Returning 10 result(s) out of 36,248 in 0.074 second(s)

  • 130.164.145.17:16993 (tcp/http) - last seen on 2024-11-07 at 05:51:15 UTC

    • IP
      130.164.145.17
      Network
      130.164.128.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://130.164.145.17:16993/ 200

      ASN
      AS25019
      Organization
      Saudi Telecom Company JSC
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      43f617e14b1cb912245557db598906db
      HTTP Header MD5
      f620e9aa6fa885cb3ba70c96073f3028
      HTTP Body MD5
      13b8369f911fb613be01e0f8564c9b79
    • HTTP/1.1 200 OK
      Date: Thu, 07 Nov 2024 08:51:13 GMT
      Server: Webs
      X-Frame-Options: SAMEORIGIN
      ETag: "0-acc-1e0"
      Content-Length: 480
      Content-Type: text/html
      Connection: close
      Last-Modified: Wed, 25 Sep 2019 08:02:22 GMT
      
      <!doctype html>
      <html>
      <head>
      	<title></title>
      	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
      	<meta http-equiv="X-UA-Compatible" content="IE=edge" >
      	<meta http-equiv="Pragma" content="no-cache" />
      	<meta http-equiv="Cache-Control" content="no-cache, must-revalidate" />
      	<meta http-equiv="Expires" content="0" />
      </head>
      <body>
      </body>
      <script>
      	window.location.href = "/doc/page/login.asp?_" + (new Date()).getTime();
      </script>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:51:15.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "13b8369f911fb613be01e0f8564c9b79",
               "bodymmh3" : 1400196417,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "0-acc-1e0"
                  },
                  {
                     "name" : "Last-Modified",
                     "value" : "Wed, 25 Sep 2019 08:02:22 GMT"
                  }
               ],
               "headermd5" : "f620e9aa6fa885cb3ba70c96073f3028",
               "headermmh3" : 1676757567
            },
            "length" : 709
         },
         "asn" : "AS25019",
         "city" : "Dammam",
         "country" : "SA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 07 Nov 2024 08:51:13 GMT\r\nServer: Webs\r\nX-Frame-Options: SAMEORIGIN\r\nETag: \"0-acc-1e0\"\r\nContent-Length: 480\r\nContent-Type: text/html\r\nConnection: close\r\nLast-Modified: Wed, 25 Sep 2019 08:02:22 GMT\r\n\r\n\ufeff<!doctype html>\r\n<html>\r\n<head>\r\n\t<title></title>\r\n\t<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" >\r\n\t<meta http-equiv=\"Pragma\" content=\"no-cache\" />\r\n\t<meta http-equiv=\"Cache-Control\" content=\"no-cache, must-revalidate\" />\r\n\t<meta http-equiv=\"Expires\" content=\"0\" />\r\n</head>\r\n<body>\r\n</body>\r\n<script>\r\n\twindow.location.href = \"/doc/page/login.asp?_\" + (new Date()).getTime();\r\n</script>\r\n</html>",
         "datamd5" : "43f617e14b1cb912245557db598906db",
         "datammh3" : -1984802626,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "130.164.145.17",
         "ipv6" : "false",
         "latitude" : "26.4336",
         "location" : "26.4336,50.1116",
         "longitude" : "50.1116",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Saudi Telecom Company JSC",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 16993,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "130.164.128.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 2.88.2.108:16993 (tcp/http) - last seen on 2024-11-07 at 05:50:47 UTC

    • IP
      2.88.2.108
      Network
      2.88.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://2.88.2.108:16993/ 302

      HTTP Title
      Object moved
      ASN
      AS25019
      Organization
      Saudi Telecom Company JSC
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft IIS 10.0
      HTTP Component(s)
      Microsoft ASP.NET 4.0.30319
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ecb5af0c997b98c55c63922fd12f5284
      HTTP Header MD5
      910d12dfec7e344c60081ee857977d5d
      HTTP Body MD5
      46342920f2ef5d8001c9d081512e7a76
    • HTTP/1.1 302 Found
      Cache-Control: private
      Content-Type: text/html; charset=utf-8
      Location: /Login.aspx
      Server: Microsoft-IIS/10.0
      X-AspNet-Version: 4.0.30319
      X-Powered-By: ASP.NET
      Date: Thu, 07 Nov 2024 05:50:47 GMT
      Connection: close
      Content-Length: 128
      
      <html><head><title>Object moved</title></head><body>
      <h2>Object moved to <a href="/Login.aspx">here</a>.</h2>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:50:47.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "46342920f2ef5d8001c9d081512e7a76",
               "bodymmh3" : 1926467488,
               "component" : [
                  {
                     "product" : "ASP.NET",
                     "productversion" : "4.0.30319",
                     "productvendor" : "Microsoft"
                  }
               ],
               "headermd5" : "910d12dfec7e344c60081ee857977d5d",
               "headermmh3" : -1198465742,
               "title" : "Object moved"
            },
            "length" : 394
         },
         "asn" : "AS25019",
         "city" : "Riyadh",
         "country" : "SA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nLocation: /Login.aspx\r\nServer: Microsoft-IIS/10.0\r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Thu, 07 Nov 2024 05:50:47 GMT\r\nConnection: close\r\nContent-Length: 128\r\n\r\n<html><head><title>Object moved</title></head><body>\r\n<h2>Object moved to <a href=\"/Login.aspx\">here</a>.</h2>\r\n</body></html>\r\n",
         "datamd5" : "ecb5af0c997b98c55c63922fd12f5284",
         "datammh3" : 870520339,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS25019",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "SA",
            "countryname" : "Saudi Arabia",
            "domain" : [
               "stc.com.sa"
            ],
            "isineu" : "false",
            "latitude" : "23.885942",
            "location" : "23.885942,45.079162",
            "longitude" : "45.079162",
            "netname" : "SAUDINET_DSL_POOL",
            "organization" : "SaudiNet DSL pool_Dynamic IPs",
            "subnet" : "2.88.0.0/16"
         },
         "ip" : "2.88.2.108",
         "ipv6" : "false",
         "latitude" : "24.6869",
         "location" : "24.6869,46.7224",
         "longitude" : "46.7224",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Saudi Telecom Company JSC",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "osversion" : [
            "Server 2016",
            10
         ],
         "port" : 16993,
         "product" : "IIS",
         "productvendor" : "Microsoft",
         "productversion" : "10.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "2.88.0.0/15",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 85.190.230.134:16993 (tcp/http) - last seen on 2024-11-07 at 05:50:28 UTC

    • IP
      85.190.230.134
      Network
      85.190.230.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://85.190.230.134:16993/ 200

      ASN
      AS6866
      Organization
      Cyprus Telecommunications Authority
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0993ebdf8fd60c687d53ba7005b1c24d
      HTTP Header MD5
      bdd21f5a86747d05843c828e0965c094
      HTTP Body MD5
      0e286281cd03ef77daa6087a8ddf1cce
    • HTTP/1.1 200 OK
      Strict-Transport-Security: max-age=31536000; includeSubdomains
      X-XSS-Protection: 1; mode=block
      X-Frame-Options: SAMEORIGIN
      X-Content-Type-Options: nosniff
      Content-Length: 4229
      Content-Type: text/html
      Date: Thu, 07 Nov 2024 05:50:27 UTC
      
