ODIN | Hosts Summary | 18.221.164.98

18.221.164.98

80/httpTCPLast Updated At: 23 Sept 2024, 01:55:29 UTC

About Service

Product	nginx
Version	N/A
Extra Info	reverse proxy

Softwares

Vendor: igor_sysoev
Product: nginx
URI: cpe:/a:igor_sysoev:nginx

HTTP

Status Code	400
Title	Login to IEM
Body SHA256	e8919878dad9614637e33d270b6baa667b32f317b6e7d1c49a29fb04d84a5f7a
Component	N/A

Response Headers
connection	keep-alive
content language	en
content length	1852
content security policy	default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; font-src 'self' data:; frame-ancestors 'self';
content type	text/html;charset=utf-8
date	Sat, 21 Sep 2024 01:00:30 GMT
set cookie	KC_STATE_CHECKER=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0YjEzYzRhZi02YzU5LTRiMTAtOWFjNS01ZGIxMDViMWRjNjcifQ.eyJta3kiOiJpbnZhbGlkUGFyYW1ldGVyTWVzc2FnZSIsIm10eSI6IkVSUk9SIiwibXBhciI6WyJyZWRpcmVjdF91cmkiXSwic3RhdCI6NDAwLCJjbGlkIjoiYmJmYzhkMGEtNTA1OS00MjdhLWE2N2UtZDI5MTcwOWJlNDE1Iiwic3QyIjoiN2MxNDlmNzItNWIxYi00YmUwLTk2NjItNmE5YTQyZWE3NmMzIn0._a7Yp_qo_qDCPsMVPA3x0PS8sXWIfmfyXOMwtsB1rZs; Version=1; Expires=Sat, 21-Sep-2024 01:05:30 GMT; Max-Age=300; Path=/auth/realms/customer/; Secure; HttpOnly
strict transport security	max-age=15724800; includeSubDomains
unknown	[{"key":"x_robots_tag","value":["none"]},{"key":"referrer_policy","value":["no-referrer"]}]
x content type options	nosniff
x frame options	SAMEORIGIN
x xss protection	0

