ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 2,278 in 0.046 second(s)

  • 13.245.89.55:389 (udp/unknown) - last seen on 2024-11-07 at 02:32:03 UTC

    • IP
      13.245.89.55
      Network
      13.244.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-13-245-89-55.af-south-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      45984fd9437e4844594f858cfdd79ebd 
    • Access Forbidden\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:32:03.000Z",
   "app" : {
      "length" : "18"
   },
   "asn" : "AS16509",
   "city" : "Cape Town",
   "country" : "ZA",
   "data" : "Access Forbidden\\x0d\n",
   "datamd5" : "45984fd9437e4844594f858cfdd79ebd",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AF",
      "continentname" : "Africa",
      "country" : "ZA",
      "countryname" : "South Africa",
      "isineu" : "false",
      "latitude" : "-30.559482",
      "location" : "-30.559482,22.937506",
      "longitude" : "22.937506",
      "netname" : "AMAZON-CPT",
      "organization" : "Amazon Data Services South Africa",
      "subnet" : "13.244.0.0/14"
   },
   "host" : [
      "ec2-13-245-89-55"
   ],
   "hostname" : [
      "ec2-13-245-89-55.af-south-1.compute.amazonaws.com"
   ],
   "ip" : "13.245.89.55",
   "ipv6" : "false",
   "latitude" : "-34.0486",
   "location" : "-34.0486,18.4811",
   "longitude" : "18.4811",
   "organization" : "AMAZON-02",
   "port" : "389",
   "protocol" : "unknown",
   "reverse" : [
      "ec2-13-245-89-55.af-south-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "af-south-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.244.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 50.149.15.40:389 (udp/unknown) - last seen on 2024-11-07 at 02:31:53 UTC

    • IP
      50.149.15.40
      Network
      50.148.0.0/14
      Domain(s)
      comcast.net
      Device

      <enterprise field>: device.class

      Reverse DNS
      c-50-149-15-40.hsd1.pa.comcast.net
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b88711d8a6d0b2c3c536c681153f4671 
    • 0\x84\x00\x00\x00-\x02\x01\x07c\x84\x00\x00\x00x04\x00
\x01\x00
\x01\x00\x02\x01\x00\x02\x01d\x01\x01\x00\x87\x0bobjectClass0\x84\x00\x00\x00\x00
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:31:53.000Z",
   "app" : {
      "length" : "52"
   },
   "asn" : "AS7922",
   "city" : "Downers Grove",
   "country" : "US",
   "data" : "0\\x84\\x00\\x00\\x00-\\x02\\x01\\x07c\\x84\\x00\\x00\\x00x04\\x00\n\\x01\\x00\n\\x01\\x00\\x02\\x01\\x00\\x02\\x01d\\x01\\x01\\x00\\x87\\x0bobjectClass0\\x84\\x00\\x00\\x00\\x00",
   "datamd5" : "b88711d8a6d0b2c3c536c681153f4671",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "comcast.net"
   ],
   "geolocus" : {
      "asn" : "AS7922",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "HOUSTON-CCS-2",
      "organization" : "Comcast Cable Communications, LLC",
      "subnet" : "50.148.0.0/14"
   },
   "host" : [
      "c-50-149-15-40"
   ],
   "hostname" : [
      "c-50-149-15-40.hsd1.pa.comcast.net"
   ],
   "ip" : "50.149.15.40",
   "ipv6" : "false",
   "latitude" : "41.7609",
   "location" : "41.7609,-88.0151",
   "longitude" : "-88.0151",
   "organization" : "COMCAST-7922",
   "port" : "389",
   "protocol" : "unknown",
   "reverse" : [
      "c-50-149-15-40.hsd1.pa.comcast.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "pa.comcast.net",
      "hsd1.pa.comcast.net"
   ],
   "subnet" : "50.148.0.0/14",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 50.144.212.201:389 (udp/unknown) - last seen on 2024-11-07 at 02:15:00 UTC

    • IP
      50.144.212.201
      Network
      50.144.208.0/20
      Device

      <enterprise field>: device.class

      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b88711d8a6d0b2c3c536c681153f4671 
    • 0\x84\x00\x00\x00-\x02\x01\x07c\x84\x00\x00\x00x04\x00
\x01\x00
\x01\x00\x02\x01\x00\x02\x01d\x01\x01\x00\x87\x0bobjectClass0\x84\x00\x00\x00\x00
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:15:00.000Z",
   "app" : {
      "length" : "52"
   },
   "asn" : "AS7922",
   "city" : "Catonsville",
   "country" : "US",
   "data" : "0\\x84\\x00\\x00\\x00-\\x02\\x01\\x07c\\x84\\x00\\x00\\x00x04\\x00\n\\x01\\x00\n\\x01\\x00\\x02\\x01\\x00\\x02\\x01d\\x01\\x01\\x00\\x87\\x0bobjectClass0\\x84\\x00\\x00\\x00\\x00",
   "datamd5" : "b88711d8a6d0b2c3c536c681153f4671",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS7922",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "BAWA-CCS-2",
      "organization" : "Comcast Cable Communications, LLC",
      "subnet" : "50.144.192.0/18"
   },
   "ip" : "50.144.212.201",
   "ipv6" : "false",
   "latitude" : "39.2812",
   "location" : "39.2812,-76.7406",
   "longitude" : "-76.7406",
   "organization" : "COMCAST-7922",
   "port" : "389",
   "protocol" : "unknown",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "50.144.208.0/20",
   "tls" : "false",
   "transport" : "udp"
}

  • 18.183.7.186:389 (udp/unknown) - last seen on 2024-11-07 at 01:22:24 UTC

    • IP
      18.183.7.186
      Network
      18.176.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-18-183-7-186.ap-northeast-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      45984fd9437e4844594f858cfdd79ebd 
    • Access Forbidden\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T01:22:24.000Z",
   "app" : {
      "length" : "18"
   },
   "asn" : "AS16509",
   "city" : "Tokyo",
   "country" : "JP",
   "data" : "Access Forbidden\\x0d\n",
   "datamd5" : "45984fd9437e4844594f858cfdd79ebd",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "AMAZON-NRT",
      "organization" : "Amazon Data Services Japan",
      "subnet" : "18.183.0.0/16"
   },
   "host" : [
      "ec2-18-183-7-186"
   ],
   "hostname" : [
      "ec2-18-183-7-186.ap-northeast-1.compute.amazonaws.com"
   ],
   "ip" : "18.183.7.186",
   "ipv6" : "false",
   "latitude" : "35.6893",
   "location" : "35.6893,139.6899",
   "longitude" : "139.6899",
   "organization" : "AMAZON-02",
   "port" : "389",
   "protocol" : "unknown",
   "reverse" : [
      "ec2-18-183-7-186.ap-northeast-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "compute.amazonaws.com",
      "ap-northeast-1.compute.amazonaws.com"
   ],
   "subnet" : "18.176.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 13.127.37.251:389 (udp/unknown) - last seen on 2024-11-07 at 01:08:27 UTC

    • IP
      13.127.37.251
      Network
      13.124.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-13-127-37-251.ap-south-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      45984fd9437e4844594f858cfdd79ebd 
    • Access Forbidden\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T01:08:27.000Z",
   "app" : {
      "length" : "18"
   },
   "asn" : "AS16509",
   "city" : "Mumbai",
   "country" : "IN",
   "data" : "Access Forbidden\\x0d\n",
   "datamd5" : "45984fd9437e4844594f858cfdd79ebd",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "IN",
      "countryname" : "India",
      "isineu" : "false",
      "latitude" : "20.593684",
      "location" : "20.593684,78.96288",
      "longitude" : "78.96288",
      "netname" : "AMAZON-BOM",
      "organization" : "Amazon Data Services India",
      "subnet" : "13.126.0.0/15"
   },
   "host" : [
      "ec2-13-127-37-251"
   ],
   "hostname" : [
      "ec2-13-127-37-251.ap-south-1.compute.amazonaws.com"
   ],
   "ip" : "13.127.37.251",
   "ipv6" : "false",
   "latitude" : "19.0748",
   "location" : "19.0748,72.8856",
   "longitude" : "72.8856",
   "organization" : "AMAZON-02",
   "port" : "389",
   "protocol" : "unknown",
   "reverse" : [
      "ec2-13-127-37-251.ap-south-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "ap-south-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.124.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 13.60.10.161:389 (udp/unknown) - last seen on 2024-11-07 at 00:58:04 UTC

    • IP
      13.60.10.161
      Network
      13.60.0.0/15
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-13-60-10-161.eu-north-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      45984fd9437e4844594f858cfdd79ebd 
    • Access Forbidden\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T00:58:04.000Z",
   "app" : {
      "length" : "18"
   },
   "asn" : "AS16509",
   "city" : "Stockholm",
   "country" : "SE",
   "data" : "Access Forbidden\\x0d\n",
   "datamd5" : "45984fd9437e4844594f858cfdd79ebd",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "SE",
      "countryname" : "Sweden",
      "isineu" : "true",
      "latitude" : "60.128161",
      "location" : "60.128161,18.643501",
      "longitude" : "18.643501",
      "netname" : "AMAZON-ARN",
      "organization" : "Amazon Data Services Sweden",
      "subnet" : "13.60.0.0/15"
   },
   "host" : [
      "ec2-13-60-10-161"
   ],
   "hostname" : [
      "ec2-13-60-10-161.eu-north-1.compute.amazonaws.com"
   ],
   "ip" : "13.60.10.161",
   "ipv6" : "false",
   "latitude" : "59.3241",
   "location" : "59.3241,18.0517",
   "longitude" : "18.0517",
   "organization" : "AMAZON-02",
   "port" : "389",
   "protocol" : "unknown",
   "reverse" : [
      "ec2-13-60-10-161.eu-north-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "eu-north-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.60.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 50.147.71.168:389 (udp/unknown) - last seen on 2024-11-07 at 00:15:35 UTC

    • IP
      50.147.71.168
      Network
      50.147.0.0/16
      Domain(s)
      comcast.net
      Device

      <enterprise field>: device.class

      Reverse DNS
      c-50-147-71-168.hsd1.tn.comcast.net
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b88711d8a6d0b2c3c536c681153f4671 
    • 0\x84\x00\x00\x00-\x02\x01\x07c\x84\x00\x00\x00x04\x00
\x01\x00
\x01\x00\x02\x01\x00\x02\x01d\x01\x01\x00\x87\x0bobjectClass0\x84\x00\x00\x00\x00
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T00:15:35.000Z",
   "app" : {
      "length" : "52"
   },
   "asn" : "AS7922",
   "city" : "State College",
   "country" : "US",
   "data" : "0\\x84\\x00\\x00\\x00-\\x02\\x01\\x07c\\x84\\x00\\x00\\x00x04\\x00\n\\x01\\x00\n\\x01\\x00\\x02\\x01\\x00\\x02\\x01d\\x01\\x01\\x00\\x87\\x0bobjectClass0\\x84\\x00\\x00\\x00\\x00",
   "datamd5" : "b88711d8a6d0b2c3c536c681153f4671",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "comcast.net"
   ],
   "geolocus" : {
      "asn" : "AS7922",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "RICHMOND-CCS-2",
      "organization" : "Comcast Cable Communications, LLC",
      "subnet" : "50.147.0.0/16"
   },
   "host" : [
      "c-50-147-71-168"
   ],
   "hostname" : [
      "c-50-147-71-168.hsd1.tn.comcast.net"
   ],
   "ip" : "50.147.71.168",
   "ipv6" : "false",
   "latitude" : "40.8103",
   "location" : "40.8103,-77.8880",
   "longitude" : "-77.8880",
   "organization" : "COMCAST-7922",
   "port" : "389",
   "protocol" : "unknown",
   "reverse" : [
      "c-50-147-71-168.hsd1.tn.comcast.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "tn.comcast.net",
      "hsd1.tn.comcast.net"
   ],
   "subnet" : "50.147.0.0/16",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 35.154.195.105:389 (udp/unknown) - last seen on 2024-11-06 at 22:52:26 UTC

    • IP
      35.154.195.105
      Network
      35.154.0.0/15
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-35-154-195-105.ap-south-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      45984fd9437e4844594f858cfdd79ebd 
    • Access Forbidden\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-06T22:52:26.000Z",
   "app" : {
      "length" : "18"
   },
   "asn" : "AS16509",
   "city" : "Mumbai",
   "country" : "IN",
   "data" : "Access Forbidden\\x0d\n",
   "datamd5" : "45984fd9437e4844594f858cfdd79ebd",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "IN",
      "countryname" : "India",
      "isineu" : "false",
      "latitude" : "20.593684",
      "location" : "20.593684,78.96288",
      "longitude" : "78.96288",
      "netname" : "AMAZON-BOM",
      "organization" : "Amazon Data Services India",
      "subnet" : "35.154.0.0/16"
   },
   "host" : [
      "ec2-35-154-195-105"
   ],
   "hostname" : [
      "ec2-35-154-195-105.ap-south-1.compute.amazonaws.com"
   ],
   "ip" : "35.154.195.105",
   "ipv6" : "false",
   "latitude" : "19.0748",
   "location" : "19.0748,72.8856",
   "longitude" : "72.8856",
   "organization" : "AMAZON-02",
   "port" : "389",
   "protocol" : "unknown",
   "reverse" : [
      "ec2-35-154-195-105.ap-south-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-06",
   "source" : "udpscan",
   "subdomains" : [
      "ap-south-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "35.154.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 139.162.108.97:389 (udp/unknown) - last seen on 2024-11-06 at 22:00:10 UTC

    • IP
      139.162.108.97
      Network
      139.162.0.0/16
      Domain(s)
      linodeusercontent.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      139-162-108-97.ip.linodeusercontent.com
      ASN
      AS63949
      Organization
      Akamai Connected Cloud
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0e928d0d861ac9cf86c1014461c1d883 
    • 0\x84\x00\x00\x0b=\x02\x01\x01d\x84\x00\x00\x0b4\x04\x000\x84\x00\x00\x0b,0\x84\x00\x00\x00&\x04\x0bcurrentTime1\x84\x00\x00\x00\x13\x04\x1120170722003128.0Z0\x84\x00\x00\x00W\x04\x11subschemaSubentry1\x84\x00\x00\x00>\x04<CN=Aggregate,CN=Schema,CN=Configuration,DC=ntou,DC=edu,DC=tw0\x84\x00\x00\x00\x82\x04\x0ddsServiceName1\x84\x00\x00\x00m\x04kCN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ntou,DC=edu,DC=tw0\x84\x00\x00\x00\xd4\x04\x0enamingContexts1\x84\x00\x00\x00\xbe\x04\x14DC=ntou,DC=edu,DC=tw\x04%CN=Configuration,DC=ntou,DC=edu,DC=tw\x04/CN=Schema,CN=Configuration,DC=ntou,DC=edu,DC=tw\x04&DC=DomainDnsZones,DC=ntou,DC=edu,DC=tw\x04&DC=ForestDnsZones,DC=ntou,DC=edu,DC=tw0\x84\x00\x00\x002\x04\x14defaultNamingContext1\x84\x00\x00\x00\x16\x04\x14DC=ntou,DC=edu,DC=tw0\x84\x00\x00\x00L\x04\x13schemaNamingContext1\x84\x00\x00\x001\x04/CN=Schema,CN=Configuration,DC=ntou,DC=edu,DC=tw0\x84\x00\x00\x00I\x04\x1aconfigurationNamingContext1\x84\x00\x00\x00'\x04%CN=Configuration,DC=ntou,DC=edu,DC=tw0\x84\x00\x00\x005\x04\x17rootDomainNamingContext1\x84\x00\x00\x00\x16\x04\x14DC=ntou,DC=edu,DC=tw0\x84\x00\x00\x03\xa9\x04\x10supportedControl1\x84\x00\x00\x03\x91\x04\x161.2.840.113556.1.4.319\x04\x161.2.840.113556.1.4.801\x04\x161.2.840.113556.1.4.473\x04\x161.2.840.113556.1.4.528\x04\x161.2.840.113556.1.4.417\x04\x161.2.840.113556.1.4.619\x04\x161.2.840.113556.1.4.841\x04\x161.2.840.113556.1.4.529\x04\x161.2.840.113556.1.4.805\x04\x161.2.840.113556.1.4.521\x04\x161.2.840.113556.1.4.970\x04\x171.2.840.113556.1.4.1338\x04\x161.2.840.113556.1.4.474\x04\x171.2.840.113556.1.4.1339\x04\x171.2.840.113556.1.4.1340\x04\x171.2.840.113556.1.4.1413\x04\x172.16.840.1.113730.3.4.9\x04\x182.16.840.1.113730.3.4.10\x04\x171.2.840.113556.1.4.1504\x04\x171.2.840.113556.1.4.1852\x04\x161.2.840.113556.1.4.802\x04\x171.2.840.113556.1.4.1907\x04\x171.2.840.113556.1.4.1948\x04\x171.2.840.113556.1.4.1974\x04\x171.2.840.113556.1.4.1341\x04\x171.2.840.113556.1.4.2026\x04\x171.2.840.56.1
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-06T22:00:10.000Z",
   "app" : {
      "length" : "1472"
   },
   "asn" : "AS63949",
   "city" : "Tokyo",
   "country" : "JP",
   "data" : "0\\x84\\x00\\x00\\x0b=\\x02\\x01\\x01d\\x84\\x00\\x00\\x0b4\\x04\\x000\\x84\\x00\\x00\\x0b,0\\x84\\x00\\x00\\x00&\\x04\\x0bcurrentTime1\\x84\\x00\\x00\\x00\\x13\\x04\\x1120170722003128.0Z0\\x84\\x00\\x00\\x00W\\x04\\x11subschemaSubentry1\\x84\\x00\\x00\\x00>\\x04<CN=Aggregate,CN=Schema,CN=Configuration,DC=ntou,DC=edu,DC=tw0\\x84\\x00\\x00\\x00\\x82\\x04\\x0ddsServiceName1\\x84\\x00\\x00\\x00m\\x04kCN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ntou,DC=edu,DC=tw0\\x84\\x00\\x00\\x00\\xd4\\x04\\x0enamingContexts1\\x84\\x00\\x00\\x00\\xbe\\x04\\x14DC=ntou,DC=edu,DC=tw\\x04%CN=Configuration,DC=ntou,DC=edu,DC=tw\\x04/CN=Schema,CN=Configuration,DC=ntou,DC=edu,DC=tw\\x04&DC=DomainDnsZones,DC=ntou,DC=edu,DC=tw\\x04&DC=ForestDnsZones,DC=ntou,DC=edu,DC=tw0\\x84\\x00\\x00\\x002\\x04\\x14defaultNamingContext1\\x84\\x00\\x00\\x00\\x16\\x04\\x14DC=ntou,DC=edu,DC=tw0\\x84\\x00\\x00\\x00L\\x04\\x13schemaNamingContext1\\x84\\x00\\x00\\x001\\x04/CN=Schema,CN=Configuration,DC=ntou,DC=edu,DC=tw0\\x84\\x00\\x00\\x00I\\x04\\x1aconfigurationNamingContext1\\x84\\x00\\x00\\x00'\\x04%CN=Configuration,DC=ntou,DC=edu,DC=tw0\\x84\\x00\\x00\\x005\\x04\\x17rootDomainNamingContext1\\x84\\x00\\x00\\x00\\x16\\x04\\x14DC=ntou,DC=edu,DC=tw0\\x84\\x00\\x00\\x03\\xa9\\x04\\x10supportedControl1\\x84\\x00\\x00\\x03\\x91\\x04\\x161.2.840.113556.1.4.319\\x04\\x161.2.840.113556.1.4.801\\x04\\x161.2.840.113556.1.4.473\\x04\\x161.2.840.113556.1.4.528\\x04\\x161.2.840.113556.1.4.417\\x04\\x161.2.840.113556.1.4.619\\x04\\x161.2.840.113556.1.4.841\\x04\\x161.2.840.113556.1.4.529\\x04\\x161.2.840.113556.1.4.805\\x04\\x161.2.840.113556.1.4.521\\x04\\x161.2.840.113556.1.4.970\\x04\\x171.2.840.113556.1.4.1338\\x04\\x161.2.840.113556.1.4.474\\x04\\x171.2.840.113556.1.4.1339\\x04\\x171.2.840.113556.1.4.1340\\x04\\x171.2.840.113556.1.4.1413\\x04\\x172.16.840.1.113730.3.4.9\\x04\\x182.16.840.1.113730.3.4.10\\x04\\x171.2.840.113556.1.4.1504\\x04\\x171.2.840.113556.1.4.1852\\x04\\x161.2.840.113556.1.4.802\\x04\\x171.2.840.113556.1.4.1907\\x04\\x171.2.840.113556.1.4.1948\\x04\\x171.2.840.113556.1.4.1974\\x04\\x171.2.840.113556.1.4.1341\\x04\\x171.2.840.113556.1.4.2026\\x04\\x171.2.840.56.1",
   "datamd5" : "0e928d0d861ac9cf86c1014461c1d883",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "linodeusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS63949",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "EU-LINODE-20141229",
      "organization" : "Linode, LLC",
      "subnet" : "139.162.0.0/16"
   },
   "host" : [
      "139-162-108-97"
   ],
   "hostname" : [
      "139-162-108-97.ip.linodeusercontent.com"
   ],
   "ip" : "139.162.108.97",
   "ipv6" : "false",
   "latitude" : "35.6893",
   "location" : "35.6893,139.6899",
   "longitude" : "139.6899",
   "organization" : "Akamai Connected Cloud",
   "port" : "389",
   "protocol" : "unknown",
   "reverse" : [
      "139-162-108-97.ip.linodeusercontent.com"
   ],
   "seen_date" : "2024-11-06",
   "source" : "udpscan",
   "subdomains" : [
      "ip.linodeusercontent.com"
   ],
   "subnet" : "139.162.0.0/16",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 34.252.157.214:389 (udp/unknown) - last seen on 2024-11-06 at 21:49:26 UTC

    • IP
      34.252.157.214
      Network
      34.240.0.0/12
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-34-252-157-214.eu-west-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      45984fd9437e4844594f858cfdd79ebd 
    • Access Forbidden\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-06T21:49:26.000Z",
   "app" : {
      "length" : "18"
   },
   "asn" : "AS16509",
   "city" : "Dublin",
   "country" : "IE",
   "data" : "Access Forbidden\\x0d\n",
   "datamd5" : "45984fd9437e4844594f858cfdd79ebd",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "IE",
      "countryname" : "Ireland",
      "isineu" : "true",
      "latitude" : "53.41291",
      "location" : "53.41291,-8.24389",
      "longitude" : "-8.24389",
      "netname" : "AMAZON-DUB",
      "organization" : "Amazon Data Services Ireland Limited",
      "subnet" : "34.248.0.0/13"
   },
   "host" : [
      "ec2-34-252-157-214"
   ],
   "hostname" : [
      "ec2-34-252-157-214.eu-west-1.compute.amazonaws.com"
   ],
   "ip" : "34.252.157.214",
   "ipv6" : "false",
   "latitude" : "53.3379",
   "location" : "53.3379,-6.2591",
   "longitude" : "-6.2591",
   "organization" : "AMAZON-02",
   "port" : "389",
   "protocol" : "unknown",
   "reverse" : [
      "ec2-34-252-157-214.eu-west-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-06",
   "source" : "udpscan",
   "subdomains" : [
      "eu-west-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "34.240.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}