      <!--
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
      -->
      <html xmlns="http://www.w3.org/1999/xhtml">
      <head>
          <META http-equiv="Content-Type" content="text/html; charset=utf-8">
          <META HTTP-EQUIV="Pragma" CONTENT="no_cache">
          <META NAME="ATEN International Co Ltd." CONTENT="(c) ATEN International Co Ltd. 2010">
          <title></title>
      <!--    <link rel="shortcut icon" href="../images/favicon.ico"> -->
          <link rel="stylesheet" href="../css/basic.css" type="text/css">
          <script language="JavaScript">
          if (window != top)
              top.location.href = "/";//location.href;
          </script>
          <script language="JavaScript" src="../js/utils.js"></script>
          <script language="JavaScript" type="text/javascript">
          var lang_setting;
          lang_setting = ReadCookie("language");
          if (lang_setting == null)
          {
              CreateCookie("langSetFlag","0");
              CreateCookie("language","English");
              lang_setting = "English";
          }
          document.write("<script type=\"text/javascript\", src = \"../js/lang/" + lang_setting + "/lang_str.js\"><\/script>");
          function checkform()
          {
              if(Trim(form1.name.value) == "")
              {
                  alert(lang.LANG_LOGIN_INVALID_USERNAME);
                  form1.name.focus();
                  return;
              }
              if(Trim(form1.pwd.value) == "")
              {
                  alert(lang.LANG_LOGIN_INVALID_PASSWORD);
                  form1.pwd.focus();
                  return;
              }
              document.form1.submit();
              return;
          }
          function checkEnt(e)
          {
              var key = window.event ? e.keyCode : e.which;
              if(key == 13)
              {
      