//http

{
  "body": "<!DOCTYPE html>\n<html>\n\n<head>\n    <meta charset=\"utf-8\">\n    <meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\n    <meta name=\"robots\" content=\"noindex, nofollow\">\n\n            <meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"/>\n    <title>Login to IEM</title>\n    <link rel=\"icon\" href=\"/auth/resources/pzjvq/login/custom/img/favicon.ico\" />\n            <link href=\"/auth/resources/pzjvq/login/custom/css/styles.css\" rel=\"stylesheet\" />\n            <link href=\"/auth/resources/pzjvq/login/custom/css/ix-icons.css\" rel=\"stylesheet\" />\n            <script src=\"/auth/resources/pzjvq/login/custom/js/show-hide-password.js\" type=\"text/javascript\"></script>\n    <script type=\"module\" src=\"/osbar/iema-os-bar/iema-os-bar.esm.js\"></script>\n    <link rel=\"stylesheet\" href=\"/osbar/iema-os-bar/iema-os-bar.css\"/>\n</head>\n\n<body class=\"difads theme-brand-light\">\n    <iema-os-bar app-info=\"/auth/resources/pzjvq/login/custom/assets/app-info.json\" language=\"en\"></iema-os-bar>\n    <div class=\"wrapper\">        \n        <div class=\"layout\">\n            <div class=\"layout__left\">\n                <div class=\"layout__leftContainer\">\n                    <header>\n                                <p class=\"font--xxlarge font--bold\" id=\"kc-page-title\">        We are sorry...\n</p>\n                    </header>\n                    <div id=\"kc-content\">\n                        <div id=\"kc-content-wrapper\">\n\n        <div class=\"systemmessage systemmessage--error\">\n            <h1 class=\"systemmessage__title\"></h1>\n            <div class=\"systemmessage__content\"><p>Invalid parameter: redirect_uri</p></div>\n        </div>\n\n\n\n                        </div>\n                    </div>\n                </div>\n            </div>\n\n            <div class=\"layout__right\">\n            </div>\n        </div>\n    </div>\n</body>\n</html>\n",
  "body_murmur": 1295514824,
  "body_sha256": "e8919878dad9614637e33d270b6baa667b32f317b6e7d1c49a29fb04d84a5f7a",
  "content_length": 1852,
  "headers": {
    "connection": [
      "keep-alive"
    ],
    "content_language": [
      "en"
    ],
    "content_length": [
      "1852"
    ],
    "content_security_policy": [
      "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; font-src 'self' data:; frame-ancestors 'self';"
    ],
    "content_type": [
      "text/html;charset=utf-8"
    ],
    "date": [
      "Sat, 21 Sep 2024 01:00:30 GMT"
    ],
    "set_cookie": [
      "KC_STATE_CHECKER=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0YjEzYzRhZi02YzU5LTRiMTAtOWFjNS01ZGIxMDViMWRjNjcifQ.eyJta3kiOiJpbnZhbGlkUGFyYW1ldGVyTWVzc2FnZSIsIm10eSI6IkVSUk9SIiwibXBhciI6WyJyZWRpcmVjdF91cmkiXSwic3RhdCI6NDAwLCJjbGlkIjoiYmJmYzhkMGEtNTA1OS00MjdhLWE2N2UtZDI5MTcwOWJlNDE1Iiwic3QyIjoiN2MxNDlmNzItNWIxYi00YmUwLTk2NjItNmE5YTQyZWE3NmMzIn0._a7Yp_qo_qDCPsMVPA3x0PS8sXWIfmfyXOMwtsB1rZs; Version=1; Expires=Sat, 21-Sep-2024 01:05:30 GMT; Max-Age=300; Path=/auth/realms/customer/; Secure; HttpOnly"
    ],
    "strict_transport_security": [
      "max-age=15724800; includeSubDomains"
    ],
    "unknown": [
      {
        "key": "x_robots_tag",
        "value": [
          "none"
        ]
      },
      {
        "key": "referrer_policy",
        "value": [
          "no-referrer"
        ]
      }
    ],
    "x_content_type_options": [
      "nosniff"
    ],
    "x_frame_options": [
      "SAMEORIGIN"
    ],
    "x_xss_protection": [
      "0"
    ]
  },
  "protocol": "HTTP/1.1",
  "redirects": [
    {
      "body": "<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n</body>\r\n</html>\r\n",
      "body_murmur": -9616316,
      "body_sha256": "075f0fd7eeb4bfec31816d61be72b064d4899853b224bd5f380041d7dd0b1d19",
      "content_length": 110,
      "headers": {
        "cache_control": [
          "no-cache, no-store, max-age=0"
        ],
        "connection": [
          "keep-alive"
        ],
        "content_length": [
          "110"
        ],
        "content_type": [
          "text/html"
        ],
        "date": [
          "Sat, 21 Sep 2024 01:00:30 GMT"
        ],
        "location": [
          "https://iem.winterwindstech.com/auth/realms/customer/protocol/openid-connect/auth?scope=openid&redirect_uri=http%3A%2F%2F18.221.164.98%2Fcb&client_id=ie-management&nonce=50175341d255da34c32036362760629d&state=cf77d63ff1cf4530d5e84f4c83e23669&response_type=code"
        ],
        "set_cookie": [
          "session=EvH-K2OIBvBz7vNLZUXsLA|1726884030|RCqebrgSZZczemgAXf0oLfn3oj7MLDVomvH_DMIq3uBcoraDMJf6AzaXnU8Ifp_TKJ6ZvWBt7ep5GFiwPaqgGwVPet78yCQuuvITJro1IY6_uYcDoGX-sEphiQtkL1_L1FpFJuZ3SXd-jnkNJ1BBc-TJj8QdSsfbHQrETxlSydydZsS1HpgMDEfVv-WnXvyC|5i8EyQjjLDq1szlaBnWzVVkAy6g; Path=/; SameSite=Lax; Secure; HttpOnly"
        ],
        "strict_transport_security": [
          "max-age=63072000; includeSubDomains; preload"
        ],
        "unknown": [
          {
            "key": "referrer_policy",
            "value": [
              "strict-origin"
            ]
          }
        ],
        "x_content_type_options": [
          "nosniff"
        ],
        "x_frame_options": [
          "SAMEORIGIN"
        ],
        "x_xss_protection": [
          "0"
        ]
      },
      "location": "https://iem.winterwindstech.com/auth/realms/customer/protocol/openid-connect/auth?scope=openid&redirect_uri=http%3A%2F%2F18.221.164.98%2Fcb&client_id=ie-management&nonce=50175341d255da34c32036362760629d&state=cf77d63ff1cf4530d5e84f4c83e23669&response_type=code",
      "protocol": "HTTP/1.1",
      "status_code": 302,
      "status_line": "302 Moved Temporarily"
    }
  ],
  "request": {
    "headers": {
      "accept": [
        "*/*"
      ],
      "referer": [
        "http://18.221.164.98"
      ],
      "user_agent": [
        "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)"
      ]
    },
    "method": "GET",
    "url": {
      "host": "iem.winterwindstech.com",
      "path": "/auth/realms/customer/protocol/openid-connect/auth",
      "raw_query": "scope=openid&redirect_uri=http%3A%2F%2F18.221.164.98%2Fcb&client_id=ie-management&nonce=50175341d255da34c32036362760629d&state=cf77d63ff1cf4530d5e84f4c83e23669&response_type=code",
      "scheme": "https"
    }
  },
  "status_code": 400,
  "title": "Login to IEM"
}

