Cyber Defense Search Engine

IP
211.213.153.40

Network
211.213.128.0/19

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

ASN
AS9318

Organization
SK Broadband Co Ltd

Protocol
unknown

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
acb59959be8f5c0a38e4672053b66e2d

\x00\x00\xad\xc3\x01\x00\x00\x00x\x00\x00\x00\x04\x00\x04\x00\x00\x00\x05\x00\x1a\x00\x00\x00s\x00\x00\x00S4EA22AC00008619\x00\x00\x00\x00C\x00H\x001\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\x00H\x002\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\x00H\x003\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\x00H\x004\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00NEND

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:39.000Z",
   "app" : {
      "length" : 564
   },
   "asn" : "AS9318",
   "city" : "Sejong",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x00\\x00\\xad\\xc3\\x01\\x00\\x00\\x00x\\x00\\x00\\x00\\x04\\x00\\x04\\x00\\x00\\x00\\x05\\x00\\x1a\\x00\\x00\\x00s\\x00\\x00\\x00S4EA22AC00008619\\x00\\x00\\x00\\x00C\\x00H\\x001\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00C\\x00H\\x002\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00C\\x00H\\x003\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00C\\x00H\\x004\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00NEND",
   "datamd5" : "acb59959be8f5c0a38e4672053b66e2d",
   "datammh3" : -2007797015,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS9318",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "nic.or.kr",
         "skbroadband.com"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "broadNnet",
      "organization" : "SK Broadband Co Ltd",
      "subnet" : "211.213.128.0/19"
   },
   "ip" : "211.213.153.40",
   "ipv6" : "false",
   "latitude" : "36.5916",
   "location" : "36.5916,127.2916",
   "longitude" : "127.2916",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "SK Broadband Co Ltd",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "protocol" : "unknown",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "211.213.128.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
218.144.178.76

Network
218.144.160.0/19

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://218.144.178.76:3000/ 200

HTTP Title
main page

ASN
AS4766

Organization
Korea Telecom

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
590d3f1f5048082925f85226da9d33c2

HTTP Header MD5
a5668677bad84c83cbb2cf70fc5712b4

HTTP Body MD5
425064ac3f9b0beb2f58d1e3fe67fb73

HTTP/1.1 200 OK
Content-Type: text/html
ETag: "1782982565"
Last-Modified: Thu, 27 Jul 2023 23:08:03 GMT
Content-Length: 704
Accept-Ranges: bytes
Connection: close
Date: Thu, 07 Nov 2024 05:44:28 GMT
Server: fwebserver

<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso8859-1">
<title>main page</title>
<script language="javascript">

function redirect() {
	location.href = "/cgi-bin/login.cgi";
}

function redirect_mobile_check() {

	var filter = "win16|win32|win64|mac|macintel|linux x86_64";
	var vWebType = "PC";

	if (navigator.platform)
	{
		if (filter.indexOf(navigator.platform.toLowerCase()) < 0)
			vWebType = "MOBILE";
		else
			vWebType = "PC";
	}

	if(vWebType ==  "PC")	
		location.href = "/cgi-bin/login.cgi";
	else
		location.href = "/cgi-bin_mobile/login.cgi";
}

</script>
</head>

<body onload="redirect_mobile_check()">
</body>

</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:30.000Z",
   "app" : {
      "extract" : {
         "file" : [
            "login.cgi"
         ]
      },
      "http" : {
         "bodymd5" : "425064ac3f9b0beb2f58d1e3fe67fb73",
         "bodymmh3" : 1045994363,
         "header" : [
            {
               "value" : 1782982565,
               "name" : "ETag"
            },
            {
               "name" : "Last-Modified",
               "value" : "Thu, 27 Jul 2023 23:08:03 GMT"
            }
         ],
         "headermd5" : "a5668677bad84c83cbb2cf70fc5712b4",
         "headermmh3" : -1398549300,
         "title" : "main page"
      },
      "length" : 933
   },
   "asn" : "AS4766",
   "city" : "Yongsan-gu",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nETag: \"1782982565\"\r\nLast-Modified: Thu, 27 Jul 2023 23:08:03 GMT\r\nContent-Length: 704\r\nAccept-Ranges: bytes\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:44:28 GMT\r\nServer: fwebserver\r\n\r\n<html>\r\n<head>\r\n<meta http-equiv=\"content-type\" content=\"text/html; charset=iso8859-1\">\r\n<title>main page</title>\r\n<script language=\"javascript\">\r\n\r\nfunction redirect() {\r\n\tlocation.href = \"/cgi-bin/login.cgi\";\r\n}\r\n\r\nfunction redirect_mobile_check() {\r\n\r\n\tvar filter = \"win16|win32|win64|mac|macintel|linux x86_64\";\r\n\tvar vWebType = \"PC\";\r\n\r\n\tif (navigator.platform)\r\n\t{\r\n\t\tif (filter.indexOf(navigator.platform.toLowerCase()) < 0)\r\n\t\t\tvWebType = \"MOBILE\";\r\n\t\telse\r\n\t\t\tvWebType = \"PC\";\r\n\t}\r\n\r\n\tif(vWebType ==  \"PC\")\t\r\n\t\tlocation.href = \"/cgi-bin/login.cgi\";\r\n\telse\r\n\t\tlocation.href = \"/cgi-bin_mobile/login.cgi\";\r\n}\r\n\r\n</script>\r\n</head>\r\n\r\n<body onload=\"redirect_mobile_check()\">\r\n</body>\r\n\r\n</html>\r\n\r\n",
   "datamd5" : "590d3f1f5048082925f85226da9d33c2",
   "datammh3" : -473773929,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "218.144.160.0/19"
   },
   "ip" : "218.144.178.76",
   "ipv6" : "false",
   "latitude" : "37.5332",
   "location" : "37.5332,126.9692",
   "longitude" : "126.9692",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "218.144.160.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
20.164.219.215

Network
20.160.0.0/12

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://20.164.219.215:3000/ 302

ASN
AS8075

Organization
MICROSOFT-CORP-MSN-AS-BLOCK

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
9009e1fd641d7b77d9fae477756ace7a

HTTP Header MD5
f39a39a758ebb84cd09a6890355a4932

HTTP Body MD5
cb0b177a86bb404bfe3fb7697196e9b7

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: /login
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Thu, 07 Nov 2024 05:44:30 GMT
Content-Length: 29
Connection: close

<a href="/login">Found</a>.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:30.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "cb0b177a86bb404bfe3fb7697196e9b7",
         "bodymmh3" : 86366363,
         "headermd5" : "f39a39a758ebb84cd09a6890355a4932",
         "headermmh3" : -1873292212
      },
      "length" : 299
   },
   "asn" : "AS8075",
   "city" : "Johannesburg",
   "country" : "ZA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 302 Found\r\nCache-Control: no-store\r\nContent-Type: text/html; charset=utf-8\r\nLocation: /login\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: deny\r\nX-Xss-Protection: 1; mode=block\r\nDate: Thu, 07 Nov 2024 05:44:30 GMT\r\nContent-Length: 29\r\nConnection: close\r\n\r\n<a href=\"/login\">Found</a>.\n\n",
   "datamd5" : "9009e1fd641d7b77d9fae477756ace7a",
   "datammh3" : -711811410,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS8075",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "microsoft.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "MSFT",
      "organization" : "Microsoft Corporation",
      "subnet" : "20.164.0.0/16"
   },
   "ip" : "20.164.219.215",
   "ipv6" : "false",
   "latitude" : "-26.2309",
   "location" : "-26.2309,28.0583",
   "longitude" : "28.0583",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Found",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 302,
   "subnet" : "20.160.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
118.41.66.93

Network
118.40.0.0/14

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://118.41.66.93:3000/ 200

HTTP Title
main page

ASN
AS4766

Organization
Korea Telecom

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
590d3f1f5048082925f85226da9d33c2

HTTP Header MD5
a5668677bad84c83cbb2cf70fc5712b4

HTTP Body MD5
425064ac3f9b0beb2f58d1e3fe67fb73

HTTP/1.1 200 OK
Content-Type: text/html
ETag: "2051156057"
Last-Modified: Tue, 04 Oct 2022 09:43:49 GMT
Content-Length: 704
Accept-Ranges: bytes
Connection: close
Date: Thu, 07 Nov 2024 05:44:27 GMT
Server: fwebserver

<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso8859-1">
<title>main page</title>
<script language="javascript">

function redirect() {
	location.href = "/cgi-bin/login.cgi";
}

function redirect_mobile_check() {

	var filter = "win16|win32|win64|mac|macintel|linux x86_64";
	var vWebType = "PC";

	if (navigator.platform)
	{
		if (filter.indexOf(navigator.platform.toLowerCase()) < 0)
			vWebType = "MOBILE";
		else
			vWebType = "PC";
	}

	if(vWebType ==  "PC")	
		location.href = "/cgi-bin/login.cgi";
	else
		location.href = "/cgi-bin_mobile/login.cgi";
}

</script>
</head>

<body onload="redirect_mobile_check()">
</body>

</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:29.000Z",
   "app" : {
      "extract" : {
         "file" : [
            "login.cgi"
         ]
      },
      "http" : {
         "bodymd5" : "425064ac3f9b0beb2f58d1e3fe67fb73",
         "bodymmh3" : 1045994363,
         "header" : [
            {
               "value" : 2051156057,
               "name" : "ETag"
            },
            {
               "name" : "Last-Modified",
               "value" : "Tue, 04 Oct 2022 09:43:49 GMT"
            }
         ],
         "headermd5" : "a5668677bad84c83cbb2cf70fc5712b4",
         "headermmh3" : -1278953153,
         "title" : "main page"
      },
      "length" : 933
   },
   "asn" : "AS4766",
   "city" : "Gyeongju",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nETag: \"2051156057\"\r\nLast-Modified: Tue, 04 Oct 2022 09:43:49 GMT\r\nContent-Length: 704\r\nAccept-Ranges: bytes\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:44:27 GMT\r\nServer: fwebserver\r\n\r\n<html>\r\n<head>\r\n<meta http-equiv=\"content-type\" content=\"text/html; charset=iso8859-1\">\r\n<title>main page</title>\r\n<script language=\"javascript\">\r\n\r\nfunction redirect() {\r\n\tlocation.href = \"/cgi-bin/login.cgi\";\r\n}\r\n\r\nfunction redirect_mobile_check() {\r\n\r\n\tvar filter = \"win16|win32|win64|mac|macintel|linux x86_64\";\r\n\tvar vWebType = \"PC\";\r\n\r\n\tif (navigator.platform)\r\n\t{\r\n\t\tif (filter.indexOf(navigator.platform.toLowerCase()) < 0)\r\n\t\t\tvWebType = \"MOBILE\";\r\n\t\telse\r\n\t\t\tvWebType = \"PC\";\r\n\t}\r\n\r\n\tif(vWebType ==  \"PC\")\t\r\n\t\tlocation.href = \"/cgi-bin/login.cgi\";\r\n\telse\r\n\t\tlocation.href = \"/cgi-bin_mobile/login.cgi\";\r\n}\r\n\r\n</script>\r\n</head>\r\n\r\n<body onload=\"redirect_mobile_check()\">\r\n</body>\r\n\r\n</html>\r\n\r\n",
   "datamd5" : "590d3f1f5048082925f85226da9d33c2",
   "datammh3" : -473773929,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "118.40.0.0/13"
   },
   "ip" : "118.41.66.93",
   "ipv6" : "false",
   "latitude" : "35.8413",
   "location" : "35.8413,129.2111",
   "longitude" : "129.2111",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "118.40.0.0/14",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
218.157.251.53

Network
218.157.240.0/20

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://218.157.251.53:3000/ 200

HTTP Title
main page

ASN
AS4766

Organization
Korea Telecom

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
590d3f1f5048082925f85226da9d33c2

HTTP Header MD5
a5668677bad84c83cbb2cf70fc5712b4

HTTP Body MD5
425064ac3f9b0beb2f58d1e3fe67fb73

HTTP/1.1 200 OK
Content-Type: text/html
ETag: "2051229101"
Last-Modified: Mon, 12 Jun 2023 01:18:51 GMT
Content-Length: 704
Accept-Ranges: bytes
Connection: close
Date: Thu, 07 Nov 2024 05:44:27 GMT
Server: fwebserver

<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso8859-1">
<title>main page</title>
<script language="javascript">

function redirect() {
	location.href = "/cgi-bin/login.cgi";
}

function redirect_mobile_check() {

	var filter = "win16|win32|win64|mac|macintel|linux x86_64";
	var vWebType = "PC";

	if (navigator.platform)
	{
		if (filter.indexOf(navigator.platform.toLowerCase()) < 0)
			vWebType = "MOBILE";
		else
			vWebType = "PC";
	}

	if(vWebType ==  "PC")	
		location.href = "/cgi-bin/login.cgi";
	else
		location.href = "/cgi-bin_mobile/login.cgi";
}

</script>
</head>

<body onload="redirect_mobile_check()">
</body>

</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:29.000Z",
   "app" : {
      "extract" : {
         "file" : [
            "login.cgi"
         ]
      },
      "http" : {
         "bodymd5" : "425064ac3f9b0beb2f58d1e3fe67fb73",
         "bodymmh3" : 1045994363,
         "header" : [
            {
               "value" : 2051229101,
               "name" : "ETag"
            },
            {
               "name" : "Last-Modified",
               "value" : "Mon, 12 Jun 2023 01:18:51 GMT"
            }
         ],
         "headermd5" : "a5668677bad84c83cbb2cf70fc5712b4",
         "headermmh3" : -1459232545,
         "title" : "main page"
      },
      "length" : 933
   },
   "asn" : "AS4766",
   "city" : "Daegu",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nETag: \"2051229101\"\r\nLast-Modified: Mon, 12 Jun 2023 01:18:51 GMT\r\nContent-Length: 704\r\nAccept-Ranges: bytes\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:44:27 GMT\r\nServer: fwebserver\r\n\r\n<html>\r\n<head>\r\n<meta http-equiv=\"content-type\" content=\"text/html; charset=iso8859-1\">\r\n<title>main page</title>\r\n<script language=\"javascript\">\r\n\r\nfunction redirect() {\r\n\tlocation.href = \"/cgi-bin/login.cgi\";\r\n}\r\n\r\nfunction redirect_mobile_check() {\r\n\r\n\tvar filter = \"win16|win32|win64|mac|macintel|linux x86_64\";\r\n\tvar vWebType = \"PC\";\r\n\r\n\tif (navigator.platform)\r\n\t{\r\n\t\tif (filter.indexOf(navigator.platform.toLowerCase()) < 0)\r\n\t\t\tvWebType = \"MOBILE\";\r\n\t\telse\r\n\t\t\tvWebType = \"PC\";\r\n\t}\r\n\r\n\tif(vWebType ==  \"PC\")\t\r\n\t\tlocation.href = \"/cgi-bin/login.cgi\";\r\n\telse\r\n\t\tlocation.href = \"/cgi-bin_mobile/login.cgi\";\r\n}\r\n\r\n</script>\r\n</head>\r\n\r\n<body onload=\"redirect_mobile_check()\">\r\n</body>\r\n\r\n</html>\r\n\r\n",
   "datamd5" : "590d3f1f5048082925f85226da9d33c2",
   "datammh3" : -473773929,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "218.157.240.0/20"
   },
   "ip" : "218.157.251.53",
   "ipv6" : "false",
   "latitude" : "35.8723",
   "location" : "35.8723,128.5924",
   "longitude" : "128.5924",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "218.157.240.0/20",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
45.223.59.29

Network
45.223.48.0/20

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://45.223.59.29:3000/ 503

ASN
AS19551

Organization
INCAPSULA

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
4bc02471b2230e4cfb64e076b4d14201

HTTP Header MD5
7dbd653036d685935bf6b07dc2cf1aea

HTTP Body MD5
2b1639c3246658d00ab4ebbc8df709fe

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 688
X-Iinfo: 7-45159188-0 0NNN RT(1730958269159 31) q(0 -1 -1 -1) r(0 -1)

<html style="height:100%"><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta name="viewport" content="initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"></head><body style="margin:0px;height:100%"><iframe id="main-iframe" src="/_Incapsula_Resource?CWUDNSAI=5&xinfo=7-45159188-0%200NNN%20RT%281730958269159%2031%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-223277993851159047&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET" frameborder=0 width="100%" height="100%" marginheight="0px" marginwidth="0px">Request unsuccessful. Incapsula incident ID: 0-223277993851159047</iframe></body></html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:29.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "2b1639c3246658d00ab4ebbc8df709fe",
         "bodymmh3" : 1101207158,
         "headermd5" : "7dbd653036d685935bf6b07dc2cf1aea",
         "headermmh3" : 1569941828
      },
      "length" : 895
   },
   "asn" : "AS19551",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 503 Service Unavailable\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store\r\nConnection: close\r\nContent-Length: 688\r\nX-Iinfo: 7-45159188-0 0NNN RT(1730958269159 31) q(0 -1 -1 -1) r(0 -1)\r\n\r\n<html style=\"height:100%\"><head><META NAME=\"ROBOTS\" CONTENT=\"NOINDEX, NOFOLLOW\"><meta name=\"format-detection\" content=\"telephone=no\"><meta name=\"viewport\" content=\"initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge,chrome=1\"></head><body style=\"margin:0px;height:100%\"><iframe id=\"main-iframe\" src=\"/_Incapsula_Resource?CWUDNSAI=5&xinfo=7-45159188-0%200NNN%20RT%281730958269159%2031%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-223277993851159047&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET\" frameborder=0 width=\"100%\" height=\"100%\" marginheight=\"0px\" marginwidth=\"0px\">Request unsuccessful. Incapsula incident ID: 0-223277993851159047</iframe></body></html>",
   "datamd5" : "4bc02471b2230e4cfb64e076b4d14201",
   "datammh3" : 1586998679,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS19551",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "imperva.com",
         "incapsula.com",
         "thalesgroup.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "INCAPSULA-NET",
      "organization" : "Incapsula Inc",
      "subnet" : "45.223.56.0/21"
   },
   "ip" : "45.223.59.29",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "INCAPSULA",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Service Unavailable",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 503,
   "subnet" : "45.223.48.0/20",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
149.50.119.134

Network
149.50.112.0/21

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://149.50.119.134:3000/ 200

ASN
AS201814

Organization
MEVSPACE sp. z o.o.

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
Gunicorn Gunicorn

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
89893e7c37850d29c5bc9bbc9767bc23

HTTP Header MD5
4f448c88bb4ba038c142089bb7b9b706

HTTP Body MD5
04ad6edec8c105b6fd25b380a09ceccf

HTTP/1.1 200 OK
Server: gunicorn
Date: Thu, 07 Nov 2024 05:44:29 GMT
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 20

Hello world service!

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:29.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "04ad6edec8c105b6fd25b380a09ceccf",
         "bodymmh3" : 1280458565,
         "headermd5" : "4f448c88bb4ba038c142089bb7b9b706",
         "headermmh3" : 552352425
      },
      "length" : 173
   },
   "asn" : "AS201814",
   "city" : "Warsaw",
   "country" : "PL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: gunicorn\r\nDate: Thu, 07 Nov 2024 05:44:29 GMT\r\nConnection: close\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 20\r\n\r\nHello world service!",
   "datamd5" : "89893e7c37850d29c5bc9bbc9767bc23",
   "datammh3" : -1054188742,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS201814",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "PL",
      "countryname" : "Poland",
      "domain" : [
         "cogentco.com",
         "mevspace.com"
      ],
      "isineu" : "true",
      "latitude" : "51.919438",
      "location" : "51.919438,19.145136",
      "longitude" : "19.145136",
      "netname" : "MEVERYWHERE-CGNT-NET-1",
      "organization" : "MEVSPACE",
      "subnet" : "149.50.112.0/21"
   },
   "ip" : "149.50.119.134",
   "ipv6" : "false",
   "latitude" : "52.2296",
   "location" : "52.2296,21.0067",
   "longitude" : "21.0067",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "MEVSPACE sp. z o.o.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "product" : "Gunicorn",
   "productvendor" : "Gunicorn",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "149.50.112.0/21",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
109.248.14.239

Network
109.248.12.0/22

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://109.248.14.239:3000/ 407

HTTP Title
407 Proxy Authentication Required

ASN
AS35048

Organization
Biterika Group LLC

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
bbdd0ef18ac1bb935546f899a9c15b82

HTTP Header MD5
7b6af4d669f1735012ccbd9b5f402335

HTTP Body MD5
d0733a01623260995e3203769289c13f

HTTP/1.0 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm="proxy"
Connection: close
Content-type: text/html; charset=utf-8

<html><head><title>407 Proxy Authentication Required</title></head>
<body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:29.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d0733a01623260995e3203769289c13f",
         "bodymmh3" : -533483165,
         "headermd5" : "7b6af4d669f1735012ccbd9b5f402335",
         "headermmh3" : 1023953321,
         "realm" : "proxy",
         "title" : "407 Proxy Authentication Required"
      },
      "length" : 401
   },
   "asn" : "AS35048",
   "city" : "Moscow",
   "country" : "RU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"proxy\"\r\nConnection: close\r\nContent-type: text/html; charset=utf-8\r\n\r\n<html><head><title>407 Proxy Authentication Required</title></head>\r\n<body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>\r\n",
   "datamd5" : "bbdd0ef18ac1bb935546f899a9c15b82",
   "datammh3" : 709695866,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS35048",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "RU",
      "countryname" : "Russia",
      "domain" : [
         "biterika.ru"
      ],
      "isineu" : "false",
      "latitude" : "61.52401",
      "location" : "61.52401,105.318756",
      "longitude" : "105.318756",
      "netname" : "BITERIKA-NET",
      "organization" : "Biterika Group LLC",
      "subnet" : "109.248.12.0/22"
   },
   "ip" : "109.248.14.239",
   "ipv6" : "false",
   "latitude" : "55.7483",
   "location" : "55.7483,37.6171",
   "longitude" : "37.6171",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Biterika Group LLC",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "109.248.12.0/22",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
125.135.68.241

Network
125.134.0.0/15

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://125.135.68.241:3000/ 200

HTTP Title
main page

ASN
AS4766

Organization
Korea Telecom

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
WebServer WebServer

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
64b1eedf7948473edeebe55d6a285aca

HTTP Header MD5
979761cd6f49e9ef5f8bb5795302f113

HTTP Body MD5
60b91305d545bb4d77592787df00080d

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
ETag: "2859145071"
Last-Modified: Thu, 01 Jan 1970 00:00:34 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server: WebServer
Content-Length: 289
Connection: close
Date: Thu, 07 Nov 2024 05:44:28 GMT

<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso8859-1">
<title>main page</title>
<script language="javascript">

function redirect() {
	location.href = "/cgi-bin/login.cgi";
}

</script>
</head>

<body onload="redirect()">
</body>

</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:28.000Z",
   "app" : {
      "extract" : {
         "file" : [
            "login.cgi"
         ]
      },
      "http" : {
         "bodymd5" : "60b91305d545bb4d77592787df00080d",
         "bodymmh3" : -1159873339,
         "header" : [
            {
               "value" : 2859145071,
               "name" : "ETag"
            },
            {
               "name" : "Last-Modified",
               "value" : "Thu, 01 Jan 1970 00:00:34 GMT"
            }
         ],
         "headermd5" : "979761cd6f49e9ef5f8bb5795302f113",
         "headermmh3" : 1319296284,
         "title" : "main page"
      },
      "length" : 614
   },
   "asn" : "AS4766",
   "city" : "Nam-gu",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nAccept-Ranges: bytes\r\nETag: \"2859145071\"\r\nLast-Modified: Thu, 01 Jan 1970 00:00:34 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nServer: WebServer\r\nContent-Length: 289\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:44:28 GMT\r\n\r\n<html>\r\n<head>\r\n<meta http-equiv=\"content-type\" content=\"text/html; charset=iso8859-1\">\r\n<title>main page</title>\r\n<script language=\"javascript\">\r\n\r\nfunction redirect() {\r\n\tlocation.href = \"/cgi-bin/login.cgi\";\r\n}\r\n\r\n</script>\r\n</head>\r\n\r\n<body onload=\"redirect()\">\r\n</body>\r\n\r\n</html>\r\n\r\n",
   "datamd5" : "64b1eedf7948473edeebe55d6a285aca",
   "datammh3" : -215358228,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "125.134.0.0/15"
   },
   "ip" : "125.135.68.241",
   "ipv6" : "false",
   "latitude" : "35.5450",
   "location" : "35.5450,129.2985",
   "longitude" : "129.2985",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "product" : "WebServer",
   "productvendor" : "WebServer",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "125.134.0.0/15",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
14.45.251.244