                  checkform();
              }
          }
          function PageInit()
          {
              var msg = document.getElementById("login_word");
              msg.setAttribute("value", lang.LANG_LOGIN_LOGIN);
              return;
          }
      </script>
      </head>
      <body onload='PageInit()'>
          <table style="margin: 0px; height: 100%; width: 100%" border="0" background=#FFFFFF cellpadding="0" cellspacing="0">
              <tr>
                  <td style="height: 25%; vertical-align: bottom; text-align: center">
                      <table style="margin: 0 auto;" border="0" width="412px">
                          <tr>
                              <td>
                                  <img src="../images/logo.gif" style="margin: 0px; padding: 0px;">
                              </td>
                          </tr>
                      </table>
                  </td>
              </tr>
              <tr style="width: 100%">
                  <td style="height: 100%; vertical-align: top;">
                      <form name="form1" action="/cgi/login.cgi" method="post" autocomplete="off">
                          <table class="login">
                              <tr><td align="center" colspan="2">
                                  <h3><script>document.writeln(lang.LANG_LOGIN_PROMPT);</script></h3>
                              </td></tr>
                              <tr>
                                  <td align="right" width="40%">
                                      <script>document.writeln(lang.LANG_LOGIN_USERNAME)</script>
                                  </td>
                                  <td>
                                      <input align="left" name="name" size="20" maxlength="64" style="width:146px;" type="text" onKeyDown="checkEnt(event)">
                                  </td>
                              </tr>
                              <tr>
                                  <td align="right" width="40%">
                                      <script>document.writeln(lang.LANG_LOGIN_PASSWORD)</script>
                                  </td>
                                  <td>
                                      <input align="left" name="pwd" size="20" maxlength="64" style="width:146px;" type="password" onKeyDown="checkEnt(event)">
                                  </td>
                              </tr>
                              <tr>
                                  <td align="center" colspan="2">
                                      <input id="login_word" class="btnStyle" name="Login" type="button" onclick="javascript: checkform(this)">
                                  </td>
                              </tr>
                          </table>
                      </form>
                  </td>
              </tr>
          </table>
      </body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:50:28.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "file" : [
                  "login.cgi"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "0e286281cd03ef77daa6087a8ddf1cce",
               "bodymmh3" : -2022788506,
               "headermd5" : "bdd21f5a86747d05843c828e0965c094",
               "headermmh3" : -1473678290
            },
            "length" : 4491
         },
         "asn" : "AS6866",
         "city" : "Nicosia",
         "country" : "CY",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nContent-Length: 4229\r\nContent-Type: text/html\r\nDate: Thu, 07 Nov 2024 05:50:27 UTC\r\n\r\n<!--\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n-->\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\n<head>\n    <META http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\n    <META HTTP-EQUIV=\"Pragma\" CONTENT=\"no_cache\">\n    <META NAME=\"ATEN International Co Ltd.\" CONTENT=\"(c) ATEN International Co Ltd. 2010\">\n    <title></title>\n<!--    <link rel=\"shortcut icon\" href=\"../images/favicon.ico\"> -->\n    <link rel=\"stylesheet\" href=\"../css/basic.css\" type=\"text/css\">\n    <script language=\"JavaScript\">\n    if (window != top)\n        top.location.href = \"/\";//location.href;\n    </script>\n    <script language=\"JavaScript\" src=\"../js/utils.js\"></script>\n    <script language=\"JavaScript\" type=\"text/javascript\">\n    var lang_setting;\n    lang_setting = ReadCookie(\"language\");\n    if (lang_setting == null)\n    {\n        CreateCookie(\"langSetFlag\",\"0\");\n        CreateCookie(\"language\",\"English\");\n        lang_setting = \"English\";\n    }\n    document.write(\"<script type=\\\"text/javascript\\\", src = \\\"../js/lang/\" + lang_setting + \"/lang_str.js\\\"><\\/script>\");\n    function checkform()\n    {\n        if(Trim(form1.name.value) == \"\")\n        {\n            alert(lang.LANG_LOGIN_INVALID_USERNAME);\n            form1.name.focus();\n            return;\n        }\n        if(Trim(form1.pwd.value) == \"\")\n        {\n            alert(lang.LANG_LOGIN_INVALID_PASSWORD);\n            form1.pwd.focus();\n            return;\n        }\n        document.form1.submit();\n        return;\n    }\n    function checkEnt(e)\n    {\n        var key = window.event ? e.keyCode : e.which;\n        if(key == 13)\n        {\n\n            checkform();\n        }\n    }\n    function PageInit()\n    {\n        var msg = document.getElementById(\"login_word\");\n        msg.setAttribute(\"value\", lang.LANG_LOGIN_LOGIN);\n        return;\n    }\n</script>\n</head>\n<body onload='PageInit()'>\n    <table style=\"margin: 0px; height: 100%; width: 100%\" border=\"0\" background=#FFFFFF cellpadding=\"0\" cellspacing=\"0\">\n        <tr>\n            <td style=\"height: 25%; vertical-align: bottom; text-align: center\">\n                <table style=\"margin: 0 auto;\" border=\"0\" width=\"412px\">\n                    <tr>\n                        <td>\n                            <img src=\"../images/logo.gif\" style=\"margin: 0px; padding: 0px;\">\n                        </td>\n                    </tr>\n                </table>\n            </td>\n        </tr>\n        <tr style=\"width: 100%\">\n            <td style=\"height: 100%; vertical-align: top;\">\n                <form name=\"form1\" action=\"/cgi/login.cgi\" method=\"post\" autocomplete=\"off\">\n                    <table class=\"login\">\n                        <tr><td align=\"center\" colspan=\"2\">\n                            <h3><script>document.writeln(lang.LANG_LOGIN_PROMPT);</script></h3>\n                        </td></tr>\n                        <tr>\n                            <td align=\"right\" width=\"40%\">\n                                <script>document.writeln(lang.LANG_LOGIN_USERNAME)</script>\n                            </td>\n                            <td>\n                                <input align=\"left\" name=\"name\" size=\"20\" maxlength=\"64\" style=\"width:146px;\" type=\"text\" onKeyDown=\"checkEnt(event)\">\n                            </td>\n                        </tr>\n                        <tr>\n                            <td align=\"right\" width=\"40%\">\n                                <script>document.writeln(lang.LANG_LOGIN_PASSWORD)</script>\n                            </td>\n                            <td>\n                                <input align=\"left\" name=\"pwd\" size=\"20\" maxlength=\"64\" style=\"width:146px;\" type=\"password\" onKeyDown=\"checkEnt(event)\">\n                            </td>\n                        </tr>\n                        <tr>\n                            <td align=\"center\" colspan=\"2\">\n                                <input id=\"login_word\" class=\"btnStyle\" name=\"Login\" type=\"button\" onclick=\"javascript: checkform(this)\">\n                            </td>\n                        </tr>\n                    </table>\n                </form>\n            </td>\n        </tr>\n    </table>\n</body>\n</html>",
         "datamd5" : "0993ebdf8fd60c687d53ba7005b1c24d",
         "datammh3" : 237833661,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "85.190.230.134",
         "ipv6" : "false",
         "latitude" : "35.1638",
         "location" : "35.1638,33.3639",
         "longitude" : "33.3639",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Cyprus Telecommunications Authority",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 16993,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "85.190.230.0/24",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 92.98.13.127:16993 (tcp/http) - last seen on 2024-11-07 at 05:50:28 UTC

