Cyber Defense Search Engine

IP
68.179.166.195

Network
68.179.128.0/18

Domain(s)
wideopenwest.com

Device

<enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

URL

http://68.179.166.195:7580/ 302

Reverse DNS
d179-68-195-166.evv.wideopenwest.com

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Product
F5 Networks BIGIP

HTTP Component(s)
F5 Networks BIGIP

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
12387797a65f055db3187c4720875ac7

HTTP Header MD5
419f28dc4e9d51eae587b30e0d4fef35

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.0 302 Moved Temporarily
Location: https://wowforbusiness.com/
Server: BigIP
Connection: close
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:40:04.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "wowforbusiness.com"
         ],
         "hostname" : [
            "wowforbusiness.com"
         ],
         "url" : [
            "https://wowforbusiness.com/"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "component" : [
            {
               "product" : "BIGIP",
               "productvendor" : "F5 Networks"
            }
         ],
         "headermd5" : "419f28dc4e9d51eae587b30e0d4fef35",
         "headermmh3" : 764156853
      },
      "length" : 126
   },
   "asn" : "AS12083",
   "city" : "Grand Ledge",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 302 Moved Temporarily\r\nLocation: https://wowforbusiness.com/\r\nServer: BigIP\r\nConnection: close\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "12387797a65f055db3187c4720875ac7",
   "datammh3" : -648665012,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "wideopenwest.com"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WOW-1",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "68.179.128.0/18"
   },
   "host" : [
      "d179-68-195-166"
   ],
   "hostname" : [
      "d179-68-195-166.evv.wideopenwest.com"
   ],
   "ip" : "68.179.166.195",
   "ipv6" : "false",
   "latitude" : "42.7495",
   "location" : "42.7495,-84.7384",
   "longitude" : "-84.7384",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "port" : 7580,
   "product" : "BIGIP",
   "productvendor" : "F5 Networks",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "Moved Temporarily",
   "reverse" : [
      "d179-68-195-166.evv.wideopenwest.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 302,
   "subdomains" : [
      "evv.wideopenwest.com"
   ],
   "subnet" : "68.179.128.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
216.186.157.206

Network
216.186.128.0/19

Domain(s)
knology.net

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://216.186.157.206:7580/ 400

Reverse DNS
dynamic-216-186-157-206.knology.net

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
bd933a926de9d9a8dd8992a468aa4b06

HTTP Header MD5
c97a40b207b58a030b7e6218ddc027ab

HTTP Body MD5
00bd1919cd6e866a50f1172fcabdddd0

HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-19T01:40:27.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS12083",
   "city" : "Center Line",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "knology.net"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "knology.net",
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WIDEOPENWEST",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "216.186.128.0/19"
   },
   "host" : [
      "dynamic-216-186-157-206"
   ],
   "hostname" : [
      "dynamic-216-186-157-206.knology.net"
   ],
   "ip" : "216.186.157.206",
   "ipv6" : "false",
   "latitude" : "42.4802",
   "location" : "42.4802,-83.0197",
   "longitude" : "-83.0197",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "dynamic-216-186-157-206.knology.net"
   ],
   "seen_date" : "2024-11-19",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "216.186.128.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
68.179.166.246

Network
68.179.128.0/18

Domain(s)
wideopenwest.com

Device

<enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

URL

http://68.179.166.246:7580/ 301

Reverse DNS
d179-68-246-166.evv.wideopenwest.com

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Product
F5 Networks BIGIP

HTTP Component(s)
F5 Networks BIGIP

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8e9d18dc9de75123e060e1c90b683072

