issuer_dn": "C=IR, ST=TH, O=AIP",
"pubkey_bit_size": 2048,
"pubkey_algorithm": "RSA",
"tbs_fingerprint": "8c87b9a168dfd662ebb5187974b59b1ecb21165974bb203f26f6e8e6b451a015",
"fingerprint": "50b211d18334fc08a46684c431f9a9f048cb6563ec2a9a1cfb90ef234ed0199b",
"issuer": {
"organization": [
"AIP"
],
"province": [
"TH"
],
"country": [
"IR"
]
},
"subject": {
"organization": [
"AIP"
],
"province": [
"TH"
],
"country": [
"IR"
]
},
"public_key": {
"key_algorithm": "RSA",
"rsa": {
"_encoding": {
"modulus": "DISPLAY_BASE64",
"exponent": "DISPLAY_BASE64"
},
"modulus": "4Z4OB722EAA2WUTmMNSRmEa8N5044wW7TDfkqkzxR6g7EvtB7OiolLPnY7Z38pnL43wiqd18Y9Hb9iIKMlq79UyqdQ523NyXP2Z87pg5dwWz6MxmKK5T/wOdN14iMat6vvXiUoKGdTl4Une+W5/kvotsI5BZcR/QzzfXWnLd1XtzV4qjmZ6zPJZm8Ms1zKCmNojf0X2XwVfTmCD0aC+coLOu513MBUVP/fImgUVwLX/zzLTrnK8XfPRX1DSqOlc7hFzlDmxs5pgXHQUq5YdvAYLUBaoZJ/ZVnJyVOMQ1yTzTE7HAOX/iNEFsOwGd/jCG/M81XxExWjs5+USVqzxkaQ==",
"exponent": "AAEAAQ==",
"length": 256
},
"fingerprint": "94cf14df43be3bf5519d04d6a902a4b92e906507c1fe5ab3dc6288e54ea2dafb"
},
"signature": {
"self_signed": true,
"signature_algorithm": "SHA256-RSA"
}
}
},
"server_key_exchange": {
"ec_params": {
"named_curve": 29
}
},
"session_ticket": {
"length": 176,
"lifetime_hint": 300
},
"_encoding": {
"ja3s": "DISPLAY_HEX"
},
"ja3s": "e35df3e00ca4ef31d42b34bebaa2f86e"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 404 Not Found\r\nDate: <REDACTED>\r\nContent-Length: 0\r\n",
"banner_hashes": [
"sha256:d76dbc1e221f7c00e2f5190965ddb801cb39a366df34050d6832142690cf5e67"
],
"banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a20300d0a",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://88.99.61.208:8443/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 404,
"status_reason": "Not Found",
"headers": {
"Date": [
"<REDACTED>"
],
"_encoding": {
"Date": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8"
},
"Content_Length": [
"0"
]
},
"body_size": 0
},
"supports_http2": false
},
"observed_at": "2023-12-07T16:01:58.148947447Z",
"perspective_id": "PERSPECTIVE_TATA",
"port": 8443,
"service_name": "HTTP",
"source_ip": "167.94.138.35",
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "Europe",
"country": "Germany",
"country_code": "DE",
"city": "Falkenstein",
"postal_code": "08223",
"timezone": "Europe/Berlin",
"province": "Saxony",
"coordinates": {
"latitude": 50.47788,
"longitude": 12.37129
}
},
"location_updated_at": "2023-11-30T18:36:25.997828Z",
"autonomous_system": {
"asn": 24940,
"description": "HETZNER-AS",
"bgp_prefix": "88.99.0.0/16",
"name": "HETZNER-AS",
"country_code": "DE"
},
"autonomous_system_updated_at": "2023-11-30T18:36:25.997842Z",
"operating_system": {
"uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Ubuntu",
"product": "Linux",
"version": "20.04",
"other": {
"family": "Linux"
}
},
"dns": {
"names": [
"rabbit.srv43.ru",
"static.208.61.99.88.clients.your-server.de",
"h2.srv43.ru",
"tests.srv43.ru"
],
"records": {
"static.208.61.99.88.clients.your-server.de": {
"record_type": "A",
"resolved_at": "2023-11-06T17:24:15.101734375Z"
},
"tests.srv43.ru": {
"record_type": "A",
"resolved_at": "2023-11-21T22:31:44.322478130Z"
},
"h2.srv43.ru": {
"record_type": "A",
"resolved_at": "2023-11-28T00:28:17.308345613Z"
},
"rabbit.srv43.ru": {
"record_type": "A",
"resolved_at": "2023-11-23T00:16:28.413503766Z"
}
},
"reverse_dns": {
"names": [
"static.208.61.99.88.clients.your-server.de"
],
"resolved_at": "2023-11-29T11:13:18.019776634Z"
}
},
"last_updated_at": "2023-12-07T16:01:58.776Z",
"labels": [
"remote-access"
]
}