Returning 10 result(s) out of 43,539 in 0.057 second(s)

  • 118.39.102.60:3689 (tcp/http) - last seen on 2024-11-21 at 08:35:32 UTC

    • IP
      118.39.102.60
      Network
      118.38.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://118.39.102.60:3689/ 401

      HTTP Title
      401 Unauthorized
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      79fd977c30eb0ff4c506a4e19a0b2c6f
      HTTP Header MD5
      39dc57ee9ea7cbde1ae45b68a1dbbf9e
      HTTP Body MD5
      6798c7f935c4b922298e5421cd978e55
    • HTTP/1.1 401 Unauthorized
      WWW-Authenticate: Basic realm="webserver"
      Content-Language: en_us
      Content-Type: text/html
      Server: mt-daapd/0.2.4
      Connection: close
      Date: Thu, 21 Nov 2024 08:35:31 GMT
      
      <HTML>
      <TITLE>401 Unauthorized</TITLE>
      <BODY>
      <H1>Unauthorized</H1>
      Error 401
      <hr>
      <i>mt-daapd: 0.2.4
      <br></i></BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:35:32.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "6798c7f935c4b922298e5421cd978e55",
               "bodymmh3" : -2071643355,
               "headermd5" : "39dc57ee9ea7cbde1ae45b68a1dbbf9e",
               "headermmh3" : -1370641639,
               "realm" : "webserver",
               "title" : "401 Unauthorized"
            },
            "length" : 337
         },
         "asn" : "AS4766",
         "city" : "Buk-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 401 Unauthorized\r\nWWW-Authenticate: Basic realm=\"webserver\"\r\nContent-Language: en_us\r\nContent-Type: text/html\r\nServer: mt-daapd/0.2.4\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:35:31 GMT\r\n\r\n<HTML>\r\n<TITLE>401 Unauthorized</TITLE>\r\n<BODY>\r\n<H1>Unauthorized</H1>\r\nError 401\r\n<hr>\r\n<i>mt-daapd: 0.2.4\r\n<br></i></BODY>\r\n</HTML>\r\n",
         "datamd5" : "79fd977c30eb0ff4c506a4e19a0b2c6f",
         "datammh3" : 732154106,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "118.38.0.0/15"
         },
         "ip" : "118.39.102.60",
         "ipv6" : "false",
         "latitude" : "35.6018",
         "location" : "35.6018,129.3491",
         "longitude" : "129.3491",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3689,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Unauthorized",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 401,
         "subnet" : "118.38.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 36.91.242.153:3689 (tcp/http) - last seen on 2024-11-21 at 08:35:23 UTC

    • IP
      36.91.242.153
      Network
      36.80.0.0/12
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://36.91.242.153:3689/ 302

      HTTP Title
      Object moved
      ASN
      AS7713
      Organization
      PT Telekomunikasi Indonesia
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft IIS 10.0
      HTTP Component(s)
      Microsoft ASP.NET 4.0.30319
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c15e228b06d48dfc3ec6a340e9b7a93
      HTTP Header MD5
      d37dc1cb710a4679750146442af1dea6
      HTTP Body MD5
      26c4cc7e9a1655cd0c03c4d8e81aa2c1
    • HTTP/1.1 302 Found
      Cache-Control: private
      Content-Type: text/html; charset=utf-8
      Location: /Orion/Login.aspx?ReturnUrl=%2f
      Server: Microsoft-IIS/10.0
      X-AspNet-Version: 4.0.30319
      X-Powered-By: ASP.NET
      X-Same-Domain: 1
      X-Content-Type-Options: nosniff
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      Date: Thu, 21 Nov 2024 08:35:22 GMT
      Connection: close
      Content-Length: 148
      
