Returning 10 result(s) out of 6,070 in 0.053 second(s)

  • 80.125.55.0:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:54:35 UTC

    • IP
      80.125.55.0
      Network
      80.124.0.0/15
      Domain(s)
      sfr.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Fortinet FortiOS
      URL

      https://80.125.55.0:20443/ 200

      Reverse DNS
      0.55.125.80.rev.sfr.net
      ASN
      AS15557
      Organization
      Societe Francaise Du Radiotelephone - SFR SA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      fortinet-subca2001
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FWF40FTK21002529
      SHA256 Fingerprint
      eaf555fa9859f48e3a8e7b140651930d920c623f82eb9596e51243fb6f0d0b37
      Validity Not Before
      2021-05-12T07:42:51Z
      Validity Not After
      2056-01-19T03:14:07Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      afa9ec2f66c14fa2ddea4792ef1bffc5
      HTTP Header MD5
      999424cae6adadf8dcf5708229b89bbb
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:54:25 GMT
      ETag: "83-65badf00"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:54:35.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "83-65badf00"
                  }
               ],
               "headermd5" : "999424cae6adadf8dcf5708229b89bbb",
               "headermmh3" : 659233022
            },
            "length" : 567
         },
         "asn" : "AS15557",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "FR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:54:25 GMT\r\nETag: \"83-65badf00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "afa9ec2f66c14fa2ddea4792ef1bffc5",
         "datammh3" : -1860126350,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "sfr.net"
         ],
         "fingerprint" : {
            "md5" : "f55c53e0a20462fafa6f16cd87fd57fd",
            "sha1" : "df12b524623aa0cb7ea04461a8cc8331235b0aa4",
            "sha256" : "eaf555fa9859f48e3a8e7b140651930d920c623f82eb9596e51243fb6f0d0b37"
         },
         "hostname" : [
            "0.55.125.80.rev.sfr.net"
         ],
         "ip" : "80.125.55.0",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "fortinet-subca2001",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "48.8582",
         "location" : "48.8582,2.3387",
         "longitude" : "2.3387",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Societe Francaise Du Radiotelephone - SFR SA",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "0.55.125.80.rev.sfr.net"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "2a:c6:ab",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "125.80.rev.sfr.net",
            "55.125.80.rev.sfr.net",
            "80.rev.sfr.net",
            "rev.sfr.net"
         ],
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FWF40FTK21002529",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "80.124.0.0/15",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2056-01-19T03:14:07Z",
            "notbefore" : "2021-05-12T07:42:51Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 186.118.188.41:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:54:35 UTC

    • IP
      186.118.188.41
      Network
      186.118.188.0/22
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Fortinet FortiOS
      URL

      https://186.118.188.41:20443/ 200

      ASN
      AS3816
      Organization
      COLOMBIA TELECOMUNICACIONES S.A. ESP BIC
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      fortinet-subca2001
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FG4H0ETB21903652
      SHA256 Fingerprint
      538b4a5d75cad6c4253683666d331344f68d47a1220d3cfadfc6755ff97830c3
      Validity Not Before
      2021-10-08T02:54:13Z
      Validity Not After
      2056-01-19T03:14:07Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      afa9ec2f66c14fa2ddea4792ef1bffc5
      HTTP Header MD5
      999424cae6adadf8dcf5708229b89bbb
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:54:25 GMT
      ETag: "83-6642a980"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:54:35.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "value" : "83-6642a980",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "999424cae6adadf8dcf5708229b89bbb",
               "headermmh3" : 535044279
            },
            "length" : 567
         },
         "asn" : "AS3816",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "C\u00facuta",
         "country" : "CO",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:54:25 GMT\r\nETag: \"83-6642a980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "afa9ec2f66c14fa2ddea4792ef1bffc5",
         "datammh3" : -1860126350,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "fingerprint" : {
            "md5" : "8604d53e28598f2cbbd84bced21f667d",
            "sha1" : "8f3d0a54906bc8950b3ab6738f8b90448e4aad40",
            "sha256" : "538b4a5d75cad6c4253683666d331344f68d47a1220d3cfadfc6755ff97830c3"
         },
         "geolocus" : {
            "asn" : "AS3816",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "CO",
            "countryname" : "Colombia",
            "domain" : [
               "telefonica.com"
            ],
            "isineu" : "false",
            "latitude" : "4.570868",
            "location" : "4.570868,-74.297333",
            "longitude" : "-74.297333",
            "netname" : "CO-CTSE-LACNIC",
            "organization" : "COLOMBIA TELECOMUNICACIONES S.A. ESP",
            "subnet" : "186.118.188.0/22"
         },
         "ip" : "186.118.188.41",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "fortinet-subca2001",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "7.8946",
         "location" : "7.8946,-72.5018",
         "longitude" : "-72.5018",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COLOMBIA TELECOMUNICACIONES S.A. ESP BIC",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "3d:79:95",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FG4H0ETB21903652",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "186.118.188.0/22",
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2056-01-19T03:14:07Z",
            "notbefore" : "2021-10-08T02:54:13Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 45.81.214.28:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:54:10 UTC

