Cyber Defense Search Engine

IP
80.221.156.119

Network
80.221.0.0/16

Domain(s)
inet.fi

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://80.221.156.119:30005/ 401

Reverse DNS
dsl-hkibng12-50dd9c-119.dhcp.inet.fi

ASN
AS1759

Organization
Telia Finland Oyj

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
c7dc378f58fb934cb52f62ecd37adf55

HTTP Header MD5
185fd39bf3066ddf491ebaf8640a1f5d

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="YmU0OGIyOTQ6MzYzZjhmYmM6NjVjODZhYjQ=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:35.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "185fd39bf3066ddf491ebaf8640a1f5d",
         "headermmh3" : 1557862935,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS1759",
   "city" : "Helsinki",
   "country" : "FI",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"YmU0OGIyOTQ6MzYzZjhmYmM6NjVjODZhYjQ=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "c7dc378f58fb934cb52f62ecd37adf55",
   "datammh3" : 562333326,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "inet.fi"
   ],
   "host" : [
      "dsl-hkibng12-50dd9c-119"
   ],
   "hostname" : [
      "dsl-hkibng12-50dd9c-119.dhcp.inet.fi"
   ],
   "ip" : "80.221.156.119",
   "ipv6" : "false",
   "latitude" : "60.1797",
   "location" : "60.1797,24.9344",
   "longitude" : "24.9344",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Telia Finland Oyj",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "dsl-hkibng12-50dd9c-119.dhcp.inet.fi"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subdomains" : [
      "dhcp.inet.fi"
   ],
   "subnet" : "80.221.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "fi"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
192.24.166.38

Network
192.24.128.0/17

Domain(s)
fuse.net

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://192.24.166.38:30005/ 401

Reverse DNS
ip-192-24-166-38.dynamic.fuse.net

ASN
AS6181

Organization
FUSE-NET

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
c8f2d9c8de8f6be8d05b02660f768855

HTTP Header MD5
a72959fb0ee83f99978d475c58bc8458

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="NmFlZjU0YTA6MjYzMGI1YjA6ZDBkYTQ4MTA=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:35.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "a72959fb0ee83f99978d475c58bc8458",
         "headermmh3" : -53209601,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS6181",
   "city" : "Covington",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"NmFlZjU0YTA6MjYzMGI1YjA6ZDBkYTQ4MTA=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "c8f2d9c8de8f6be8d05b02660f768855",
   "datammh3" : 1870678999,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "fuse.net"
   ],
   "geolocus" : {
      "asn" : "AS6181",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "altafiber.com",
         "cinbell.com",
         "fuse.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "FUSE-NET-BLK-13",
      "organization" : "Fuse Internet Access",
      "subnet" : "192.24.128.0/17"
   },
   "host" : [
      "ip-192-24-166-38"
   ],
   "hostname" : [
      "ip-192-24-166-38.dynamic.fuse.net"
   ],
   "ip" : "192.24.166.38",
   "ipv6" : "false",
   "latitude" : "39.0705",
   "location" : "39.0705,-84.5160",
   "longitude" : "-84.5160",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "FUSE-NET",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "ip-192-24-166-38.dynamic.fuse.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subdomains" : [
      "dynamic.fuse.net"
   ],
   "subnet" : "192.24.128.0/17",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
100.42.89.71

Network
100.42.80.0/20

Domain(s)
tcaexpress.com

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://100.42.89.71:30005/ 401

Reverse DNS
100-42-89-71.tcaexpress.com

ASN
AS62643

Organization
EVERTEK

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
95576fa8cd7398456f4e2db23699c9d0

HTTP Header MD5
95eede50ee433437a57f10478244d19e

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="IGIyZDcyNjA6Yzc0YmNjMjA6NGU0OTk5Mjg=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:35.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "95eede50ee433437a57f10478244d19e",
         "headermmh3" : -1992100213,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS62643",
   "city" : "Primghar",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"IGIyZDcyNjA6Yzc0YmNjMjA6NGU0OTk5Mjg=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "95576fa8cd7398456f4e2db23699c9d0",
   "datammh3" : 272989745,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "tcaexpress.com"
   ],
   "geolocus" : {
      "asn" : "AS62643",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "7sigma.com",
         "evertek.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "EVERT-IPV4-2",
      "organization" : "Evertek, Inc",
      "subnet" : "100.42.80.0/20"
   },
   "host" : [
      "100-42-89-71"
   ],
   "hostname" : [
      "100-42-89-71.tcaexpress.com"
   ],
   "ip" : "100.42.89.71",
   "ipv6" : "false",
   "latitude" : "43.0869",
   "location" : "43.0869,-95.6272",
   "longitude" : "-95.6272",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "EVERTEK",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "100-42-89-71.tcaexpress.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subnet" : "100.42.80.0/20",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
146.212.26.96

Network
146.212.0.0/17

Domain(s)
simobil.net

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://146.212.26.96:30005/ 401

Reverse DNS
bng-212-26-96-dsl.simobil.net

ASN
AS21283

Organization
A1 Slovenija telekomunikacijske storitve,d.d.

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
b4676d5069cd7d1628c67ca6274ec514

HTTP Header MD5
d14e03ec61b0f3bb1db2b66483611ff9

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="ZDdkNzgwYjc6NjJmNTUzN2I6ZTc1NWFkYzk=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:35.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "d14e03ec61b0f3bb1db2b66483611ff9",
         "headermmh3" : -786171633,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS21283",
   "city" : "Ljubljana",
   "country" : "SI",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"ZDdkNzgwYjc6NjJmNTUzN2I6ZTc1NWFkYzk=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "b4676d5069cd7d1628c67ca6274ec514",
   "datammh3" : -2056979861,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "simobil.net"
   ],
   "geolocus" : {
      "asn" : "AS21283",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "SI",
      "countryname" : "Slovenia",
      "domain" : [
         "a1.si",
         "simobil.net"
      ],
      "isineu" : "true",
      "latitude" : "46.151241",
      "location" : "46.151241,14.995463",
      "longitude" : "14.995463",
      "netname" : "A1SI-DSL",
      "organization" : "A1 Slovenija",
      "subnet" : "146.212.0.0/16"
   },
   "host" : [
      "bng-212-26-96-dsl"
   ],
   "hostname" : [
      "bng-212-26-96-dsl.simobil.net"
   ],
   "ip" : "146.212.26.96",
   "ipv6" : "false",
   "latitude" : "46.0503",
   "location" : "46.0503,14.5046",
   "longitude" : "14.5046",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "A1 Slovenija telekomunikacijske storitve,d.d.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "bng-212-26-96-dsl.simobil.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subnet" : "146.212.0.0/17",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
38.145.161.39

Alternative IP(s)
141.193.213.10 141.193.213.11

Network
38.145.160.0/19

Domain(s)
empireaccess.com

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://38.145.161.39:30005/ 401

Reverse DNS
ip-pool.cust.empireaccess.com

ASN
AS40545

Organization
EMPIRE-40545

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
84460996427392e62432bf1159bff5d2

HTTP Header MD5
81ed67fb06411efa1f136a3071027c44

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="NjFlY2I4NmM6ZDk0MjU5ZTA6MzJiNTlhYWI=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:35.000Z",
   "alternativeip" : [
      "141.193.213.10",
      "141.193.213.11"
   ],
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "81ed67fb06411efa1f136a3071027c44",
         "headermmh3" : -1274795824,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS40545",
   "city" : "Hornell",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"NjFlY2I4NmM6ZDk0MjU5ZTA6MzJiNTlhYWI=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "84460996427392e62432bf1159bff5d2",
   "datammh3" : -1021931040,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "empireaccess.com"
   ],
   "geolocus" : {
      "asn" : "AS40545",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com",
         "empireaccess.com",
         "etcnpt.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NPTCCCOP-CGNT-NET-15",
      "organization" : "Empire Access",
      "subnet" : "38.145.160.0/19"
   },
   "host" : [
      "ip-pool"
   ],
   "hostname" : [
      "ip-pool.cust.empireaccess.com"
   ],
   "ip" : "38.145.161.39",
   "ipv6" : "false",
   "latitude" : "42.3289",
   "location" : "42.3289,-77.6765",
   "longitude" : "-77.6765",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "EMPIRE-40545",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "ip-pool.cust.empireaccess.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subdomains" : [
      "cust.empireaccess.com"
   ],
   "subnet" : "38.145.160.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
5.137.30.119

Alternative IP(s)
87.226.162.216

Network
5.136.0.0/15

Domain(s)
rt.ru

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://5.137.30.119:30005/ 401

Reverse DNS
ppp-5.137.30.119.nsk.rt.ru

ASN
AS12389

Organization
Rostelecom

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
971fcca0079be4e2d3cb38bb12a29ec2

