Cyber Defense Search Engine

IP
2.49.136.248

Network
2.48.0.0/14

Domain(s)
alshamil.net.ae

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://2.49.136.248:623/ 404

Reverse DNS
bba-2-49-136-248.alshamil.net.ae

ASN
AS5384

Organization
Emirates Telecommunications Group Company (etisalat Group) Pjsc

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
4b5b496ff238cb6bc91391c80dbcb192

HTTP Header MD5
4b5b496ff238cb6bc91391c80dbcb192

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e
```
HTTP/1.1 404 Not Found
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:50:58.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "4b5b496ff238cb6bc91391c80dbcb192",
         "headermmh3" : -2050145619
      },
      "length" : 24
   },
   "asn" : "AS5384",
   "city" : "Dubai",
   "country" : "AE",
   "data" : "HTTP/1.1 404 Not Found\r\n",
   "datamd5" : "4b5b496ff238cb6bc91391c80dbcb192",
   "datammh3" : -1733658736,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "alshamil.net.ae"
   ],
   "host" : [
      "bba-2-49-136-248"
   ],
   "hostname" : [
      "bba-2-49-136-248.alshamil.net.ae"
   ],
   "ip" : "2.49.136.248",
   "ipv6" : "false",
   "latitude" : "25.0731",
   "location" : "25.0731,55.2980",
   "longitude" : "55.2980",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Emirates Telecommunications Group Company (etisalat Group) Pjsc",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 623,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "reverse" : [
      "bba-2-49-136-248.alshamil.net.ae"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 404,
   "subnet" : "2.48.0.0/14",
   "tld" : [
      "net.ae"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
195.191.197.75

Network
195.191.196.0/23

Domain(s)
as59645.net

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://195.191.197.75:623/ 301

Reverse DNS
ip-75-197-191-195.rdns.as59645.net

ASN
AS59645

Organization
Tobias Fiebig

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
c43652730ea26d02dca1901c6595c2d5

HTTP Header MD5
82d00dd9deac8dceae086c6eb4f1c743

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 301 Moved Permanently
Date: Thu, 07 Nov 2024 05:49:32 UTC
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
Connection: close
Location: /admin/public/index.html

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:49:33.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "82d00dd9deac8dceae086c6eb4f1c743",
         "headermmh3" : 894360323
      },
      "length" : 225
   },
   "asn" : "AS59645",
   "country" : "DE",
   "data" : "HTTP/1.1 301 Moved Permanently\r\nDate: Thu, 07 Nov 2024 05:49:32 UTC\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1\r\nConnection: close\r\nLocation: /admin/public/index.html\r\n\r\n",
   "datamd5" : "c43652730ea26d02dca1901c6595c2d5",
   "datammh3" : 1985601929,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "as59645.net"
   ],
   "host" : [
      "ip-75-197-191-195"
   ],
   "hostname" : [
      "ip-75-197-191-195.rdns.as59645.net"
   ],
   "ip" : "195.191.197.75",
   "ipv6" : "false",
   "latitude" : "51.2993",
   "location" : "51.2993,9.4910",
   "longitude" : "9.4910",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Tobias Fiebig",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 623,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Moved Permanently",
   "reverse" : [
      "ip-75-197-191-195.rdns.as59645.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 301,
   "subdomains" : [
      "rdns.as59645.net"
   ],
   "subnet" : "195.191.196.0/23",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
149.102.140.115

Network
149.102.128.0/19

Domain(s)
contaboserver.net

Device

<enterprise field>: device.class

URL

http://149.102.140.115:623/ 301

Reverse DNS
vmi1185468.contaboserver.net

ASN
AS51167

Organization
Contabo GmbH

Protocol
http

Source
datascan
Product
Apache HTTP Server

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
433fd4199a3d308ad34b27bca550fea1

HTTP Header MD5
1596025e1d1eb4b7aaf8a70fe8f5fcfb

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 301 Moved Permanently
Location: /admin/login.html
Content-Type: text/html; charset=UTF-8
Server: Apache
Content-Length: 0
Set-Cookie: idA3061=18aa2101; max-age=2592000;
Connection: keep-alive

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:42:06.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1636538602,
         "headermd5" : "1596025e1d1eb4b7aaf8a70fe8f5fcfb",
         "headermmh3" : -422506636
      },
      "length" : 210
   },
   "asn" : "AS51167",
   "city" : "D\u00fcsseldorf",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 301 Moved Permanently\r\nLocation: /admin/login.html\r\nContent-Type: text/html; charset=UTF-8\r\nServer: Apache\r\nContent-Length: 0\r\nSet-Cookie: idA3061=18aa2101; max-age=2592000;\r\nConnection: keep-alive\r\n\r\n",
   "datamd5" : "433fd4199a3d308ad34b27bca550fea1",
   "datammh3" : -1934269793,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contaboserver.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com",
         "contabo.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "COGENT-149-102-16",
      "organization" : "PSINet, Inc.",
      "subnet" : "149.102.136.0/21"
   },
   "host" : [
      "vmi1185468"
   ],
   "hostname" : [
      "vmi1185468.contaboserver.net"
   ],
   "ip" : "149.102.140.115",
   "ipv6" : "false",
   "latitude" : "51.1878",
   "location" : "51.1878,6.8607",
   "longitude" : "6.8607",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "port" : 623,
   "product" : "HTTP Server",
   "productvendor" : "Apache",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Moved Permanently",
   "reverse" : [
      "vmi1185468.contaboserver.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 301,
   "subnet" : "149.102.128.0/19",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
218.154.179.22

Network
218.154.160.0/19

Device

<enterprise field>: device.class

URL

http://218.154.179.22:623/ 303

ASN
AS4766

Organization
Korea Telecom

Protocol
http

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
63eeea66ebd7d1d26a9d085bda3fd07b

HTTP Header MD5
7c3ab4407bf24f6627abd7789b415b3a

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 303 See Other
Location: /logon.htm
Content-Length: 0
Server: Intel(R) Active Management Technology 12.0.35.1427

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:40:39.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "12.0.35.142"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "7c3ab4407bf24f6627abd7789b415b3a",
         "headermmh3" : -93866024
      },
      "length" : 127
   },
   "asn" : "AS4766",
   "city" : "Jinju",
   "country" : "KR",
   "data" : "HTTP/1.1 303 See Other\r\nLocation: /logon.htm\r\nContent-Length: 0\r\nServer: Intel(R) Active Management Technology 12.0.35.1427\r\n\r\n",
   "datamd5" : "63eeea66ebd7d1d26a9d085bda3fd07b",
   "datammh3" : 376195501,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "218.154.0.0/16"
   },
   "ip" : "218.154.179.22",
   "ipv6" : "false",
   "latitude" : "35.1684",
   "location" : "35.1684,128.0310",
   "longitude" : "128.0310",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "port" : 623,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "See Other",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 303,
   "subnet" : "218.154.160.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
212.26.245.226

Network
212.26.240.0/20

Domain(s)
ryazan.ru

Device

<enterprise field>: device.class

URL

http://212.26.245.226:623/ 303

Reverse DNS
armat.static.ryazan.ru

ASN
AS12730

Organization
Rostelecom

Protocol
http

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
82af4ebc09bba502c1d8e2a2b6f33932

HTTP Header MD5
ed17494672405e2778ae33413e27d191

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 303 See Other
Location: /logon.htm
Content-Length: 0
Server: Intel(R) Active Management Technology 12.0.22.1310

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:39:36.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "12.0.22.131"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "ed17494672405e2778ae33413e27d191",
         "headermmh3" : 311889964
      },
      "length" : 127
   },
   "asn" : "AS12730",
   "city" : "Ivanovo",
   "country" : "RU",
   "data" : "HTTP/1.1 303 See Other\r\nLocation: /logon.htm\r\nContent-Length: 0\r\nServer: Intel(R) Active Management Technology 12.0.22.1310\r\n\r\n",
   "datamd5" : "82af4ebc09bba502c1d8e2a2b6f33932",
   "datammh3" : -967002147,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ryazan.ru"
   ],
   "host" : [
      "armat"
   ],
   "hostname" : [
      "armat.static.ryazan.ru"
   ],
   "ip" : "212.26.245.226",
   "ipv6" : "false",
   "latitude" : "57.0006",
   "location" : "57.0006,40.9720",
   "longitude" : "40.9720",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Rostelecom",
   "port" : 623,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "See Other",
   "reverse" : [
      "armat.static.ryazan.ru"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 303,
   "subdomains" : [
      "static.ryazan.ru"
   ],
   "subnet" : "212.26.240.0/20",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "ru"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
38.253.186.167

Network
38.253.128.0/18

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://38.253.186.167:623/ 302

ASN
AS265691

Organization
WI-NET TELECOM S.A.C.

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Apache HTTP Server

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
bc64cece9c4e0e0d2608de1698d0022a

HTTP Header MD5
7738190688ffd37046db926d419609f1

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 302 Found
Date: Thu, 07 Nov 2024 05:31:25 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Location: /login/?next=/
Vary: Accept-Language,Cookie
Pragma: no-cache
Cache-Control: no-store
Content-Language: en
Content-Length: 0
Content-Type: text/html; charset=utf-8
Connection: close