      <html><head><title>Object moved</title></head><body>
      <h2>Object moved to <a href="/Orion/Login.aspx?ReturnUrl=%2f">here</a>.</h2>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:35:23.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "26c4cc7e9a1655cd0c03c4d8e81aa2c1",
               "bodymmh3" : 1205394821,
               "component" : [
                  {
                     "productvendor" : "Microsoft",
                     "productversion" : "4.0.30319",
                     "product" : "ASP.NET"
                  }
               ],
               "headermd5" : "d37dc1cb710a4679750146442af1dea6",
               "headermmh3" : 486872324,
               "title" : "Object moved"
            },
            "length" : 547
         },
         "asn" : "AS7713",
         "city" : "Jakarta",
         "country" : "ID",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nLocation: /Orion/Login.aspx?ReturnUrl=%2f\r\nServer: Microsoft-IIS/10.0\r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nX-Same-Domain: 1\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nDate: Thu, 21 Nov 2024 08:35:22 GMT\r\nConnection: close\r\nContent-Length: 148\r\n\r\n<html><head><title>Object moved</title></head><body>\r\n<h2>Object moved to <a href=\"/Orion/Login.aspx?ReturnUrl=%2f\">here</a>.</h2>\r\n</body></html>\r\n",
         "datamd5" : "2c15e228b06d48dfc3ec6a340e9b7a93",
         "datammh3" : -341310109,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS7713",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "ID",
            "countryname" : "Indonesia",
            "domain" : [
               "telin.net",
               "telkom.co.id",
               "telkom.net.id"
            ],
            "isineu" : "false",
            "latitude" : "-0.789275",
            "location" : "-0.789275,113.921327",
            "longitude" : "113.921327",
            "netname" : "TELKOMNET",
            "organization" : "Telekomunikasi Indonesia (PT)",
            "subnet" : "36.91.242.128/25"
         },
         "ip" : "36.91.242.153",
         "ipv6" : "false",
         "latitude" : "-6.2114",
         "location" : "-6.2114,106.8446",
         "longitude" : "106.8446",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "PT Telekomunikasi Indonesia",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "osversion" : [
            "Server 2016",
            10
         ],
         "port" : 3689,
         "product" : "IIS",
         "productvendor" : "Microsoft",
         "productversion" : "10.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "36.80.0.0/12",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 77.252.241.64:3689 (tcp/unknown) - last seen on 2024-11-21 at 08:34:31 UTC