HTTP Header MD5
c7dafcc6d78da0d4723b193e5b11fd45

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="YWRhZTVmNDY6MWNiZWZiOTc6MzIwNmRhMGU=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:35.000Z",
   "alternativeip" : [
      "87.226.162.216"
   ],
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "c7dafcc6d78da0d4723b193e5b11fd45",
         "headermmh3" : 1418932457,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS12389",
   "city" : "Novosibirsk",
   "country" : "RU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"YWRhZTVmNDY6MWNiZWZiOTc6MzIwNmRhMGU=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "971fcca0079be4e2d3cb38bb12a29ec2",
   "datammh3" : 1839045341,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "rt.ru"
   ],
   "geolocus" : {
      "asn" : "AS12389",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "RU",
      "countryname" : "Russia",
      "domain" : [
         "rt.ru",
         "sinor.ru"
      ],
      "isineu" : "false",
      "latitude" : "61.52401",
      "location" : "61.52401,105.318756",
      "longitude" : "105.318756",
      "netname" : "WEBSTREAM",
      "organization" : "Rostelecom networks",
      "subnet" : "5.137.0.0/16"
   },
   "host" : [
      "ppp-5"
   ],
   "hostname" : [
      "ppp-5.137.30.119.nsk.rt.ru"
   ],
   "ip" : "5.137.30.119",
   "ipv6" : "false",
   "latitude" : "55.0386",
   "location" : "55.0386,82.9425",
   "longitude" : "82.9425",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Rostelecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "ppp-5.137.30.119.nsk.rt.ru"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subdomains" : [
      "119.nsk.rt.ru",
      "137.30.119.nsk.rt.ru",
      "30.119.nsk.rt.ru",
      "nsk.rt.ru"
   ],
   "subnet" : "5.136.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "ru"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
116.251.161.198

Network
116.251.128.0/18

Domain(s)
as55850.net

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://116.251.161.198:30005/ 401

Reverse DNS
ip-116-251-161-198.as55850.net

ASN
AS55850

Organization
Mercury NZ Limited

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
f4428b830ab8e13ccd2fa3464dcb3ecc

HTTP Header MD5
fcbf5e4bfc65d0798c24aef0c2f22011

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="NWUwYmExZmM6N2Y5YzU2Mjg6IDRhY2I5NGY=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:34.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "fcbf5e4bfc65d0798c24aef0c2f22011",
         "headermmh3" : 888888572,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS55850",
   "country" : "NZ",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"NWUwYmExZmM6N2Y5YzU2Mjg6IDRhY2I5NGY=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "f4428b830ab8e13ccd2fa3464dcb3ecc",
   "datammh3" : -116552168,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "as55850.net"
   ],
   "geolocus" : {
      "asn" : "AS55850",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "NZ",
      "countryname" : "New Zealand",
      "domain" : [
         "as55850.net"
      ],
      "isineu" : "false",
      "latitude" : "-40.900557",
      "location" : "-40.900557,174.885971",
      "longitude" : "174.885971",
      "netname" : "MERCURYNZ-NZ",
      "organization" : "Mercury NZ Limited",
      "subnet" : "116.251.160.0/20"
   },
   "host" : [
      "ip-116-251-161-198"
   ],
   "hostname" : [
      "ip-116-251-161-198.as55850.net"
   ],
   "ip" : "116.251.161.198",
   "ipv6" : "false",
   "latitude" : "-42.0009",
   "location" : "-42.0009,173.9980",
   "longitude" : "173.9980",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Mercury NZ Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "ip-116-251-161-198.as55850.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subnet" : "116.251.128.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
38.91.43.164

Network
38.91.43.0/24

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://38.91.43.164:30005/ 401

ASN
AS396168

Organization
THINKBIGNETWORKS-KC

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
e404b2d7ae4c3ac5ab4a3adc0745f1dc

HTTP Header MD5
35d3af486763fb759274317d0d30933d

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="NzZhNTUwNjA6ZmY1OTNlNWE6YjI3MDdkM2Y=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:34.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "35d3af486763fb759274317d0d30933d",
         "headermmh3" : 458426985,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS396168",
   "city" : "Worton",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"NzZhNTUwNjA6ZmY1OTNlNWE6YjI3MDdkM2Y=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "e404b2d7ae4c3ac5ab4a3adc0745f1dc",
   "datammh3" : 38626524,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "geolocus" : {
      "asn" : "AS174",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "COGENT-A",
      "organization" : "PSINet, Inc.",
      "subnet" : "38.91.43.0/24"
   },
   "ip" : "38.91.43.164",
   "ipv6" : "false",
   "latitude" : "39.2745",
   "location" : "39.2745,-76.0922",
   "longitude" : "-76.0922",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "THINKBIGNETWORKS-KC",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subnet" : "38.91.43.0/24",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
222.215.187.227

Network
222.215.160.0/19

Domain(s)
163data.com.cn

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://222.215.187.227:30005/ 401

Reverse DNS
227.187.215.222.broad.dy.sc.dynamic.163data.com.cn

ASN
AS4134

Organization
Chinanet

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
9860928e160007f0f66a2d43819b63ea

HTTP Header MD5
0e192bc990908dd3160bcb5b800889ed

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="NjQwODBiM2U6Njg4YjM5NDI6NDcwYTBjZDA=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:34.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "0e192bc990908dd3160bcb5b800889ed",
         "headermmh3" : -603727058,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS4134",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"NjQwODBiM2U6Njg4YjM5NDI6NDcwYTBjZDA=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "9860928e160007f0f66a2d43819b63ea",
   "datammh3" : -1329768146,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "163data.com.cn"
   ],
   "geolocus" : {
      "asn" : "AS4134",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "163data.com.cn",
         "189.cn",
         "chinatelecom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-SC",
      "organization" : "CHINANET Sichuan province network",
      "subnet" : "222.215.160.0/19"
   },
   "host" : [
      227
   ],
   "hostname" : [
      "227.187.215.222.broad.dy.sc.dynamic.163data.com.cn"
   ],
   "ip" : "222.215.187.227",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Chinanet",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "227.187.215.222.broad.dy.sc.dynamic.163data.com.cn"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subdomains" : [
      "187.215.222.broad.dy.sc.dynamic.163data.com.cn",
      "215.222.broad.dy.sc.dynamic.163data.com.cn",
      "222.broad.dy.sc.dynamic.163data.com.cn",
      "broad.dy.sc.dynamic.163data.com.cn",
      "sc.dynamic.163data.com.cn",
      "dynamic.163data.com.cn",
      "dy.sc.dynamic.163data.com.cn"
   ],
   "subnet" : "222.215.160.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com.cn"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
207.190.96.66

Network
207.190.64.0/18

Domain(s)
mwt.net

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://207.190.96.66:30005/ 401

Reverse DNS
dhcp-96-66.lavalle.mwt.net

ASN
AS11796

Organization
AIRSTREAMCOMM-NET

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
148701a1d1bcb838d98958f465a0584b

HTTP Header MD5
51f6de46d85d0647686b2bd89b8a1a7e

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="NDkyZTlhZDg6MzNlZGEyMTg6OTg0YWIzNzg=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41"

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:18:34.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "51f6de46d85d0647686b2bd89b8a1a7e",
         "headermmh3" : -970483236,
         "realm" : "IgdAuthentication"
      },
      "length" : 228
   },
   "asn" : "AS11796",
   "city" : "La Valle",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"NDkyZTlhZDg6MzNlZGEyMTg6OTg0YWIzNzg=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "148701a1d1bcb838d98958f465a0584b",
   "datammh3" : 179191934,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "mwt.net"
   ],
   "geolocus" : {
      "asn" : "AS11796",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "mwt.net",
         "wintechnology.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "MWT-COONVALLEY-DSL-001",
      "organization" : "Midwest Telnet, LLP",
      "subnet" : "207.190.64.0/18"
   },
   "host" : [
      "dhcp-96-66"
   ],
   "hostname" : [
      "dhcp-96-66.lavalle.mwt.net"
   ],
   "ip" : "207.190.96.66",
   "ipv6" : "false",
   "latitude" : "43.5721",
   "location" : "43.5721,-90.1348",
   "longitude" : "-90.1348",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AIRSTREAMCOMM-NET",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 30005,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "dhcp-96-66.lavalle.mwt.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 401,
   "subdomains" : [
      "lavalle.mwt.net"
   ],
   "subnet" : "207.190.64.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 5,020,679 in 0.172 second(s)

80.221.156.119:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:35 UTC

192.24.166.38:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:35 UTC

100.42.89.71:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:35 UTC

146.212.26.96:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:35 UTC

38.145.161.39:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:35 UTC

5.137.30.119:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:35 UTC

116.251.161.198:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:34 UTC

38.91.43.164:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:34 UTC

222.215.187.227:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:34 UTC

207.190.96.66:30005 (tcp/http) - last seen on 2024-11-07 at 03:18:34 UTC