94.124.200.2

As of: Dec 01, 2022 6:50am UTC | Latest
{
  "ip": "94.124.200.2",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 301 Moved Permanently\r\nServer: ddos-guard\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nSet-Cookie: __ddg1_=WdO0qlikfVOtphrDUtSs; Domain=.200.2; HttpOnly; Path=/; Expires=Fri, 01-Dec-2023 06:50:45 GMT\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nLocation: https://94.124.200.2/\r\nReport-To: {\"group\":\"nel\",\"endpoints\":[{\"url\":\"https:\\/\\/nel.hhdev.ru\\/report\\/\"}],\"max_age\":3600}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"nel\",\"max_age\":3600}\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReport-To: {\"group\":\"nel\",\"endpoints\":[{\"url\":\"https:\\/\\/nel.hhdev.ru\\/report\\/\"}],\"max_age\":3600}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"nel\",\"max_age\":3600}\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nTransfer-Encoding: chunked\r\n",
      "banner_hashes": [
        "sha256:768c155762f29c0dd9a032e03424d0f46a1c00d2a15304a67997c81feb0bf24d"
      ],
      "banner_hex": "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",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://94.124.200.2/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 301,
          "status_reason": "Moved Permanently",
          "headers": {
            "Set_Cookie": [
              "__ddg1_=WdO0qlikfVOtphrDUtSs; Domain=.200.2; HttpOnly; Path=/; Expires=Fri, 01-Dec-2023 06:50:45 GMT"
            ],
            "_encoding": {
              "Set_Cookie": "DISPLAY_UTF8",
              "X_Content_Type_Options": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "Keep_Alive": "DISPLAY_UTF8",
              "Vary": "DISPLAY_UTF8",
              "Report_To": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "X_Frame_Options": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Nel": "DISPLAY_UTF8"
            },
            "X_Content_Type_Options": [
              "nosniff"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Location": [
              "https://94.124.200.2/"
            ],
            "Keep_Alive": [
              "timeout=60"
            ],
            "Vary": [
              "Accept-Encoding"
            ],
            "Report_To": [
              "{\"group\":\"nel\",\"endpoints\":[{\"url\":\"https:\\/\\/nel.hhdev.ru\\/report\\/\"}],\"max_age\":3600}",
              "{\"group\":\"nel\",\"endpoints\":[{\"url\":\"https:\\/\\/nel.hhdev.ru\\/report\\/\"}],\"max_age\":3600}"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "X_Frame_Options": [
              "SAMEORIGIN"
            ],
            "Connection": [
              "keep-alive"
            ],
            "Server": [
              "ddos-guard"
            ],
            "Nel": [
              "{\"success_fraction\":0,\"report_to\":\"nel\",\"max_age\":3600}",
              "{\"success_fraction\":0,\"report_to\":\"nel\",\"max_age\":3600}"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>301 Moved Permanently</title>"
          ],
          "body_size": 162,
          "body": "<html>\r\n<head><title>301 Moved Permanently</title></head>\r\n<body>\r\n<center><h1>301 Moved Permanently</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
          "body_hashes": [
            "sha256:9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a",
            "sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff"
          ],
          "body_hash": "sha1:3adb1f02d5b6054de0046e367c1d687b6cdf7aff",
          "html_title": "301 Moved Permanently"
        },
        "supports_http2": false
      },
      "observed_at": "2022-12-01T06:50:44.996087152Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 80,
      "service_name": "HTTP",
      "source_ip": "167.94.146.59",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 302 Moved Temporarily\r\nServer: ddos-guard\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nSet-Cookie: __ddg1_=b6BtzJS20uBYZSLORkzp; Domain=.200.2; HttpOnly; Path=/; Expires=Fri, 01-Dec-2023 06:50:45 GMT\r\nDate:  <REDACTED>\r\nContent-Type: text/html\r\nLocation: https://abt.hh.ru/\r\nReport-To: {\"group\":\"nel\",\"endpoints\":[{\"url\":\"https:\\/\\/nel.hhdev.ru\\/report\\/\"}],\"max_age\":3600}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"nel\",\"max_age\":3600}\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReport-To: {\"group\":\"nel\",\"endpoints\":[{\"url\":\"https:\\/\\/nel.hhdev.ru\\/report\\/\"}],\"max_age\":3600}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"nel\",\"max_age\":3600}\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nTransfer-Encoding: chunked\r\n",
      "banner_hashes": [
        "sha256:b565f74ed418d21133cbf1c7852d1695d935b9d3ec0fb018405d148bf9542fb0"
      ],
      "banner_hex": "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",
      "certificate": "c0e5e374c107df953a89ffe23189e52be7ebaf1df0fc1f9713e68d7b4eef86e4",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://94.124.200.2/",
          "headers": {
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ],
            "_encoding": {
              "User_Agent": "DISPLAY_UTF8",
              "Accept": "DISPLAY_UTF8"
            },
            "Accept": [
