129.213.113.164:5986 (tcp/winrm/tls) - last seen on 2024-11-07 at 05:15:32 UTC
-
- IP
- 129.213.113.164
- Network
- 129.213.0.0/17
- Domain(s)
- zimbracloudsuite.com
- Device
-
<enterprise field>: device.class
- Operating System
- Microsoft Windows
- Reverse DNS
- mx2.zimbracloudsuite.com
- ASN
- AS31898
- Organization
- ORACLE-BMC-31898
- Protocol
- winrm Cert not expired winrm
- Source
- datascan
-
- Operating System
- Microsoft Windows
- Product
- Microsoft HTTPAPI 2.0
- CPE(s)
-
<enterprise field>: cpe
-
- Issuer Common Name
- Cloudbase-Init WinRM
- Subject Common Name
- Cloudbase-Init WinRM
- SHA256 Fingerprint
- 5bb3bdaa561268f6a6f5c3e3067cf331eb95f339afa87db2de8cf7e3a10a7693
- Validity Not Before
- 2024-02-13T10:30:52Z
- Validity Not After
- 2034-02-11T10:30:52Z
This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.
-
- Data MD5
- 71245e327d5ad66e82c432786b173f71
- HTTP Header MD5
- 3a383fe2669d8e9c9234fe672975029c
- HTTP Body MD5
- d41d8cd98f00b204e9800998ecf8427e
-
HTTP/1.1 401 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: Basic realm="WSMAN" Date: Thu, 07 Nov 2024 05:15:31 GMT Connection: close Content-Length: 0 -
{ "@category" : "datascan", "@timestamp" : "2024-11-07T05:15:32.000Z", "app" : { "http" : { "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e", "bodymmh3" : -1, "headermd5" : "3a383fe2669d8e9c9234fe672975029c", "headermmh3" : 1916593304, "realm" : "WSMAN" }, "length" : 191 }, "asn" : "AS31898", "city" : "Ashburn", "country" : "US", "cpe" : "<enterprise field>: cpe", "cpecount" : "<enterprise field>: cpecount", "data" : "HTTP/1.1 401 \r\nServer: Microsoft-HTTPAPI/2.0\r\nWWW-Authenticate: Negotiate\r\nWWW-Authenticate: Basic realm=\"WSMAN\"\r\nDate: Thu, 07 Nov 2024 05:15:31 GMT\r\nConnection: close\r\nContent-Length: 0\r\n\r\n", "datamd5" : "71245e327d5ad66e82c432786b173f71", "datammh3" : 278103319, "device" : { "class" : "<enterprise field>: device.class" }, "domain" : [ "zimbracloudsuite.com" ], "fingerprint" : { "md5" : "eb563cf0c465a20d398155d3f727ecf0", "sha1" : "4c9418a7975c86a48f12b46fce79cccf8fdf836a", "sha256" : "5bb3bdaa561268f6a6f5c3e3067cf331eb95f339afa87db2de8cf7e3a10a7693" }, "geolocus" : { "asn" : "AS31898", "continent" : "NA", "continentname" : "North America", "country" : "US", "countryname" : "United States", "domain" : [ "oracle.com", "oracleiaas.com" ], "isineu" : "false", "latitude" : "37.09024", "location" : "37.09024,-95.712891", "longitude" : "-95.712891", "netname" : "OC-195", "organization" : "Oracle Public Cloud", "subnet" : "129.213.0.0/17" }, "host" : [ "mx2" ], "hostname" : [ "mx2.zimbracloudsuite.com" ], "ip" : "129.213.113.164", "ipv6" : "false", "issuer" : { "commonname" : "Cloudbase-Init WinRM" }, "latitude" : "39.0395", "location" : "39.0395,-77.4917", "longitude" : "-77.4917", "node" : { "country" : "<enterprise field>: node.country", "groupid" : "<enterprise field>: node.groupid", "id" : "<enterprise field>: node.id", "physicalcountry" : "<enterprise field>: node.physicalcountry" }, "organization" : "ORACLE-BMC-31898", "os" : "Windows", "osvendor" : "Microsoft", "port" : 5986, "product" : "HTTPAPI", "productvendor" : "Microsoft", "productversion" : "2.0", "protocol" : "winrm", "protocolversion" : "1.1", "publickey" : { "algorithm" : "rsaEncryption", "length" : 2048 }, "reverse" : [ "mx2.zimbracloudsuite.com" ], "seen_date" : "2024-11-07", "serial" : "66:fa:62:dd:c1:c0:9f:ac:46:2c:e8:85:9f:c1:ac:7d", "signature" : { "algorithm" : "sha1WithRSAEncryption" }, "source" : "datascan", "status" : 401, "subject" : { "commonname" : "Cloudbase-Init WinRM" }, "subnet" : "129.213.0.0/17", "tag" : "<enterprise field>: tag", "tld" : [ "com" ], "tls" : "true", "transport" : "tcp", "validity" : { "notafter" : "2034-02-11T10:30:52Z", "notbefore" : "2024-02-13T10:30:52Z" }, "version" : "v3", "wildcard" : "false" }