HTTP Header MD5
a21191bdda4abc5355d0061913f6a624

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.0 301 Moved Permanently
Location: http://wowway.com/malware
Server: BigIP
Connection: close
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-14T18:55:35.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "wowway.com"
         ],
         "hostname" : [
            "wowway.com"
         ],
         "url" : [
            "http://wowway.com/malware"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "component" : [
            {
               "productvendor" : "F5 Networks",
               "product" : "BIGIP"
            }
         ],
         "headermd5" : "a21191bdda4abc5355d0061913f6a624",
         "headermmh3" : -1772917181
      },
      "length" : 124
   },
   "asn" : "AS12083",
   "city" : "Grand Ledge",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 301 Moved Permanently\r\nLocation: http://wowway.com/malware\r\nServer: BigIP\r\nConnection: close\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "8e9d18dc9de75123e060e1c90b683072",
   "datammh3" : 109918958,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "wideopenwest.com"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WOW-1",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "68.179.128.0/18"
   },
   "host" : [
      "d179-68-246-166"
   ],
   "hostname" : [
      "d179-68-246-166.evv.wideopenwest.com"
   ],
   "ip" : "68.179.166.246",
   "ipv6" : "false",
   "latitude" : "42.7495",
   "location" : "42.7495,-84.7384",
   "longitude" : "-84.7384",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "port" : 7580,
   "product" : "BIGIP",
   "productvendor" : "F5 Networks",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "Moved Permanently",
   "reverse" : [
      "d179-68-246-166.evv.wideopenwest.com"
   ],
   "seen_date" : "2024-11-14",
   "source" : "datascan",
   "status" : 301,
   "subdomains" : [
      "evv.wideopenwest.com"
   ],
   "subnet" : "68.179.128.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
50.4.35.216

Network
50.4.0.0/17

Domain(s)
wideopenwest.com

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://50.4.35.216:7580/ 401

HTTP Title
Unauthorized

Reverse DNS
d4-50-216-35.try.wideopenwest.com

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Operating System
Microsoft Windows

HTTP Component(s)
Plex Media Server

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
2de861031040181ee2188040cc83180e

HTTP Header MD5
9ca01530123920eac6307b32e7d89d3b

HTTP Body MD5
58839c8a9d6616ca62adc7b6e3610676

HTTP/1.1 401 Unauthorized
X-Plex-Protocol: 1.0
Content-Length: 193
Content-Type: text/html
Connection: close
Cache-Control: no-cache
Date: Sat, 09 Nov 2024 06:10:34 GMT

<html><head><script>window.location = window.location.href.match(/(^.+\/)[^\/]*$/)[1] + 'web/index.html';</script><title>Unauthorized</title></head><body><h1>401 Unauthorized</h1></body></html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-09T06:10:35.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "58839c8a9d6616ca62adc7b6e3610676",
         "bodymmh3" : 1524593440,
         "component" : [
            {
               "productvendor" : "Plex",
               "product" : "Media Server"
            }
         ],
         "headermd5" : "9ca01530123920eac6307b32e7d89d3b",
         "headermmh3" : 1921718126,
         "title" : "Unauthorized"
      },
      "length" : 371
   },
   "asn" : "AS12083",
   "city" : "Columbus",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nX-Plex-Protocol: 1.0\r\nContent-Length: 193\r\nContent-Type: text/html\r\nConnection: close\r\nCache-Control: no-cache\r\nDate: Sat, 09 Nov 2024 06:10:34 GMT\r\n\r\n<html><head><script>window.location = window.location.href.match(/(^.+\\/)[^\\/]*$/)[1] + 'web/index.html';</script><title>Unauthorized</title></head><body><h1>401 Unauthorized</h1></body></html>",
   "datamd5" : "2de861031040181ee2188040cc83180e",
   "datammh3" : -1584694499,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "wideopenwest.com"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WIDEOPENWEST",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "50.4.0.0/16"
   },
   "host" : [
      "d4-50-216-35"
   ],
   "hostname" : [
      "d4-50-216-35.try.wideopenwest.com"
   ],
   "ip" : "50.4.35.216",
   "ipv6" : "false",
   "latitude" : "32.5304",
   "location" : "32.5304,-84.9316",
   "longitude" : "-84.9316",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "d4-50-216-35.try.wideopenwest.com"
   ],
   "seen_date" : "2024-11-09",
   "source" : "datascan",
   "status" : 401,
   "subdomains" : [
      "try.wideopenwest.com"
   ],
   "subnet" : "50.4.0.0/17",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
96.27.91.18

Network
96.27.0.0/16

Domain(s)
wideopenwest.com

Device

<enterprise field>: device.class

Operating System
FreeBSD FreeBSD

URL

http://96.27.91.18:7580/ 302

Reverse DNS
d27-96-18-91.nap.wideopenwest.com

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Operating System
FreeBSD FreeBSD

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
3e8359be41fdd0f0ef705282fe7b1d34

HTTP Header MD5
372ac3e1768feb58f851dbe769943985

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.0 302 Redirection
Server: BlueServer/5.9.9.3
Date: Thu, 07 Nov 2024 22:59:12 GMT
P3P: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE"
Set-Cookie: session=529351696de243901af46f6e35e91984; path=/
Access-Control-Allow-Origin: *
Connection: close
Location: /login.htm?page=%2F
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T22:59:04.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "5.9.9.3"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "372ac3e1768feb58f851dbe769943985",
         "headermmh3" : -1627953884
      },
      "length" : 314
   },
   "asn" : "AS12083",
   "city" : "Trenton",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 302 Redirection\r\nServer: BlueServer/5.9.9.3\r\nDate: Thu, 07 Nov 2024 22:59:12 GMT\r\nP3P: CP=\"CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE\"\r\nSet-Cookie: session=529351696de243901af46f6e35e91984; path=/\r\nAccess-Control-Allow-Origin: *\r\nConnection: close\r\nLocation: /login.htm?page=%2F\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "3e8359be41fdd0f0ef705282fe7b1d34",
   "datammh3" : 464493703,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "wideopenwest.com"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WIDEOPENWEST",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "96.27.0.0/16"
   },
   "host" : [
      "d27-96-18-91"
   ],
   "hostname" : [
      "d27-96-18-91.nap.wideopenwest.com"
   ],
   "ip" : "96.27.91.18",
   "ipv6" : "false",
   "latitude" : "42.1395",
   "location" : "42.1395,-83.1783",
   "longitude" : "-83.1783",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "os" : "FreeBSD",
   "osvendor" : "FreeBSD",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "Redirection",
   "reverse" : [
      "d27-96-18-91.nap.wideopenwest.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 302,
   "subdomains" : [
      "nap.wideopenwest.com"
   ],
   "subnet" : "96.27.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
143.59.241.170

Network
143.59.0.0/16

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://143.59.241.170:7580/ 200

HTTP Title
IIS Windows Server

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
Microsoft IIS 8.5

HTTP Component(s)
Microsoft IIS Microsoft ASP.NET

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0d5bf10510ba940dabda8c6d9a09322f

HTTP Header MD5
5b7288529e20bd61dec0dae03892f5e2

HTTP Body MD5
45448a0ad2c2871ce199eefecdc66299

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 08 Jan 2020 15:44:43 GMT
Accept-Ranges: bytes
ETag: "bd6db58b3ac6d51:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 05 Nov 2024 13:01:05 GMT
Connection: close
Content-Length: 701

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IIS Windows Server</title>
<style type="text/css">
<!--
body {
	color:#000000;
	background-color:#0072C6;
	margin:0;
}

#container {
	margin-left:auto;
	margin-right:auto;
	text-align:center;
	}

a img {
	border:none;
}

-->
</style>
</head>
<body>
<div id="container">
<a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iis-85.png" alt="IIS" width="960" height="600" /></a>
</div>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-05T13:01:18.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "microsoft.com",
            "w3.org"
         ],
         "hostname" : [
            "go.microsoft.com",
            "www.w3.org"
         ],
         "url" : [
            "http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409",
            "http://www.w3.org/1999/xhtml",
            "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"
         ]
      },
      "http" : {
         "bodymd5" : "45448a0ad2c2871ce199eefecdc66299",
         "bodymmh3" : 1138219898,
         "component" : [
            {
               "productvendor" : "Microsoft",
               "product" : "ASP.NET"
            },
            {
               "product" : "IIS",
               "productvendor" : "Microsoft"
            }
         ],
         "header" : [
            {
               "name" : "Last-Modified",
               "value" : "Wed, 08 Jan 2020 15:44:43 GMT"
            },
            {
               "name" : "ETag",
               "value" : "bd6db58b3ac6d51:0"
            }
         ],
         "headermd5" : "5b7288529e20bd61dec0dae03892f5e2",
         "headermmh3" : -1837205062,
         "title" : "IIS Windows Server"
      },
      "length" : 967
   },
   "asn" : "AS12083",
   "city" : "Montgomery",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nLast-Modified: Wed, 08 Jan 2020 15:44:43 GMT\r\nAccept-Ranges: bytes\r\nETag: \"bd6db58b3ac6d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Tue, 05 Nov 2024 13:01:05 GMT\r\nConnection: close\r\nContent-Length: 701\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />\r\n<title>IIS Windows Server</title>\r\n<style type=\"text/css\">\r\n<!--\r\nbody {\r\n\tcolor:#000000;\r\n\tbackground-color:#0072C6;\r\n\tmargin:0;\r\n}\r\n\r\n#container {\r\n\tmargin-left:auto;\r\n\tmargin-right:auto;\r\n\ttext-align:center;\r\n\t}\r\n\r\na img {\r\n\tborder:none;\r\n}\r\n\r\n-->\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"container\">\r\n<a href=\"http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409\"><img src=\"iis-85.png\" alt=\"IIS\" width=\"960\" height=\"600\" /></a>\r\n</div>\r\n</body>\r\n</html>",
   "datamd5" : "0d5bf10510ba940dabda8c6d9a09322f",
   "datammh3" : 429914708,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "MI-TROY-DYN",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "143.59.0.0/16"
   },
   "ip" : "143.59.241.170",
   "ipv6" : "false",
   "latitude" : "32.3649",
   "location" : "32.3649,-86.2986",
   "longitude" : "-86.2986",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "osversion" : [
      "Server 2012",
      "8.1"
   ],
   "port" : 7580,
   "product" : "IIS",
   "productvendor" : "Microsoft",
   "productversion" : "8.5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-05",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "143.59.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
68.179.166.248

Network
68.179.128.0/18

Domain(s)
wideopenwest.com

Device

<enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

URL

http://68.179.166.248:7580/ 301

Reverse DNS
d179-68-248-166.evv.wideopenwest.com

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Product
F5 Networks BIGIP

HTTP Component(s)
F5 Networks BIGIP

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
1ea83e4807035c7de6e08de33deb22bd

HTTP Header MD5
a21191bdda4abc5355d0061913f6a624

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.0 301 Moved Permanently
Location: http://itosit.wowway.com/malware
Server: BigIP
Connection: close
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-04T22:39:57.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "wowway.com"
         ],
         "hostname" : [
            "itosit.wowway.com"
         ],
         "url" : [
            "http://itosit.wowway.com/malware"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "component" : [
            {
               "product" : "BIGIP",
               "productvendor" : "F5 Networks"
            }
         ],
         "headermd5" : "a21191bdda4abc5355d0061913f6a624",
         "headermmh3" : -1171347243
      },
      "length" : 131
   },
   "asn" : "AS12083",
   "city" : "Grand Ledge",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 301 Moved Permanently\r\nLocation: http://itosit.wowway.com/malware\r\nServer: BigIP\r\nConnection: close\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "1ea83e4807035c7de6e08de33deb22bd",
   "datammh3" : -844784543,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "wideopenwest.com"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WOW-1",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "68.179.128.0/18"
   },
   "host" : [
      "d179-68-248-166"
   ],
   "hostname" : [
      "d179-68-248-166.evv.wideopenwest.com"
   ],
   "ip" : "68.179.166.248",
   "ipv6" : "false",
   "latitude" : "42.7495",
   "location" : "42.7495,-84.7384",
   "longitude" : "-84.7384",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "port" : 7580,
   "product" : "BIGIP",
   "productvendor" : "F5 Networks",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "Moved Permanently",
   "reverse" : [
      "d179-68-248-166.evv.wideopenwest.com"
   ],
   "seen_date" : "2024-11-04",
   "source" : "datascan",
   "status" : 301,
   "subdomains" : [
      "evv.wideopenwest.com"
   ],
   "subnet" : "68.179.128.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
68.179.166.247

Network
68.179.128.0/18

Domain(s)
wideopenwest.com

Device

<enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

URL

http://68.179.166.247:7580/ 301

Reverse DNS
d179-68-247-166.evv.wideopenwest.com

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Product
F5 Networks BIGIP

HTTP Component(s)
F5 Networks BIGIP

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
a9f4bb5ff4323d5cdb08aa8067e2d5af

HTTP Header MD5
a21191bdda4abc5355d0061913f6a624

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.0 301 Moved Permanently
Location: http://wowway.com/phishing
Server: BigIP
Connection: close
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-02T04:01:44.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "wowway.com"
         ],
         "hostname" : [
            "wowway.com"
         ],
         "url" : [
            "http://wowway.com/phishing"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "component" : [
            {
               "product" : "BIGIP",
               "productvendor" : "F5 Networks"
            }
         ],
         "headermd5" : "a21191bdda4abc5355d0061913f6a624",
         "headermmh3" : 775668353
      },
      "length" : 125
   },
   "asn" : "AS12083",
   "city" : "Grand Ledge",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 301 Moved Permanently\r\nLocation: http://wowway.com/phishing\r\nServer: BigIP\r\nConnection: close\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "a9f4bb5ff4323d5cdb08aa8067e2d5af",
   "datammh3" : -225102870,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "wideopenwest.com"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WOW-1",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "68.179.128.0/18"
   },
   "host" : [
      "d179-68-247-166"
   ],
   "hostname" : [
      "d179-68-247-166.evv.wideopenwest.com"
   ],
   "ip" : "68.179.166.247",
   "ipv6" : "false",
   "latitude" : "42.7495",
   "location" : "42.7495,-84.7384",
   "longitude" : "-84.7384",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "port" : 7580,
   "product" : "BIGIP",
   "productvendor" : "F5 Networks",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "Moved Permanently",
   "reverse" : [
      "d179-68-247-166.evv.wideopenwest.com"
   ],
   "seen_date" : "2024-11-02",
   "source" : "datascan",
   "status" : 301,
   "subdomains" : [
      "evv.wideopenwest.com"
   ],
   "subnet" : "68.179.128.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
68.179.166.249

Network
68.179.128.0/18

Domain(s)
wideopenwest.com

Device

<enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

URL

http://68.179.166.249:7580/ 301

Reverse DNS
d179-68-249-166.evv.wideopenwest.com

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Product
F5 Networks BIGIP

HTTP Component(s)
F5 Networks BIGIP

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
6f55b52beffb3c8618dd601a8c933527

HTTP Header MD5
a21191bdda4abc5355d0061913f6a624

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.0 301 Moved Permanently
Location: http://itosit.wowway.com/phishing
Server: BigIP
Connection: close
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T14:07:06.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "wowway.com"
         ],
         "hostname" : [
            "itosit.wowway.com"
         ],
         "url" : [
            "http://itosit.wowway.com/phishing"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "component" : [
            {
               "product" : "BIGIP",
               "productvendor" : "F5 Networks"
            }
         ],
         "headermd5" : "a21191bdda4abc5355d0061913f6a624",
         "headermmh3" : 1730040717
      },
      "length" : 132
   },
   "asn" : "AS12083",
   "city" : "Grand Ledge",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 301 Moved Permanently\r\nLocation: http://itosit.wowway.com/phishing\r\nServer: BigIP\r\nConnection: close\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "6f55b52beffb3c8618dd601a8c933527",
   "datammh3" : 1363339244,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "wideopenwest.com"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WOW-1",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "68.179.128.0/18"
   },
   "host" : [
      "d179-68-249-166"
   ],
   "hostname" : [
      "d179-68-249-166.evv.wideopenwest.com"
   ],
   "ip" : "68.179.166.249",
   "ipv6" : "false",
   "latitude" : "42.7495",
   "location" : "42.7495,-84.7384",
   "longitude" : "-84.7384",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "port" : 7580,
   "product" : "BIGIP",
   "productvendor" : "F5 Networks",
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "Moved Permanently",
   "reverse" : [
      "d179-68-249-166.evv.wideopenwest.com"
   ],
   "seen_date" : "2024-11-01",
   "source" : "datascan",
   "status" : 301,
   "subdomains" : [
      "evv.wideopenwest.com"
   ],
   "subnet" : "68.179.128.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
96.27.91.18

Network
96.27.0.0/16

Domain(s)
wideopenwest.com

Device

<enterprise field>: device.class

Operating System
FreeBSD FreeBSD

URL

http://96.27.91.18:7580/ 302

Reverse DNS
d27-96-18-91.nap.wideopenwest.com

ASN
AS12083

Organization
WOW-INTERNET

Protocol
http

Source
datascan
Operating System
FreeBSD FreeBSD

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
553c4ea7b988fc907d89d5c75529266f

HTTP Header MD5
a27ac241b660f279411b9726644284ea

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.0 302 Redirection
Server: BlueServer/5.9.9.1
Date: Mon, 28 Oct 2024 06:50:18 GMT
P3P: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE"
Set-Cookie: session=7cd74f94788516ca6a2d17090d425337; path=/
Access-Control-Allow-Origin: *
Connection: close
Location: /login.htm?page=%2F
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-10-28T06:50:19.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "5.9.9.1"
         ]
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "a27ac241b660f279411b9726644284ea",
         "headermmh3" : 502519795
      },
      "length" : 314
   },
   "asn" : "AS12083",
   "city" : "Trenton",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 302 Redirection\r\nServer: BlueServer/5.9.9.1\r\nDate: Mon, 28 Oct 2024 06:50:18 GMT\r\nP3P: CP=\"CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE\"\r\nSet-Cookie: session=7cd74f94788516ca6a2d17090d425337; path=/\r\nAccess-Control-Allow-Origin: *\r\nConnection: close\r\nLocation: /login.htm?page=%2F\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "553c4ea7b988fc907d89d5c75529266f",
   "datammh3" : 714315837,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "wideopenwest.com"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "wideopenwest.com",
         "wowinc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "WIDEOPENWEST",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "96.27.0.0/16"
   },
   "host" : [
      "d27-96-18-91"
   ],
   "hostname" : [
      "d27-96-18-91.nap.wideopenwest.com"
   ],
   "ip" : "96.27.91.18",
   "ipv6" : "false",
   "latitude" : "42.1453",
   "location" : "42.1453,-83.2176",
   "longitude" : "-83.2176",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WOW-INTERNET",
   "os" : "FreeBSD",
   "osvendor" : "FreeBSD",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "Redirection",
   "reverse" : [
      "d27-96-18-91.nap.wideopenwest.com"
   ],
   "seen_date" : "2024-10-28",
   "source" : "datascan",
   "status" : 302,
   "subdomains" : [
      "nap.wideopenwest.com"
   ],
   "subnet" : "96.27.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 10 in 0.033 second(s)

68.179.166.195:7580 (tcp/http) - last seen on 2024-11-21 at 08:40:04 UTC

216.186.157.206:7580 (tcp/http) - last seen on 2024-11-19 at 01:40:27 UTC

68.179.166.246:7580 (tcp/http) - last seen on 2024-11-14 at 18:55:35 UTC

50.4.35.216:7580 (tcp/http) - last seen on 2024-11-09 at 06:10:35 UTC

96.27.91.18:7580 (tcp/http) - last seen on 2024-11-07 at 22:59:04 UTC

143.59.241.170:7580 (tcp/http) - last seen on 2024-11-05 at 13:01:18 UTC

68.179.166.248:7580 (tcp/http) - last seen on 2024-11-04 at 22:39:57 UTC

68.179.166.247:7580 (tcp/http) - last seen on 2024-11-02 at 04:01:44 UTC

68.179.166.249:7580 (tcp/http) - last seen on 2024-11-01 at 14:07:06 UTC

96.27.91.18:7580 (tcp/http) - last seen on 2024-10-28 at 06:50:19 UTC