              "*/*"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 302,
          "status_reason": "Moved Temporarily",
          "headers": {
            "Report_To": [
              "{\"group\":\"nel\",\"endpoints\":[{\"url\":\"https:\\/\\/nel.hhdev.ru\\/report\\/\"}],\"max_age\":3600}",
              "{\"group\":\"nel\",\"endpoints\":[{\"url\":\"https:\\/\\/nel.hhdev.ru\\/report\\/\"}],\"max_age\":3600}"
            ],
            "_encoding": {
              "Report_To": "DISPLAY_UTF8",
              "Nel": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Keep_Alive": "DISPLAY_UTF8",
              "Vary": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "X_Content_Type_Options": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "X_Frame_Options": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8",
              "Set_Cookie": "DISPLAY_UTF8"
            },
            "Nel": [
              "{\"success_fraction\":0,\"report_to\":\"nel\",\"max_age\":3600}",
              "{\"success_fraction\":0,\"report_to\":\"nel\",\"max_age\":3600}"
            ],
            "Content_Type": [
              "text/html"
            ],
            "Keep_Alive": [
              "timeout=60"
            ],
            "Vary": [
              "Accept-Encoding"
            ],
            "Connection": [
              "keep-alive"
            ],
            "X_Content_Type_Options": [
              "nosniff"
            ],
            "Location": [
              "https://abt.hh.ru/"
            ],
            "X_Frame_Options": [
              "SAMEORIGIN"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Server": [
              "ddos-guard"
            ],
            "Set_Cookie": [
              "__ddg1_=b6BtzJS20uBYZSLORkzp; Domain=.200.2; HttpOnly; Path=/; Expires=Fri, 01-Dec-2023 06:50:45 GMT"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>302 Found</title>"
          ],
          "body_size": 138,
          "body": "<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
          "body_hashes": [
            "sha256:753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0",
            "sha1:f03e18461817f7a6546c8bf8fa8d686d7e30aca0"
          ],
          "body_hash": "sha1:f03e18461817f7a6546c8bf8fa8d686d7e30aca0",
          "html_title": "302 Found"
        },
        "supports_http2": true
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "29d29d00029d29d21c41d41d000000307ee0eb468e9fdb5cfcd698a80a67ef",
        "cipher_and_version_fingerprint": "29d29d00029d29d21c41d41d000000",
        "tls_extensions_sha256": "307ee0eb468e9fdb5cfcd698a80a67ef",
        "observed_at": "2022-10-13T21:02:33.453989333Z"
      },
      "observed_at": "2022-12-01T06:50:45.075390391Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 443,
      "service_name": "HTTP",
      "source_ip": "167.94.146.59",
      "tls": {
        "version_selected": "TLSv1_3",
        "cipher_selected": "TLS_CHACHA20_POLY1305_SHA256",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "c0e5e374c107df953a89ffe23189e52be7ebaf1df0fc1f9713e68d7b4eef86e4",
          "leaf_data": {
            "subject_dn": "C=EU, ST=*, O=ddos-guard",
            "issuer_dn": "C=EU, ST=*, O=ddos-guard",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "9300ba2dc3ead6aa75ae40b328a4c8f84de65635ca4ce5af9d2a9fff76d299f9",
            "fingerprint": "c0e5e374c107df953a89ffe23189e52be7ebaf1df0fc1f9713e68d7b4eef86e4",
            "issuer": {
              "organization": [
                "ddos-guard"
              ],
              "province": [
                "*"
              ],
              "country": [
                "EU"
              ]
            },
            "subject": {
              "organization": [
                "ddos-guard"
              ],
              "province": [
                "*"
              ],
              "country": [
                "EU"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "zKzaWH/6SlOzAEg9angONqEF1Oj6XUY0bD7r0RLD4LFCJz+ijj8tvYMrnAudRV29cPsd81XvdC+ig7TQG6GMwpNMGf6LkBWpIyhzxpJBi5bkrF9XcgivOhR4vn2TPDjtKdL8gnivv1NOcJCPlCkgBHTWQjWmtz2mVT4F63kWySGYLqp6I7W/9Rx8eMDML+o7zFnP0kh6ywOJa4yHWQPwWMvfdXy9uY4EL6Q0Tx3Mh5wGTZ9Q1cQLiGznsKaubY9rzH6u2ib/ZN3ZgtH8JtzD8A8V0s6e3cQlzLvNUrMc7yLPnpc738ZgEM2EkL3aZyGo8CkpAwcH6JOUJKmrOQ7Tew==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "66fccc6725e28c81a8f7072ec87169ddc3da4e5214d09c58f792c5bf79748a06"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "475c9302dc42b2751db9edcac3b74891"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "Russia",
    "country_code": "RU",
    "postal_code": "",
    "timezone": "Europe/Moscow",
    "coordinates": {
      "latitude": 55.7386,
      "longitude": 37.6068
    },
    "registered_country": "Russia",
    "registered_country_code": "RU"
  },
  "location_updated_at": "2022-11-30T04:57:58.874597Z",
  "autonomous_system": {
    "asn": 47724,
    "description": "HEADHUNTER-AS",
    "bgp_prefix": "94.124.200.0/24",
    "name": "HEADHUNTER-AS",
    "country_code": "RU"
  },
  "autonomous_system_updated_at": "2022-11-21T06:34:26.398752Z",
  "dns": {
    "reverse_dns": {
      "names": [
        "94.124.200.2.unused.hh.ru"
      ],
      "resolved_at": "2022-11-22T01:14:47.906303236Z"
    }
  },
  "last_updated_at": "2022-12-01T06:50:45.448Z"
}