Cyber Defense Search Engine

IP
221.128.236.38

Network
221.128.128.0/17

Domain(s)
imidc.com

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://221.128.236.38:119/ 200

Reverse DNS
unknown.imidc.com

ASN
AS55933

Organization
Cloudie Limited

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Proxy Proxy

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
c15509c37d06e38e42ef6d6607268aa6

HTTP Header MD5
a91a8cc9907e923eb08191fee3bb75c7

HTTP Body MD5
666fc363fadd01b22f6792d056b81126

HTTP/1.0 200 OK
Server: Proxy




Unauthorized ...

IP Address: <srcip>
MAC Address: 
Server Time: 2024-11-07 13:32:30
Auth Result: 无效用户.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:31.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "666fc363fadd01b22f6792d056b81126",
         "bodymmh3" : 2082072307,
         "headermd5" : "a91a8cc9907e923eb08191fee3bb75c7",
         "headermmh3" : 141730637
      },
      "length" : 162
   },
   "asn" : "AS55933",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 200 OK\r\nServer: Proxy\r\n\r\n\r\n\r\n\r\nUnauthorized ...\r\n\r\nIP Address: <srcip>\r\nMAC Address: \r\nServer Time: 2024-11-07 13:32:30\r\nAuth Result: \u65e0\u6548\u7528\u6237.\r\n\r\n\r\n",
   "datamd5" : "c15509c37d06e38e42ef6d6607268aa6",
   "datammh3" : 1680745372,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "imidc.com"
   ],
   "geolocus" : {
      "asn" : "AS55933",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "cnnic.cn",
         "fbiinet.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CYNET",
      "organization" : "Beijing Chang Ying Netowrk Service Co.Ltd",
      "subnet" : "221.128.224.0/20"
   },
   "host" : [
      "unknown"
   ],
   "hostname" : [
      "unknown.imidc.com"
   ],
   "ip" : "221.128.236.38",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cloudie Limited",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 119,
   "product" : "Proxy",
   "productvendor" : "Proxy",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "OK",
   "reverse" : [
      "unknown.imidc.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "221.128.128.0/17",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
154.55.175.203

Network
154.55.160.0/19

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://154.55.175.203:119/ 200

ASN
AS139646

Organization
HONG KONG Megalayer Technology Co.,Limited

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Proxy Proxy

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
bd7b4f068ba329c75914532dab7bd6c2

HTTP Header MD5
a91a8cc9907e923eb08191fee3bb75c7

HTTP Body MD5
2f79bdf9b76e747b761cdf323a450c01

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...
IP Address: <srcip>
MAC Address: 
Server Time: 2024-11-07 13:32:56
Auth Result: 无效用户.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:31.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "2f79bdf9b76e747b761cdf323a450c01",
         "bodymmh3" : 926629380,
         "headermd5" : "a91a8cc9907e923eb08191fee3bb75c7",
         "headermmh3" : 141730637
      },
      "length" : 148
   },
   "asn" : "AS139646",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 200 OK\r\nServer: Proxy\r\n\r\nUnauthorized ...\r\nIP Address: <srcip>\r\nMAC Address: \r\nServer Time: 2024-11-07 13:32:56\r\nAuth Result: \u65e0\u6548\u7528\u6237.",
   "datamd5" : "bd7b4f068ba329c75914532dab7bd6c2",
   "datammh3" : 700209021,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS139646",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "COGENT-154-55-16",
      "organization" : "PSINet, Inc.",
      "subnet" : "154.55.174.0/23"
   },
   "ip" : "154.55.175.203",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "HONG KONG Megalayer Technology Co.,Limited",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 119,
   "product" : "Proxy",
   "productvendor" : "Proxy",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "154.55.160.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
125.94.68.103

Network
125.92.0.0/14

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://125.94.68.103:119/ 200

ASN
AS4134

Organization
Chinanet

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Proxy Proxy

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
5aa53b9b06d7331059b14e560e8d006c

HTTP Header MD5
a91a8cc9907e923eb08191fee3bb75c7

HTTP Body MD5
682aa3af9debb30d080042b678fa9076

HTTP/1.0 200 OK
Server: Proxy




Unauthorized ...

IP Address: <srcip>
MAC Address: 
Server Time: 2024-11-07 13:31:06
Auth Result: 无效用户.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:04.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "682aa3af9debb30d080042b678fa9076",
         "bodymmh3" : -776664552,
         "headermd5" : "a91a8cc9907e923eb08191fee3bb75c7",
         "headermmh3" : 141730637
      },
      "length" : 162
   },
   "asn" : "AS4134",
   "city" : "Foshan",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 200 OK\r\nServer: Proxy\r\n\r\n\r\n\r\n\r\nUnauthorized ...\r\n\r\nIP Address: <srcip>\r\nMAC Address: \r\nServer Time: 2024-11-07 13:31:06\r\nAuth Result: \u65e0\u6548\u7528\u6237.\r\n\r\n\r\n",
   "datamd5" : "5aa53b9b06d7331059b14e560e8d006c",
   "datammh3" : -17200637,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4134",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "163.com",
         "163data.com.cn",
         "chinatelecom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-GD",
      "organization" : "CHINANET Guangdong province network",
      "subnet" : "125.92.0.0/14"
   },
   "ip" : "125.94.68.103",
   "ipv6" : "false",
   "latitude" : "23.0261",
   "location" : "23.0261,113.1371",
   "longitude" : "113.1371",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Chinanet",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 119,
   "product" : "Proxy",
   "productvendor" : "Proxy",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "125.92.0.0/14",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
82.79.116.9

Network
82.76.0.0/14

Domain(s)
rdsnet.ro

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://82.79.116.9:119/ 200

HTTP Title
Web Application Manager

Reverse DNS
82-79-116-9-b-s.galati.rdsnet.ro

ASN
AS8708

Organization
Digi Romania S.A.

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8d2888838e28bfd96235edc801c0c883

HTTP Header MD5
1c70352eab18e20501cd88376c34f64d

HTTP Body MD5
8c0bcf4b0d4db230025eb1ea358b8b6f

HTTP/1.1 200 Ok
Date: Thu, 07 Nov 2024 09:52:05 GMT
Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
<html>
	<head>
		<TITLE>Web Application Manager</TITLE>
		<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
		<script language="JavaScript" type="text/JavaScript">
<!--
var username="";
var language="";
function init()
{

}
function getLang()
{  //alert(language);
	return language;
}
function getXMLUrl()
{
	var url = "language/"+getLang()+".xml";
	return url;
}
function getXmlData()
{
	//alert("top.frames.frmResource.document.all.XMLLanguage.xml="+top.frames.frmResource.document.all.XMLLanguage.xml);
	try{
		return top.frames.frmResource.document.XMLDocument.xml;
	}catch(e)
	{
		top.status=e.message;
		return "";
	}
}
function exit()
{
	var url="exit.html?action=set";
	url+="&username="+username;
	//window.open(url,"exit","top=5000,left=5000,height=1,width=0"); 
	top.frames.resultFrame.location=url;
	return false;
}
var xmlstr = "";
function loadLanguage( xmlObj )
{
	var i=10;
	while( xmlstr == "" || xmlstr == null )
	{
		xmlstr = getXmlData();
		if( --i<0) break;
	}
	if( xmlObj && xmlObj.XMLDocument )
	{
		xmlObj.XMLDocument.loadXML( xmlstr );
	}
}	
function setUserName( user )
{
	username=user;
}
function setLanguage( lang )
{
	if( language != lang )
	{
		language=lang;
		top.frames.frmResource.location = getXMLUrl();
	}
}