    • IP
      45.81.214.28
      Network
      45.81.212.0/22
      Domain(s)
      alphalink.fr
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product <enterprise field>: device.productversion

      Operating System
      Fortinet FortiOS
      URL

      https://45.81.214.28:20443/ 200

      Reverse DNS
      28-214-81-45.reverse.alphalink.fr
      ASN
      AS25540
      Organization
      Alphalink SASU
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      fortinet-subca2001
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FGT40FTK24042811
      SHA256 Fingerprint
      3d9f2e0c70673cf8292ea649aa012f87900856cef4f7b4446ef45ba1f895fa05
      Validity Not Before
      2024-03-06T09:53:12Z
      Validity Not After
      2056-05-26T20:48:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      afa9ec2f66c14fa2ddea4792ef1bffc5
      HTTP Header MD5
      999424cae6adadf8dcf5708229b89bbb
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:54:00 GMT
      ETag: "83-66e77500"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:54:10.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "83-66e77500"
                  }
               ],
               "headermd5" : "999424cae6adadf8dcf5708229b89bbb",
               "headermmh3" : -1755058413
            },
            "length" : 567
         },
         "asn" : "AS25540",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Paris",
         "country" : "FR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:54:00 GMT\r\nETag: \"83-66e77500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "afa9ec2f66c14fa2ddea4792ef1bffc5",
         "datammh3" : -1860126350,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor",
            "productversion" : "<enterprise field>: device.productversion"
         },
         "domain" : [
            "alphalink.fr"
         ],
         "fingerprint" : {
            "md5" : "562ce6b43b6330d68dea4a8ccf663db9",
            "sha1" : "20273f3fff8a697483af8fe0b3f42fba610d7021",
            "sha256" : "3d9f2e0c70673cf8292ea649aa012f87900856cef4f7b4446ef45ba1f895fa05"
         },
         "geolocus" : {
            "asn" : "AS25540",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "FR",
            "countryname" : "France",
            "domain" : [
               "alphalink.fr",
               "init-sys.com"
            ],
            "isineu" : "true",
            "latitude" : "46.227638",
            "location" : "46.227638,2.213749",
            "longitude" : "2.213749",
            "netname" : "FR-INITSYS-20190521",
            "organization" : "INIT SYS SAS",
            "subnet" : "45.81.212.0/22"
         },
         "host" : [
            "28-214-81-45"
         ],
         "hostname" : [
            "28-214-81-45.reverse.alphalink.fr"
         ],
         "ip" : "45.81.214.28",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "fortinet-subca2001",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "48.8323",
         "location" : "48.8323,2.4075",
         "longitude" : "2.4075",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Alphalink SASU",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "28-214-81-45.reverse.alphalink.fr"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "02:96:56:ee",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "reverse.alphalink.fr"
         ],
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FGT40FTK24042811",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "45.81.212.0/22",
         "tld" : [
            "fr"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2056-05-26T20:48:33Z",
            "notbefore" : "2024-03-06T09:53:12Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 153.156.190.194:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:53:11 UTC

    • IP
      153.156.190.194
      Network
      153.128.0.0/10
      Domain(s)
      ocn.ne.jp
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product <enterprise field>: device.productversion

