Returning 10 result(s) out of 554 in 0.083 second(s)

  • 210.121.147.200:4040 (tcp/http) - last seen on 2024-11-07 at 04:10:22 UTC

    • IP
      210.121.147.200
      Alternative IP(s)
      211.233.50.227
      Network
      210.121.144.0/21
      Domain(s)
      naus.co.kr
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://210.121.147.200:4040/ 200

      Reverse DNS
      naus.co.kr ep.naus.co.kr
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Apache Coyote HTTP Connector 1.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      04a51172b92dc856d4a82ff67bede270
      HTTP Header MD5
      14d785200ab57a21862f644e09833cc1
      HTTP Body MD5
      852a4b14ab9cc086d758b29c72b02e03
    • HTTP/1.1 200 OK
      Server: Apache-Coyote/1.1
      ETag: W/"179-1181027138000"
      Last-Modified: Tue, 05 Jun 2007 07:05:38 GMT
      Content-Type: text/html
      Content-Length: 179
      Date: Thu, 07 Nov 2024 04:10:22 GMT
      Connection: close
      
      <html>
      <head>
      <!-- Zetta Any Biz �ʱ�ȭ����� �ڵ� �̵� -->
      <meta HTTP-EQUIV="Refresh" CONTENT="0; URL=/zmail/index.html">
      <title></title>
      </head>
      <body>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:10:22.000Z",
         "alternativeip" : [
            "211.233.50.227"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "852a4b14ab9cc086d758b29c72b02e03",
               "bodymmh3" : 112261974,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "W/\"179-1181027138000"
                  },
                  {
                     "value" : "Tue, 05 Jun 2007 07:05:38 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "14d785200ab57a21862f644e09833cc1",
               "headermmh3" : -2046406472
            },
            "length" : 402
         },
         "asn" : "AS4766",
         "city" : "Gangbuk-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Apache-Coyote/1.1\r\nETag: W/\"179-1181027138000\"\r\nLast-Modified: Tue, 05 Jun 2007 07:05:38 GMT\r\nContent-Type: text/html\r\nContent-Length: 179\r\nDate: Thu, 07 Nov 2024 04:10:22 GMT\r\nConnection: close\r\n\r\n<html>\r\n<head>\r\n<!-- Zetta Any Biz \ufffd\u02b1\ufffd\u022d\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\u06b5\ufffd \ufffd\u0335\ufffd -->\r\n<meta HTTP-EQUIV=\"Refresh\" CONTENT=\"0; URL=/zmail/index.html\">\r\n<title></title>\r\n</head>\r\n<body>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "04a51172b92dc856d4a82ff67bede270",
         "datammh3" : -1314704262,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "naus.co.kr"
         ],
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "210.121.144.0/21"
         },
         "host" : [
            "ep"
         ],
         "hostname" : [
            "ep.naus.co.kr",
            "naus.co.kr"
         ],
         "ip" : "210.121.147.200",
         "ipv6" : "false",
         "latitude" : "37.6445",
         "location" : "37.6445,127.0037",
         "longitude" : "127.0037",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 4040,
         "product" : "Coyote HTTP Connector",
         "productvendor" : "Apache",
         "productversion" : "1.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "naus.co.kr",
            "ep.naus.co.kr"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "210.121.144.0/21",
         "tld" : [
            "co.kr"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 59.3.214.89:4040 (tcp/http) - last seen on 2024-11-07 at 03:27:08 UTC

    • IP
      59.3.214.89
      Network
      59.3.208.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://59.3.214.89:4040/ 200

      HTTP Title
      main page
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      590d3f1f5048082925f85226da9d33c2
      HTTP Header MD5
      a5668677bad84c83cbb2cf70fc5712b4
      HTTP Body MD5
      425064ac3f9b0beb2f58d1e3fe67fb73
    • HTTP/1.1 200 OK
      Content-Type: text/html
      ETag: "977385445"
      Last-Modified: Thu, 27 Jul 2023 23:09:21 GMT
      Content-Length: 704
      Accept-Ranges: bytes
      Connection: close
      Date: Thu, 07 Nov 2024 03:27:05 GMT
      Server: fwebserver
      