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:31:26.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1636538602,
         "headermd5" : "7738190688ffd37046db926d419609f1",
         "headermmh3" : -1673123971
      },
      "length" : 336
   },
   "asn" : "AS265691",
   "city" : "Lima",
   "country" : "PE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 302 Found\r\nDate: Thu, 07 Nov 2024 05:31:25 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nLocation: /login/?next=/\r\nVary: Accept-Language,Cookie\r\nPragma: no-cache\r\nCache-Control: no-store\r\nContent-Language: en\r\nContent-Length: 0\r\nContent-Type: text/html; charset=utf-8\r\nConnection: close\r\n\r\n",
   "datamd5" : "bc64cece9c4e0e0d2608de1698d0022a",
   "datammh3" : 346905622,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS265691",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WTSA-CGNT-NET-1",
      "organization" : "PSINet, Inc.",
      "subnet" : "38.253.128.0/18"
   },
   "ip" : "38.253.186.167",
   "ipv6" : "false",
   "latitude" : "-12.0432",
   "location" : "-12.0432,-77.0282",
   "longitude" : "-77.0282",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WI-NET TELECOM S.A.C.",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 623,
   "product" : "HTTP Server",
   "productvendor" : "Apache",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Found",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 302,
   "subnet" : "38.253.128.0/18",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
171.101.224.194

Network
171.101.0.0/16

Domain(s)
asianet.co.th

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://171.101.224.194:623/ 302

Reverse DNS
cm-171-101-224-194.revip11.asianet.co.th

ASN
AS17552

Organization
True Online

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Kestrel Kestrel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
60b4027f75c41e1f8e25535ce84e1f94

HTTP Header MD5
823ba024f991f3805f4cc1044db4c28c

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Thu, 07 Nov 2024 05:22:19 GMT
Server: Kestrel
Location: web/

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:22:19.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "823ba024f991f3805f4cc1044db4c28c",
         "headermmh3" : 819443602
      },
      "length" : 130
   },
   "asn" : "AS17552",
   "city" : "Bangkok",
   "country" : "TH",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 302 Found\r\nContent-Length: 0\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:22:19 GMT\r\nServer: Kestrel\r\nLocation: web/\r\n\r\n",
   "datamd5" : "60b4027f75c41e1f8e25535ce84e1f94",
   "datammh3" : 2112704998,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "asianet.co.th"
   ],
   "geolocus" : {
      "asn" : "AS17552",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TH",
      "countryname" : "Thailand",
      "domain" : [
         "asianet.co.th",
         "trueinternet.co.th"
      ],
      "isineu" : "false",
      "latitude" : "15.870032",
      "location" : "15.870032,100.992541",
      "longitude" : "100.992541",
      "netname" : "TRUENET-BB",
      "organization" : "TRUE BROADBAND",
      "subnet" : "171.101.0.0/16"
   },
   "host" : [
      "cm-171-101-224-194"
   ],
   "hostname" : [
      "cm-171-101-224-194.revip11.asianet.co.th"
   ],
   "ip" : "171.101.224.194",
   "ipv6" : "false",
   "latitude" : "13.6984",
   "location" : "13.6984,100.4638",
   "longitude" : "100.4638",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "True Online",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 623,
   "product" : "Kestrel",
   "productvendor" : "Kestrel",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Found",
   "reverse" : [
      "cm-171-101-224-194.revip11.asianet.co.th"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 302,
   "subdomains" : [
      "revip11.asianet.co.th"
   ],
   "subnet" : "171.101.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "co.th"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
3.26.40.23

Network
3.16.0.0/12

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://3.26.40.23:623/ 200

ASN
AS16509

Organization
AMAZON-02

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
Apache HTTP Server

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
502364b4947035af3929d7c7c1366bf5

HTTP Header MD5
c3107926acada8cdd5184d209c4d148a

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 200 OK
Connection: close
Date: Thu, 07 Nov 2024 05:21:27 GMT
Server: Apache
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:21:28.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "c3107926acada8cdd5184d209c4d148a",
         "headermmh3" : -1487795886
      },
      "length" : 110
   },
   "asn" : "AS16509",
   "city" : "Sydney",
   "country" : "AU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:21:27 GMT\r\nServer: Apache\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "502364b4947035af3929d7c7c1366bf5",
   "datammh3" : -1757667577,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "domain" : [