      Operating System
      Fortinet FortiOS
      URL

      https://153.156.190.194:20443/ 200

      Reverse DNS
      p3001194-ipngnfx01osakakita.osaka.ocn.ne.jp
      ASN
      AS4713
      Organization
      NTT Communications Corporation
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      fortinet-subca2001
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FGT60FTK2109CGVP
      SHA256 Fingerprint
      e9961b24b1f49dc1e41638eb694009b31dcf7604a81241e43fb5a14255eb5939
      Validity Not Before
      2021-12-22T04:07:00Z
      Validity Not After
      2056-01-19T03:14:07Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4ba48cdbc3858e61ac62f6c8f0bfd487
      HTTP Header MD5
      182ab85f46146b55dc771cc3936243cf
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:53:01 GMT
      Server: xxxxxxxx-xxxxx
      ETag: "83-660b2e48"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:53:11.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "value" : "83-660b2e48",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "182ab85f46146b55dc771cc3936243cf",
               "headermmh3" : 1077982072
            },
            "length" : 592
         },
         "asn" : "AS4713",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Sobe",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:53:01 GMT\r\nServer: xxxxxxxx-xxxxx\r\nETag: \"83-660b2e48\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "4ba48cdbc3858e61ac62f6c8f0bfd487",
         "datammh3" : -1410810157,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor",
            "productversion" : "<enterprise field>: device.productversion"
         },
         "domain" : [
            "ocn.ne.jp"
         ],
         "fingerprint" : {
            "md5" : "e9a1e7f0f2ea56f0ef1772ebda1e001a",
            "sha1" : "448a4a31dfd41176c756bf16c35f563fb4eb6e21",
            "sha256" : "e9961b24b1f49dc1e41638eb694009b31dcf7604a81241e43fb5a14255eb5939"
         },
         "geolocus" : {
            "asn" : "AS4713",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "nic.ad.jp",
               "ocn.ad.jp"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "OCN",
            "organization" : "NTT Communications Corporation",
            "subnet" : "153.128.0.0/10"
         },
         "host" : [
            "p3001194-ipngnfx01osakakita"
         ],
         "hostname" : [
            "p3001194-ipngnfx01osakakita.osaka.ocn.ne.jp"
         ],
         "ip" : "153.156.190.194",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "fortinet-subca2001",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "26.3372",
         "location" : "26.3372,127.7816",
         "longitude" : "127.7816",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "NTT Communications Corporation",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "p3001194-ipngnfx01osakakita.osaka.ocn.ne.jp"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "43:7c:eb",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "osaka.ocn.ne.jp"
         ],
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FGT60FTK2109CGVP",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "153.128.0.0/10",
         "tld" : [
            "ne.jp"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2056-01-19T03:14:07Z",
            "notbefore" : "2021-12-22T04:07:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 187.32.46.109:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:51:51 UTC

    • IP
      187.32.46.109
      Network
      187.32.0.0/18
      Domain(s)
      ctbctelecom.com.br
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product <enterprise field>: device.productversion