443/httpTCPLast Updated At: 11 Nov 2024, 09:07:25 UTC

About Service

Product	AWS Elastic Load Balancing
Version	N/A
Extra Info	N/A

HTTP

Status Code	403
Title	403 Forbidden
Body SHA256	58bf2215b395dcac74c009aa98701854e43cbe54a1cd3a95fee6a647ca9910d4
Component	Amazon ELBAmazon Web Services

Response Headers
connection	keep-alive
content length	118
content type	text/html
date	Mon, 11 Nov 2024 09:07:22 GMT
server	awselb/2.0

TLS

Serial Number: 8208091157272655843797203888017863848
Validity From: 27 May 2024, 00:00:00
Validity To: 25 Jun 2025, 23:59:59

Subject AN: *.prd.bbwcu.westerracu.com
Subject CN: *.prd.bbwcu.westerracu.com
Subject Org: N/A

Issuer CN: Amazon RSA 2048 M02
Issuer Org: Amazon

Fingerprint
MD5	AD55AC8F198E03CE2E0BEC2682DFBAE9
SHA1	67AA4EDDD182ABF0155ACCA7D055DFD8278DBAFA
SHA256	C5C5289D9AEAD25D5D3923D76064539B90DAE945EBB50837CF11155AFD956AEF
JARM	29d29d00029d29d00029d29d29d29da8f16e8f0a21d89b06fef5080cbd1b2a

//http

{
  "body": "<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body>\r\n<center><h1>403 Forbidden</h1></center>\r\n</body>\r\n</html>\r\n",
  "body_murmur": -1394666602,
  "body_sha256": "58bf2215b395dcac74c009aa98701854e43cbe54a1cd3a95fee6a647ca9910d4",
  "component": [
    "Amazon ELB",
    "Amazon Web Services"
  ],
  "content_length": 118,
  "headers": {
    "connection": [
      "keep-alive"
    ],
    "content_length": [
      "118"
    ],
    "content_type": [
      "text/html"
    ],
    "date": [
      "Mon, 11 Nov 2024 09:07:22 GMT"
    ],
    "server": [
      "awselb/2.0"
    ]
  },
  "protocol": "HTTP/1.1",
  "request": {
    "headers": {
      "accept": [
        "*/*"
      ],
      "user_agent": [
        "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)"
      ]
    },
    "method": "GET",
    "url": {
      "host": "18.221.164.98",
      "path": "",
      "scheme": "https"
    }
  },
  "status_code": 403,
  "title": "403 Forbidden"
}

Network	18.0.0.0/8
Organization	If your whois search has returned this message, then you have
Desc	This network range is not allocated to APNIC. ,,If your whois search has returned this message, then you have ,searched the APNIC whois database for an address that is ,allocated by another Regional Internet Registry (RIR). ,,Please search the other RIRs at whois.arin.net or whois.ripe.net ,for more information about that range.
Updated At	17 Oct 2024, 10:39:56 UTC

Network	18.0.0.0/8
Organization	If your whois search has returned this message, then you have
Desc	This network range is not allocated to APNIC. ,,If your whois search has returned this message, then you have ,searched the APNIC whois database for an address that is ,allocated by another Regional Internet Registry (RIR). ,,Please search the other RIRs at whois.arin.net or whois.ripe.net ,for more information about that range.
Updated At	17 Oct 2024, 10:39:56 UTC

80/httpTCPLast Updated At: 23 Sept 2024, 01:55:29 UTC

Banners (1)

//http

443/httpTCPLast Updated At: 11 Nov 2024, 09:07:25 UTC

Banners (1)

//http

Network	N/A
Postal Code	N/A
City	N/A
Country	N/A
Continent	N/A
Locale Code	N/A
Geo Point	N/A
Updated At	01 Jan 1, 00:00:00 UTC