         "amazon.com",
         "amazonaws.com"
      ],
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "AMAZO-SYD",
      "organization" : "Amazon Corporate Services Pty Ltd",
      "subnet" : "3.24.0.0/14"
   },
   "ip" : "3.26.40.23",
   "ipv6" : "false",
   "latitude" : "-33.8715",
   "location" : "-33.8715,151.2006",
   "longitude" : "151.2006",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 623,
   "product" : "HTTP Server",
   "productvendor" : "Apache",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "3.16.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
59.75.41.143

Network
59.64.0.0/12

Device

<enterprise field>: device.class

URL

http://59.75.41.143:623/ 302

ASN
AS4538

Organization
China Education and Research Network Center

Protocol
http

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
96d7aced4477a5334c7de4616620bcc7

HTTP Header MD5
17494da67b263d49a356f29516833bab

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 302 Moved Temporarily
Server: DrcomServer1.0
Location: http://192.168.254.3
Cache-Control: no-cache
Content-Length: 0
Connection: close

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:20:07.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "192.168.254.3"
         ],
         "url" : [
            "http://192.168.254.3"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "17494da67b263d49a356f29516833bab",
         "headermmh3" : 1664562682
      },
      "length" : 153
   },
   "asn" : "AS4538",
   "country" : "CN",
   "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: DrcomServer1.0\r\nLocation: http://192.168.254.3\r\nCache-Control: no-cache\r\nContent-Length: 0\r\nConnection: close\r\n\r\n",
   "datamd5" : "96d7aced4477a5334c7de4616620bcc7",
   "datammh3" : 1446480259,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4538",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "cernet.edu.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "XAR-CERNET",
      "organization" : "China Education and Research Network",
      "subnet" : "59.75.41.0/24"
   },
   "ip" : "59.75.41.143",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Education and Research Network Center",
   "port" : 623,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Moved Temporarily",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 302,
   "subnet" : "59.64.0.0/12",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
59.75.41.142

Network
59.64.0.0/12

Device

<enterprise field>: device.class

URL

http://59.75.41.142:623/ 302

ASN
AS4538

Organization
China Education and Research Network Center

Protocol
http

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
96d7aced4477a5334c7de4616620bcc7

HTTP Header MD5
17494da67b263d49a356f29516833bab

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 302 Moved Temporarily
Server: DrcomServer1.0
Location: http://192.168.254.3
Cache-Control: no-cache
Content-Length: 0
Connection: close

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:19:37.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "192.168.254.3"
         ],
         "url" : [
            "http://192.168.254.3"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "17494da67b263d49a356f29516833bab",
         "headermmh3" : 1664562682
      },
      "length" : 153
   },
   "asn" : "AS4538",
   "country" : "CN",
   "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: DrcomServer1.0\r\nLocation: http://192.168.254.3\r\nCache-Control: no-cache\r\nContent-Length: 0\r\nConnection: close\r\n\r\n",
   "datamd5" : "96d7aced4477a5334c7de4616620bcc7",
   "datammh3" : 1446480259,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4538",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "cernet.edu.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "XAR-CERNET",
      "organization" : "China Education and Research Network",
      "subnet" : "59.75.41.0/24"
   },
   "ip" : "59.75.41.142",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Education and Research Network Center",
   "port" : 623,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Moved Temporarily",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 302,
   "subnet" : "59.64.0.0/12",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 7,240 in 0.109 second(s)

2.49.136.248:623 (tcp/http) - last seen on 2024-11-07 at 05:50:58 UTC

195.191.197.75:623 (tcp/http) - last seen on 2024-11-07 at 05:49:33 UTC

149.102.140.115:623 (tcp/http) - last seen on 2024-11-07 at 05:42:06 UTC

218.154.179.22:623 (tcp/http) - last seen on 2024-11-07 at 05:40:39 UTC

212.26.245.226:623 (tcp/http) - last seen on 2024-11-07 at 05:39:36 UTC

38.253.186.167:623 (tcp/http) - last seen on 2024-11-07 at 05:31:26 UTC

171.101.224.194:623 (tcp/http) - last seen on 2024-11-07 at 05:22:19 UTC

3.26.40.23:623 (tcp/http) - last seen on 2024-11-07 at 05:21:28 UTC

59.75.41.143:623 (tcp/http) - last seen on 2024-11-07 at 05:20:07 UTC

59.75.41.142:623 (tcp/http) - last seen on 2024-11-07 at 05:19:37 UTC