    • IP
      77.252.241.64
      Network
      77.252.0.0/14
      Domain(s)
      netia.com.pl
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      Reverse DNS
      77-252-241-64.static.ip.netia.com.pl
      ASN
      AS12741
      Organization
      Netia SA
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ec55a88eff93b876c255d58cb958623e
    • \x00\x00\x01\xec\xe9\x03\xfe\xff\xe0\xffP\x00\x00\x00\x00\x00\x00\x80\x00\x00\x04\x06	\x03\x04\x00\x00\x00\xc8\x01\x00\x00+\h\xb3Terminal client version too old - please update to version 3.9.6.4\x0030819D300D06092A864886F70D010101050003818B0030818702818100C55890FC3C6131B9AC83DE3DE650FD9DFBB26F8306B04EAA4D18D91A9CF9057FAD6DA81125EBDC1A4F18D9BDA28ED7765C663F0BBE34E599CFC303ACF5BABCCDE51BBD59922BE335E7B68973555D205D55ABC1337A4CA5EA55659734C9E72386EEC13AD3F9E194969A7E34C1FFCAE67FB961AA2277A9B23D4954700EAC3B3617020111\x00\x01\x00 \x00\x15\x00\x0e\x00\x05\x00\x01\x0b\x01\x0d\x01\x1b\x01\x1c\x01\x1f\x01(\x01)\x01*\x015\x01>\x01C\x01J\x03c\x01O\x01\x01\x02\x08\x03
      \x01\x0d\x01\x0fR%%!\x11\x00!\x11!\x00!\x11"\x00!\x11\x82\x00!\x11
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:34:31.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "3.9.6.4"
               ]
            },
            "length" : 492
         },
         "asn" : "AS12741",
         "city" : "Warsaw",
         "country" : "PL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "\\x00\\x00\\x01\\xec\\xe9\\x03\\xfe\\xff\\xe0\\xffP\\x00\\x00\\x00\\x00\\x00\\x00\\x80\\x00\\x00\\x04\\x06\t\\x03\\x04\\x00\\x00\\x00\\xc8\\x01\\x00\\x00+\\h\\xb3Terminal client version too old - please update to version 3.9.6.4\\x0030819D300D06092A864886F70D010101050003818B0030818702818100C55890FC3C6131B9AC83DE3DE650FD9DFBB26F8306B04EAA4D18D91A9CF9057FAD6DA81125EBDC1A4F18D9BDA28ED7765C663F0BBE34E599CFC303ACF5BABCCDE51BBD59922BE335E7B68973555D205D55ABC1337A4CA5EA55659734C9E72386EEC13AD3F9E194969A7E34C1FFCAE67FB961AA2277A9B23D4954700EAC3B3617020111\\x00\\x01\\x00 \\x00\\x15\\x00\\x0e\\x00\\x05\\x00\\x01\\x0b\\x01\\x0d\\x01\\x1b\\x01\\x1c\\x01\\x1f\\x01(\\x01)\\x01*\\x015\\x01>\\x01C\\x01J\\x03c\\x01O\\x01\\x01\\x02\\x08\\x03\n\\x01\\x0d\\x01\\x0fR%%!\\x11\\x00!\\x11!\\x00!\\x11\"\\x00!\\x11\\x82\\x00!\\x11",
         "datamd5" : "ec55a88eff93b876c255d58cb958623e",
         "datammh3" : 800416563,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "netia.com.pl"
         ],
         "geolocus" : {
            "asn" : "AS12741",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "PL",
            "countryname" : "Poland",
            "domain" : [
               "inetia.pl",
               "netia.com.pl"
            ],
            "isineu" : "true",
            "latitude" : "51.919438",
            "location" : "51.919438,19.145136",
            "longitude" : "19.145136",
            "netname" : "NETIA",
            "organization" : "NETIA",
            "subnet" : "77.252.0.0/14"
         },
         "host" : [
            "77-252-241-64"
         ],
         "hostname" : [
            "77-252-241-64.static.ip.netia.com.pl"
         ],
         "ip" : "77.252.241.64",
         "ipv6" : "false",
         "latitude" : "52.2299",
         "location" : "52.2299,21.0093",
         "longitude" : "21.0093",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Netia SA",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 3689,
         "protocol" : "unknown",
         "reverse" : [
            "77-252-241-64.static.ip.netia.com.pl"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "subdomains" : [
            "ip.netia.com.pl",
            "static.ip.netia.com.pl"
         ],
         "subnet" : "77.252.0.0/14",
         "tld" : [
            "com.pl"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 38.39.137.160:3689 (tcp/http) - last seen on 2024-11-21 at 08:34:16 UTC

    • IP
      38.39.137.160
      Network
      38.39.136.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://38.39.137.160:3689/ 404

      HTTP Title
      404 Not found
      ASN
      AS398721
      Organization
      OXIO-ASN-01
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e45b0f520563986a6267c9dda042efaf
      HTTP Header MD5
      f3f406cc9a2e995f8470902b91bee0df
      HTTP Body MD5
      68e56823b7ec540e22b86c9a77566bb8
    • HTTP/1.1 404 Not found
      Content-Language: en_us
      Content-Type: text/html
      Server: mt-daapd/0.2.4.1
      Connection: close
      Date: Thu, 21 Nov 2024 08:34:16 GMT
      
      <HTML>
      <TITLE>404 Not found</TITLE>
      <BODY>
      <H1>Not found</H1>
      Error 404
      <hr>
      <i>mt-daapd: 0.2.4.1
      <br>Error: No such file or directory
      </i></BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:34:16.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "68e56823b7ec540e22b86c9a77566bb8",
               "bodymmh3" : -1017384290,
               "headermd5" : "f3f406cc9a2e995f8470902b91bee0df",
               "headermmh3" : 576919719,
               "title" : "404 Not found"
            },
            "length" : 323
         },
         "asn" : "AS398721",
         "city" : "B\u00e9cancour",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 404 Not found\r\nContent-Language: en_us\r\nContent-Type: text/html\r\nServer: mt-daapd/0.2.4.1\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:34:16 GMT\r\n\r\n<HTML>\r\n<TITLE>404 Not found</TITLE>\r\n<BODY>\r\n<H1>Not found</H1>\r\nError 404\r\n<hr>\r\n<i>mt-daapd: 0.2.4.1\r\n<br>Error: No such file or directory\r\n</i></BODY>\r\n</HTML>\r\n",
         "datamd5" : "e45b0f520563986a6267c9dda042efaf",
         "datammh3" : 1617443134,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS398721",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "cogeco.com",
               "cogentco.com",
               "oxio.ca"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "OXIO-CGNT-NET-19",
            "organization" : "OXIO",
            "subnet" : "38.39.136.0/21"
         },
         "ip" : "38.39.137.160",
         "ipv6" : "false",
         "latitude" : "46.3363",
         "location" : "46.3363,-72.4304",
         "longitude" : "-72.4304",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "OXIO-ASN-01",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3689,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Not found",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 404,
         "subnet" : "38.39.136.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 65.111.28.87:3689 (tcp/http) - last seen on 2024-11-21 at 08:34:06 UTC

    • IP
      65.111.28.87
      Network
      65.111.0.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://65.111.28.87:3689/ 407

      ASN
      AS200373
      Organization
      3xK Tech GmbH
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      beff904528226673ee6dbdb9e7fe6002
      HTTP Header MD5
      4bd5a82db187fbf06a2b7f25b880c717
      HTTP Body MD5
      917a0ae17b6e9db13c448d39f37c69ca
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm=""
      
      Proxy Authentication Required
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:34:06.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
               "bodymmh3" : -1539650452,
               "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
               "headermmh3" : 372433470
            },
            "length" : 111
         },
         "asn" : "AS200373",
         "city" : "Ashburn",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
         "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
         "datammh3" : 501879459,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "65.111.28.87",
         "ipv6" : "false",
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "3xK Tech GmbH",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3689,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "65.111.0.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 185.251.76.179:3689 (tcp/http) - last seen on 2024-11-21 at 08:34:05 UTC

    • IP
      185.251.76.179
      Network
      185.251.76.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://185.251.76.179:3689/ 302

      HTTP Title
      Object moved
      ASN
      AS204499
      Organization
      Ertebatdehi Ilam Technical & Services Company PJS
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft IIS 10.0
      HTTP Component(s)
      Microsoft ASP.NET 4.0.30319
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      761401a3b90b9af36f3f05e1bd495629
      HTTP Header MD5
      0c513e2929bb20c6c6924e4137e8592e
      HTTP Body MD5
      f2da4a7baa1367273bf1b6b296e9c29a
    • HTTP/1.1 302 Found
      Cache-Control: private
      Content-Type: text/html; charset=utf-8
      Location: /Account/Login?ReturnUrl=%2f
      Server: Microsoft-IIS/10.0
      X-AspNetMvc-Version: 5.2
      X-AspNet-Version: 4.0.30319
      X-Powered-By: ASP.NET
      Date: Thu, 21 Nov 2024 08:34:05 GMT
      Connection: close
      Content-Length: 145
      
      <html><head><title>Object moved</title></head><body>
      <h2>Object moved to <a href="/Account/Login?ReturnUrl=%2f">here</a>.</h2>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:34:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "f2da4a7baa1367273bf1b6b296e9c29a",
               "bodymmh3" : -34597375,
               "component" : [
                  {
                     "productvendor" : "Microsoft",
                     "productversion" : "4.0.30319",
                     "product" : "ASP.NET"
                  }
               ],
               "headermd5" : "0c513e2929bb20c6c6924e4137e8592e",
               "headermmh3" : -1049328292,
               "title" : "Object moved"
            },
            "length" : 454
         },
         "asn" : "AS204499",
         "country" : "IR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nLocation: /Account/Login?ReturnUrl=%2f\r\nServer: Microsoft-IIS/10.0\r\nX-AspNetMvc-Version: 5.2\r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Thu, 21 Nov 2024 08:34:05 GMT\r\nConnection: close\r\nContent-Length: 145\r\n\r\n<html><head><title>Object moved</title></head><body>\r\n<h2>Object moved to <a href=\"/Account/Login?ReturnUrl=%2f\">here</a>.</h2>\r\n</body></html>\r\n",
         "datamd5" : "761401a3b90b9af36f3f05e1bd495629",
         "datammh3" : 970261056,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS204499",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "IR",
            "countryname" : "Iran",
            "domain" : [
               "yousof.com"
            ],
            "isineu" : "false",
            "latitude" : "32.427908",
            "location" : "32.427908,53.688046",
            "longitude" : "53.688046",
            "netname" : "IR-ERTEBATDEHI-ILAM-20180322",
            "organization" : "Ertebatdehi Ilam Technical & Services Company PJS",
            "subnet" : "185.251.76.0/22"
         },
         "ip" : "185.251.76.179",
         "ipv6" : "false",
         "latitude" : "35.6980",
         "location" : "35.6980,51.4115",
         "longitude" : "51.4115",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Ertebatdehi Ilam Technical & Services Company PJS",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "osversion" : [
            "Server 2016",
            10
         ],
         "port" : 3689,
         "product" : "IIS",
         "productvendor" : "Microsoft",
         "productversion" : "10.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "185.251.76.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 65.111.0.176:3689 (tcp/http) - last seen on 2024-11-21 at 08:27:36 UTC

    • IP
      65.111.0.176
      Network
      65.111.0.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://65.111.0.176:3689/ 407

      ASN
      AS200373
      Organization
      3xK Tech GmbH
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      beff904528226673ee6dbdb9e7fe6002
      HTTP Header MD5
      4bd5a82db187fbf06a2b7f25b880c717
      HTTP Body MD5
      917a0ae17b6e9db13c448d39f37c69ca
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm=""
      
      Proxy Authentication Required
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:27:36.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
               "bodymmh3" : -1539650452,
               "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
               "headermmh3" : 372433470
            },
            "length" : 111
         },
         "asn" : "AS200373",
         "city" : "Ashburn",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
         "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
         "datammh3" : 501879459,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "65.111.0.176",
         "ipv6" : "false",
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "3xK Tech GmbH",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3689,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "65.111.0.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 45.3.32.233:3689 (tcp/http) - last seen on 2024-11-21 at 08:26:59 UTC

    • IP
      45.3.32.233
      Network
      45.3.32.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://45.3.32.233:3689/ 407

      ASN
      AS200373
      Organization
      3xK Tech GmbH
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      beff904528226673ee6dbdb9e7fe6002
      HTTP Header MD5
      4bd5a82db187fbf06a2b7f25b880c717
      HTTP Body MD5
      917a0ae17b6e9db13c448d39f37c69ca
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm=""
      
      Proxy Authentication Required
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:26:59.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
               "bodymmh3" : -1539650452,
               "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
               "headermmh3" : 372433470
            },
            "length" : 111
         },
         "asn" : "AS200373",
         "city" : "Amsterdam",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
         "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
         "datammh3" : 501879459,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS55933",
            "continent" : "OC",
            "continentname" : "Oceania",
            "country" : "AU",
            "countryname" : "Australia",
            "domain" : [
               "apnic.net"
            ],
            "isineu" : "false",
            "latitude" : "-25.274398",
            "location" : "-25.274398,133.775136",
            "longitude" : "133.775136",
            "netname" : "IANA-NETBLOCK-45",
            "organization" : "This network range is not fully allocated to APNIC.",
            "subnet" : "45.0.0.0/8"
         },
         "ip" : "45.3.32.233",
         "ipv6" : "false",
         "latitude" : "52.3759",
         "location" : "52.3759,4.8975",
         "longitude" : "4.8975",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "3xK Tech GmbH",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3689,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "45.3.32.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 95.138.222.199:3689 (tcp/http) - last seen on 2024-11-21 at 08:26:54 UTC

    • IP
      95.138.222.199
      Network
      95.138.208.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://95.138.222.199:3689/ 404

      HTTP Title
      404 Not found
      ASN
      AS39642
      Organization
      Norlys Digital A/S
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e45b0f520563986a6267c9dda042efaf
      HTTP Header MD5
      f3f406cc9a2e995f8470902b91bee0df
      HTTP Body MD5
      68e56823b7ec540e22b86c9a77566bb8
    • HTTP/1.1 404 Not found
      Content-Language: en_us
      Content-Type: text/html
      Server: mt-daapd/0.2.4.1
      Connection: close
      Date: Thu, 21 Nov 2024 08:26:54 GMT
      
      <HTML>
      <TITLE>404 Not found</TITLE>
      <BODY>
      <H1>Not found</H1>
      Error 404
      <hr>
      <i>mt-daapd: 0.2.4.1
      <br>Error: No such file or directory
      </i></BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:26:54.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "68e56823b7ec540e22b86c9a77566bb8",
               "bodymmh3" : -1017384290,
               "headermd5" : "f3f406cc9a2e995f8470902b91bee0df",
               "headermmh3" : -1710682450,
               "title" : "404 Not found"
            },
            "length" : 323
         },
         "asn" : "AS39642",
         "city" : "Silkeborg",
         "country" : "DK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 404 Not found\r\nContent-Language: en_us\r\nContent-Type: text/html\r\nServer: mt-daapd/0.2.4.1\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:26:54 GMT\r\n\r\n<HTML>\r\n<TITLE>404 Not found</TITLE>\r\n<BODY>\r\n<H1>Not found</H1>\r\nError 404\r\n<hr>\r\n<i>mt-daapd: 0.2.4.1\r\n<br>Error: No such file or directory\r\n</i></BODY>\r\n</HTML>\r\n",
         "datamd5" : "e45b0f520563986a6267c9dda042efaf",
         "datammh3" : 1617443134,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "95.138.222.199",
         "ipv6" : "false",
         "latitude" : "56.1728",
         "location" : "56.1728,9.5476",
         "longitude" : "9.5476",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Norlys Digital A/S",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3689,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Not found",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 404,
         "subnet" : "95.138.208.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 14.92.36.122:3689 (tcp/http) - last seen on 2024-11-21 at 08:26:53 UTC

    • IP
      14.92.36.122
      Network
      14.64.0.0/11
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://14.92.36.122:3689/ 401

      HTTP Title
      401 Unauthorized
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      79fd977c30eb0ff4c506a4e19a0b2c6f
      HTTP Header MD5
      39dc57ee9ea7cbde1ae45b68a1dbbf9e
      HTTP Body MD5
      6798c7f935c4b922298e5421cd978e55
    • HTTP/1.1 401 Unauthorized
      WWW-Authenticate: Basic realm="webserver"
      Content-Language: en_us
      Content-Type: text/html
      Server: mt-daapd/0.2.4
      Connection: close
      Date: Thu, 21 Nov 2024 08:26:53 GMT
      
      <HTML>
      <TITLE>401 Unauthorized</TITLE>
      <BODY>
      <H1>Unauthorized</H1>
      Error 401
      <hr>
      <i>mt-daapd: 0.2.4
      <br></i></BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:26:53.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "6798c7f935c4b922298e5421cd978e55",
               "bodymmh3" : -2071643355,
               "headermd5" : "39dc57ee9ea7cbde1ae45b68a1dbbf9e",
               "headermmh3" : 387758803,
               "realm" : "webserver",
               "title" : "401 Unauthorized"
            },
            "length" : 337
         },
         "asn" : "AS4766",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 401 Unauthorized\r\nWWW-Authenticate: Basic realm=\"webserver\"\r\nContent-Language: en_us\r\nContent-Type: text/html\r\nServer: mt-daapd/0.2.4\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:26:53 GMT\r\n\r\n<HTML>\r\n<TITLE>401 Unauthorized</TITLE>\r\n<BODY>\r\n<H1>Unauthorized</H1>\r\nError 401\r\n<hr>\r\n<i>mt-daapd: 0.2.4\r\n<br></i></BODY>\r\n</HTML>\r\n",
         "datamd5" : "79fd977c30eb0ff4c506a4e19a0b2c6f",
         "datammh3" : 732154106,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS38683",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "14.64.0.0/11"
         },
         "ip" : "14.92.36.122",
         "ipv6" : "false",
         "latitude" : "37.5112",
         "location" : "37.5112,126.9741",
         "longitude" : "126.9741",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3689,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Unauthorized",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 401,
         "subnet" : "14.64.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }