ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 1,233 in 0.072 second(s)

  • 161.97.79.242:2121 (tcp/ftp) - last seen on 2024-11-07 at 05:53:25 UTC

    • IP
      161.97.79.242
      Network
      161.97.64.0/18
      Domain(s)
      appextech.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      ip-242-79-97-161.static-p2020secureserver.appextech.net
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      ftp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      PureFTPD Pure-FTPd
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      94e4ee7b0be9a3c7bfa4a41db9b9ce18 
    • 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 11:23. Server port: 2121.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
500 HTTP command: [get]

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:53:25.000Z",
   "app" : {
      "length" : 347
   },
   "asn" : "AS51167",
   "city" : "Nuremberg",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\r\n220-You are user number 1 of 50 allowed.\r\n220-Local time is now 11:23. Server port: 2121.\r\n220-This is a private system - No anonymous login\r\n220-IPv6 connections are also welcome on this server.\r\n220 You will be disconnected after 15 minutes of inactivity.\r\n500 HTTP command: [get]\r\n",
   "datamd5" : "94e4ee7b0be9a3c7bfa4a41db9b9ce18",
   "datammh3" : -1672157652,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "appextech.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "contabo.de",
         "contabo.net"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "CONTABO",
      "organization" : "Contabo GmbH",
      "subnet" : "161.97.64.0/18"
   },
   "host" : [
      "ip-242-79-97-161"
   ],
   "hostname" : [
      "ip-242-79-97-161.static-p2020secureserver.appextech.net"
   ],
   "ip" : "161.97.79.242",
   "ipv6" : "false",
   "latitude" : "49.4050",
   "location" : "49.4050,11.1617",
   "longitude" : "11.1617",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 2121,
   "product" : "Pure-FTPd",
   "productvendor" : "PureFTPD",
   "protocol" : "ftp",
   "reverse" : [
      "ip-242-79-97-161.static-p2020secureserver.appextech.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subdomains" : [
      "static-p2020secureserver.appextech.net"
   ],
   "subnet" : "161.97.64.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • <access denied by policy>:<access denied by policy> (<access denied by policy>/<access denied by policy>) - last seen on 2024-11-07 at 05:16:15 UTC

    • IP

      <access denied by policy>

      Network

      <access denied by policy>

      Domain(s)
      Operating System

      <access denied by policy> <access denied by policy> <access denied by policy>

      Reverse DNS

      <access denied by policy>

      ASN

      <access denied by policy>

      Organization

      <access denied by policy>

      Protocol

      <access denied by policy>

      Source

      <access denied by policy>

    • Operating System

      <access denied by policy> <access denied by policy> <access denied by policy>

      Product

      <access denied by policy> <access denied by policy> <access denied by policy>

      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5

      <access denied by policy>

    • <access denied by policy>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:16:15.000Z",
   "app" : "<enterprise field>: app",
   "asn" : "<access denied by policy>",
   "city" : "<access denied by policy>",
   "country" : "<access denied by policy>",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<access denied by policy>",
   "datamd5" : "<access denied by policy>",
   "datammh3" : "<access denied by policy>",
   "device" : "<enterprise field>: device",
   "domain" : "<access denied by policy>",
   "geolocus" : "<enterprise field>: geolocus",
   "hostname" : "<access denied by policy>",
   "ip" : "<access denied by policy>",
   "ipv6" : "<access denied by policy>",
   "latitude" : "<access denied by policy>",
   "location" : "<access denied by policy>",
   "longitude" : "<access denied by policy>",
   "node" : "<enterprise field>: node",
   "organization" : "<access denied by policy>",
   "os" : "<access denied by policy>",
   "osdistribution" : "<access denied by policy>",
   "osvendor" : "<access denied by policy>",
   "port" : "<access denied by policy>",
   "product" : "<access denied by policy>",
   "productvendor" : "<access denied by policy>",
   "productversion" : "<access denied by policy>",
   "protocol" : "<access denied by policy>",
   "protocolversion" : "<access denied by policy>",
   "reverse" : "<access denied by policy>",
   "seen_date" : "<access denied by policy>",
   "source" : "<access denied by policy>",
   "subnet" : "<access denied by policy>",
   "tag" : "<enterprise field>: tag",
   "tld" : "<access denied by policy>",
   "tls" : "<access denied by policy>",
   "transport" : "<access denied by policy>",
   "url" : "<access denied by policy>"
}

  • 62.169.20.172:2121 (tcp/unknown) - last seen on 2024-11-07 at 04:08:15 UTC

    • IP
      62.169.20.172
      Network
      62.169.16.0/20
      Domain(s)
      contabo.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      ip-172-20-169-62.static.contabo.net
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      510558d5acdbad9409d65cbc937cd4b6 
    • \x13/multistream/1.0.0

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:08:15.000Z",
   "app" : {
      "length" : 20
   },
   "asn" : "AS51167",
   "city" : "D\u00fcsseldorf",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x13/multistream/1.0.0\n",
   "datamd5" : "510558d5acdbad9409d65cbc937cd4b6",
   "datammh3" : 730508685,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contabo.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "contabo.com",
         "contabo.de"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "TT-20240404",
      "organization" : "Contabo GmbH",
      "subnet" : "62.169.16.0/21"
   },
   "host" : [
      "ip-172-20-169-62"
   ],
   "hostname" : [
      "ip-172-20-169-62.static.contabo.net"
   ],
   "ip" : "62.169.20.172",
   "ipv6" : "false",
   "latitude" : "51.1878",
   "location" : "51.1878,6.8607",
   "longitude" : "6.8607",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 2121,
   "protocol" : "unknown",
   "reverse" : [
      "ip-172-20-169-62.static.contabo.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subdomains" : [
      "static.contabo.net"
   ],
   "subnet" : "62.169.16.0/20",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 38.242.158.54:2121 (tcp/unknown) - last seen on 2024-11-07 at 03:50:13 UTC

    • IP
      38.242.158.54
      Network
      38.242.128.0/19
      Domain(s)
      contaboserver.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      vmi1931315.contaboserver.net
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      510558d5acdbad9409d65cbc937cd4b6 
    • \x13/multistream/1.0.0

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:50:13.000Z",
   "app" : {
      "length" : 20
   },
   "asn" : "AS51167",
   "city" : "D\u00fcsseldorf",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x13/multistream/1.0.0\n",
   "datamd5" : "510558d5acdbad9409d65cbc937cd4b6",
   "datammh3" : 730508685,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contaboserver.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com",
         "contabo.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "COGENT-A",
      "organization" : "PSINet, Inc.",
      "subnet" : "38.242.128.0/19"
   },
   "host" : [
      "vmi1931315"
   ],
   "hostname" : [
      "vmi1931315.contaboserver.net"
   ],
   "ip" : "38.242.158.54",
   "ipv6" : "false",
   "latitude" : "51.1878",
   "location" : "51.1878,6.8607",
   "longitude" : "6.8607",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 2121,
   "protocol" : "unknown",
   "reverse" : [
      "vmi1931315.contaboserver.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "38.242.128.0/19",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 149.102.142.175:2121 (tcp/unknown) - last seen on 2024-11-07 at 03:25:22 UTC

    • IP
      149.102.142.175
      Network
      149.102.128.0/19
      Domain(s)
      contaboserver.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      vmi917639.contaboserver.net
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      510558d5acdbad9409d65cbc937cd4b6 
    • \x13/multistream/1.0.0

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:25:22.000Z",
   "app" : {
      "length" : 20
   },
   "asn" : "AS51167",
   "city" : "D\u00fcsseldorf",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x13/multistream/1.0.0\n",
   "datamd5" : "510558d5acdbad9409d65cbc937cd4b6",
   "datammh3" : 730508685,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contaboserver.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com",
         "contabo.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "COGENT-149-102-16",
      "organization" : "PSINet, Inc.",
      "subnet" : "149.102.136.0/21"
   },
   "host" : [
      "vmi917639"
   ],
   "hostname" : [
      "vmi917639.contaboserver.net"
   ],
   "ip" : "149.102.142.175",
   "ipv6" : "false",
   "latitude" : "51.1878",
   "location" : "51.1878,6.8607",
   "longitude" : "6.8607",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 2121,
   "protocol" : "unknown",
   "reverse" : [
      "vmi917639.contaboserver.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "149.102.128.0/19",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 100.42.190.243:2121 (tcp/unknown) - last seen on 2024-11-07 at 03:24:30 UTC

    • IP
      100.42.190.243
      Network
      100.42.176.0/20
      Domain(s)
      contaboserver.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      vmi1962090.contaboserver.net
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      510558d5acdbad9409d65cbc937cd4b6 
    • \x13/multistream/1.0.0

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:24:30.000Z",
   "app" : {
      "length" : 20
   },
   "asn" : "AS51167",
   "city" : "Karlsruhe",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x13/multistream/1.0.0\n",
   "datamd5" : "510558d5acdbad9409d65cbc937cd4b6",
   "datammh3" : 730508685,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contaboserver.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "contabo.com",
         "contabo.de"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "TT-20240610",
      "organization" : "Contabo GmbH",
      "subnet" : "100.42.184.0/21"
   },
   "host" : [
      "vmi1962090"
   ],
   "hostname" : [
      "vmi1962090.contaboserver.net"
   ],
   "ip" : "100.42.190.243",
   "ipv6" : "false",
   "latitude" : "48.9751",
   "location" : "48.9751,8.4456",
   "longitude" : "8.4456",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 2121,
   "protocol" : "unknown",
   "reverse" : [
      "vmi1962090.contaboserver.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "100.42.176.0/20",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 91.205.173.146:2121 (tcp/ftp) - last seen on 2024-11-07 at 03:15:15 UTC

    • IP
      91.205.173.146
      Network
      91.205.172.0/22
      Device

      <enterprise field>: device.class

      Operating System
      FreeBSD FreeBSD
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      ftp
      Source
      datascan
    • Operating System
      FreeBSD FreeBSD
      Product
      FileZilla FileZilla 0.9.59
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      43999bd7d9933b311d2f2d6fe5413500 
    • 220-FileZilla Server 0.9.59 beta
220-written by Tim Kosse (tim.kosse@filezilla-project.org)
220 Please visit https://filezilla-project.org/
500 Syntax error, command unrecognized.
500 Syntax error, command unrecognized.
500 Syntax error, command unrecognized.
500 Syntax error, command unrecognized.
500 Syntax error, command unrecognized.
500 Syntax error, command unrecognized.
331 Password required for anonymous
530 Login or password incorrect!

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:15:15.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "filezilla-project.org"
         ],
         "hostname" : [
            "filezilla-project.org"
         ],
         "url" : [
            "https://filezilla-project.org/"
         ]
      },
      "ftp" : {
         "anonymous" : "false"
      },
      "length" : 458
   },
   "asn" : "AS51167",
   "city" : "Munich",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "220-FileZilla Server 0.9.59 beta\r\n220-written by Tim Kosse (tim.kosse@filezilla-project.org)\r\n220 Please visit https://filezilla-project.org/\r\n500 Syntax error, command unrecognized.\r\n500 Syntax error, command unrecognized.\r\n500 Syntax error, command unrecognized.\r\n500 Syntax error, command unrecognized.\r\n500 Syntax error, command unrecognized.\r\n500 Syntax error, command unrecognized.\r\n331 Password required for anonymous\n530 Login or password incorrect!\n",
   "datamd5" : "43999bd7d9933b311d2f2d6fe5413500",
   "datammh3" : 1199099665,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "contabo.de",
         "giga-dns.com"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "CONTABO",
      "organization" : "Contabo GmbH",
      "subnet" : "91.205.172.0/23"
   },
   "ip" : "91.205.173.146",
   "ipv6" : "false",
   "latitude" : "48.1077",
   "location" : "48.1077,11.6091",
   "longitude" : "11.6091",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "FreeBSD",
   "osvendor" : "FreeBSD",
   "port" : 2121,
   "product" : "FileZilla",
   "productvendor" : "FileZilla",
   "productversion" : "0.9.59",
   "protocol" : "ftp",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "91.205.172.0/22",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 213.199.58.255:2121 (tcp/ftp) - last seen on 2024-11-07 at 03:15:15 UTC

    • IP
      213.199.58.255
      Network
      213.199.32.0/19
      Domain(s)
      contabo.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      Reverse DNS
      ip-255-58-199-213.static.contabo.net
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      ftp
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      FileZilla FileZilla 1.8.2
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      59a8f8adb4b9f3f4d1d9737fb43d6793 
    • 220-FileZilla Server 1.8.2
220 Please visit https://filezilla-project.org/
501 What are you trying to do? Go away.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:15:15.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "filezilla-project.org"
         ],
         "hostname" : [
            "filezilla-project.org"
         ],
         "url" : [
            "https://filezilla-project.org/"
         ]
      },
      "length" : 118
   },
   "asn" : "AS51167",
   "city" : "D\u00fcsseldorf",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "220-FileZilla Server 1.8.2\r\n220 Please visit https://filezilla-project.org/\r\n501 What are you trying to do? Go away.\r\n",
   "datamd5" : "59a8f8adb4b9f3f4d1d9737fb43d6793",
   "datammh3" : 891756132,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contabo.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "contabo.com",
         "contabo.de"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "TT-20240306",
      "organization" : "Contabo GmbH",
      "subnet" : "213.199.48.0/20"
   },
   "host" : [
      "ip-255-58-199-213"
   ],
   "hostname" : [
      "ip-255-58-199-213.static.contabo.net"
   ],
   "ip" : "213.199.58.255",
   "ipv6" : "false",
   "latitude" : "51.1878",
   "location" : "51.1878,6.8607",
   "longitude" : "6.8607",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 2121,
   "product" : "FileZilla",
   "productvendor" : "FileZilla",
   "productversion" : "1.8.2",
   "protocol" : "ftp",
   "reverse" : [
      "ip-255-58-199-213.static.contabo.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subdomains" : [
      "static.contabo.net"
   ],
   "subnet" : "213.199.32.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 185.252.232.15:2121 (tcp/unknown) - last seen on 2024-11-07 at 01:02:27 UTC

    • IP
      185.252.232.15
      Network
      185.252.232.0/22
      Domain(s)
      contaboserver.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      vmi1774987.contaboserver.net
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      510558d5acdbad9409d65cbc937cd4b6 
    • \x13/multistream/1.0.0

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T01:02:27.000Z",
   "app" : {
      "length" : 20
   },
   "asn" : "AS51167",
   "city" : "D\u00fcsseldorf",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x13/multistream/1.0.0\n",
   "datamd5" : "510558d5acdbad9409d65cbc937cd4b6",
   "datammh3" : 730508685,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contaboserver.net"
   ],
   "host" : [
      "vmi1774987"
   ],
   "hostname" : [
      "vmi1774987.contaboserver.net"
   ],
   "ip" : "185.252.232.15",
   "ipv6" : "false",
   "latitude" : "51.1878",
   "location" : "51.1878,6.8607",
   "longitude" : "6.8607",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 2121,
   "protocol" : "unknown",
   "reverse" : [
      "vmi1774987.contaboserver.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "185.252.232.0/22",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 62.171.136.203:2121 (tcp/ftp) - last seen on 2024-11-06 at 23:19:13 UTC

    • IP
      62.171.136.203
      Network
      62.171.128.0/18
      Domain(s)
      fenyszaru.hu
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      bradburry.fenyszaru.hu
      ASN
      AS51167
      Organization
      Contabo GmbH
      Protocol
      ftp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      PureFTPD Pure-FTPd
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c43c66defdf91b8fdcd07ec0aa403233 
    • 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 1 of 5 allowed.
220-Local time is now 23:19. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
500 HTTP command: [get]

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-06T23:19:13.000Z",
   "app" : {
      "length" : 344
   },
   "asn" : "AS51167",
   "city" : "Nuremberg",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\r\n220-You are user number 1 of 5 allowed.\r\n220-Local time is now 23:19. Server port: 21.\r\n220-This is a private system - No anonymous login\r\n220-IPv6 connections are also welcome on this server.\r\n220 You will be disconnected after 15 minutes of inactivity.\r\n500 HTTP command: [get]\r\n",
   "datamd5" : "c43c66defdf91b8fdcd07ec0aa403233",
   "datammh3" : 1883516295,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "fenyszaru.hu"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "contabo.de",
         "contabo.net"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "CONTABO",
      "organization" : "Contabo GmbH",
      "subnet" : "62.171.128.0/19"
   },
   "host" : [
      "bradburry"
   ],
   "hostname" : [
      "bradburry.fenyszaru.hu"
   ],
   "ip" : "62.171.136.203",
   "ipv6" : "false",
   "latitude" : "49.4050",
   "location" : "49.4050,11.1617",
   "longitude" : "11.1617",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 2121,
   "product" : "Pure-FTPd",
   "productvendor" : "PureFTPD",
   "protocol" : "ftp",
   "reverse" : [
      "bradburry.fenyszaru.hu"
   ],
   "seen_date" : "2024-11-06",
   "source" : "datascan",
   "subnet" : "62.171.128.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "hu"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}