ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 1 result(s) out of 1 in 0.091 second(s)

  • 38.47.155.100:31337 (tcp/http/tls) - last seen on 2024-11-07 at 03:38:32 UTC

    • IP
      38.47.155.100
      Network
      38.47.128.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://38.47.155.100:31337/ 400

      ASN
      AS147019
      Organization
      jiii
      Protocol
      http Cert not expired http
      Source
      datascan
    • NOTE
      This tab is a merge from current page results.
      IP(s)
      38.47.155.100
      Port(s)
      31337
      Protocol(s)
      http
    • Operating System
      Linux Linux Kernel
    • Issuer Common Name
      Waf defaut certificate(Attack Behavior reported to the police)
      Issuer Organization
      Waf
      Subject Organization
      Waf
      Subject Common Name
      Waf defaut certificate(Attack Behavior reported to the police)
      SHA256 Fingerprint
      185cefdaa1341ded7efcdf724d2e9581fe1d7b4ad3eb1ad6dd3a47c31013de27
      Validity Not Before
      2020-08-26T09:48:09Z
      Validity Not After
      2030-08-24T09:48:09Z

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8c85198e1e4bfd239e1a6c532b86f7d7
      HTTP Header MD5
      386ff7ba8e507d48d94b9016c443c08c
      HTTP Body MD5
      390a0cccf7be525e3f88c15d7f1bb41d 
    • HTTP/1.1 400 Bad Request
Server: WAF
Date: Thu, 07 Nov 2024 03:38:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Set-Cookie: waf_404=62eeb2f1-5d59-4a96-b457-0dbf4c74a40e; Max-Age=300; Path=/; Secure; HttpOnly
Cache-Control: no-cache, no-store
x-frame-options: sameorigin

56
<html><body><script>document.location='/host_not_found_error';</script></body></html>

0


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:38:32.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "390a0cccf7be525e3f88c15d7f1bb41d",
         "bodymmh3" : -173073514,
         "headermd5" : "386ff7ba8e507d48d94b9016c443c08c",
         "headermmh3" : -1408117706
      },
      "length" : 408
   },
   "asn" : "AS147019",
   "country" : "US",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: WAF\r\nDate: Thu, 07 Nov 2024 03:38:32 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nSet-Cookie: waf_404=62eeb2f1-5d59-4a96-b457-0dbf4c74a40e; Max-Age=300; Path=/; Secure; HttpOnly\r\nCache-Control: no-cache, no-store\r\nx-frame-options: sameorigin\r\n\r\n56\r\n<html><body><script>document.location='/host_not_found_error';</script></body></html>\n\r\n0\r\n\r\n",
   "datamd5" : "8c85198e1e4bfd239e1a6c532b86f7d7",
   "datammh3" : -593353600,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "fingerprint" : {
      "md5" : "a01ba69ec230a73409884c2b344b5917",
      "sha1" : "c3820866b442e20cc8e4893132a4b0a9d20022f8",
      "sha256" : "185cefdaa1341ded7efcdf724d2e9581fe1d7b4ad3eb1ad6dd3a47c31013de27"
   },
   "geolocus" : {
      "asn" : "AS147019",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "COGENT-A",
      "organization" : "PSINet, Inc.",
      "subnet" : "38.47.128.0/19"
   },
   "ip" : "38.47.155.100",
   "ipv6" : "false",
   "issuer" : {
      "city" : "Shanghai",
      "commonname" : "Waf defaut certificate(Attack Behavior reported to the police)",
      "country" : "CN",
      "organization" : "Waf",
      "organizationalunit" : "WAF"
   },
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "jiii",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 31337,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "serial" : "d4:7c:19:ad:8a:0c:45:e7",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "status" : 400,
   "subject" : {
      "city" : "Shanghai",
      "commonname" : "Waf defaut certificate(Attack Behavior reported to the police)",
      "country" : "CN",
      "organization" : "Waf",
      "organizationalunit" : "WAF"
   },
   "subnet" : "38.47.128.0/19",
   "tls" : "true",
   "transport" : "tcp",
   "url" : "/",
   "validity" : {
      "notafter" : "2030-08-24T09:48:09Z",
      "notbefore" : "2020-08-26T09:48:09Z"
   },
   "version" : "v1",
   "wildcard" : "false"
}