Returning 10 result(s) out of 1,164 in 0.047 second(s)

  • 212.189.213.122:1000 (tcp/http) - last seen on 2024-11-07 at 05:45:34 UTC

    • IP
      212.189.213.122
      Network
      212.189.128.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://212.189.213.122:1000/ 303

      HTTP Title
      Firewall Authentication
      ASN
      AS137
      Organization
      Consortium GARR
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1d84ecce5394cb58d49e48f466e45101
      HTTP Header MD5
      2269efd93536f42eebf1a6470b65b7d2
      HTTP Body MD5
      eb1e3e36989ebda73096fd7b5788f227
    • HTTP/1.1 303 See Other
      Location: https://<ip>:1000/fgtauth?07001a04208fab1e
      Connection: close
      Content-Length: 228
      Cache-Control: no-cache
      Content-Type: text/html
      
      <html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href="https://<ip>:1000/fgtauth?07001a04208fab1e">Click here</a> to load the secure authentication page.</body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:45:34.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "eb1e3e36989ebda73096fd7b5788f227",
               "bodymmh3" : 1839911523,
               "headermd5" : "2269efd93536f42eebf1a6470b65b7d2",
               "headermmh3" : -475896842,
               "title" : "Firewall Authentication"
            },
            "length" : 387
         },
         "asn" : "AS137",
         "city" : "San Nicola Manfredi",
         "country" : "IT",
         "data" : "HTTP/1.1 303 See Other\r\nLocation: https://<ip>:1000/fgtauth?07001a04208fab1e\r\nConnection: close\r\nContent-Length: 228\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\n\r\n<html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href=\"https://<ip>:1000/fgtauth?07001a04208fab1e\">Click here</a> to load the secure authentication page.</body></html>",
         "datamd5" : "1d84ecce5394cb58d49e48f466e45101",
         "datammh3" : 1233787389,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS137",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "IT",
            "countryname" : "Italy",
            "domain" : [
               "garr.it",
               "unile.it"
            ],
            "isineu" : "true",
            "latitude" : "41.87194",
            "location" : "41.87194,12.56738",
            "longitude" : "12.56738",
            "netname" : "LECCE2-NET",
            "organization" : "Universita' del Salento",
            "subnet" : "212.189.128.0/17"
         },
         "ip" : "212.189.213.122",
         "ipv6" : "false",
         "latitude" : "41.0781",
         "location" : "41.0781,14.8210",
         "longitude" : "14.8210",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Consortium GARR",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 1000,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "See Other",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 303,
         "subnet" : "212.189.128.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 24.129.166.163:1000 (tcp/http) - last seen on 2024-11-07 at 05:23:24 UTC

    • IP
      24.129.166.163
      Network
      24.129.160.0/21
      Device

      <enterprise field>: device.class

      URL

      http://24.129.166.163:1000/fgtauth?0507039fdde1c2de 303

      HTTP Title
      Firewall Authentication
      ASN
      AS33363
      Organization
      BHN-33363
      Protocol
      http
      Source
      urlscan::redirect
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      489bc260f115c69fe95ba2982ef1b1a6
      HTTP Header MD5
      c51f5d645e3303c89baa130aecf03171
      HTTP Body MD5
      1855ccb50bb8648de675a5a30a9adc34
    • HTTP/1.1 303 See Other
      Location: https://<ip>:1000/fgtauth?070f0e96dcf371d4
      Connection: close
      Content-Length: 227
      Cache-Control: no-cache
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      
      <html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href="https://<ip>:1000/fgtauth?070f0e96dcf371d4">Click here</a> to load the secure authentication page.</body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:23:24.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "1855ccb50bb8648de675a5a30a9adc34",
               "bodymmh3" : -562364071,
               "headermd5" : "c51f5d645e3303c89baa130aecf03171",
               "headermmh3" : 552455010,
               "title" : "Firewall Authentication"
            },
            "length" : 416
         },
         "asn" : "AS33363",
         "city" : "Tampa",
         "country" : "US",
         "data" : "HTTP/1.1 303 See Other\r\nLocation: https://<ip>:1000/fgtauth?070f0e96dcf371d4\r\nConnection: close\r\nContent-Length: 227\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n<html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href=\"https://<ip>:1000/fgtauth?070f0e96dcf371d4\">Click here</a> to load the secure authentication page.</body></html>",
         "datamd5" : "489bc260f115c69fe95ba2982ef1b1a6",
         "datammh3" : -1392450492,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "24.129.166.163",
         "geolocus" : {
            "asn" : "AS33363",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "charter.com",
               "charter.net",
               "spectrum.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "ROAD-RUNNER-2A",
            "organization" : "Charter Communications Inc",
            "subnet" : "24.129.160.0/21"
         },
         "hostname" : [
            "24.129.166.163"
         ],
         "ip" : "24.129.166.163",
         "ipv6" : "false",
         "latitude" : "28.0117",
         "location" : "28.0117,-82.5820",
         "longitude" : "-82.5820",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "BHN-33363",
         "port" : 1000,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "See Other",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 303,
         "subnet" : "24.129.160.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/fgtauth?0507039fdde1c2de"
      }
      
  • 208.85.192.6:1000 (tcp/http) - last seen on 2024-11-07 at 04:23:18 UTC

    • IP
      208.85.192.6
      Network
      208.85.192.0/21
      Domain(s)
      grid4.com
      Device

      <enterprise field>: device.class

      URL

      http://208.85.192.6:1000/fgtauth?0409029199000aac 303

      HTTP Title
      Firewall Authentication
      Reverse DNS
      208-85-192-6.sfld.grid4.com
      ASN
      AS36394
      Organization
      ASN-GRID4-GATEWAYS
      Protocol
      http
      Source
      urlscan::redirect
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      abc91e5d1d47fba2df84b51f23692449
      HTTP Header MD5
      c51f5d645e3303c89baa130aecf03171
      HTTP Body MD5
      e5f365e4b3655d3c7f52ef140c915cac
    • HTTP/1.1 303 See Other
      Location: https://<ip>:1000/fgtauth?000d0a976642c5f8
      Connection: close
      Content-Length: 225
      Cache-Control: no-cache
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      
      <html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href="https://<ip>:1000/fgtauth?000d0a976642c5f8">Click here</a> to load the secure authentication page.</body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:23:18.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "e5f365e4b3655d3c7f52ef140c915cac",
               "bodymmh3" : 1978288104,
               "headermd5" : "c51f5d645e3303c89baa130aecf03171",
               "headermmh3" : 998981942,
               "title" : "Firewall Authentication"
            },
            "length" : 416
         },
         "asn" : "AS36394",
         "city" : "Troy",
         "country" : "US",
         "data" : "HTTP/1.1 303 See Other\r\nLocation: https://<ip>:1000/fgtauth?000d0a976642c5f8\r\nConnection: close\r\nContent-Length: 225\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n<html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href=\"https://<ip>:1000/fgtauth?000d0a976642c5f8\">Click here</a> to load the secure authentication page.</body></html>",
         "datamd5" : "abc91e5d1d47fba2df84b51f23692449",
         "datammh3" : 770561563,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "grid4.com"
         ],
         "forward" : "208.85.192.6",
         "geolocus" : {
            "asn" : "AS36394",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "grid4.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "ASSOCIATED-RETINAL",
            "organization" : "Grid4 Communications, Inc",
            "subnet" : "208.85.192.0/21"
         },
         "host" : [
            "208-85-192-6"
         ],
         "hostname" : [
            "208-85-192-6.sfld.grid4.com",
            "208.85.192.6"
         ],
         "ip" : "208.85.192.6",
         "ipv6" : "false",
         "latitude" : "42.6013",
         "location" : "42.6013,-83.1780",
         "longitude" : "-83.1780",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ASN-GRID4-GATEWAYS",
         "port" : 1000,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "See Other",
         "reverse" : [
            "208-85-192-6.sfld.grid4.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 303,
         "subdomains" : [
            "sfld.grid4.com"
         ],
         "subnet" : "208.85.192.0/21",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/fgtauth?0409029199000aac"
      }
      
  • 24.129.166.100:1000 (tcp/http) - last seen on 2024-11-07 at 04:22:44 UTC

    • IP
      24.129.166.100
      Network
      24.129.160.0/21
      Domain(s)
      spectrum.com
      Device

      <enterprise field>: device.class

      URL

      http://24.129.166.100:1000/fgtauth?070804ac4ead59e9 303

      HTTP Title
      Firewall Authentication
      Reverse DNS
      syn-024-129-166-100.biz.spectrum.com
      ASN
      AS33363
      Organization
      BHN-33363
      Protocol
      http
      Source
      urlscan::redirect
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      794b16ff11c4b9c2336e072f36f051c5
      HTTP Header MD5
      c51f5d645e3303c89baa130aecf03171
      HTTP Body MD5
      ebb54ccf469e244db86e6fbee3eb1e87
    • HTTP/1.1 303 See Other
      Location: https://<ip>:1000/fgtauth?030907ab41b559c1
      Connection: close
      Content-Length: 227
      Cache-Control: no-cache
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      
      <html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href="https://<ip>:1000/fgtauth?030907ab41b559c1">Click here</a> to load the secure authentication page.</body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:22:44.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ebb54ccf469e244db86e6fbee3eb1e87",
               "bodymmh3" : -1685514053,
               "headermd5" : "c51f5d645e3303c89baa130aecf03171",
               "headermmh3" : 1368507444,
               "title" : "Firewall Authentication"
            },
            "length" : 416
         },
         "asn" : "AS33363",
         "city" : "Tampa",
         "country" : "US",
         "data" : "HTTP/1.1 303 See Other\r\nLocation: https://<ip>:1000/fgtauth?030907ab41b559c1\r\nConnection: close\r\nContent-Length: 227\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n<html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href=\"https://<ip>:1000/fgtauth?030907ab41b559c1\">Click here</a> to load the secure authentication page.</body></html>",
         "datamd5" : "794b16ff11c4b9c2336e072f36f051c5",
         "datammh3" : 182123290,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "spectrum.com"
         ],
         "forward" : "24.129.166.100",
         "geolocus" : {
            "asn" : "AS33363",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "charter.com",
               "charter.net",
               "spectrum.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "ROAD-RUNNER-2A",
            "organization" : "Charter Communications Inc",
            "subnet" : "24.129.160.0/21"
         },
         "host" : [
            "syn-024-129-166-100"
         ],
         "hostname" : [
            "24.129.166.100",
            "syn-024-129-166-100.biz.spectrum.com"
         ],
         "ip" : "24.129.166.100",
         "ipv6" : "false",
         "latitude" : "28.0117",
         "location" : "28.0117,-82.5820",
         "longitude" : "-82.5820",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "BHN-33363",
         "port" : 1000,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "See Other",
         "reverse" : [
            "syn-024-129-166-100.biz.spectrum.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 303,
         "subdomains" : [
            "biz.spectrum.com"
         ],
         "subnet" : "24.129.160.0/21",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/fgtauth?070804ac4ead59e9"
      }
      
  • 211.72.231.7:1000 (tcp/http) - last seen on 2024-11-07 at 04:15:41 UTC

    • IP
      211.72.231.7
      Network
      211.72.0.0/16
      Domain(s)
      hinet.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://211.72.231.7:1000/ 303

      HTTP Title
      Firewall Authentication
      Reverse DNS
      211-72-231-7.hinet-ip.hinet.net
      ASN
      AS3462
      Organization
      Data Communication Business Group
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ee2251dcd29d0cc601f08931c7e4dc02
      HTTP Header MD5
      2269efd93536f42eebf1a6470b65b7d2
      HTTP Body MD5
      da1aca940a4c0af4fff5d0e459ff697a
    • HTTP/1.1 303 See Other
      Location: https://<ip>:1000/fgtauth?030f0c8bd4ff8cc7
      Connection: close
      Content-Length: 225
      Cache-Control: no-cache
      Content-Type: text/html
      
      <html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href="https://<ip>:1000/fgtauth?030f0c8bd4ff8cc7">Click here</a> to load the secure authentication page.</body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:15:41.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da1aca940a4c0af4fff5d0e459ff697a",
               "bodymmh3" : 1154940100,
               "headermd5" : "2269efd93536f42eebf1a6470b65b7d2",
               "headermmh3" : 90031150,
               "title" : "Firewall Authentication"
            },
            "length" : 387
         },
         "asn" : "AS3462",
         "city" : "Hsinchu",
         "country" : "TW",
         "data" : "HTTP/1.1 303 See Other\r\nLocation: https://<ip>:1000/fgtauth?030f0c8bd4ff8cc7\r\nConnection: close\r\nContent-Length: 225\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\n\r\n<html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href=\"https://<ip>:1000/fgtauth?030f0c8bd4ff8cc7\">Click here</a> to load the secure authentication page.</body></html>",
         "datamd5" : "ee2251dcd29d0cc601f08931c7e4dc02",
         "datammh3" : -1776590096,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "hinet.net"
         ],
         "geolocus" : {
            "asn" : "AS3462",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "TW",
            "countryname" : "Taiwan",
            "domain" : [
               "hinet.net",
               "twnic.net.tw"
            ],
            "isineu" : "false",
            "latitude" : "23.69781",
            "location" : "23.69781,120.960515",
            "longitude" : "120.960515",
            "netname" : "HINET-NET",
            "organization" : "Data Communication Business Group",
            "subnet" : "211.72.224.0/21"
         },
         "host" : [
            "211-72-231-7"
         ],
         "hostname" : [
            "211-72-231-7.hinet-ip.hinet.net"
         ],
         "ip" : "211.72.231.7",
         "ipv6" : "false",
         "latitude" : "24.8065",
         "location" : "24.8065,120.9706",
         "longitude" : "120.9706",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Data Communication Business Group",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 1000,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "See Other",
         "reverse" : [
            "211-72-231-7.hinet-ip.hinet.net"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 303,
         "subdomains" : [
            "hinet-ip.hinet.net"
         ],
         "subnet" : "211.72.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 179.119.61.159:1000 (tcp/http) - last seen on 2024-11-07 at 04:12:20 UTC

    • IP
      179.119.61.159
      Network
      179.112.0.0/13
      Device

      <enterprise field>: device.class

      URL

      http://179.119.61.159:1000/ 303

      ASN
      AS26599
      Organization
      TELEFONICA BRASIL S.A
      Protocol
      http
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      5e7919e46a845b0900c17f4104c6626c
      HTTP Header MD5
      a7fd46cfa301c507fefc3b5fbfb0fa99
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 303 See other
      Location: /admin/index.html
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:12:20.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "a7fd46cfa301c507fefc3b5fbfb0fa99",
               "headermmh3" : 6636726
            },
            "length" : 55
         },
         "asn" : "AS26599",
         "city" : "Araraquara",
         "country" : "BR",
         "data" : "HTTP/1.1 303 See other\r\nLocation: /admin/index.html\r\n\r\n",
         "datamd5" : "5e7919e46a845b0900c17f4104c6626c",
         "datammh3" : 697907055,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS25799",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "telefonica.com",
               "vivozap.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.558.157/0001-62",
            "organization" : "TELEFONICA BRASIL S.A",
            "subnet" : "179.116.0.0/14"
         },
         "ip" : "179.119.61.159",
         "ipv6" : "false",
         "latitude" : "-21.7967",
         "location" : "-21.7967,-48.1766",
         "longitude" : "-48.1766",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TELEFONICA BRASIL S.A",
         "port" : 1000,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "See other",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 303,
         "subnet" : "179.112.0.0/13",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 24.129.166.163:1000 (tcp/http) - last seen on 2024-11-07 at 03:23:00 UTC

    • IP
      24.129.166.163
      Network
      24.129.160.0/21
      Domain(s)
      spectrum.com
      Device

      <enterprise field>: device.class

      URL

      http://24.129.166.163:1000/fgtauth?03050eac409bdf27 303

      HTTP Title
      Firewall Authentication
      Reverse DNS
      syn-024-129-166-163.biz.spectrum.com
      ASN
      AS33363
      Organization
      BHN-33363
      Protocol
      http
      Source
      urlscan::redirect
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      eca767ff25d0b484220ea6155fb14899
      HTTP Header MD5
      c51f5d645e3303c89baa130aecf03171
      HTTP Body MD5
      7451d4f564ca28a09b0f8c77ad41486e
    • HTTP/1.1 303 See Other
      Location: https://<ip>:1000/fgtauth?0507039fdde1c2de
      Connection: close
      Content-Length: 227
      Cache-Control: no-cache
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      
      <html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href="https://<ip>:1000/fgtauth?0507039fdde1c2de">Click here</a> to load the secure authentication page.</body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:23:00.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "7451d4f564ca28a09b0f8c77ad41486e",
               "bodymmh3" : 1366124503,
               "headermd5" : "c51f5d645e3303c89baa130aecf03171",
               "headermmh3" : -66539339,
               "title" : "Firewall Authentication"
            },
            "length" : 416
         },
         "asn" : "AS33363",
         "city" : "Tampa",
         "country" : "US",
         "data" : "HTTP/1.1 303 See Other\r\nLocation: https://<ip>:1000/fgtauth?0507039fdde1c2de\r\nConnection: close\r\nContent-Length: 227\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n<html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href=\"https://<ip>:1000/fgtauth?0507039fdde1c2de\">Click here</a> to load the secure authentication page.</body></html>",
         "datamd5" : "eca767ff25d0b484220ea6155fb14899",
         "datammh3" : -390192211,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "spectrum.com"
         ],
         "forward" : "24.129.166.163",
         "geolocus" : {
            "asn" : "AS33363",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "charter.com",
               "charter.net",
               "spectrum.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "ROAD-RUNNER-2A",
            "organization" : "Charter Communications Inc",
            "subnet" : "24.129.160.0/21"
         },
         "host" : [
            "syn-024-129-166-163"
         ],
         "hostname" : [
            "24.129.166.163",
            "syn-024-129-166-163.biz.spectrum.com"
         ],
         "ip" : "24.129.166.163",
         "ipv6" : "false",
         "latitude" : "28.0117",
         "location" : "28.0117,-82.5820",
         "longitude" : "-82.5820",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "BHN-33363",
         "port" : 1000,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "See Other",
         "reverse" : [
            "syn-024-129-166-163.biz.spectrum.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 303,
         "subdomains" : [
            "biz.spectrum.com"
         ],
         "subnet" : "24.129.160.0/21",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/fgtauth?03050eac409bdf27"
      }
      
  • 152.228.163.142:1000 (tcp/http) - last seen on 2024-11-07 at 03:23:00 UTC

    • IP
      152.228.163.142
      Network
      152.228.128.0/17
      Domain(s)
      ovh.net
      Device

      <enterprise field>: device.class

      URL

      http://152.228.163.142:1000/web 303

      HTTP Title
      Redirecting...
      Reverse DNS
      vps-8b8f5a2e.vps.ovh.net
      ASN
      AS16276
      Organization
      OVH SAS
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      Pocoo Werkzeug 0.11.15
      HTTP Component(s)
      Python Python 3.5.3
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      adff7ed1ac12d69dcf516ae9a30ee7e2
      HTTP Header MD5
      e6be2b7eda6bbc5265e4767f0afefae5
      HTTP Body MD5
      774100cf39b678d95668ab6ace60d97c
    • HTTP/1.0 303 SEE OTHER
      Content-Type: text/html; charset=utf-8
      Content-Length: 227
      Location: http://<ip>:1000/web/login
      Set-Cookie: session_id=5b03ada383d0d20d0b2cf8022d0fff18bc73dc17; Expires=Wed, 05-Feb-2025 03:22:59 GMT; Max-Age=7776000; HttpOnly; Path=/
      Server: Werkzeug/0.11.15 Python/3.5.3
      Date: Thu, 07 Nov 2024 03:22:59 GMT
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
      <title>Redirecting...</title>
      <h1>Redirecting...</h1>
      <p>You should be redirected automatically to target URL: <a href="/web/login">/web/login</a>.  If not click the link.
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:23:00.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "774100cf39b678d95668ab6ace60d97c",
               "bodymmh3" : -345631835,
               "component" : [
                  {
                     "productvendor" : "Python",
                     "productversion" : "3.5.3",
                     "product" : "Python"
                  }
               ],
               "headermd5" : "e6be2b7eda6bbc5265e4767f0afefae5",
               "headermmh3" : 715438284,
               "title" : "Redirecting..."
            },
            "length" : 567
         },
         "asn" : "AS16276",
         "city" : "Newham",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 303 SEE OTHER\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 227\r\nLocation: http://<ip>:1000/web/login\r\nSet-Cookie: session_id=5b03ada383d0d20d0b2cf8022d0fff18bc73dc17; Expires=Wed, 05-Feb-2025 03:22:59 GMT; Max-Age=7776000; HttpOnly; Path=/\r\nServer: Werkzeug/0.11.15 Python/3.5.3\r\nDate: Thu, 07 Nov 2024 03:22:59 GMT\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2 Final//EN\">\n<title>Redirecting...</title>\n<h1>Redirecting...</h1>\n<p>You should be redirected automatically to target URL: <a href=\"/web/login\">/web/login</a>.  If not click the link.",
         "datamd5" : "adff7ed1ac12d69dcf516ae9a30ee7e2",
         "datammh3" : 502331159,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ovh.net"
         ],
         "forward" : "152.228.163.142",
         "geolocus" : {
            "asn" : "AS16276",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "FR",
            "countryname" : "France",
            "domain" : [
               "ovh.net"
            ],
            "isineu" : "true",
            "latitude" : "46.227638",
            "location" : "46.227638,2.213749",
            "longitude" : "2.213749",
            "netname" : "VPS-GRA8",
            "organization" : "OVH SAS",
            "subnet" : "152.228.162.0/23"
         },
         "host" : [
            "vps-8b8f5a2e"
         ],
         "hostname" : [
            "152.228.163.142",
            "vps-8b8f5a2e.vps.ovh.net"
         ],
         "ip" : "152.228.163.142",
         "ipv6" : "false",
         "latitude" : "51.5277",
         "location" : "51.5277,0.0252",
         "longitude" : "0.0252",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "OVH SAS",
         "port" : 1000,
         "product" : "Werkzeug",
         "productvendor" : "Pocoo",
         "productversion" : "0.11.15",
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "SEE OTHER",
         "reverse" : [
            "vps-8b8f5a2e.vps.ovh.net"
         ],
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 303,
         "subdomains" : [
            "vps.ovh.net"
         ],
         "subnet" : "152.228.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/web"
      }
      
  • 121.184.62.19:1000 (tcp/http) - last seen on 2024-11-07 at 02:43:29 UTC

    • IP
      121.184.62.19
      Network
      121.184.0.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://121.184.62.19:1000/ 303

      HTTP Title
      Firewall Authentication
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4a861d527b4f4a677cca44ed0f1d5d2c
      HTTP Header MD5
      c51f5d645e3303c89baa130aecf03171
      HTTP Body MD5
      a79e38f38b82098d2f15080f4affe577
    • HTTP/1.1 303 See Other
      Location: http://121.184.62.66:1000/fgtauth?01056671dc045b23
      Connection: close
      Content-Length: 225
      Cache-Control: no-cache
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      
      <html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href="http://121.184.62.66:1000/fgtauth?01056671dc045b23">Click here</a> to load the secure authentication page.</body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:43:29.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "121.184.62.66"
               ],
               "url" : [
                  "http://121.184.62.66:1000/fgtauth?01056671dc045b23"
               ]
            },
            "http" : {
               "bodymd5" : "a79e38f38b82098d2f15080f4affe577",
               "bodymmh3" : 2016860524,
               "headermd5" : "c51f5d645e3303c89baa130aecf03171",
               "headermmh3" : -103580005,
               "title" : "Firewall Authentication"
            },
            "length" : 432
         },
         "asn" : "AS4766",
         "city" : "Sejong",
         "country" : "KR",
         "data" : "HTTP/1.1 303 See Other\r\nLocation: http://121.184.62.66:1000/fgtauth?01056671dc045b23\r\nConnection: close\r\nContent-Length: 225\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n<html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href=\"http://121.184.62.66:1000/fgtauth?01056671dc045b23\">Click here</a> to load the secure authentication page.</body></html>",
         "datamd5" : "4a861d527b4f4a677cca44ed0f1d5d2c",
         "datammh3" : 1227514111,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "121.184.0.0/15"
         },
         "ip" : "121.184.62.19",
         "ipv6" : "false",
         "latitude" : "36.5916",
         "location" : "36.5916,127.2916",
         "longitude" : "127.2916",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 1000,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "See Other",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 303,
         "subnet" : "121.184.0.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 24.129.166.100:1000 (tcp/http) - last seen on 2024-11-07 at 02:23:24 UTC

    • IP
      24.129.166.100
      Network
      24.129.160.0/21
      Domain(s)
      spectrum.com
      Device

      <enterprise field>: device.class

      URL

      http://24.129.166.100:1000/fgtauth?050907ad41974458 303

      HTTP Title
      Firewall Authentication
      Reverse DNS
      syn-024-129-166-100.biz.spectrum.com
      ASN
      AS33363
      Organization
      BHN-33363
      Protocol
      http
      Source
      urlscan::redirect
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      93fd02cf3d05a1b583f8b49c64de3874
      HTTP Header MD5
      c51f5d645e3303c89baa130aecf03171
      HTTP Body MD5
      0b154e312e33c373868d43e5edff2abd
    • HTTP/1.1 303 See Other
      Location: https://<ip>:1000/fgtauth?070804ac4ead59e9
      Connection: close
      Content-Length: 227
      Cache-Control: no-cache
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      
      <html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href="https://<ip>:1000/fgtauth?070804ac4ead59e9">Click here</a> to load the secure authentication page.</body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:23:24.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "0b154e312e33c373868d43e5edff2abd",
               "bodymmh3" : 261445881,
               "headermd5" : "c51f5d645e3303c89baa130aecf03171",
               "headermmh3" : -566364860,
               "title" : "Firewall Authentication"
            },
            "length" : 416
         },
         "asn" : "AS33363",
         "city" : "Tampa",
         "country" : "US",
         "data" : "HTTP/1.1 303 See Other\r\nLocation: https://<ip>:1000/fgtauth?070804ac4ead59e9\r\nConnection: close\r\nContent-Length: 227\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n<html><head><title>Firewall Authentication</title></head><body>Redirected to the secure channel.<a href=\"https://<ip>:1000/fgtauth?070804ac4ead59e9\">Click here</a> to load the secure authentication page.</body></html>",
         "datamd5" : "93fd02cf3d05a1b583f8b49c64de3874",
         "datammh3" : -24247943,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "spectrum.com"
         ],
         "forward" : "24.129.166.100",
         "geolocus" : {
            "asn" : "AS33363",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "charter.com",
               "charter.net",
               "spectrum.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "ROAD-RUNNER-2A",
            "organization" : "Charter Communications Inc",
            "subnet" : "24.129.160.0/21"
         },
         "host" : [
            "syn-024-129-166-100"
         ],
         "hostname" : [
            "24.129.166.100",
            "syn-024-129-166-100.biz.spectrum.com"
         ],
         "ip" : "24.129.166.100",
         "ipv6" : "false",
         "latitude" : "28.0117",
         "location" : "28.0117,-82.5820",
         "longitude" : "-82.5820",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "BHN-33363",
         "port" : 1000,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "See Other",
         "reverse" : [
            "syn-024-129-166-100.biz.spectrum.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 303,
         "subdomains" : [
            "biz.spectrum.com"
         ],
         "subnet" : "24.129.160.0/21",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/fgtauth?050907ad41974458"
      }