//-->
		</script>
	</head>
	<frameset rows="*,0,0" frameborder="NO" border="0" framespacing="0" onLoad="init()" onbeforeunload="exit();">
	<frame id="mainFrame" name="mainFrame" frameborder="0"  src="play.html">
	<frame   name="frmResource" id="frmResource">
	<frame   name="resultFrame" id="resultFrame">
	</frameset>
	<noframes>
		<body>please use internet explorer 5.0+
		</body>
	</noframes>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:04.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "w3.org"
         ],
         "file" : [
            "xmldocument.xml"
         ],
         "hostname" : [
            "www.w3.org"
         ],
         "url" : [
            "http://www.w3.org/TR/html4/frameset.dtd"
         ]
      },
      "http" : {
         "bodymd5" : "8c0bcf4b0d4db230025eb1ea358b8b6f",
         "bodymmh3" : 1366101637,
         "headermd5" : "1c70352eab18e20501cd88376c34f64d",
         "headermmh3" : -2140326855,
         "title" : "Web Application Manager"
      },
      "length" : 1933
   },
   "asn" : "AS8708",
   "city" : "Galati",
   "country" : "RO",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 Ok\r\nDate: Thu, 07 Nov 2024 09:52:05 GMT\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Frameset//EN\" \"http://www.w3.org/TR/html4/frameset.dtd\">\r\n<html>\r\n\t<head>\r\n\t\t<TITLE>Web Application Manager</TITLE>\r\n\t\t<meta http-equiv=\"Content-Type\" content=\"text/html; charset=gb2312\">\r\n\t\t<script language=\"JavaScript\" type=\"text/JavaScript\">\r\n<!--\r\nvar username=\"\";\r\nvar language=\"\";\r\nfunction init()\r\n{\r\n\r\n}\r\nfunction getLang()\r\n{  //alert(language);\r\n\treturn language;\r\n}\r\nfunction getXMLUrl()\r\n{\r\n\tvar url = \"language/\"+getLang()+\".xml\";\r\n\treturn url;\r\n}\r\nfunction getXmlData()\r\n{\r\n\t//alert(\"top.frames.frmResource.document.all.XMLLanguage.xml=\"+top.frames.frmResource.document.all.XMLLanguage.xml);\r\n\ttry{\r\n\t\treturn top.frames.frmResource.document.XMLDocument.xml;\r\n\t}catch(e)\r\n\t{\r\n\t\ttop.status=e.message;\r\n\t\treturn \"\";\r\n\t}\r\n}\r\nfunction exit()\r\n{\r\n\tvar url=\"exit.html?action=set\";\r\n\turl+=\"&username=\"+username;\r\n\t//window.open(url,\"exit\",\"top=5000,left=5000,height=1,width=0\"); \r\n\ttop.frames.resultFrame.location=url;\r\n\treturn false;\r\n}\r\nvar xmlstr = \"\";\r\nfunction loadLanguage( xmlObj )\r\n{\r\n\tvar i=10;\r\n\twhile( xmlstr == \"\" || xmlstr == null )\r\n\t{\r\n\t\txmlstr = getXmlData();\r\n\t\tif( --i<0) break;\r\n\t}\r\n\tif( xmlObj && xmlObj.XMLDocument )\r\n\t{\r\n\t\txmlObj.XMLDocument.loadXML( xmlstr );\r\n\t}\r\n}\t\r\nfunction setUserName( user )\r\n{\r\n\tusername=user;\r\n}\r\nfunction setLanguage( lang )\r\n{\r\n\tif( language != lang )\r\n\t{\r\n\t\tlanguage=lang;\r\n\t\ttop.frames.frmResource.location = getXMLUrl();\r\n\t}\r\n}\r\n\r\n//-->\r\n\t\t</script>\r\n\t</head>\r\n\t<frameset rows=\"*,0,0\" frameborder=\"NO\" border=\"0\" framespacing=\"0\" onLoad=\"init()\" onbeforeunload=\"exit();\">\r\n\t<frame id=\"mainFrame\" name=\"mainFrame\" frameborder=\"0\"  src=\"play.html\">\r\n\t<frame   name=\"frmResource\" id=\"frmResource\">\r\n\t<frame   name=\"resultFrame\" id=\"resultFrame\">\r\n\t</frameset>\r\n\t<noframes>\r\n\t\t<body>please use internet explorer 5.0+\r\n\t\t</body>\r\n\t</noframes>\r\n</html>\r\n",
   "datamd5" : "8d2888838e28bfd96235edc801c0c883",
   "datammh3" : -1545419860,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "rdsnet.ro"
   ],
   "geolocus" : {
      "asn" : "AS8708",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "RO",
      "countryname" : "Romania",
      "domain" : [
         "rcs-rds.ro"
      ],
      "isineu" : "true",
      "latitude" : "45.943161",
      "location" : "45.943161,24.96676",
      "longitude" : "24.96676",
      "netname" : "RO-RCS-RDS",
      "organization" : "RDSNET",
      "subnet" : "82.79.0.0/17"
   },
   "host" : [
      "82-79-116-9-b-s"
   ],
   "hostname" : [
      "82-79-116-9-b-s.galati.rdsnet.ro"
   ],
   "ip" : "82.79.116.9",
   "ipv6" : "false",
   "latitude" : "45.4518",
   "location" : "45.4518,28.0522",
   "longitude" : "28.0522",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Digi Romania S.A.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 119,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Ok",
   "reverse" : [
      "82-79-116-9-b-s.galati.rdsnet.ro"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "galati.rdsnet.ro"
   ],
   "subnet" : "82.76.0.0/14",
   "tld" : [
      "ro"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
36.111.184.180

Network
36.111.160.0/19

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://36.111.184.180:119/ 200

ASN
AS58519

Organization
Cloud Computing Corporation

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Proxy Proxy

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
03500328c8a2f20bb1a05d8fd5dabe12

HTTP Header MD5
a91a8cc9907e923eb08191fee3bb75c7

HTTP Body MD5
031f071fcc6757aa97ae59c4a040a900

HTTP/1.0 200 OK
Server: Proxy




Unauthorized ...

IP Address: <srcip>
MAC Address: 
Server Time: 2024-11-07 13:32:01
Auth Result: 无效用户.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:03.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "031f071fcc6757aa97ae59c4a040a900",
         "bodymmh3" : -742170192,
         "headermd5" : "a91a8cc9907e923eb08191fee3bb75c7",
         "headermmh3" : 141730637
      },
      "length" : 162
   },
   "asn" : "AS58519",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 200 OK\r\nServer: Proxy\r\n\r\n\r\n\r\n\r\nUnauthorized ...\r\n\r\nIP Address: <srcip>\r\nMAC Address: \r\nServer Time: 2024-11-07 13:32:01\r\nAuth Result: \u65e0\u6548\u7528\u6237.\r\n\r\n\r\n",
   "datamd5" : "03500328c8a2f20bb1a05d8fd5dabe12",
   "datammh3" : 1872398955,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS58519",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "163.com",
         "189.cn",
         "hz.zj.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-ZJ",
      "organization" : "CHINANET Zhejiang province network",
      "subnet" : "36.111.160.0/19"
   },
   "ip" : "36.111.184.180",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cloud Computing Corporation",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 119,
   "product" : "Proxy",
   "productvendor" : "Proxy",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "36.111.160.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
154.23.6.216

Network
154.23.0.0/18

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://154.23.6.216:119/ 200

ASN
AS139646

Organization
HONG KONG Megalayer Technology Co.,Limited

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Proxy Proxy

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
29c7d193dd0a6e088b03d9720a858448

HTTP Header MD5
a91a8cc9907e923eb08191fee3bb75c7

HTTP Body MD5
f861eb55d32353b3bbff908891a75bb0

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...
IP Address: <srcip>
MAC Address: 
Server Time: 2024-11-07 13:32:03
Auth Result: 无效用户.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:03.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "f861eb55d32353b3bbff908891a75bb0",
         "bodymmh3" : 393324696,
         "headermd5" : "a91a8cc9907e923eb08191fee3bb75c7",
         "headermmh3" : 141730637
      },
      "length" : 148
   },
   "asn" : "AS139646",
   "city" : "Chai Wan",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 200 OK\r\nServer: Proxy\r\n\r\nUnauthorized ...\r\nIP Address: <srcip>\r\nMAC Address: \r\nServer Time: 2024-11-07 13:32:03\r\nAuth Result: \u65e0\u6548\u7528\u6237.",
   "datamd5" : "29c7d193dd0a6e088b03d9720a858448",
   "datammh3" : 1551827226,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS139646",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NET-154-23-0-0-1",
      "organization" : "PSINet, Inc.",
      "subnet" : "154.23.0.0/19"
   },
   "ip" : "154.23.6.216",
   "ipv6" : "false",
   "latitude" : "22.2678",
   "location" : "22.2678,114.2380",
   "longitude" : "114.2380",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "HONG KONG Megalayer Technology Co.,Limited",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 119,
   "product" : "Proxy",
   "productvendor" : "Proxy",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "154.23.0.0/18",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
221.128.234.15

Network
221.128.128.0/17

Domain(s)
imidc.com

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://221.128.234.15:119/ 200

Reverse DNS
unknown.imidc.com

ASN
AS55933

Organization
Cloudie Limited

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Proxy Proxy

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
2fe5e9a74a1db3eb041cfb839d8a9bf9

HTTP Header MD5
a91a8cc9907e923eb08191fee3bb75c7

HTTP Body MD5
0fe9269c8302ebaf9964b61455385d3b

HTTP/1.0 200 OK
Server: Proxy




Unauthorized ...

IP Address: <srcip>
MAC Address: 
Server Time: 2024-11-07 13:32:02
Auth Result: 无效用户.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:03.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "0fe9269c8302ebaf9964b61455385d3b",
         "bodymmh3" : -1060933476,
         "headermd5" : "a91a8cc9907e923eb08191fee3bb75c7",
         "headermmh3" : 141730637
      },
      "length" : 162
   },
   "asn" : "AS55933",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 200 OK\r\nServer: Proxy\r\n\r\n\r\n\r\n\r\nUnauthorized ...\r\n\r\nIP Address: <srcip>\r\nMAC Address: \r\nServer Time: 2024-11-07 13:32:02\r\nAuth Result: \u65e0\u6548\u7528\u6237.\r\n\r\n\r\n",
   "datamd5" : "2fe5e9a74a1db3eb041cfb839d8a9bf9",
   "datammh3" : 4027228,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "imidc.com"
   ],
   "geolocus" : {
      "asn" : "AS55933",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "cnnic.cn",
         "fbiinet.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CYNET",
      "organization" : "Beijing Chang Ying Netowrk Service Co.Ltd",
      "subnet" : "221.128.224.0/20"
   },
   "host" : [
      "unknown"
   ],
   "hostname" : [
      "unknown.imidc.com"
   ],
   "ip" : "221.128.234.15",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cloudie Limited",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 119,
   "product" : "Proxy",
   "productvendor" : "Proxy",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "OK",
   "reverse" : [
      "unknown.imidc.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "221.128.128.0/17",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
154.55.177.254

Network
154.55.160.0/19

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://154.55.177.254:119/ 200

ASN
AS139646

Organization
HONG KONG Megalayer Technology Co.,Limited

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Proxy Proxy

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
3faa9a850cd0f5585c1132a7d37306e3

HTTP Header MD5
a91a8cc9907e923eb08191fee3bb75c7

HTTP Body MD5
c569fcdc61247208febfd40cd03496cf

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...
IP Address: <srcip>
MAC Address: 
Server Time: 2024-11-07 13:32:28
Auth Result: 无效用户.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:02.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "c569fcdc61247208febfd40cd03496cf",
         "bodymmh3" : 1158386149,
         "headermd5" : "a91a8cc9907e923eb08191fee3bb75c7",
         "headermmh3" : 141730637
      },
      "length" : 148
   },
   "asn" : "AS139646",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 200 OK\r\nServer: Proxy\r\n\r\nUnauthorized ...\r\nIP Address: <srcip>\r\nMAC Address: \r\nServer Time: 2024-11-07 13:32:28\r\nAuth Result: \u65e0\u6548\u7528\u6237.",
   "datamd5" : "3faa9a850cd0f5585c1132a7d37306e3",
   "datammh3" : -636068627,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS139646",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "COGENT-154-55-16",
      "organization" : "PSINet, Inc.",
      "subnet" : "154.55.176.0/20"
   },
   "ip" : "154.55.177.254",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "HONG KONG Megalayer Technology Co.,Limited",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 119,
   "product" : "Proxy",
   "productvendor" : "Proxy",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "154.55.160.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
1.192.203.236

Network
1.192.200.0/22

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://1.192.203.236:119/ 200

ASN
AS137687

Organization
Luoyang, Henan Province, P.R.China.

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Proxy Proxy

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
20a6e69bf17b85684696e832cecf4baa

HTTP Header MD5
a91a8cc9907e923eb08191fee3bb75c7

HTTP Body MD5
ebfed318d7bdce445ffd1d93a6dc79fd

HTTP/1.0 200 OK
Server: Proxy




Unauthorized ...

IP Address: <srcip>
MAC Address: 
Server Time: 2024-11-07 13:30:44
Auth Result: 无效用户.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:02.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ebfed318d7bdce445ffd1d93a6dc79fd",
         "bodymmh3" : 1420905990,
         "headermd5" : "a91a8cc9907e923eb08191fee3bb75c7",
         "headermmh3" : 141730637
      },
      "length" : 162
   },
   "asn" : "AS137687",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 200 OK\r\nServer: Proxy\r\n\r\n\r\n\r\n\r\nUnauthorized ...\r\n\r\nIP Address: <srcip>\r\nMAC Address: \r\nServer Time: 2024-11-07 13:30:44\r\nAuth Result: \u65e0\u6548\u7528\u6237.\r\n\r\n\r\n",
   "datamd5" : "20a6e69bf17b85684696e832cecf4baa",
   "datammh3" : 134154334,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS137687",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinatelecom.cn",
         "hntele.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-HA",
      "organization" : "CHINANET henan province network",
      "subnet" : "1.192.200.0/22"
   },
   "ip" : "1.192.203.236",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Luoyang, Henan Province, P.R.China.",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 119,
   "product" : "Proxy",
   "productvendor" : "Proxy",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "1.192.200.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
36.46.134.217

Network
36.46.128.0/19

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://36.46.134.217:119/ 200

ASN
AS134768

Organization
CHINANET SHAANXI province Cloud Base network

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Proxy Proxy

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
03500328c8a2f20bb1a05d8fd5dabe12

HTTP Header MD5
a91a8cc9907e923eb08191fee3bb75c7

HTTP Body MD5
031f071fcc6757aa97ae59c4a040a900

HTTP/1.0 200 OK
Server: Proxy




Unauthorized ...

IP Address: <srcip>
MAC Address: 
Server Time: 2024-11-07 13:32:01
Auth Result: 无效用户.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:02.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "031f071fcc6757aa97ae59c4a040a900",
         "bodymmh3" : -742170192,
         "headermd5" : "a91a8cc9907e923eb08191fee3bb75c7",
         "headermmh3" : 141730637
      },
      "length" : 162
   },
   "asn" : "AS134768",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 200 OK\r\nServer: Proxy\r\n\r\n\r\n\r\n\r\nUnauthorized ...\r\n\r\nIP Address: <srcip>\r\nMAC Address: \r\nServer Time: 2024-11-07 13:32:01\r\nAuth Result: \u65e0\u6548\u7528\u6237.\r\n\r\n\r\n",
   "datamd5" : "03500328c8a2f20bb1a05d8fd5dabe12",
   "datammh3" : 1872398955,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS134768",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinatelecom.cn",
         "xa.sn.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-SN",
      "organization" : "CHINANET SHAANXI PROVINCE NETWORK",
      "subnet" : "36.46.128.0/19"
   },
   "ip" : "36.46.134.217",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CHINANET SHAANXI province Cloud Base network",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 119,
   "product" : "Proxy",
   "productvendor" : "Proxy",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "36.46.128.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 164,921 in 0.045 second(s)

221.128.236.38:119 (tcp/http) - last seen on 2024-11-07 at 05:32:31 UTC

154.55.175.203:119 (tcp/http) - last seen on 2024-11-07 at 05:32:31 UTC

125.94.68.103:119 (tcp/http) - last seen on 2024-11-07 at 05:32:04 UTC

82.79.116.9:119 (tcp/http) - last seen on 2024-11-07 at 05:32:04 UTC

36.111.184.180:119 (tcp/http) - last seen on 2024-11-07 at 05:32:03 UTC

154.23.6.216:119 (tcp/http) - last seen on 2024-11-07 at 05:32:03 UTC

221.128.234.15:119 (tcp/http) - last seen on 2024-11-07 at 05:32:03 UTC

154.55.177.254:119 (tcp/http) - last seen on 2024-11-07 at 05:32:02 UTC

1.192.203.236:119 (tcp/http) - last seen on 2024-11-07 at 05:32:02 UTC

36.46.134.217:119 (tcp/http) - last seen on 2024-11-07 at 05:32:02 UTC