      <html>
      <head>
      <meta http-equiv="content-type" content="text/html; charset=iso8859-1">
      <title>main page</title>
      <script language="javascript">
      
      function redirect() {
      	location.href = "/cgi-bin/login.cgi";
      }
      
      function redirect_mobile_check() {
      
      	var filter = "win16|win32|win64|mac|macintel|linux x86_64";
      	var vWebType = "PC";
      
      	if (navigator.platform)
      	{
      		if (filter.indexOf(navigator.platform.toLowerCase()) < 0)
      			vWebType = "MOBILE";
      		else
      			vWebType = "PC";
      	}
      
      	if(vWebType ==  "PC")	
      		location.href = "/cgi-bin/login.cgi";
      	else
      		location.href = "/cgi-bin_mobile/login.cgi";
      }
      
      </script>
      </head>
      
      <body onload="redirect_mobile_check()">
      </body>
      
      </html>
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:08.000Z",
         "app" : {
            "extract" : {
               "file" : [
                  "login.cgi"
               ]
            },
            "http" : {
               "bodymd5" : "425064ac3f9b0beb2f58d1e3fe67fb73",
               "bodymmh3" : 1045994363,
               "header" : [
                  {
                     "value" : 977385445,
                     "name" : "ETag"
                  },
                  {
                     "name" : "Last-Modified",
                     "value" : "Thu, 27 Jul 2023 23:09:21 GMT"
                  }
               ],
               "headermd5" : "a5668677bad84c83cbb2cf70fc5712b4",
               "headermmh3" : 1614559985,
               "title" : "main page"
            },
            "length" : 932
         },
         "asn" : "AS4766",
         "city" : "Yeongam-gun",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nETag: \"977385445\"\r\nLast-Modified: Thu, 27 Jul 2023 23:09:21 GMT\r\nContent-Length: 704\r\nAccept-Ranges: bytes\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 03:27:05 GMT\r\nServer: fwebserver\r\n\r\n<html>\r\n<head>\r\n<meta http-equiv=\"content-type\" content=\"text/html; charset=iso8859-1\">\r\n<title>main page</title>\r\n<script language=\"javascript\">\r\n\r\nfunction redirect() {\r\n\tlocation.href = \"/cgi-bin/login.cgi\";\r\n}\r\n\r\nfunction redirect_mobile_check() {\r\n\r\n\tvar filter = \"win16|win32|win64|mac|macintel|linux x86_64\";\r\n\tvar vWebType = \"PC\";\r\n\r\n\tif (navigator.platform)\r\n\t{\r\n\t\tif (filter.indexOf(navigator.platform.toLowerCase()) < 0)\r\n\t\t\tvWebType = \"MOBILE\";\r\n\t\telse\r\n\t\t\tvWebType = \"PC\";\r\n\t}\r\n\r\n\tif(vWebType ==  \"PC\")\t\r\n\t\tlocation.href = \"/cgi-bin/login.cgi\";\r\n\telse\r\n\t\tlocation.href = \"/cgi-bin_mobile/login.cgi\";\r\n}\r\n\r\n</script>\r\n</head>\r\n\r\n<body onload=\"redirect_mobile_check()\">\r\n</body>\r\n\r\n</html>\r\n\r\n",
         "datamd5" : "590d3f1f5048082925f85226da9d33c2",
         "datammh3" : -473773929,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "59.3.0.0/16"
         },
         "ip" : "59.3.214.89",
         "ipv6" : "false",
         "latitude" : "34.7550",
         "location" : "34.7550,126.3682",
         "longitude" : "126.3682",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4040,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "59.3.208.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 119.202.135.63:4040 (tcp/vnc) - last seen on 2024-11-07 at 00:56:47 UTC

