Returning 10 result(s) out of 2,989 in 0.134 second(s)

  • 35.160.152.156:64719 (tcp/http) - last seen on 2024-11-07 at 05:45:25 UTC

    • IP
      35.160.152.156
      Network
      35.160.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://35.160.152.156:64719/ 200

      Reverse DNS
      ec2-35-160-152-156.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d63cb7eed856963ab82852e1f200cf51
      HTTP Header MD5
      26c1e7b2e4b9c3ad6ee704fe983ca1d9
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 200 OK
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:45:25.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "26c1e7b2e4b9c3ad6ee704fe983ca1d9",
               "headermmh3" : 1529339778
            },
            "length" : 19
         },
         "asn" : "AS16509",
         "city" : "Boardman",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\n\r\n",
         "datamd5" : "d63cb7eed856963ab82852e1f200cf51",
         "datammh3" : 1527519102,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZO-ZPDX9",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "35.160.0.0/13"
         },
         "host" : [
            "ec2-35-160-152-156"
         ],
         "hostname" : [
            "ec2-35-160-152-156.us-west-2.compute.amazonaws.com"
         ],
         "ip" : "35.160.152.156",
         "ipv6" : "false",
         "latitude" : "45.8491",
         "location" : "45.8491,-119.7143",
         "longitude" : "-119.7143",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "ec2-35-160-152-156.us-west-2.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "us-west-2.compute.amazonaws.com"
         ],
         "subnet" : "35.160.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 92.96.237.139:64719 (tcp/http) - last seen on 2024-11-07 at 05:18:10 UTC

    • IP
      92.96.237.139
      Network
      92.96.0.0/14
      Domain(s)
      alshamil.net.ae
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://92.96.237.139:64719/ 404

      Reverse DNS
      bba-92-96-237-139.alshamil.net.ae
      ASN
      AS5384
      Organization
      Emirates Telecommunications Group Company (etisalat Group) Pjsc
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4b5b496ff238cb6bc91391c80dbcb192
      HTTP Header MD5
      4b5b496ff238cb6bc91391c80dbcb192
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 404 Not Found
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:18:10.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "4b5b496ff238cb6bc91391c80dbcb192",
               "headermmh3" : -2050145619
            },
            "length" : 24
         },
         "asn" : "AS5384",
         "city" : "Sharjah",
         "country" : "AE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 404 Not Found\r\n",
         "datamd5" : "4b5b496ff238cb6bc91391c80dbcb192",
         "datammh3" : -1733658736,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "alshamil.net.ae"
         ],
         "host" : [
            "bba-92-96-237-139"
         ],
         "hostname" : [
            "bba-92-96-237-139.alshamil.net.ae"
         ],
         "ip" : "92.96.237.139",
         "ipv6" : "false",
         "latitude" : "25.3412",
         "location" : "25.3412,55.4224",
         "longitude" : "55.4224",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Emirates Telecommunications Group Company (etisalat Group) Pjsc",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Not Found",
         "reverse" : [
            "bba-92-96-237-139.alshamil.net.ae"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 404,
         "subnet" : "92.96.0.0/14",
         "tld" : [
            "net.ae"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 152.37.168.160:64719 (tcp/http) - last seen on 2024-11-07 at 04:50:45 UTC

    • IP
      152.37.168.160
      Network
      152.37.128.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://152.37.168.160:64719/ 302

      ASN
      AS11492
      Organization
      CABLEONE
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f03426424da83531dc5c6c8163b91497
      HTTP Header MD5
      31eb51431e6399a7c0e5f633c75d12f4
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.0 302 Redirection
      Server: BlueServer/5.6.0.8
      Date: Thu, 07 Nov 2024 04:50:45 GMT
      P3P: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE"
      Access-Control-Allow-Origin: *
      Set-Cookie: session=6d7a05025345473d2c761693466d0e45; path=/
      Connection: close
      Location: /login.htm?page=%2F
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:50:45.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "5.6.0.8"
               ]
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "31eb51431e6399a7c0e5f633c75d12f4",
               "headermmh3" : 549673826
            },
            "length" : 314
         },
         "asn" : "AS11492",
         "city" : "Clarkston",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Redirection\r\nServer: BlueServer/5.6.0.8\r\nDate: Thu, 07 Nov 2024 04:50:45 GMT\r\nP3P: CP=\"CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE\"\r\nAccess-Control-Allow-Origin: *\r\nSet-Cookie: session=6d7a05025345473d2c761693466d0e45; path=/\r\nConnection: close\r\nLocation: /login.htm?page=%2F\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "f03426424da83531dc5c6c8163b91497",
         "datammh3" : 1791908692,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS11492",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "brandergroup.net",
               "cableone.biz",
               "sparklight.biz"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "CBL1",
            "organization" : "CABLE ONE, INC.",
            "subnet" : "152.37.128.0/18"
         },
         "ip" : "152.37.168.160",
         "ipv6" : "false",
         "latitude" : "46.4163",
         "location" : "46.4163,-117.0456",
         "longitude" : "-117.0456",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CABLEONE",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Redirection",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "152.37.128.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 62.204.37.3:64719 (tcp/http) - last seen on 2024-11-07 at 04:23:43 UTC

    • IP
      62.204.37.3
      Network
      62.204.37.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://62.204.37.3:64719/ 407

      ASN
      AS198231
      Organization
      Sixnet Operation Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      78585a31a9923f851fd7498cc40b6a44
      HTTP Header MD5
      ec1a9c7961fed7d88fbabb0196599217
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 407 Proxy Authentication Required
      proxy-authenticate: Basic
      connection: close
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:23:43.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "ec1a9c7961fed7d88fbabb0196599217",
               "headermmh3" : 1542279371
            },
            "length" : 92
         },
         "asn" : "AS198231",
         "country" : "CY",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nproxy-authenticate: Basic\r\nconnection: close\r\n\r\n",
         "datamd5" : "78585a31a9923f851fd7498cc40b6a44",
         "datammh3" : 1547380673,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "62.204.37.3",
         "ipv6" : "false",
         "latitude" : "35.0077",
         "location" : "35.0077,32.9882",
         "longitude" : "32.9882",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Sixnet Operation Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "62.204.37.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 128.1.156.143:64719 (tcp/http) - last seen on 2024-11-07 at 03:22:02 UTC

    • IP
      128.1.156.143
      Network
      128.1.152.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://128.1.156.143:64719/ 403

      ASN
      AS21859
      Organization
      ZEN-ECN
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d184cc77380f2a40c3de64403dbcb7b5
      HTTP Header MD5
      8abc2c5139d02a380da164d4ac89d3dd
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 403 Forbidden
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:22:02.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "8abc2c5139d02a380da164d4ac89d3dd",
               "headermmh3" : 635023017
            },
            "length" : 45
         },
         "asn" : "AS21859",
         "city" : "Hong Kong",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 403 Forbidden\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "d184cc77380f2a40c3de64403dbcb7b5",
         "datammh3" : -2113012747,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS21859",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "zenlayer.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "ZL-LAX-MANAGED-HOSTING-0304",
            "organization" : "ZENLA-1",
            "subnet" : "128.1.156.0/24"
         },
         "ip" : "128.1.156.143",
         "ipv6" : "false",
         "latitude" : "22.2842",
         "location" : "22.2842,114.1759",
         "longitude" : "114.1759",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ZEN-ECN",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Forbidden",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 403,
         "subnet" : "128.1.152.0/21",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 18.228.42.71:64719 (tcp/http) - last seen on 2024-11-07 at 02:46:18 UTC

    • IP
      18.228.42.71
      Network
      18.224.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://18.228.42.71:64719/ 200

      Reverse DNS
      ec2-18-228-42-71.sa-east-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d63cb7eed856963ab82852e1f200cf51
      HTTP Header MD5
      26c1e7b2e4b9c3ad6ee704fe983ca1d9
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 200 OK
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:46:18.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "26c1e7b2e4b9c3ad6ee704fe983ca1d9",
               "headermmh3" : 1529339778
            },
            "length" : 19
         },
         "asn" : "AS16509",
         "city" : "S\u00e3o Paulo",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\n\r\n",
         "datamd5" : "d63cb7eed856963ab82852e1f200cf51",
         "datammh3" : 1527519102,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "AMAZON-GRU",
            "organization" : "Amazon Data Services Brazil",
            "subnet" : "18.228.0.0/14"
         },
         "host" : [
            "ec2-18-228-42-71"
         ],
         "hostname" : [
            "ec2-18-228-42-71.sa-east-1.compute.amazonaws.com"
         ],
         "ip" : "18.228.42.71",
         "ipv6" : "false",
         "latitude" : "-23.5335",
         "location" : "-23.5335,-46.6359",
         "longitude" : "-46.6359",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "ec2-18-228-42-71.sa-east-1.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "sa-east-1.compute.amazonaws.com"
         ],
         "subnet" : "18.224.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 101.96.145.108:64719 (tcp/http) - last seen on 2024-11-07 at 02:45:04 UTC

    • IP
      101.96.145.108
      Network
      101.96.144.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://101.96.145.108:64719/ 403

      ASN
      AS134760
      Organization
      Shijiazhuang IDC network, CHINANET Hebei province
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d184cc77380f2a40c3de64403dbcb7b5
      HTTP Header MD5
      8abc2c5139d02a380da164d4ac89d3dd
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 403 Forbidden
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:45:04.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "8abc2c5139d02a380da164d4ac89d3dd",
               "headermmh3" : 635023017
            },
            "length" : 45
         },
         "asn" : "AS134760",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 403 Forbidden\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "d184cc77380f2a40c3de64403dbcb7b5",
         "datammh3" : -2113012747,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS134760",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnnic.cn",
               "fangneng.tech"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "FNTX-NET",
            "organization" : "Shijiazhuang fangneng Communication technology CO.,LTD",
            "subnet" : "101.96.144.0/20"
         },
         "ip" : "101.96.145.108",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Shijiazhuang IDC network, CHINANET Hebei province",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Forbidden",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 403,
         "subnet" : "101.96.144.0/20",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 193.29.182.40:64719 (tcp/http) - last seen on 2024-11-07 at 02:19:23 UTC

    • IP
      193.29.182.40
      Network
      193.29.182.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://193.29.182.40:64719/ 407

      ASN
      AS216157
      Organization
      Sixnet Operation Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      78585a31a9923f851fd7498cc40b6a44
      HTTP Header MD5
      ec1a9c7961fed7d88fbabb0196599217
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 407 Proxy Authentication Required
      proxy-authenticate: Basic
      connection: close
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:19:23.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "ec1a9c7961fed7d88fbabb0196599217",
               "headermmh3" : 1542279371
            },
            "length" : 92
         },
         "asn" : "AS216157",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nproxy-authenticate: Basic\r\nconnection: close\r\n\r\n",
         "datamd5" : "78585a31a9923f851fd7498cc40b6a44",
         "datammh3" : 1547380673,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS216157",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "GB",
            "countryname" : "United Kingdom",
            "domain" : [
               "rtmnetworks.net"
            ],
            "isineu" : "false",
            "latitude" : "55.378051",
            "location" : "55.378051,-3.435973",
            "longitude" : "-3.435973",
            "netname" : "GB-SIXNET-20240416",
            "organization" : "Sixnet Operations Ltd",
            "subnet" : "193.29.182.0/24"
         },
         "ip" : "193.29.182.40",
         "ipv6" : "false",
         "latitude" : "52.3824",
         "location" : "52.3824,4.8995",
         "longitude" : "4.8995",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Sixnet Operation Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "193.29.182.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 59.75.38.87:64719 (tcp/http) - last seen on 2024-11-07 at 02:18:39 UTC

    • IP
      59.75.38.87
      Network
      59.64.0.0/12
      Device

      <enterprise field>: device.class

      URL

      http://59.75.38.87:64719/ 302

      ASN
      AS4538
      Organization
      China Education and Research Network Center
      Protocol
      http
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      96d7aced4477a5334c7de4616620bcc7
      HTTP Header MD5
      17494da67b263d49a356f29516833bab
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 302 Moved Temporarily
      Server: DrcomServer1.0
      Location: http://192.168.254.3
      Cache-Control: no-cache
      Content-Length: 0
      Connection: close
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:18:39.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "192.168.254.3"
               ],
               "url" : [
                  "http://192.168.254.3"
               ]
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "17494da67b263d49a356f29516833bab",
               "headermmh3" : 1664562682
            },
            "length" : 153
         },
         "asn" : "AS4538",
         "country" : "CN",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: DrcomServer1.0\r\nLocation: http://192.168.254.3\r\nCache-Control: no-cache\r\nContent-Length: 0\r\nConnection: close\r\n\r\n",
         "datamd5" : "96d7aced4477a5334c7de4616620bcc7",
         "datammh3" : 1446480259,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4538",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cernet.edu.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "XAR-CERNET",
            "organization" : "China Education and Research Network",
            "subnet" : "59.75.32.0/21"
         },
         "ip" : "59.75.38.87",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Education and Research Network Center",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "59.64.0.0/12",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 62.204.37.43:64719 (tcp/http) - last seen on 2024-11-07 at 02:00:49 UTC

    • IP
      62.204.37.43
      Network
      62.204.37.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://62.204.37.43:64719/ 407

      ASN
      AS198231
      Organization
      Sixnet Operation Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      78585a31a9923f851fd7498cc40b6a44
      HTTP Header MD5
      ec1a9c7961fed7d88fbabb0196599217
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 407 Proxy Authentication Required
      proxy-authenticate: Basic
      connection: close
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:00:49.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "ec1a9c7961fed7d88fbabb0196599217",
               "headermmh3" : 1542279371
            },
            "length" : 92
         },
         "asn" : "AS198231",
         "country" : "CY",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nproxy-authenticate: Basic\r\nconnection: close\r\n\r\n",
         "datamd5" : "78585a31a9923f851fd7498cc40b6a44",
         "datammh3" : 1547380673,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "62.204.37.43",
         "ipv6" : "false",
         "latitude" : "35.0077",
         "location" : "35.0077,32.9882",
         "longitude" : "32.9882",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Sixnet Operation Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 64719,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "62.204.37.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }