ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 3,193 in 0.034 second(s)

  • 62.204.37.71:4899 (tcp/http) - last seen on 2024-11-07 at 05:21:17 UTC

    • IP
      62.204.37.71
      Network
      62.204.37.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://62.204.37.71:4899/ 407

      ASN
      AS198231
      Organization
      Sixnet Operation Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      78585a31a9923f851fd7498cc40b6a44
      HTTP Header MD5
      ec1a9c7961fed7d88fbabb0196599217
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 407 Proxy Authentication Required
proxy-authenticate: Basic
connection: close


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:21:17.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "ec1a9c7961fed7d88fbabb0196599217",
         "headermmh3" : 1542279371
      },
      "length" : 92
   },
   "asn" : "AS198231",
   "country" : "CY",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nproxy-authenticate: Basic\r\nconnection: close\r\n\r\n",
   "datamd5" : "78585a31a9923f851fd7498cc40b6a44",
   "datammh3" : 1547380673,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "62.204.37.71",
   "ipv6" : "false",
   "latitude" : "35.0077",
   "location" : "35.0077,32.9882",
   "longitude" : "32.9882",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Sixnet Operation Ltd",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4899,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "62.204.37.0/24",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 194.68.27.117:4899 (tcp/http) - last seen on 2024-11-07 at 05:20:50 UTC

    • IP
      194.68.27.117
      Network
      194.68.26.0/23
      Domain(s)
      194.in-addr.arpa
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://194.68.27.117:4899/ 302

      Reverse DNS
      117.27.68.194.in-addr.arpa
      ASN
      AS9009
      Organization
      M247 Europe SRL
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      Atlassian Confluence Oracle Java
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1625694c587cd601197fb35f20511ece
      HTTP Header MD5
      2dc1e159d50343e36aa92b49adbad2ef
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 302 Found
Server: nginx
Date: Thu, 07 Nov 2024 05:20:50 UTC
Cache-Control: no-store
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Confluence-Request-Time: 1697032431875
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Location: /login.action?os_destination=%2Findex.action&permissionViolation=true
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Set-Cookie: JSESSIONID=FD2CA9E2B09E9FEE2EC126FA48BF694B; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:20:50.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1636538602,
         "component" : [
            {
               "product" : "Java",
               "productvendor" : "Oracle"
            },
            {
               "productvendor" : "Atlassian",
               "product" : "Confluence"
            }
         ],
         "headermd5" : "2dc1e159d50343e36aa92b49adbad2ef",
         "headermmh3" : 1432458827
      },
      "length" : 620
   },
   "asn" : "AS9009",
   "city" : "Tokyo",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:20:50 UTC\r\nCache-Control: no-store\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Confluence-Request-Time: 1697032431875\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nLocation: /login.action?os_destination=%2Findex.action&permissionViolation=true\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Length: 0\r\nSet-Cookie: JSESSIONID=FD2CA9E2B09E9FEE2EC126FA48BF694B; Path=/; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n",
   "datamd5" : "1625694c587cd601197fb35f20511ece",
   "datammh3" : 1837928346,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "194.in-addr.arpa"
   ],
   "host" : [
      117
   ],
   "hostname" : [
      "117.27.68.194.in-addr.arpa"
   ],
   "ip" : "194.68.27.117",
   "ipv6" : "false",
   "latitude" : "35.6893",
   "location" : "35.6893,139.6899",
   "longitude" : "139.6899",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "M247 Europe SRL",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4899,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Found",
   "reverse" : [
      "117.27.68.194.in-addr.arpa"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 302,
   "subdomains" : [
      "27.68.194.in-addr.arpa",
      "68.194.in-addr.arpa"
   ],
   "subnet" : "194.68.26.0/23",
   "tld" : [
      "in-addr.arpa"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 103.252.117.46:4899 (tcp/http) - last seen on 2024-11-07 at 04:29:31 UTC

    • IP
      103.252.117.46
      Network
      103.252.116.0/22
      Device

      <enterprise field>: device.class

      URL

      http://103.252.117.46:4899/ 301

      ASN
      AS64022
      Organization
      Kamatera, Inc.
      Protocol
      http
      Source
      datascan
    • Product
      Apache HTTP Server
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      433fd4199a3d308ad34b27bca550fea1
      HTTP Header MD5
      1596025e1d1eb4b7aaf8a70fe8f5fcfb
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 301 Moved Permanently
Location: /admin/login.html
Content-Type: text/html; charset=UTF-8
Server: Apache
Content-Length: 0
Set-Cookie: idA40=25905182; max-age=2592000;
Connection: keep-alive


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:29:31.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1636538602,
         "headermd5" : "1596025e1d1eb4b7aaf8a70fe8f5fcfb",
         "headermmh3" : -38170010
      },
      "length" : 208
   },
   "asn" : "AS64022",
   "city" : "Hong Kong",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 301 Moved Permanently\r\nLocation: /admin/login.html\r\nContent-Type: text/html; charset=UTF-8\r\nServer: Apache\r\nContent-Length: 0\r\nSet-Cookie: idA40=25905182; max-age=2592000;\r\nConnection: keep-alive\r\n\r\n",
   "datamd5" : "433fd4199a3d308ad34b27bca550fea1",
   "datammh3" : -1934269793,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS64022",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "cloudwm.com",
         "kamatera.com"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "CloudWebManage_HK",
      "organization" : "CLOUDWEBMANAGE-HK",
      "subnet" : "103.252.117.0/24"
   },
   "ip" : "103.252.117.46",
   "ipv6" : "false",
   "latitude" : "22.2842",
   "location" : "22.2842,114.1759",
   "longitude" : "114.1759",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Kamatera, Inc.",
   "port" : 4899,
   "product" : "HTTP Server",
   "productvendor" : "Apache",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Moved Permanently",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 301,
   "subnet" : "103.252.116.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 92.96.70.146:4899 (tcp/http) - last seen on 2024-11-07 at 04:11:18 UTC

    • IP
      92.96.70.146
      Network
      92.96.0.0/14
      Domain(s)
      alshamil.net.ae
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://92.96.70.146:4899/ 404

      Reverse DNS
      bba-92-96-70-146.alshamil.net.ae
      ASN
      AS5384
      Organization
      Emirates Telecommunications Group Company (etisalat Group) Pjsc
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4b5b496ff238cb6bc91391c80dbcb192
      HTTP Header MD5
      4b5b496ff238cb6bc91391c80dbcb192
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 404 Not Found

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:11:18.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "4b5b496ff238cb6bc91391c80dbcb192",
         "headermmh3" : -2050145619
      },
      "length" : 24
   },
   "asn" : "AS5384",
   "city" : "Abu Dhabi",
   "country" : "AE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\n",
   "datamd5" : "4b5b496ff238cb6bc91391c80dbcb192",
   "datammh3" : -1733658736,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "alshamil.net.ae"
   ],
   "geolocus" : {
      "asn" : "AS5384",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "AE",
      "countryname" : "United Arab Emirates",
      "domain" : [
         "alshamil.net.ae",
         "emirates.net.ae"
      ],
      "isineu" : "false",
      "latitude" : "23.424076",
      "location" : "23.424076,53.847818",
      "longitude" : "53.847818",
      "netname" : "ETISALATADSL-EMIRNET",
      "organization" : "Emirates Telecommunications Corporation P.O. Box 1150, Dubai, UAE",
      "subnet" : "92.96.64.0/19"
   },
   "host" : [
      "bba-92-96-70-146"
   ],
   "hostname" : [
      "bba-92-96-70-146.alshamil.net.ae"
   ],
   "ip" : "92.96.70.146",
   "ipv6" : "false",
   "latitude" : "24.4542",
   "location" : "24.4542,54.4060",
   "longitude" : "54.4060",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Emirates Telecommunications Group Company (etisalat Group) Pjsc",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4899,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "reverse" : [
      "bba-92-96-70-146.alshamil.net.ae"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 404,
   "subnet" : "92.96.0.0/14",
   "tld" : [
      "net.ae"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 5.107.83.21:4899 (tcp/http) - last seen on 2024-11-07 at 03:29:09 UTC

    • IP
      5.107.83.21
      Network
      5.107.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://5.107.83.21:4899/ 404

      ASN
      AS5384
      Organization
      Emirates Telecommunications Group Company (etisalat Group) Pjsc
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4b5b496ff238cb6bc91391c80dbcb192
      HTTP Header MD5
      4b5b496ff238cb6bc91391c80dbcb192
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 404 Not Found

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:29:09.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "4b5b496ff238cb6bc91391c80dbcb192",
         "headermmh3" : -2050145619
      },
      "length" : 24
   },
   "asn" : "AS5384",
   "city" : "Sharjah",
   "country" : "AE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\n",
   "datamd5" : "4b5b496ff238cb6bc91391c80dbcb192",
   "datammh3" : -1733658736,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS5384",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "AE",
      "countryname" : "United Arab Emirates",
      "domain" : [
         "emirates.net.ae"
      ],
      "isineu" : "false",
      "latitude" : "23.424076",
      "location" : "23.424076,53.847818",
      "longitude" : "53.847818",
      "netname" : "ETISALATADSL-EMIRNET",
      "organization" : "Emirates Telecommunications Corporation P.O. Box 1150, Dubai, UAE",
      "subnet" : "5.107.0.0/17"
   },
   "ip" : "5.107.83.21",
   "ipv6" : "false",
   "latitude" : "25.3412",
   "location" : "25.3412,55.4224",
   "longitude" : "55.4224",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Emirates Telecommunications Group Company (etisalat Group) Pjsc",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4899,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 404,
   "subnet" : "5.107.0.0/16",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 45.15.21.106:4899 (tcp/http) - last seen on 2024-11-07 at 03:17:54 UTC

    • IP
      45.15.21.106
      Network
      45.15.20.0/22
      Domain(s)
      v9ks2n.cn
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://45.15.21.106:4899/ 302

      Reverse DNS
      v9ks2n.cn
      ASN
      AS9009
      Organization
      M247 Europe SRL
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      Atlassian Confluence Oracle Java
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1625694c587cd601197fb35f20511ece
      HTTP Header MD5
      2dc1e159d50343e36aa92b49adbad2ef
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
      Favicon MD5
      966e60f8eb85b7ea43a7b0095f3e2336
      Favicon MMH3
      -305179312 
    • HTTP/1.1 302 Found
Server: nginx
Date: Thu, 07 Nov 2024 01:50:51 UTC
Cache-Control: no-store
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Confluence-Request-Time: 1697032431875
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Location: /login.action?os_destination=%2Findex.action&permissionViolation=true
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Set-Cookie: JSESSIONID=FD2CA9E2B09E9FEE2EC126FA48BF694B; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:17:54.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "966e60f8eb85b7ea43a7b0095f3e2336",
         "imagemmh3" : -305179312,
         "length" : 4259,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1636538602,
         "component" : [
            {
               "product" : "Java",
               "productvendor" : "Oracle"
            },
            {
               "productvendor" : "Atlassian",
               "product" : "Confluence"
            }
         ],
         "headermd5" : "2dc1e159d50343e36aa92b49adbad2ef",
         "headermmh3" : -136762667
      },
      "length" : 620
   },
   "asn" : "AS9009",
   "city" : "New York",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 01:50:51 UTC\r\nCache-Control: no-store\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Confluence-Request-Time: 1697032431875\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nLocation: /login.action?os_destination=%2Findex.action&permissionViolation=true\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Length: 0\r\nSet-Cookie: JSESSIONID=FD2CA9E2B09E9FEE2EC126FA48BF694B; Path=/; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n",
   "datamd5" : "1625694c587cd601197fb35f20511ece",
   "datammh3" : 1837928346,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "v9ks2n.cn"
   ],
   "geolocus" : {
      "asn" : "AS55933",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "domain" : [
         "apnic.net"
      ],
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "IANA-NETBLOCK-45",
      "organization" : "This network range is not fully allocated to APNIC.",
      "subnet" : "45.0.0.0/8"
   },
   "hostname" : [
      "v9ks2n.cn"
   ],
   "ip" : "45.15.21.106",
   "ipv6" : "false",
   "latitude" : "40.7123",
   "location" : "40.7123,-74.0068",
   "longitude" : "-74.0068",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "M247 Europe SRL",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4899,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Found",
   "reverse" : [
      "v9ks2n.cn"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 302,
   "subnet" : "45.15.20.0/22",
   "tld" : [
      "cn"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 13.57.48.133:4899 (tcp/http) - last seen on 2024-11-07 at 03:10:05 UTC

    • IP
      13.57.48.133
      Network
      13.56.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://13.57.48.133:4899/ 301

      Reverse DNS
      ec2-13-57-48-133.us-west-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      Atlassian Confluence Oracle Java
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9d7ec7a8f265170f99f5ddc6e0dd54ec
      HTTP Header MD5
      12ce5003178f69c01cde739a289c91d8
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 301 Moved Permanently
Connection: keep-alive
Date: Thu, 07 Nov 2024 03:10:05 GMT
Server: nginx
X-Confluence-Request-Time: 1730949005
Content-Type: text/html;charset=UTF-8
Cache-Control: no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: JSESSIONID=zhqapt4fzbs3kf93ip44m0qmclyanf8e; Path=/; Secure; HttpOnly
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Strict-Transport-Security: max-age=63072000
Location: ./login.action
Content-Length: 0


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:10:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1636538602,
         "component" : [
            {
               "product" : "Java",
               "productvendor" : "Oracle"
            },
            {
               "productvendor" : "Atlassian",
               "product" : "Confluence"
            }
         ],
         "headermd5" : "12ce5003178f69c01cde739a289c91d8",
         "headermmh3" : -710577574
      },
      "length" : 587
   },
   "asn" : "AS16509",
   "city" : "San Jose",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 301 Moved Permanently\r\nConnection: keep-alive\r\nDate: Thu, 07 Nov 2024 03:10:05 GMT\r\nServer: nginx\r\nX-Confluence-Request-Time: 1730949005\r\nContent-Type: text/html;charset=UTF-8\r\nCache-Control: no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nSet-Cookie: JSESSIONID=zhqapt4fzbs3kf93ip44m0qmclyanf8e; Path=/; Secure; HttpOnly\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nStrict-Transport-Security: max-age=63072000\r\nLocation: ./login.action\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "9d7ec7a8f265170f99f5ddc6e0dd54ec",
   "datammh3" : 1907676614,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AT-88-Z",
      "organization" : "Amazon Technologies Inc.",
      "subnet" : "13.56.0.0/14"
   },
   "host" : [
      "ec2-13-57-48-133"
   ],
   "hostname" : [
      "ec2-13-57-48-133.us-west-1.compute.amazonaws.com"
   ],
   "ip" : "13.57.48.133",
   "ipv6" : "false",
   "latitude" : "37.1835",
   "location" : "37.1835,-121.7714",
   "longitude" : "-121.7714",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4899,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Moved Permanently",
   "reverse" : [
      "ec2-13-57-48-133.us-west-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 301,
   "subdomains" : [
      "compute.amazonaws.com",
      "us-west-1.compute.amazonaws.com"
   ],
   "subnet" : "13.56.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 193.29.182.52:4899 (tcp/http) - last seen on 2024-11-07 at 03:10:05 UTC

    • IP
      193.29.182.52
      Network
      193.29.182.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://193.29.182.52:4899/ 407

      ASN
      AS216157
      Organization
      Sixnet Operation Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      78585a31a9923f851fd7498cc40b6a44
      HTTP Header MD5
      ec1a9c7961fed7d88fbabb0196599217
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 407 Proxy Authentication Required
proxy-authenticate: Basic
connection: close


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:10:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "ec1a9c7961fed7d88fbabb0196599217",
         "headermmh3" : 1542279371
      },
      "length" : 92
   },
   "asn" : "AS216157",
   "country" : "NL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nproxy-authenticate: Basic\r\nconnection: close\r\n\r\n",
   "datamd5" : "78585a31a9923f851fd7498cc40b6a44",
   "datammh3" : 1547380673,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS216157",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "GB",
      "countryname" : "United Kingdom",
      "domain" : [
         "rtmnetworks.net"
      ],
      "isineu" : "false",
      "latitude" : "55.378051",
      "location" : "55.378051,-3.435973",
      "longitude" : "-3.435973",
      "netname" : "GB-SIXNET-20240416",
      "organization" : "Sixnet Operations Ltd",
      "subnet" : "193.29.182.0/24"
   },
   "ip" : "193.29.182.52",
   "ipv6" : "false",
   "latitude" : "52.3824",
   "location" : "52.3824,4.8995",
   "longitude" : "4.8995",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Sixnet Operation Ltd",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4899,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "193.29.182.0/24",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 121.14.38.14:4899 (tcp/http) - last seen on 2024-11-07 at 02:51:20 UTC

    • IP
      121.14.38.14
      Network
      121.8.0.0/13
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://121.14.38.14:4899/ 404

      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Apache Coyote HTTP Connector 1.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      41836d5667f6bd0e464b0eed8bfa4387
      HTTP Header MD5
      aa28cbdae1e9219775faf08e05c40b68
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 404 Not Found
Server: Apache-Coyote/1.1
Content-Length: 0
Date: Thu, 07 Nov 2024 02:51:20 GMT
Connection: close


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:51:20.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "aa28cbdae1e9219775faf08e05c40b68",
         "headermmh3" : -298278541
      },
      "length" : 128
   },
   "asn" : "AS4134",
   "city" : "Guangzhou",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\nServer: Apache-Coyote/1.1\r\nContent-Length: 0\r\nDate: Thu, 07 Nov 2024 02:51:20 GMT\r\nConnection: close\r\n\r\n",
   "datamd5" : "41836d5667f6bd0e464b0eed8bfa4387",
   "datammh3" : 1004596483,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4134",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "163.com",
         "chinatelecom.cn",
         "gddc.com.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "beijingshijihuliankuandaishujuz",
      "organization" : "China Telecom",
      "subnet" : "121.14.36.0/22"
   },
   "ip" : "121.14.38.14",
   "ipv6" : "false",
   "latitude" : "23.1181",
   "location" : "23.1181,113.2539",
   "longitude" : "113.2539",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Chinanet",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4899,
   "product" : "Coyote HTTP Connector",
   "productvendor" : "Apache",
   "productversion" : "1.1",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 404,
   "subnet" : "121.8.0.0/13",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 88.120.200.184:4899 (tcp/http) - last seen on 2024-11-07 at 02:17:29 UTC

    • IP
      88.120.200.184
      Network
      88.120.0.0/13
      Domain(s)
      proxad.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://88.120.200.184:4899/ 302

      Reverse DNS
      88-120-200-184.subs.proxad.net
      ASN
      AS12322
      Organization
      Free SAS
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6220986d5201ab6b04924ee035f7fcd4
      HTTP Header MD5
      d4757ef5cd6ea4af2ab354870c866926
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 302 Found
Server: nginx
Date: Thu, 07 Nov 2024 02:17:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Location: /login.php
Expires: Thu, 07 Nov 2024 02:17:28 GMT
Cache-Control: no-cache
Cache-Control: must-revalidate,no-store


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:17:29.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1636538602,
         "headermd5" : "d4757ef5cd6ea4af2ab354870c866926",
         "headermmh3" : 403178175
      },
      "length" : 280
   },
   "asn" : "AS12322",
   "city" : "Firminy",
   "country" : "FR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 02:17:29 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: close\r\nLocation: /login.php\r\nExpires: Thu, 07 Nov 2024 02:17:28 GMT\r\nCache-Control: no-cache\r\nCache-Control: must-revalidate,no-store\r\n\r\n",
   "datamd5" : "6220986d5201ab6b04924ee035f7fcd4",
   "datammh3" : 361589339,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "proxad.net"
   ],
   "geolocus" : {
      "asn" : "AS12322",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "FR",
      "countryname" : "France",
      "domain" : [
         "proxad.net"
      ],
      "isineu" : "true",
      "latitude" : "46.227638",
      "location" : "46.227638,2.213749",
      "longitude" : "2.213749",
      "netname" : "TISCALI-FRANCE",
      "organization" : "Free SAS",
      "subnet" : "88.120.128.0/17"
   },
   "host" : [
      "88-120-200-184"
   ],
   "hostname" : [
      "88-120-200-184.subs.proxad.net"
   ],
   "ip" : "88.120.200.184",
   "ipv6" : "false",
   "latitude" : "45.3838",
   "location" : "45.3838,4.2920",
   "longitude" : "4.2920",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Free SAS",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4899,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Found",
   "reverse" : [
      "88-120-200-184.subs.proxad.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 302,
   "subdomains" : [
      "subs.proxad.net"
   ],
   "subnet" : "88.120.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}