    • IP
      119.202.135.63
      Network
      119.202.128.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      vnc
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      74d150df7ffabda79a421d165d660edb
    • RFB 003.007
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T00:56:47.000Z",
         "app" : {
            "length" : 12
         },
         "asn" : "AS4766",
         "city" : "Gimcheon",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "RFB 003.007\n",
         "datamd5" : "74d150df7ffabda79a421d165d660edb",
         "datammh3" : 778541589,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "119.202.128.0/17"
         },
         "ip" : "119.202.135.63",
         "ipv6" : "false",
         "latitude" : "36.1247",
         "location" : "36.1247,128.1210",
         "longitude" : "128.1210",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 4040,
         "protocol" : "vnc",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "subnet" : "119.202.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 220.82.95.26:4040 (tcp/http) - last seen on 2024-11-06 at 23:30:25 UTC

    • IP
      220.82.95.26
      Network
      220.82.64.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://220.82.95.26:4040/ 200

      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      httpd httpd
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      568bea25c0aedb2ee99c171ae2e22ade
      HTTP Header MD5
      108601d04fb40cca73964b150fc4a31a
      HTTP Body MD5
      7f20c9c6f2f82599d5e98f166fcd70a0
    • HTTP/1.0 200 OK
      Date: Wed, 06 Nov 2024 23:30:23 GMT
      Server: Httpd/1.0
      Connection: close
      Content-Length: 112
      Last-Modified: Tue, 07 Apr 2020 02:44:20 GMT
      Content-Type: text/html
      
      <html>
      <head>
      <meta http-equiv=refresh content="0; URL=login/login.cgi">
      <title></title>
      <body>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T23:30:25.000Z",
         "app" : {
            "extract" : {
               "file" : [
                  "login.cgi"
               ]
            },
            "http" : {
               "bodymd5" : "7f20c9c6f2f82599d5e98f166fcd70a0",
               "bodymmh3" : -957351584,
               "header" : [
                  {
                     "value" : "Tue, 07 Apr 2020 02:44:20 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "108601d04fb40cca73964b150fc4a31a",
               "headermmh3" : -1084219013
            },
            "length" : 298
         },
         "asn" : "AS4766",
         "city" : "Daejeon",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nDate: Wed, 06 Nov 2024 23:30:23 GMT\r\nServer: Httpd/1.0\r\nConnection: close\r\nContent-Length: 112\r\nLast-Modified: Tue, 07 Apr 2020 02:44:20 GMT\r\nContent-Type: text/html\r\n\r\n<html>\n<head>\n<meta http-equiv=refresh content=\"0; URL=login/login.cgi\">\n<title></title>\n<body>\n</body>\n</html>\n",
         "datamd5" : "568bea25c0aedb2ee99c171ae2e22ade",
         "datammh3" : 2093214656,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "220.82.64.0/18"
         },
         "ip" : "220.82.95.26",
         "ipv6" : "false",
         "latitude" : "36.3419",
         "location" : "36.3419,127.3886",
         "longitude" : "127.3886",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4040,
         "product" : "httpd",
         "productvendor" : "httpd",
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "220.82.64.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 220.88.54.100:4040 (tcp/http) - last seen on 2024-11-06 at 22:55:22 UTC

    • IP
      220.88.54.100
      Network
      220.88.0.0/15
      Domain(s)
      arp.co.kr
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://220.88.54.100:4040/ 200

      Reverse DNS
      mail.arp.co.kr
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f0fd10997507ac24d2b8b29c9f7a9d2d
      HTTP Header MD5
      3021153672caaec3d511b36611c65568
      HTTP Body MD5
      162f316ee679a0ca0988bce4aa3d070b
    • HTTP/1.1 200 OK
      Connection: close
      Last-Modified: Thu, 03 Jun 2021 03:41:51 GMT
      Content-Type: text/html
      Accept-Ranges: bytes
      Content-Length: 674
      
      <!DOCTYPE html>
      <html>
      <head>
      <title></title>
      <script>
          if(isIE()) {
            location.href='/coco/index-es5.html';
          }
      	else{
      		location.href='/coco/index.html';
      	}
          function isIE() {
            var ua, re;
            if (navigator.appName == 'Microsoft Internet Explorer') {
              ua = navigator.userAgent;
              re = new RegExp("MSIE ([0-9]{1,}[\.0-9]{0,})");
              return re.exec(ua) != null
            }
            else if (navigator.appName == 'Netscape') {
              ua = navigator.userAgent;
              re = new RegExp("Trident/.*rv:([0-9]{1,}[\.0-9]{0,})");
              return re.exec(ua) != null
            }
          }
      </script>
      </head>
      <body>
      </body>
      </html>
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T22:55:22.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "162f316ee679a0ca0988bce4aa3d070b",
               "bodymmh3" : -2088422864,
               "header" : [
                  {
                     "value" : "Thu, 03 Jun 2021 03:41:51 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "3021153672caaec3d511b36611c65568",
               "headermmh3" : 2003256260
            },
            "length" : 826
         },
         "asn" : "AS4766",
         "city" : "Hwaseong-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nLast-Modified: Thu, 03 Jun 2021 03:41:51 GMT\r\nContent-Type: text/html\r\nAccept-Ranges: bytes\r\nContent-Length: 674\r\n\r\n<!DOCTYPE html>\r\n<html>\r\n<head>\r\n<title></title>\r\n<script>\r\n    if(isIE()) {\r\n      location.href='/coco/index-es5.html';\r\n    }\r\n\telse{\r\n\t\tlocation.href='/coco/index.html';\r\n\t}\r\n    function isIE() {\r\n      var ua, re;\r\n      if (navigator.appName == 'Microsoft Internet Explorer') {\r\n        ua = navigator.userAgent;\r\n        re = new RegExp(\"MSIE ([0-9]{1,}[\\.0-9]{0,})\");\r\n        return re.exec(ua) != null\r\n      }\r\n      else if (navigator.appName == 'Netscape') {\r\n        ua = navigator.userAgent;\r\n        re = new RegExp(\"Trident/.*rv:([0-9]{1,}[\\.0-9]{0,})\");\r\n        return re.exec(ua) != null\r\n      }\r\n    }\r\n</script>\r\n</head>\r\n<body>\r\n</body>\r\n</html>\r\n\r\n",
         "datamd5" : "f0fd10997507ac24d2b8b29c9f7a9d2d",
         "datammh3" : -1696222432,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "arp.co.kr"
         ],
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "220.88.0.0/15"
         },
         "host" : [
            "mail"
         ],
         "hostname" : [
            "mail.arp.co.kr"
         ],
         "ip" : "220.88.54.100",
         "ipv6" : "false",
         "latitude" : "37.2072",
         "location" : "37.2072,126.8168",
         "longitude" : "126.8168",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 4040,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "mail.arp.co.kr"
         ],
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "220.88.0.0/15",
         "tld" : [
            "co.kr"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 61.81.132.139:4040 (tcp/http) - last seen on 2024-11-06 at 22:29:14 UTC

    • IP
      61.81.132.139
      Network
      61.81.128.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://61.81.132.139:4040/ 302

      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Mortbay Jetty 6.1.x
      HTTP Component(s)
      Oracle Java
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      5146f7f333e5f2886b7b34988d2f99ec
      HTTP Header MD5
      f659e7da709aa4cc2ba32cf952a36c2f
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 302 Found
      Expires: Thu, 01 Jan 1970 00:00:00 GMT
      Set-Cookie: JSESSIONID=1i4f65kd7jugf;Path=/
      Location: http://<ip>:4040/login.view;jsessionid=1i4f65kd7jugf?
      Connection: close
      Server: Jetty(6.1.x)
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T22:29:14.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "component" : [
                  {
                     "product" : "Java",
                     "productvendor" : "Oracle"
                  }
               ],
               "headermd5" : "f659e7da709aa4cc2ba32cf952a36c2f",
               "headermmh3" : 1880021192
            },
            "length" : 213
         },
         "asn" : "AS4766",
         "city" : "Jeonju",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nSet-Cookie: JSESSIONID=1i4f65kd7jugf;Path=/\r\nLocation: http://<ip>:4040/login.view;jsessionid=1i4f65kd7jugf?\r\nConnection: close\r\nServer: Jetty(6.1.x)\r\n\r\n",
         "datamd5" : "5146f7f333e5f2886b7b34988d2f99ec",
         "datammh3" : -2090982710,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "61.81.128.0/17"
         },
         "ip" : "61.81.132.139",
         "ipv6" : "false",
         "latitude" : "35.8124",
         "location" : "35.8124,127.1075",
         "longitude" : "127.1075",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4040,
         "product" : "Jetty",
         "productvendor" : "Mortbay",
         "productversion" : "6.1.x",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "61.81.128.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 220.72.204.125:4040 (tcp/http) - last seen on 2024-11-06 at 20:52:37 UTC

    • IP
      220.72.204.125
      Network
      220.72.128.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://220.72.204.125:4040/ 500

      HTTP Title
      500 Internal Server Error
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      991850228b1a1ee5126197f7ad387947
      HTTP Header MD5
      88e3f785556fdb9d7a4e61e3de941770
      HTTP Body MD5
      a9c2e1fa6bb0c61db96015706bb31ad6
    • HTTP/1.1 500 Internal Server Error
      Server: nginx/1.20.1
      Date: Wed, 06 Nov 2024 20:52:37 GMT
      Content-Type: text/html
      Content-Length: 177
      Connection: close
      Access-Control-Allow-Origin: *
      
      <html>
      <head><title>500 Internal Server Error</title></head>
      <body>
      <center><h1>500 Internal Server Error</h1></center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T20:52:37.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "a9c2e1fa6bb0c61db96015706bb31ad6",
               "bodymmh3" : 1131612967,
               "headermd5" : "88e3f785556fdb9d7a4e61e3de941770",
               "headermmh3" : 836706552,
               "title" : "500 Internal Server Error"
            },
            "length" : 371
         },
         "asn" : "AS4766",
         "city" : "Dongdaemun-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 500 Internal Server Error\r\nServer: nginx/1.20.1\r\nDate: Wed, 06 Nov 2024 20:52:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 177\r\nConnection: close\r\nAccess-Control-Allow-Origin: *\r\n\r\n<html>\r\n<head><title>500 Internal Server Error</title></head>\r\n<body>\r\n<center><h1>500 Internal Server Error</h1></center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "991850228b1a1ee5126197f7ad387947",
         "datammh3" : -375008553,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "220.72.0.0/16"
         },
         "ip" : "220.72.204.125",
         "ipv6" : "false",
         "latitude" : "37.5655",
         "location" : "37.5655,127.0753",
         "longitude" : "127.0753",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Internal Server Error",
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 500,
         "subnet" : "220.72.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 211.230.37.133:4040 (tcp/unknown) - last seen on 2024-11-06 at 20:35:36 UTC

    • IP
      211.230.37.133
      Network
      211.230.0.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      165841167a4864b6c8601a7563af1ff3
    • RFJS\x00\x00\x00\x00X\x00\x00\x00\x01\x00\x00\x00\x00PROTOCOL_JSON1 ver=2.2 authkey=2ABD15D43FF5921246C6 slevel=0 oem=34 kttv=2.0 kttlevel=3\x00
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T20:35:36.000Z",
         "app" : {
            "length" : 105
         },
         "asn" : "AS4766",
         "city" : "Nonsan",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "RFJS\\x00\\x00\\x00\\x00X\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00PROTOCOL_JSON1 ver=2.2 authkey=2ABD15D43FF5921246C6 slevel=0 oem=34 kttv=2.0 kttlevel=3\\x00",
         "datamd5" : "165841167a4864b6c8601a7563af1ff3",
         "datammh3" : 53296018,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "211.230.0.0/18"
         },
         "ip" : "211.230.37.133",
         "ipv6" : "false",
         "latitude" : "36.1802",
         "location" : "36.1802,127.1062",
         "longitude" : "127.1062",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4040,
         "protocol" : "unknown",
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "subnet" : "211.230.0.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 210.113.225.145:4040 (tcp/http) - last seen on 2024-11-06 at 20:00:28 UTC

    • IP
      210.113.225.145
      Network
      210.113.192.0/18
      Domain(s)
      saeshin.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://210.113.225.145:4040/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      mail.saeshin.com
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Wed, 06 Nov 2024 20:00:28 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T20:00:28.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 1059522463,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS4766",
         "city" : "Gumi",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Wed, 06 Nov 2024 20:00:28 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "saeshin.com"
         ],
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "210.113.192.0/18"
         },
         "host" : [
            "mail"
         ],
         "hostname" : [
            "mail.saeshin.com"
         ],
         "ip" : "210.113.225.145",
         "ipv6" : "false",
         "latitude" : "36.1129",
         "location" : "36.1129,128.3433",
         "longitude" : "128.3433",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "mail.saeshin.com"
         ],
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "210.113.192.0/18",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 59.31.203.40:4040 (tcp/http) - last seen on 2024-11-06 at 16:55:51 UTC

    • IP
      59.31.203.40
      Network
      59.31.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://59.31.203.40:4040/ 200

      HTTP Title
      인사평가시스템
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft IIS 10.0
      HTTP Component(s)
      Microsoft ASP.NET 4.0.30319
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      dc37294024efddeb73dbd11b59a955cf
      HTTP Header MD5
      3b0ac2bf754e9caa1a2f27e9dc9b5f91
      HTTP Body MD5
      27bb326b5b4d20d5ab7d8acda097d6fd
    • HTTP/1.1 200 OK
      Cache-Control: private
      Content-Type: text/html; charset=utf-8
      Server: Microsoft-IIS/10.0
      X-AspNet-Version: 4.0.30319
      X-Powered-By: ASP.NET
      Date: Wed, 06 Nov 2024 16:55:51 GMT
      Connection: close
      Content-Length: 506
      
      
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml">
      <head><title>
      	인사평가시스템
      </title></head>
          <frameset cols="210,*" border="0" frameborder="no" framespacing="0">
      	    <frame name="left" src="MeritRating_left.aspx" marginheight="0" marginwidth="0" scrolling="yes">
      	    <frame name="main" src="MeritRating_View.aspx" marginheight="5" marginwidth="5" scrolling="yes">
          </frameset>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T16:55:51.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "27bb326b5b4d20d5ab7d8acda097d6fd",
               "bodymmh3" : -662461471,
               "component" : [
                  {
                     "product" : "ASP.NET",
                     "productvendor" : "Microsoft",
                     "productversion" : "4.0.30319"
                  }
               ],
               "headermd5" : "3b0ac2bf754e9caa1a2f27e9dc9b5f91",
               "headermmh3" : -55700556,
               "title" : "\uc778\uc0ac\ud3c9\uac00\uc2dc\uc2a4\ud15c"
            },
            "length" : 746
         },
         "asn" : "AS4766",
         "city" : "Cheongju-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nServer: Microsoft-IIS/10.0\r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Wed, 06 Nov 2024 16:55:51 GMT\r\nConnection: close\r\nContent-Length: 506\r\n\r\n\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.1//EN\" \"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head><title>\r\n\t\uc778\uc0ac\ud3c9\uac00\uc2dc\uc2a4\ud15c\r\n</title></head>\r\n    <frameset cols=\"210,*\" border=\"0\" frameborder=\"no\" framespacing=\"0\">\n\t    <frame name=\"left\" src=\"MeritRating_left.aspx\" marginheight=\"0\" marginwidth=\"0\" scrolling=\"yes\">\n\t    <frame name=\"main\" src=\"MeritRating_View.aspx\" marginheight=\"5\" marginwidth=\"5\" scrolling=\"yes\">\n    </frameset>\n</html>\r\n",
         "datamd5" : "dc37294024efddeb73dbd11b59a955cf",
         "datammh3" : -1029875043,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "59.31.0.0/16"
         },
         "ip" : "59.31.203.40",
         "ipv6" : "false",
         "latitude" : "36.6380",
         "location" : "36.6380,127.4838",
         "longitude" : "127.4838",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "osversion" : [
            "Server 2016",
            10
         ],
         "port" : 4040,
         "product" : "IIS",
         "productvendor" : "Microsoft",
         "productversion" : "10.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "59.31.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }