ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 6,589,962 in 0.204 second(s)

  • 85.128.242.84:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:41 UTC

    • IP
      85.128.242.84
      Network
      85.128.128.0/17
      Domain(s)
      nazwa.pl
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      shared-aog84.rev.nazwa.pl
      ASN
      AS15967
      Organization
      Nazwa.pl Sp.z.o.o.
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2522b38afb00f84c73d2fb3bd7db5f46 
    • * OK IMAP4 ready

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:41.000Z",
   "app" : {
      "length" : 18
   },
   "asn" : "AS15967",
   "country" : "PL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK IMAP4 ready\r\n",
   "datamd5" : "2522b38afb00f84c73d2fb3bd7db5f46",
   "datammh3" : 159457685,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "nazwa.pl"
   ],
   "geolocus" : {
      "asn" : "AS15967",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "PL",
      "countryname" : "Poland",
      "domain" : [
         "nazwa.pl",
         "netart.com"
      ],
      "isineu" : "true",
      "latitude" : "51.919438",
      "location" : "51.919438,19.145136",
      "longitude" : "19.145136",
      "netname" : "NAZWAPL-WEBHOSTING",
      "organization" : "webhosting servers",
      "subnet" : "85.128.192.0/18"
   },
   "host" : [
      "shared-aog84"
   ],
   "hostname" : [
      "shared-aog84.rev.nazwa.pl"
   ],
   "ip" : "85.128.242.84",
   "ipv6" : "false",
   "latitude" : "52.2394",
   "location" : "52.2394,21.0362",
   "longitude" : "21.0362",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Nazwa.pl Sp.z.o.o.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "protocol" : "imap",
   "reverse" : [
      "shared-aog84.rev.nazwa.pl"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subdomains" : [
      "rev.nazwa.pl"
   ],
   "subnet" : "85.128.128.0/17",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "pl"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 192.99.217.48:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:41 UTC

    • IP
      192.99.217.48
      Network
      192.99.0.0/16
      Domain(s)
      fabexp.ca
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      fabexp.ca
      ASN
      AS16276
      Organization
      OVH SAS
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:41.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS16276",
   "city" : "Qu\u00e9bec",
   "country" : "CA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "fabexp.ca"
   ],
   "geolocus" : {
      "asn" : "AS16276",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "domain" : [
         "ip-192-99-192.net",
         "ovh.ca",
         "ovh.net"
      ],
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "OVH-VPS-192-99-192",
      "organization" : "OVH Hosting, Inc.",
      "subnet" : "192.99.192.0/18"
   },
   "hostname" : [
      "fabexp.ca"
   ],
   "ip" : "192.99.217.48",
   "ipv6" : "false",
   "latitude" : "46.8066",
   "location" : "46.8066,-71.2201",
   "longitude" : "-71.2201",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "OVH SAS",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "fabexp.ca"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "192.99.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "ca"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 5.59.248.70:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:41 UTC

    • IP
      5.59.248.70
      Network
      5.59.248.0/21
      Domain(s)
      c1vhosting.it
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Debian
      Reverse DNS
      it-pom-server.powered-by.c1vhosting.it
      ASN
      AS212271
      Organization
      C1V
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Debian
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7c22f3c19a806d83332a78f362c5b39b 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:41.000Z",
   "app" : {
      "length" : 132
   },
   "asn" : "AS212271",
   "city" : "Pomezia",
   "country" : "IT",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.\r\n",
   "datamd5" : "7c22f3c19a806d83332a78f362c5b39b",
   "datammh3" : -344023018,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "c1vhosting.it"
   ],
   "geolocus" : {
      "asn" : "AS204958",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "IT",
      "countryname" : "Italy",
      "domain" : [
         "c1vhosting.it"
      ],
      "isineu" : "true",
      "latitude" : "41.87194",
      "location" : "41.87194,12.56738",
      "longitude" : "12.56738",
      "netname" : "C1V",
      "organization" : "Cinzia Tocci trading as C1V",
      "subnet" : "5.59.248.0/21"
   },
   "host" : [
      "it-pom-server"
   ],
   "hostname" : [
      "it-pom-server.powered-by.c1vhosting.it"
   ],
   "ip" : "5.59.248.70",
   "ipv6" : "false",
   "latitude" : "41.6693",
   "location" : "41.6693,12.5012",
   "longitude" : "12.5012",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "C1V",
   "os" : "Linux",
   "osdistribution" : "Debian",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "it-pom-server.powered-by.c1vhosting.it"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subdomains" : [
      "powered-by.c1vhosting.it"
   ],
   "subnet" : "5.59.248.0/21",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "it"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 37.187.89.9:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:41 UTC

    • IP
      37.187.89.9
      Network
      37.187.0.0/16
      Domain(s)
      ip-37-187-89.eu
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      ns3368558.ip-37-187-89.eu
      ASN
      AS16276
      Organization
      OVH SAS
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e2e64c99596a8bf55137c78aece286f9 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:41.000Z",
   "app" : {
      "length" : 115
   },
   "asn" : "AS16276",
   "country" : "FR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot ready.\r\n",
   "datamd5" : "e2e64c99596a8bf55137c78aece286f9",
   "datammh3" : -1783182320,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ip-37-187-89.eu"
   ],
   "geolocus" : {
      "asn" : "AS16276",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "FR",
      "countryname" : "France",
      "domain" : [
         "ovh.net"
      ],
      "isineu" : "true",
      "latitude" : "46.227638",
      "location" : "46.227638,2.213749",
      "longitude" : "2.213749",
      "netname" : "OVH",
      "organization" : "OVH",
      "subnet" : "37.187.88.0/21"
   },
   "host" : [
      "ns3368558"
   ],
   "hostname" : [
      "ns3368558.ip-37-187-89.eu"
   ],
   "ip" : "37.187.89.9",
   "ipv6" : "false",
   "latitude" : "48.8582",
   "location" : "48.8582,2.3387",
   "longitude" : "2.3387",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "OVH SAS",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "ns3368558.ip-37-187-89.eu"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "37.187.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "eu"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 91.230.245.90:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:40 UTC

    • IP
      91.230.245.90
      Network
      91.230.244.0/23
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      ASN
      AS12859
      Organization
      BIT BV
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2e9aeabbc73c6c469c15163c80535d3d 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:40.000Z",
   "app" : {
      "length" : 115
   },
   "asn" : "AS12859",
   "country" : "NL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.\r\n",
   "datamd5" : "2e9aeabbc73c6c469c15163c80535d3d",
   "datammh3" : 968698092,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "91.230.245.90",
   "ipv6" : "false",
   "latitude" : "52.3824",
   "location" : "52.3824,4.8995",
   "longitude" : "4.8995",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "BIT BV",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "91.230.244.0/23",
   "tls" : "false",
   "transport" : "tcp"
}

  • 212.47.74.240:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:40 UTC

    • IP
      212.47.74.240
      Network
      212.47.64.0/20
      Domain(s)
      contaboserver.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      vmi2206201.contaboserver.net
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:40.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS51167",
   "city" : "D\u00fcsseldorf",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contaboserver.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "GB",
      "countryname" : "United Kingdom",
      "domain" : [
         "as8785.net",
         "astra.net.uk",
         "kcom.com"
      ],
      "isineu" : "false",
      "latitude" : "55.378051",
      "location" : "55.378051,-3.435973",
      "longitude" : "-3.435973",
      "netname" : "CONSTELLATION",
      "organization" : "Constellation Internet",
      "subnet" : "212.47.64.0/20"
   },
   "host" : [
      "vmi2206201"
   ],
   "hostname" : [
      "vmi2206201.contaboserver.net"
   ],
   "ip" : "212.47.74.240",
   "ipv6" : "false",
   "latitude" : "51.1878",
   "location" : "51.1878,6.8607",
   "longitude" : "6.8607",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "vmi2206201.contaboserver.net"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "212.47.64.0/20",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 31.47.78.182:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:39 UTC

    • IP
      31.47.78.182
      Alternative IP(s)
      2a01:a940:447:b0:0:0:0:1
      Network
      31.47.72.0/21
      Domain(s)
      neodigit.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      host0v1b26-a182.neodigit.net
      ASN
      AS15954
      Organization
      Tecnocratica Centro de Datos, S.L.
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      371f25e1ffdf388553499b11e68693d0 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SPECIAL-USE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Mailserver ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:39.000Z",
   "alternativeip" : [
      "2a01:a940:447:b0:0:0:0:1"
   ],
   "app" : {
      "length" : 138
   },
   "asn" : "AS15954",
   "country" : "ES",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SPECIAL-USE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Mailserver ready.\r\n",
   "datamd5" : "371f25e1ffdf388553499b11e68693d0",
   "datammh3" : -1533166944,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "neodigit.net"
   ],
   "host" : [
      "host0v1b26-a182"
   ],
   "hostname" : [
      "host0v1b26-a182.neodigit.net"
   ],
   "ip" : "31.47.78.182",
   "ipv6" : "false",
   "latitude" : "40.4172",
   "location" : "40.4172,-3.6840",
   "longitude" : "-3.6840",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Tecnocratica Centro de Datos, S.L.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "protocol" : "imap",
   "reverse" : [
      "host0v1b26-a182.neodigit.net"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "31.47.72.0/21",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 70.32.81.214:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:39 UTC

    • IP
      70.32.81.214
      Network
      70.32.80.0/20
      Domain(s)
      accessdomain.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      bpdv-hr7w.accessdomain.com
      ASN
      AS398101
      Organization
      GO-DADDY-COM-LLC
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:39.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS398101",
   "city" : "Ashburn",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "accessdomain.com"
   ],
   "geolocus" : {
      "asn" : "AS398101",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "godaddy.com",
         "mtsvc.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "MEDIATEMPLE-106",
      "organization" : "GoDaddy.com, LLC",
      "subnet" : "70.32.80.0/20"
   },
   "host" : [
      "bpdv-hr7w"
   ],
   "hostname" : [
      "bpdv-hr7w.accessdomain.com"
   ],
   "ip" : "70.32.81.214",
   "ipv6" : "false",
   "latitude" : "39.0469",
   "location" : "39.0469,-77.4903",
   "longitude" : "-77.4903",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "GO-DADDY-COM-LLC",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "bpdv-hr7w.accessdomain.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "70.32.80.0/20",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 5.57.59.111:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:39 UTC

    • IP
      5.57.59.111
      Network
      5.57.56.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      ASN
      AS204167
      Organization
      Hyve Ltd
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      72fc19adf80dbef5ce4f8521a2d174f0 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:39.000Z",
   "app" : {
      "length" : 153
   },
   "asn" : "AS204167",
   "country" : "GB",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.\r\n",
   "datamd5" : "72fc19adf80dbef5ce4f8521a2d174f0",
   "datammh3" : -1281521315,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "5.57.59.111",
   "ipv6" : "false",
   "latitude" : "51.4964",
   "location" : "51.4964,-0.1224",
   "longitude" : "-0.1224",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Hyve Ltd",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "5.57.56.0/21",
   "tls" : "false",
   "transport" : "tcp"
}

  • 162.215.14.48:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:39 UTC

    • IP
      162.215.14.48
      Network
      162.215.0.0/17
      Domain(s)
      biznetci.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      biz.biznetci.com
      ASN
      AS46606
      Organization
      UNIFIEDLAYER-AS-1
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:39.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS46606",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "biznetci.com"
   ],
   "geolocus" : {
      "asn" : "AS46606",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "bluehost.com",
         "endurance.com",
         "unifiedlayer.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "UNIFIEDLAYER-NETWORK-15",
      "organization" : "Unified Layer",
      "subnet" : "162.215.0.0/17"
   },
   "host" : [
      "biz"
   ],
   "hostname" : [
      "biz.biznetci.com"
   ],
   "ip" : "162.215.14.48",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "UNIFIEDLAYER-AS-1",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "biz.biznetci.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "162.215.0.0/17",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp"
}