Network
14.45.0.0/16

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://14.45.251.244:3000/ 200

HTTP Title
main page

ASN
AS4766

Organization
Korea Telecom

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
WebServer WebServer

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
f4e3eae6eeff8c98fe1c4fcf0f5e564c

HTTP Header MD5
efe9f7fddf94f0e00c2b15fb2298168c

HTTP Body MD5
60b91305d545bb4d77592787df00080d

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
ETag: "3230304147"
Last-Modified: Thu, 02 Feb 2023 04:13:13 GMT
Content-Length: 289
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server: WebServer
Connection: close
Date: Thu, 07 Nov 2024 05:44:27 GMT

<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso8859-1">
<title>main page</title>
<script language="javascript">

function redirect() {
	location.href = "/cgi-bin/login.cgi";
}

</script>
</head>

<body onload="redirect()">
</body>

</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:44:28.000Z",
   "app" : {
      "extract" : {
         "file" : [
            "login.cgi"
         ]
      },
      "http" : {
         "bodymd5" : "60b91305d545bb4d77592787df00080d",
         "bodymmh3" : -1159873339,
         "header" : [
            {
               "name" : "ETag",
               "value" : 3230304147
            },
            {
               "name" : "Last-Modified",
               "value" : "Thu, 02 Feb 2023 04:13:13 GMT"
            }
         ],
         "headermd5" : "efe9f7fddf94f0e00c2b15fb2298168c",
         "headermmh3" : 21010183,
         "title" : "main page"
      },
      "length" : 614
   },
   "asn" : "AS4766",
   "city" : "Gyeongsan-si",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nAccept-Ranges: bytes\r\nETag: \"3230304147\"\r\nLast-Modified: Thu, 02 Feb 2023 04:13:13 GMT\r\nContent-Length: 289\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nServer: WebServer\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:44:27 GMT\r\n\r\n<html>\r\n<head>\r\n<meta http-equiv=\"content-type\" content=\"text/html; charset=iso8859-1\">\r\n<title>main page</title>\r\n<script language=\"javascript\">\r\n\r\nfunction redirect() {\r\n\tlocation.href = \"/cgi-bin/login.cgi\";\r\n}\r\n\r\n</script>\r\n</head>\r\n\r\n<body onload=\"redirect()\">\r\n</body>\r\n\r\n</html>\r\n\r\n",
   "datamd5" : "f4e3eae6eeff8c98fe1c4fcf0f5e564c",
   "datammh3" : 1551126648,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "14.45.0.0/16"
   },
   "ip" : "14.45.251.244",
   "ipv6" : "false",
   "latitude" : "35.8240",
   "location" : "35.8240,128.7304",
   "longitude" : "128.7304",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 3000,
   "product" : "WebServer",
   "productvendor" : "WebServer",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "14.45.0.0/16",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 1,374,036 in 0.052 second(s)

211.213.153.40:3000 (tcp/unknown) - last seen on 2024-11-07 at 05:44:39 UTC

218.144.178.76:3000 (tcp/http) - last seen on 2024-11-07 at 05:44:30 UTC

20.164.219.215:3000 (tcp/http) - last seen on 2024-11-07 at 05:44:30 UTC

118.41.66.93:3000 (tcp/http) - last seen on 2024-11-07 at 05:44:29 UTC

218.157.251.53:3000 (tcp/http) - last seen on 2024-11-07 at 05:44:29 UTC

45.223.59.29:3000 (tcp/http) - last seen on 2024-11-07 at 05:44:29 UTC

149.50.119.134:3000 (tcp/http) - last seen on 2024-11-07 at 05:44:29 UTC

109.248.14.239:3000 (tcp/http) - last seen on 2024-11-07 at 05:44:29 UTC

125.135.68.241:3000 (tcp/http) - last seen on 2024-11-07 at 05:44:28 UTC

14.45.251.244:3000 (tcp/http) - last seen on 2024-11-07 at 05:44:28 UTC