      Operating System
      Fortinet FortiOS
      URL

      https://187.32.46.109:20443/ 200

      Reverse DNS
      187-032-046-109.static.ctbctelecom.com.br
      ASN
      AS16735
      Organization
      ALGAR TELECOM SA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      support
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FGT60ETK20032787
      SHA256 Fingerprint
      bd8b8bd0eb0e237e01988120273cc34bf71587e94cf3920f1bfb4bed7442888c
      Validity Not Before
      2020-05-07T00:57:50Z
      Validity Not After
      2038-01-19T03:14:07Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      afa9ec2f66c14fa2ddea4792ef1bffc5
      HTTP Header MD5
      999424cae6adadf8dcf5708229b89bbb
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:51:40 GMT
      ETag: "83-65f1e60a"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:51:51.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "83-65f1e60a"
                  }
               ],
               "headermd5" : "999424cae6adadf8dcf5708229b89bbb",
               "headermmh3" : -914995432
            },
            "length" : 567
         },
         "asn" : "AS16735",
         "ca" : "false",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:51:40 GMT\r\nETag: \"83-65f1e60a\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "afa9ec2f66c14fa2ddea4792ef1bffc5",
         "datammh3" : -1860126350,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor",
            "productversion" : "<enterprise field>: device.productversion"
         },
         "domain" : [
            "ctbctelecom.com.br"
         ],
         "fingerprint" : {
            "md5" : "3eb4b47eac428daf7d942933b74be05a",
            "sha1" : "df4e09392800946d6f16f8ba4956c199df4aae08",
            "sha256" : "bd8b8bd0eb0e237e01988120273cc34bf71587e94cf3920f1bfb4bed7442888c"
         },
         "geolocus" : {
            "asn" : "AS16735",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "algartelecom.com.br",
               "cert.br",
               "ctbctelecom.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "71.208.516/0001-74",
            "organization" : "ALGAR TELECOM S/A",
            "subnet" : "187.32.0.0/16"
         },
         "host" : [
            "187-032-046-109"
         ],
         "hostname" : [
            "187-032-046-109.static.ctbctelecom.com.br"
         ],
         "ip" : "187.32.46.109",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "support",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "latitude" : "-23.4772",
         "location" : "-23.4772,-46.6679",
         "longitude" : "-46.6679",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ALGAR TELECOM SA",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "187-032-046-109.static.ctbctelecom.com.br"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "50:58:0e",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "static.ctbctelecom.com.br"
         ],
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FGT60ETK20032787",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "187.32.0.0/18",
         "tld" : [
            "com.br"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2038-01-19T03:14:07Z",
            "notbefore" : "2020-05-07T00:57:50Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 185.54.182.206:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:51:20 UTC

    • IP
      185.54.182.206
      Network
      185.54.180.0/22
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product <enterprise field>: device.productversion

      Operating System
      Fortinet FortiOS
      URL

      https://185.54.182.206:20443/ 200

      ASN
      AS201975
      Organization
      Uniscape B.V.
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      fortinet-subca2001
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FGT60FTK23084361
      SHA256 Fingerprint
      1da9111f386336b2daa8484857b9c7b44c90b94a538c66b430c480c2a6b06e43
      Validity Not Before
      2023-05-04T22:45:01Z
      Validity Not After
      2056-05-26T20:48:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4ba48cdbc3858e61ac62f6c8f0bfd487
      HTTP Header MD5
      182ab85f46146b55dc771cc3936243cf
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:51:09 GMT
      Server: xxxxxxxx-xxxxx
      ETag: "83-65c2719b"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:51:20.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "value" : "83-65c2719b",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "182ab85f46146b55dc771cc3936243cf",
               "headermmh3" : -141346878
            },
            "length" : 592
         },
         "asn" : "AS201975",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Rotterdam",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:51:09 GMT\r\nServer: xxxxxxxx-xxxxx\r\nETag: \"83-65c2719b\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "4ba48cdbc3858e61ac62f6c8f0bfd487",
         "datammh3" : -1410810157,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor",
            "productversion" : "<enterprise field>: device.productversion"
         },
         "fingerprint" : {
            "md5" : "1c769d3defb4ca0fe71d9ae4d10f9414",
            "sha1" : "c79e1883dc222d99fe2936b5474d973412e7f772",
            "sha256" : "1da9111f386336b2daa8484857b9c7b44c90b94a538c66b430c480c2a6b06e43"
         },
         "ip" : "185.54.182.206",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "fortinet-subca2001",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "51.9188",
         "location" : "51.9188,4.4721",
         "longitude" : "4.4721",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Uniscape B.V.",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "01:fa:64:19",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FGT60FTK23084361",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "185.54.180.0/22",
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2056-05-26T20:48:33Z",
            "notbefore" : "2023-05-04T22:45:01Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 78.189.223.87:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:50:49 UTC

    • IP
      78.189.223.87
      Network
      78.189.208.0/20
      Domain(s)
      ttnet.com.tr
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product <enterprise field>: device.productversion

      Operating System
      Fortinet FortiOS
      URL

      https://78.189.223.87:20443/ 200

      Reverse DNS
      78.189.223.87.static.ttnet.com.tr
      ASN
      AS47331
      Organization
      Turk Telekom
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      fortinet-subca2001
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FGT60FTK2309AN2D
      SHA256 Fingerprint
      2f9967973bef3fc2ed6d475d1d4672c8f590b295610ad5b4aa66dab83a902b7b
      Validity Not Before
      2023-05-22T23:29:35Z
      Validity Not After
      2056-05-26T20:48:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      afa9ec2f66c14fa2ddea4792ef1bffc5
      HTTP Header MD5
      999424cae6adadf8dcf5708229b89bbb
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:50:38 GMT
      ETag: "83-65f1de59"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:50:49.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "value" : "83-65f1de59",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "999424cae6adadf8dcf5708229b89bbb",
               "headermmh3" : -17996112
            },
            "length" : 567
         },
         "asn" : "AS47331",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Istanbul",
         "country" : "TR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:50:38 GMT\r\nETag: \"83-65f1de59\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "afa9ec2f66c14fa2ddea4792ef1bffc5",
         "datammh3" : -1860126350,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor",
            "productversion" : "<enterprise field>: device.productversion"
         },
         "domain" : [
            "ttnet.com.tr"
         ],
         "fingerprint" : {
            "md5" : "1e0ca9f2bb3645178e19686446a92f14",
            "sha1" : "640eaed33fea8690400cfe28cde6f2f544ca4e3b",
            "sha256" : "2f9967973bef3fc2ed6d475d1d4672c8f590b295610ad5b4aa66dab83a902b7b"
         },
         "geolocus" : {
            "asn" : "AS9121",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "TR",
            "countryname" : "Turkey",
            "domain" : [
               "ttnet.com.tr",
               "turktelekom.com.tr"
            ],
            "isineu" : "false",
            "latitude" : "38.963745",
            "location" : "38.963745,35.243322",
            "longitude" : "35.243322",
            "netname" : "TurkTelekom",
            "organization" : "TurkTelekom",
            "subnet" : "78.189.208.0/20"
         },
         "host" : [
            78
         ],
         "hostname" : [
            "78.189.223.87.static.ttnet.com.tr"
         ],
         "ip" : "78.189.223.87",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "fortinet-subca2001",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "41.0551",
         "location" : "41.0551,28.9347",
         "longitude" : "28.9347",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Turk Telekom",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "78.189.223.87.static.ttnet.com.tr"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "02:17:48:9a",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "189.223.87.static.ttnet.com.tr",
            "223.87.static.ttnet.com.tr",
            "87.static.ttnet.com.tr",
            "static.ttnet.com.tr"
         ],
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FGT60FTK2309AN2D",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "78.189.208.0/20",
         "tld" : [
            "com.tr"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2056-05-26T20:48:33Z",
            "notbefore" : "2023-05-22T23:29:35Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 204.199.66.2:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:50:17 UTC

    • IP
      204.199.66.2
      Network
      204.199.64.0/22
      Domain(s)
      centurylink.com.co
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Fortinet FortiOS
      URL

      https://204.199.66.2:20443/ 200

      Reverse DNS
      204-199-66-2.dia.static.centurylink.com.co
      ASN
      AS3549
      Organization
      LVLT-3549
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      fortinet-subca2001
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FG6H1ETB20902566
      SHA256 Fingerprint
      681dd240040d05af949553ae9211c637a869829e54e6310d61232940f2129f3a
      Validity Not Before
      2020-06-29T06:04:43Z
      Validity Not After
      2056-01-19T03:14:07Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2b0ca53cec1da5bfb0b06151a42afe7a
      HTTP Header MD5
      aa7f210d0495fdc8933e8db09cc927db
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:50:07 GMT
      Server: xxxxxxxx-xxxxx
      Last-Modified: Tue, 06 Jun 2023 16:54:12 GMT
      ETag: "83-647f64b4"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:50:17.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Tue, 06 Jun 2023 16:54:12 GMT"
                  },
                  {
                     "value" : "83-647f64b4",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "aa7f210d0495fdc8933e8db09cc927db",
               "headermmh3" : 387415091
            },
            "length" : 638
         },
         "asn" : "AS3549",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Bogot\u00e1",
         "country" : "CO",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:50:07 GMT\r\nServer: xxxxxxxx-xxxxx\r\nLast-Modified: Tue, 06 Jun 2023 16:54:12 GMT\r\nETag: \"83-647f64b4\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "2b0ca53cec1da5bfb0b06151a42afe7a",
         "datammh3" : 366042462,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "centurylink.com.co"
         ],
         "fingerprint" : {
            "md5" : "ff4a56147d39baf54bc8650dac2aa3d7",
            "sha1" : "318512cb7b45468f3fdfa1f6a4826f4741f4f51e",
            "sha256" : "681dd240040d05af949553ae9211c637a869829e54e6310d61232940f2129f3a"
         },
         "geolocus" : {
            "asn" : "AS3549",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "CO",
            "countryname" : "Colombia",
            "domain" : [
               "centurylink.com",
               "centurylink.com.co",
               "ciriontechnologies.com",
               "lumen.com"
            ],
            "isineu" : "false",
            "latitude" : "4.570868",
            "location" : "4.570868,-74.297333",
            "longitude" : "-74.297333",
            "netname" : "NET-204-199-64-0-1",
            "organization" : "CTL Colombia",
            "subnet" : "204.199.64.0/19"
         },
         "host" : [
            "204-199-66-2"
         ],
         "hostname" : [
            "204-199-66-2.dia.static.centurylink.com.co"
         ],
         "ip" : "204.199.66.2",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "fortinet-subca2001",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "4.6115",
         "location" : "4.6115,-74.0833",
         "longitude" : "-74.0833",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LVLT-3549",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "204-199-66-2.dia.static.centurylink.com.co"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "14:02:f9",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "static.centurylink.com.co",
            "dia.static.centurylink.com.co"
         ],
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FG6H1ETB20902566",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "204.199.64.0/22",
         "tld" : [
            "com.co"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2056-01-19T03:14:07Z",
            "notbefore" : "2020-06-29T06:04:43Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 46.218.52.100:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:49:52 UTC

    • IP
      46.218.52.100
      Network
      46.218.0.0/16
      Domain(s)
      sfr.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Fortinet FortiOS
      URL

      https://46.218.52.100:20443/ 200

      Reverse DNS
      100.52.218.46.rev.sfr.net
      ASN
      AS15557
      Organization
      Societe Francaise Du Radiotelephone - SFR SA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      support
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FWF30E5620004633
      SHA256 Fingerprint
      45882dd8bc8ac398fbc9caf1e0315609be3fad85105a4cdc98e0d94034ca01d4
      Validity Not Before
      2020-11-03T06:54:04Z
      Validity Not After
      2038-01-19T03:14:07Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab5b4ae4312b710ef3e4975473f89d7e
      HTTP Header MD5
      b0d96c370950756d4be0970cc498963a
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:49:42 GMT
      Server: xxxxxxxx-xxxxx
      Last-Modified: Mon, 29 Jan 2024 19:20:34 GMT
      ETag: "83-65b7fa82"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https   'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:49:52.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 29 Jan 2024 19:20:34 GMT"
                  },
                  {
                     "value" : "83-65b7fa82",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "b0d96c370950756d4be0970cc498963a",
               "headermmh3" : -1880106639
            },
            "length" : 637
         },
         "asn" : "AS15557",
         "ca" : "false",
         "city" : "Paris",
         "country" : "FR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:49:42 GMT\r\nServer: xxxxxxxx-xxxxx\r\nLast-Modified: Mon, 29 Jan 2024 19:20:34 GMT\r\nETag: \"83-65b7fa82\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https   'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "ab5b4ae4312b710ef3e4975473f89d7e",
         "datammh3" : 1826643348,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "sfr.net"
         ],
         "fingerprint" : {
            "md5" : "72732ed83169b308c5b380d173c4e989",
            "sha1" : "5ef442424ffe4db1f5bb575b89e4603c675ebc8d",
            "sha256" : "45882dd8bc8ac398fbc9caf1e0315609be3fad85105a4cdc98e0d94034ca01d4"
         },
         "geolocus" : {
            "asn" : "AS15557",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "FR",
            "countryname" : "France",
            "domain" : [
               "completel.fr",
               "sfr.net"
            ],
            "isineu" : "true",
            "latitude" : "46.227638",
            "location" : "46.227638,2.213749",
            "longitude" : "2.213749",
            "netname" : "C4638-00015-001",
            "organization" : "CompleTel France NET",
            "subnet" : "46.218.0.0/16"
         },
         "host" : [
            100
         ],
         "hostname" : [
            "100.52.218.46.rev.sfr.net"
         ],
         "ip" : "46.218.52.100",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "support",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "latitude" : "48.8323",
         "location" : "48.8323,2.4075",
         "longitude" : "2.4075",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Societe Francaise Du Radiotelephone - SFR SA",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "100.52.218.46.rev.sfr.net"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "64:3a:60",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "218.46.rev.sfr.net",
            "46.rev.sfr.net",
            "52.218.46.rev.sfr.net",
            "rev.sfr.net"
         ],
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FWF30E5620004633",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "46.218.0.0/16",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2038-01-19T03:14:07Z",
            "notbefore" : "2020-11-03T06:54:04Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 46.218.3.100:20443 (tcp/http/tls) - last seen on 2024-11-21 at 09:47:55 UTC

    • IP
      46.218.3.100
      Network
      46.218.0.0/16
      Domain(s)
      sfr.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Fortinet FortiOS
      URL

      https://46.218.3.100:20443/ 200

      Reverse DNS
      100.3.218.46.rev.sfr.net
      ASN
      AS15557
      Organization
      Societe Francaise Du Radiotelephone - SFR SA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      fortinet-subca2001
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FWF40FTK21001384
      SHA256 Fingerprint
      50c181fd72bec1c05a2b9bdd9f6251433767826d10e874f140cd216415442d5d
      Validity Not Before
      2021-05-12T08:04:15Z
      Validity Not After
      2056-01-19T03:14:07Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2b0ca53cec1da5bfb0b06151a42afe7a
      HTTP Header MD5
      aa7f210d0495fdc8933e8db09cc927db
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 09:47:45 GMT
      Server: xxxxxxxx-xxxxx
      Last-Modified: Tue, 31 Jan 2023 05:04:32 GMT
      ETag: "83-63d8a160"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:47:55.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Tue, 31 Jan 2023 05:04:32 GMT"
                  },
                  {
                     "value" : "83-63d8a160",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "aa7f210d0495fdc8933e8db09cc927db",
               "headermmh3" : -1075063039
            },
            "length" : 638
         },
         "asn" : "AS15557",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "FR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 09:47:45 GMT\r\nServer: xxxxxxxx-xxxxx\r\nLast-Modified: Tue, 31 Jan 2023 05:04:32 GMT\r\nETag: \"83-63d8a160\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "2b0ca53cec1da5bfb0b06151a42afe7a",
         "datammh3" : 366042462,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "sfr.net"
         ],
         "fingerprint" : {
            "md5" : "a9867e012ddc810935f9261ca549533c",
            "sha1" : "9428742e4f3e680886ebd90c5578003d1c6fbd08",
            "sha256" : "50c181fd72bec1c05a2b9bdd9f6251433767826d10e874f140cd216415442d5d"
         },
         "geolocus" : {
            "asn" : "AS15557",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "FR",
            "countryname" : "France",
            "domain" : [
               "completel.fr",
               "sfr.net"
            ],
            "isineu" : "true",
            "latitude" : "46.227638",
            "location" : "46.227638,2.213749",
            "longitude" : "2.213749",
            "netname" : "C4638-00015-001",
            "organization" : "CompleTel France NET",
            "subnet" : "46.218.0.0/16"
         },
         "host" : [
            100
         ],
         "hostname" : [
            "100.3.218.46.rev.sfr.net"
         ],
         "ip" : "46.218.3.100",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "fortinet-subca2001",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "48.8582",
         "location" : "48.8582,2.3387",
         "longitude" : "2.3387",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Societe Francaise Du Radiotelephone - SFR SA",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 20443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "100.3.218.46.rev.sfr.net"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "2a:d2:9a",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "218.46.rev.sfr.net",
            "3.218.46.rev.sfr.net",
            "46.rev.sfr.net",
            "rev.sfr.net"
         ],
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FWF40FTK21001384",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "46.218.0.0/16",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2056-01-19T03:14:07Z",
            "notbefore" : "2021-05-12T08:04:15Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }