ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 29,945 in 0.045 second(s)

  • 14.35.3.209:5351 (udp/unknown) - last seen on 2024-11-21 at 08:55:25 UTC

    • IP
      14.35.3.209
      Network
      14.35.0.0/20
      Device

      <enterprise field>: device.class

      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9d3858ea2faa9dcb282844e4c96ccbe9 
    • \x00\x80\x00\x03\x01WC\x8b\x00\x00\x00\x00
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:55:25.000Z",
   "app" : {
      "length" : "12"
   },
   "asn" : "AS4766",
   "city" : "Seongnam-si",
   "country" : "KR",
   "data" : "\\x00\\x80\\x00\\x03\\x01WC\\x8b\\x00\\x00\\x00\\x00",
   "datamd5" : "9d3858ea2faa9dcb282844e4c96ccbe9",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "14.35.0.0/20"
   },
   "ip" : "14.35.3.209",
   "ipv6" : "false",
   "latitude" : "37.4331",
   "location" : "37.4331,127.1377",
   "longitude" : "127.1377",
   "organization" : "Korea Telecom",
   "port" : "5351",
   "protocol" : "unknown",
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subnet" : "14.35.0.0/20",
   "tls" : "false",
   "transport" : "udp"
}

  • 15.168.10.122:5351 (udp/unknown) - last seen on 2024-11-21 at 08:54:23 UTC

    • IP
      15.168.10.122
      Network
      15.168.0.0/16
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-15-168-10-122.ap-northeast-3.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      45984fd9437e4844594f858cfdd79ebd 
    • Access Forbidden\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:54:23.000Z",
   "app" : {
      "length" : "18"
   },
   "asn" : "AS16509",
   "city" : "Osaka",
   "country" : "JP",
   "data" : "Access Forbidden\\x0d\n",
   "datamd5" : "45984fd9437e4844594f858cfdd79ebd",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "AMAZON-KIX",
      "organization" : "Amazon Data Services Osaka",
      "subnet" : "15.168.0.0/16"
   },
   "host" : [
      "ec2-15-168-10-122"
   ],
   "hostname" : [
      "ec2-15-168-10-122.ap-northeast-3.compute.amazonaws.com"
   ],
   "ip" : "15.168.10.122",
   "ipv6" : "false",
   "latitude" : "34.6946",
   "location" : "34.6946,135.5021",
   "longitude" : "135.5021",
   "organization" : "AMAZON-02",
   "port" : "5351",
   "protocol" : "unknown",
   "reverse" : [
      "ec2-15-168-10-122.ap-northeast-3.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subdomains" : [
      "compute.amazonaws.com",
      "ap-northeast-3.compute.amazonaws.com"
   ],
   "subnet" : "15.168.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 175.143.239.92:5351 (udp/unknown) - last seen on 2024-11-21 at 08:53:51 UTC

    • IP
      175.143.239.92
      Network
      175.136.0.0/13
      Device

      <enterprise field>: device.class

      ASN
      AS4788
      Organization
      TM TECHNOLOGY SERVICES SDN. BHD.
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ca22e60a1fc1a84ceaa17c57f3904261 
    • \x00\x80\x00\x00\x00\x1e\xc0\xeb\xaf\x8f\xef\
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:53:51.000Z",
   "app" : {
      "length" : "12"
   },
   "asn" : "AS4788",
   "city" : "Petaling Jaya",
   "country" : "MY",
   "data" : "\\x00\\x80\\x00\\x00\\x00\\x1e\\xc0\\xeb\\xaf\\x8f\\xef\\",
   "datamd5" : "ca22e60a1fc1a84ceaa17c57f3904261",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4788",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "MY",
      "countryname" : "Malaysia",
      "isineu" : "false",
      "latitude" : "4.210484",
      "location" : "4.210484,101.975766",
      "longitude" : "101.975766",
      "netname" : "ADSL-STREAMYX",
      "organization" : "Telekom Malaysia Berhad",
      "subnet" : "175.143.0.0/16"
   },
   "ip" : "175.143.239.92",
   "ipv6" : "false",
   "latitude" : "3.0999",
   "location" : "3.0999,101.5965",
   "longitude" : "101.5965",
   "organization" : "TM TECHNOLOGY SERVICES SDN. BHD.",
   "port" : "5351",
   "protocol" : "unknown",
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subnet" : "175.136.0.0/13",
   "tls" : "false",
   "transport" : "udp"
}

  • 108.162.178.139:5351 (udp/unknown) - last seen on 2024-11-21 at 08:44:03 UTC

    • IP
      108.162.178.139
      Network
      108.162.160.0/19
      Domain(s)
      teksavvy.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      108-162-178-139.cable.teksavvy.com
      ASN
      AS5645
      Organization
      TEKSAVVY
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      08d0ed5c44440770c489784ce0c29e9d 
    • \x00\x80\x00\x00.\xd1\xafIl\xa2\xb2\x8b
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:44:03.000Z",
   "app" : {
      "length" : "12"
   },
   "asn" : "AS5645",
   "city" : "Scarborough",
   "country" : "CA",
   "data" : "\\x00\\x80\\x00\\x00.\\xd1\\xafIl\\xa2\\xb2\\x8b",
   "datamd5" : "08d0ed5c44440770c489784ce0c29e9d",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "teksavvy.com"
   ],
   "geolocus" : {
      "asn" : "AS5645",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "TS1-ROGERS",
      "organization" : "TekSavvy Solutions Inc.",
      "subnet" : "108.162.128.0/18"
   },
   "host" : [
      "108-162-178-139"
   ],
   "hostname" : [
      "108-162-178-139.cable.teksavvy.com"
   ],
   "ip" : "108.162.178.139",
   "ipv6" : "false",
   "latitude" : "43.7813",
   "location" : "43.7813,-79.3019",
   "longitude" : "-79.3019",
   "organization" : "TEKSAVVY",
   "port" : "5351",
   "protocol" : "unknown",
   "reverse" : [
      "108-162-178-139.cable.teksavvy.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subdomains" : [
      "cable.teksavvy.com"
   ],
   "subnet" : "108.162.160.0/19",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 46.0.42.49:5351 (udp/unknown) - last seen on 2024-11-21 at 08:43:50 UTC

    • IP
      46.0.42.49
      Network
      46.0.0.0/16
      Domain(s)
      ertelecom.ru
      Device

      <enterprise field>: device.class

      Reverse DNS
      dynamicip-46-0-42-49.pppoe.samara.ertelecom.ru
      ASN
      AS34533
      Organization
      JSC ER-Telecom Holding
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7f8c6c4552803b65ff9ad2191ef6d5e8 
    • \x00\x80\x00\x00\x16|\xe0;.\x00*1
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:43:50.000Z",
   "app" : {
      "length" : "12"
   },
   "asn" : "AS34533",
   "city" : "Samara",
   "country" : "RU",
   "data" : "\\x00\\x80\\x00\\x00\\x16|\\xe0;.\\x00*1",
   "datamd5" : "7f8c6c4552803b65ff9ad2191ef6d5e8",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ertelecom.ru"
   ],
   "geolocus" : {
      "asn" : "AS34533",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "RU",
      "countryname" : "Russia",
      "isineu" : "false",
      "latitude" : "61.52401",
      "location" : "61.52401,105.318756",
      "longitude" : "105.318756",
      "netname" : "ESAMARA-PPPOE-8-NET",
      "organization" : "JSC \"ER-Telecom Holding\" Samara Branch",
      "subnet" : "46.0.0.0/16"
   },
   "host" : [
      "dynamicip-46-0-42-49"
   ],
   "hostname" : [
      "dynamicip-46-0-42-49.pppoe.samara.ertelecom.ru"
   ],
   "ip" : "46.0.42.49",
   "ipv6" : "false",
   "latitude" : "53.1944",
   "location" : "53.1944,50.1598",
   "longitude" : "50.1598",
   "organization" : "JSC ER-Telecom Holding",
   "port" : "5351",
   "protocol" : "unknown",
   "reverse" : [
      "dynamicip-46-0-42-49.pppoe.samara.ertelecom.ru"
   ],
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subdomains" : [
      "samara.ertelecom.ru",
      "pppoe.samara.ertelecom.ru"
   ],
   "subnet" : "46.0.0.0/16",
   "tld" : [
      "ru"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 69.80.247.203:5351 (udp/unknown) - last seen on 2024-11-21 at 08:43:50 UTC

    • IP
      69.80.247.203
      Network
      69.80.240.0/20
      Domain(s)
      fire2wire.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ip-69-80-247-203.wireless.static.fire2wire.com
      ASN
      AS11191
      Organization
      F2W-AS
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      80f51b6b36cc72dcd672aedd74850525 
    • \x00\x80\x00\x00\x00\x01\xa1\x11EP\xf7\xcb
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:43:50.000Z",
   "app" : {
      "length" : "12"
   },
   "asn" : "AS11191",
   "city" : "Hilmar",
   "country" : "US",
   "data" : "\\x00\\x80\\x00\\x00\\x00\\x01\\xa1\\x11EP\\xf7\\xcb",
   "datamd5" : "80f51b6b36cc72dcd672aedd74850525",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "fire2wire.com"
   ],
   "geolocus" : {
      "asn" : "AS11191",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "CAL-NET-INC-5",
      "organization" : "Cal.net, Inc.",
      "subnet" : "69.80.240.0/20"
   },
   "host" : [
      "ip-69-80-247-203"
   ],
   "hostname" : [
      "ip-69-80-247-203.wireless.static.fire2wire.com"
   ],
   "ip" : "69.80.247.203",
   "ipv6" : "false",
   "latitude" : "37.4134",
   "location" : "37.4134,-120.8622",
   "longitude" : "-120.8622",
   "organization" : "F2W-AS",
   "port" : "5351",
   "protocol" : "unknown",
   "reverse" : [
      "ip-69-80-247-203.wireless.static.fire2wire.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subdomains" : [
      "static.fire2wire.com",
      "wireless.static.fire2wire.com"
   ],
   "subnet" : "69.80.240.0/20",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 94.180.178.91:5351 (udp/unknown) - last seen on 2024-11-21 at 08:41:54 UTC

    • IP
      94.180.178.91
      Network
      94.180.128.0/17
      Domain(s)
      ertelecom.ru
      Device

      <enterprise field>: device.class

      Reverse DNS
      dynamicip-94-180-178-91.pppoe.kzn.ertelecom.ru
      ASN
      AS41668
      Organization
      JSC ER-Telecom Holding
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c639ee8d80d9ce1178bce0d54251165 
    • \x00\x80\x00\x00\x16|\xdf\xc9^\xb4\xb2[
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:41:54.000Z",
   "app" : {
      "length" : "12"
   },
   "asn" : "AS41668",
   "city" : "Kazan'",
   "country" : "RU",
   "data" : "\\x00\\x80\\x00\\x00\\x16|\\xdf\\xc9^\\xb4\\xb2[",
   "datamd5" : "0c639ee8d80d9ce1178bce0d54251165",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ertelecom.ru"
   ],
   "geolocus" : {
      "asn" : "AS41668",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "RU",
      "countryname" : "Russia",
      "isineu" : "false",
      "latitude" : "61.52401",
      "location" : "61.52401,105.318756",
      "longitude" : "105.318756",
      "netname" : "ERTH-KAZAN-PPPOE-36-NET",
      "organization" : "JSC \"ER-Telecom Holding\" Kazan' Branch",
      "subnet" : "94.180.128.0/17"
   },
   "host" : [
      "dynamicip-94-180-178-91"
   ],
   "hostname" : [
      "dynamicip-94-180-178-91.pppoe.kzn.ertelecom.ru"
   ],
   "ip" : "94.180.178.91",
   "ipv6" : "false",
   "latitude" : "55.7524",
   "location" : "55.7524,49.1388",
   "longitude" : "49.1388",
   "organization" : "JSC ER-Telecom Holding",
   "port" : "5351",
   "protocol" : "unknown",
   "reverse" : [
      "dynamicip-94-180-178-91.pppoe.kzn.ertelecom.ru"
   ],
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subdomains" : [
      "pppoe.kzn.ertelecom.ru",
      "kzn.ertelecom.ru"
   ],
   "subnet" : "94.180.128.0/17",
   "tld" : [
      "ru"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 67.253.20.139:5351 (udp/unknown) - last seen on 2024-11-21 at 08:36:02 UTC

    • IP
      67.253.20.139
      Network
      67.252.0.0/15
      Domain(s)
      spectrum.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      syn-067-253-020-139.res.spectrum.com
      ASN
      AS11351
      Organization
      TWC-11351-NORTHEAST
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f20ebf8b9e7887a3aa5e806f068f2f95 
    • \x00\x80\x00\x00\x00\x00\xea\xe4C\xfd\x14\x8b
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:36:02.000Z",
   "app" : {
      "length" : "12"
   },
   "asn" : "AS11351",
   "city" : "Camden",
   "country" : "US",
   "data" : "\\x00\\x80\\x00\\x00\\x00\\x00\\xea\\xe4C\\xfd\\x14\\x8b",
   "datamd5" : "f20ebf8b9e7887a3aa5e806f068f2f95",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "spectrum.com"
   ],
   "geolocus" : {
      "asn" : "AS11351",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "RRNY",
      "organization" : "Charter Communications Inc",
      "subnet" : "67.252.0.0/15"
   },
   "host" : [
      "syn-067-253-020-139"
   ],
   "hostname" : [
      "syn-067-253-020-139.res.spectrum.com"
   ],
   "ip" : "67.253.20.139",
   "ipv6" : "false",
   "latitude" : "44.2069",
   "location" : "44.2069,-69.0561",
   "longitude" : "-69.0561",
   "organization" : "TWC-11351-NORTHEAST",
   "port" : "5351",
   "protocol" : "unknown",
   "reverse" : [
      "syn-067-253-020-139.res.spectrum.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subdomains" : [
      "res.spectrum.com"
   ],
   "subnet" : "67.252.0.0/15",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 64.139.104.102:5351 (udp/unknown) - last seen on 2024-11-21 at 08:35:18 UTC

    • IP
      64.139.104.102
      Network
      64.139.96.0/19
      Device

      <enterprise field>: device.class

      ASN
      AS20474
      Organization
      NCIDATACOM
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2688ed57ac80aa0da3a8c3bcb41e9c9f 
    • \x00\x80\x00\x00\x00\x03\xa2\x06@\x8bhf
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:35:18.000Z",
   "app" : {
      "length" : "12"
   },
   "asn" : "AS20474",
   "city" : "Omak",
   "country" : "US",
   "data" : "\\x00\\x80\\x00\\x00\\x00\\x03\\xa2\\x06@\\x8bhf",
   "datamd5" : "2688ed57ac80aa0da3a8c3bcb41e9c9f",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS20474",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NCIDATACOM",
      "organization" : "NCI Data.com, Inc.",
      "subnet" : "64.139.96.0/19"
   },
   "ip" : "64.139.104.102",
   "ipv6" : "false",
   "latitude" : "48.4122",
   "location" : "48.4122,-119.5250",
   "longitude" : "-119.5250",
   "organization" : "NCIDATACOM",
   "port" : "5351",
   "protocol" : "unknown",
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subnet" : "64.139.96.0/19",
   "tls" : "false",
   "transport" : "udp"
}

  • 14.51.196.216:5351 (udp/unknown) - last seen on 2024-11-21 at 08:34:04 UTC

    • IP
      14.51.196.216
      Network
      14.51.0.0/16
      Device

      <enterprise field>: device.class

      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      unknown
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4b7b361084b78d4c5aaacb2fd07b5cc3 
    • \x00\x80\x00\x03\x01\xed[\x94\x00\x00\x00\x00
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:34:04.000Z",
   "app" : {
      "length" : "12"
   },
   "asn" : "AS4766",
   "city" : "Cheongju-si",
   "country" : "KR",
   "data" : "\\x00\\x80\\x00\\x03\\x01\\xed[\\x94\\x00\\x00\\x00\\x00",
   "datamd5" : "4b7b361084b78d4c5aaacb2fd07b5cc3",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "14.50.0.0/15"
   },
   "ip" : "14.51.196.216",
   "ipv6" : "false",
   "latitude" : "36.6380",
   "location" : "36.6380,127.4838",
   "longitude" : "127.4838",
   "organization" : "Korea Telecom",
   "port" : "5351",
   "protocol" : "unknown",
   "seen_date" : "2024-11-21",
   "source" : "udpscan",
   "subnet" : "14.51.0.0/16",
   "tls" : "false",
   "transport" : "udp"
}