    • IP
      92.98.13.127
      Network
      92.96.0.0/14
      Domain(s)
      alshamil.net.ae
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://92.98.13.127:16993/ 404

      Reverse DNS
      bba-92-98-13-127.alshamil.net.ae
      ASN
      AS5384
      Organization
      Emirates Telecommunications Group Company (etisalat Group) Pjsc
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4b5b496ff238cb6bc91391c80dbcb192
      HTTP Header MD5
      4b5b496ff238cb6bc91391c80dbcb192
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 404 Not Found
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:50:28.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "4b5b496ff238cb6bc91391c80dbcb192",
               "headermmh3" : -2050145619
            },
            "length" : 24
         },
         "asn" : "AS5384",
         "city" : "Abu Dhabi",
         "country" : "AE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 404 Not Found\r\n",
         "datamd5" : "4b5b496ff238cb6bc91391c80dbcb192",
         "datammh3" : -1733658736,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "alshamil.net.ae"
         ],
         "host" : [
            "bba-92-98-13-127"
         ],
         "hostname" : [
            "bba-92-98-13-127.alshamil.net.ae"
         ],
         "ip" : "92.98.13.127",
         "ipv6" : "false",
         "latitude" : "24.4542",
         "location" : "24.4542,54.4060",
         "longitude" : "54.4060",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Emirates Telecommunications Group Company (etisalat Group) Pjsc",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 16993,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Not Found",
         "reverse" : [
            "bba-92-98-13-127.alshamil.net.ae"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 404,
         "subnet" : "92.96.0.0/14",
         "tld" : [
            "net.ae"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 45.152.211.134:16993 (tcp/http) - last seen on 2024-11-07 at 05:50:26 UTC

    • IP
      45.152.211.134
      Alternative IP(s)
      104.21.21.10 172.67.195.168 2606:4700:3034:0:0:0:6815:150a 2606:4700:3037:0:0:0:ac43:c3a8
      Network
      45.152.208.0/22
      Domain(s)
      seedbox.vip
      Device

      <enterprise field>: device.class

      Operating System
      FreeBSD FreeBSD
      URL

      http://45.152.211.134:16993/ 501

      HTTP Title
      501 Not Implemented
      Reverse DNS
      www.seedbox.vip
      ASN
      AS60781
      Organization
      LeaseWeb Netherlands B.V.
      Protocol
      http
      Source
      datascan
    • Operating System
      FreeBSD FreeBSD
      Product
      Tinyproxy Project Tinyproxy 1.11.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      967dde30a7367c50bafccd546aa6f39b
      HTTP Header MD5
      29244a77e81fee56b57c34bc9825e2d0
      HTTP Body MD5
      13528e1b3386da4e1dcd345673b59637
    • HTTP/1.1 501 Not Implemented
      Server: tinyproxy/1.11.1
      Content-Type: text/html
      Connection: close
      
      <?xml version="1.0" encoding="UTF-8" ?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
      <html>
      <head><title>501 Not Implemented</title></head>
      <body>
      <h1>Not Implemented</h1>
      <p>Unknown method or unsupported protocol.</p>
      <hr />
      <p><em>Generated by tinyproxy version 1.11.1.</em></p>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:50:26.000Z",
         "alternativeip" : [
            "104.21.21.10",
            "172.67.195.168",
            "2606:4700:3034:0:0:0:6815:150a",
            "2606:4700:3037:0:0:0:ac43:c3a8"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "13528e1b3386da4e1dcd345673b59637",
               "bodymmh3" : -448351396,
               "headermd5" : "29244a77e81fee56b57c34bc9825e2d0",
               "headermmh3" : -346890124,
               "title" : "501 Not Implemented"
            },
            "length" : 452
         },
         "asn" : "AS60781",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 501 Not Implemented\r\nServer: tinyproxy/1.11.1\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\" ?>\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.1//EN\" \"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd\">\n<html>\n<head><title>501 Not Implemented</title></head>\n<body>\n<h1>Not Implemented</h1>\n<p>Unknown method or unsupported protocol.</p>\n<hr />\n<p><em>Generated by tinyproxy version 1.11.1.</em></p>\n</body>\n</html>\n",
         "datamd5" : "967dde30a7367c50bafccd546aa6f39b",
         "datammh3" : -1468862837,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "seedbox.vip"
         ],
         "geolocus" : {
            "asn" : "AS60781",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "NL",
            "countryname" : "Netherlands",
            "domain" : [
               "rapidseedbox.com",
               "seedbox.vip"
            ],
            "isineu" : "true",
            "latitude" : "52.132633",
            "location" : "52.132633,5.291266",
            "longitude" : "5.291266",
            "netname" : "IL-YAZAMNIK4-2019091",
            "organization" : "IL-YAZAMNIK4-2019091",
            "subnet" : "45.152.210.0/23"
         },
         "host" : [
            "www"
         ],
         "hostname" : [
            "www.seedbox.vip"
         ],
         "ip" : "45.152.211.134",
         "ipv6" : "false",
         "latitude" : "52.3824",
         "location" : "52.3824,4.8995",
         "longitude" : "4.8995",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LeaseWeb Netherlands B.V.",
         "os" : "FreeBSD",
         "osvendor" : "FreeBSD",
         "port" : 16993,
         "product" : "Tinyproxy",
         "productvendor" : "Tinyproxy Project",
         "productversion" : "1.11.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Not Implemented",
         "reverse" : [
            "www.seedbox.vip"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 501,
         "subnet" : "45.152.208.0/22",
         "tld" : [
            "vip"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 195.133.7.18:16993 (tcp/http) - last seen on 2024-11-07 at 05:50:26 UTC

    • IP
      195.133.7.18
      Network
      195.133.7.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://195.133.7.18:16993/ 407

      ASN
      AS3320
      Organization
      Deutsche Telekom AG
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f463de9e4679358548c52e4c143b812e
      HTTP Header MD5
      5d05d97752d578d8a360d2fa5480a66f
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm="Please enter username and password"
      Date: Thu, 07 Nov 2024 05:50:26 GMT
      Content-Length: 0
      Connection: close
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:50:26.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "5d05d97752d578d8a360d2fa5480a66f",
               "headermmh3" : 175059782,
               "realm" : "Please enter username and password"
            },
            "length" : 191
         },
         "asn" : "AS3320",
         "country" : "DE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"Please enter username and password\"\r\nDate: Thu, 07 Nov 2024 05:50:26 GMT\r\nContent-Length: 0\r\nConnection: close\r\n\r\n",
         "datamd5" : "f463de9e4679358548c52e4c143b812e",
         "datammh3" : 1210863269,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "195.133.7.18",
         "ipv6" : "false",
         "latitude" : "51.4444",
         "location" : "51.4444,7.0114",
         "longitude" : "7.0114",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Deutsche Telekom AG",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 16993,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "195.133.7.0/24",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 115.236.153.174:16993 (tcp/http) - last seen on 2024-11-07 at 05:50:06 UTC

    • IP
      115.236.153.174
      Network
      115.236.128.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://115.236.153.174:16993/ 302

      ASN
      AS58461
      Organization
      CT-HangZhou-IDC
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0e05a5da60be1283e3316143ccb47daa
      HTTP Header MD5
      241ae471b1e77e90eb5573e2673a027c
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 302 Found
      Location: https://access-hsk.oray.com/limit/?r=tcp%253A%252F%252F404h784g10%252Eeicp%252Evip%253A16993
      Connection: close
      Cache-Control: no-cache
      Expires: Thu, 01 Jan 1970 00:00:00 GMT
      Pragma: no-cache
      Content-Type: text/html; charset=UTF-8
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:50:06.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "oray.com"
               ],
               "hostname" : [
                  "access-hsk.oray.com"
               ],
               "url" : [
                  "https://access-hsk.oray.com/limit/?r=tcp%253A%252F%252F404h784g10%252Eeicp%252Evip%253A16993"
               ]
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1636538602,
               "headermd5" : "241ae471b1e77e90eb5573e2673a027c",
               "headermmh3" : -731550783
            },
            "length" : 287
         },
         "asn" : "AS58461",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nLocation: https://access-hsk.oray.com/limit/?r=tcp%253A%252F%252F404h784g10%252Eeicp%252Evip%253A16993\r\nConnection: close\r\nCache-Control: no-cache\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nPragma: no-cache\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "0e05a5da60be1283e3316143ccb47daa",
         "datammh3" : 1225198684,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS58461",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "189.cn",
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "SHENZHENG-TENGXUN",
            "organization" : "SHENZHENG-TENGXUN",
            "subnet" : "115.236.128.0/19"
         },
         "ip" : "115.236.153.174",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CT-HangZhou-IDC",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 16993,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "115.236.128.0/19",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 84.54.55.134:16993 (tcp/http) - last seen on 2024-11-07 at 05:50:05 UTC

    • IP
      84.54.55.134
      Network
      84.54.55.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://84.54.55.134:16993/ 407

      HTTP Title
      407 Proxy Authentication Required
      ASN
      AS44881
      Organization
      CyberTech LLC
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bbdd0ef18ac1bb935546f899a9c15b82
      HTTP Header MD5
      7b6af4d669f1735012ccbd9b5f402335
      HTTP Body MD5
      d0733a01623260995e3203769289c13f
    • HTTP/1.0 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm="proxy"
      Connection: close
      Content-type: text/html; charset=utf-8
      
      <html><head><title>407 Proxy Authentication Required</title></head>
      <body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:50:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d0733a01623260995e3203769289c13f",
               "bodymmh3" : -533483165,
               "headermd5" : "7b6af4d669f1735012ccbd9b5f402335",
               "headermmh3" : 1023953321,
               "realm" : "proxy",
               "title" : "407 Proxy Authentication Required"
            },
            "length" : 401
         },
         "asn" : "AS44881",
         "country" : "AE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"proxy\"\r\nConnection: close\r\nContent-type: text/html; charset=utf-8\r\n\r\n<html><head><title>407 Proxy Authentication Required</title></head>\r\n<body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>\r\n",
         "datamd5" : "bbdd0ef18ac1bb935546f899a9c15b82",
         "datammh3" : 709695866,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "84.54.55.134",
         "ipv6" : "false",
         "latitude" : "23.7500",
         "location" : "23.7500,54.5000",
         "longitude" : "54.5000",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CyberTech LLC",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 16993,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "84.54.55.0/24",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 45.138.86.31:16993 (tcp/http) - last seen on 2024-11-07 at 05:50:05 UTC

    • IP
      45.138.86.31
      Network
      45.138.84.0/22
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Juniper JunOS
      URL

      http://45.138.86.31:16993/ 302

      ASN
      AS206804
      Organization
      EstNOC OY
      Protocol
      http
      Source
      datascan
    • Operating System
      Juniper JunOS
      HTTP Component(s)
      PulseSecure Pulse Connect Secure
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      69d9ec1d2d90d96aaf19a01a8e999ace
      HTTP Header MD5
      20dd8e34a95f4c9b73d19038a53be7f8
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 302 Found
      Location: /dana-na/auth/url_11/welcome.cgi
      Content-Type: text/html; charset=utf-8
      Set-Cookie: DSSIGNIN=url_11; path=/dana-na/; expires=Thu, 31-Dec-2037 00:00:00 GMT; secure
      Set-Cookie: DSIVS=; path=/; expires=Thu, 01 Jan 1970 22:00:00 GMT; secure
      Set-Cookie: DSSignInURL=/; path=/; secure
      Connection: close
      Content-Length: 0
      Strict-Transport-Security: max-age=31536000
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:50:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1636538602,
               "component" : [
                  {
                     "product" : "Pulse Connect Secure",
                     "productvendor" : "PulseSecure"
                  }
               ],
               "headermd5" : "20dd8e34a95f4c9b73d19038a53be7f8",
               "headermmh3" : 1103171666
            },
            "length" : 399
         },
         "asn" : "AS206804",
         "city" : "Nairobi",
         "country" : "KE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nLocation: /dana-na/auth/url_11/welcome.cgi\r\nContent-Type: text/html; charset=utf-8\r\nSet-Cookie: DSSIGNIN=url_11; path=/dana-na/; expires=Thu, 31-Dec-2037 00:00:00 GMT; secure\r\nSet-Cookie: DSIVS=; path=/; expires=Thu, 01 Jan 1970 22:00:00 GMT; secure\r\nSet-Cookie: DSSignInURL=/; path=/; secure\r\nConnection: close\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n",
         "datamd5" : "69d9ec1d2d90d96aaf19a01a8e999ace",
         "datammh3" : -343912989,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS55933",
            "continent" : "OC",
            "continentname" : "Oceania",
            "country" : "AU",
            "countryname" : "Australia",
            "domain" : [
               "apnic.net"
            ],
            "isineu" : "false",
            "latitude" : "-25.274398",
            "location" : "-25.274398,133.775136",
            "longitude" : "133.775136",
            "netname" : "IANA-NETBLOCK-45",
            "organization" : "This network range is not fully allocated to APNIC.",
            "subnet" : "45.0.0.0/8"
         },
         "ip" : "45.138.86.31",
         "ipv6" : "false",
         "latitude" : "-1.2841",
         "location" : "-1.2841,36.8155",
         "longitude" : "36.8155",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "EstNOC OY",
         "os" : "JunOS",
         "osvendor" : "Juniper",
         "port" : 16993,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "45.138.84.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 211.83.0.33:16993 (tcp/http) - last seen on 2024-11-07 at 05:41:43 UTC

    • IP
      211.83.0.33
      Network
      211.80.0.0/13
      Device

      <enterprise field>: device.class

      URL

      http://211.83.0.33:16993/ 200

      ASN
      AS4538
      Organization
      China Education and Research Network Center
      Protocol
      http
      Source
      datascan
    • Product
      Apache HTTP Server
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      93076f326ccb13382af151d6935d189d
      HTTP Header MD5
      97eb73c41d2d1f332d0a4ddd4c85c3de
      HTTP Body MD5
      9872f0493d3ca1960fe7cd89770c3580
    • HTTP/1.1 200 ok
      Server: Apache
      Content-Length:  221
      Cache-Control: no-cache
      Connection: close
      
      <script>top.self.location.href='http://211.83.41.225/eportal/index.jsp?wlanuserip=<srcip>&wlanacname=NAS&ssid=Ruijie&nasip=10.100.100.114&mac=000000000000&t=wireless-v2-plain&url=http://<ip>:16993/'</script>
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:41:43.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "10.100.100.114",
                  "211.83.41.225"
               ],
               "url" : [
                  "http://211.83.41.225/eportal/index.jsp?wlanuserip="
               ]
            },
            "http" : {
               "bodymd5" : "9872f0493d3ca1960fe7cd89770c3580",
               "bodymmh3" : 754875570,
               "headermd5" : "97eb73c41d2d1f332d0a4ddd4c85c3de",
               "headermmh3" : -1664957083
            },
            "length" : 312
         },
         "asn" : "AS4538",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 ok\r\nServer: Apache\r\nContent-Length:  221\r\nCache-Control: no-cache\r\nConnection: close\r\n\r\n<script>top.self.location.href='http://211.83.41.225/eportal/index.jsp?wlanuserip=<srcip>&wlanacname=NAS&ssid=Ruijie&nasip=10.100.100.114&mac=000000000000&t=wireless-v2-plain&url=http://<ip>:16993/'</script>\r\n\r\n",
         "datamd5" : "93076f326ccb13382af151d6935d189d",
         "datammh3" : 59801135,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4538",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "211.in-addr.arpa",
               "apnic.net",
               "cernet.edu.cn",
               "scut.edu.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CERNET",
            "organization" : "China Education and Research Network",
            "subnet" : "211.80.0.0/13"
         },
         "ip" : "211.83.0.33",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Education and Research Network Center",
         "port" : 16993,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "ok",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "211.80.0.0/13",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }