ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 1 result(s) out of 1 in 0.024 second(s)

  • 104.254.220.235:789 (tcp/http) - last seen on 2024-11-21 at 08:22:53 UTC

    • IP
      104.254.220.235
      Network
      104.254.216.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://104.254.220.235:789/ 200

      HTTP Title
      Index
      ASN
      AS30600
      Organization
      AS-CMN
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d8e2f0e48aa604f863b0cae487a62144
      HTTP Header MD5
      597cdd103f72c79807e4183610ac9a8f
      HTTP Body MD5
      ebfae26b0c3085271cae226323465a91 
    • HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Disposition: inline
Content-Length: 219
Content-Security-Policy: default-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self'; img-src blob: data: about: 'self'; connect-src http: https: ws: wss:;
Content-Type: text/html; charset=utf-8
Date: Thu, 21 Nov 2024 08:22:53 GMT
Expires: Thu, 21 Nov 2024 08:22:53 GMT
Last-Modified: Fri, 07 Jun 2019 23:09:54 GMT
Pragma: no-cache
Server: wfe
Vary: Origin
X-Content-Type-Options: nosniff
X-Digest: Oz4zbonYk/pzJSP8LCAbpYc9oO65UA56y9nJ0gpR1CU=
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
<html>
<head>
<title>Index</title>
</head>
<body onload="location.replace('login.web');">
<div><a href="login.web">Click here to login</a></div>
</body>
</html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:22:53.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ebfae26b0c3085271cae226323465a91",
         "bodymmh3" : -920835525,
         "header" : [
            {
               "name" : "Last-Modified",
               "value" : "Fri, 07 Jun 2019 23:09:54 GMT"
            }
         ],
         "headermd5" : "597cdd103f72c79807e4183610ac9a8f",
         "headermmh3" : -430269586,
         "title" : "Index"
      },
      "length" : 966
   },
   "asn" : "AS30600",
   "city" : "Versailles",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nContent-Disposition: inline\r\nContent-Length: 219\r\nContent-Security-Policy: default-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self'; img-src blob: data: about: 'self'; connect-src http: https: ws: wss:;\r\nContent-Type: text/html; charset=utf-8\r\nDate: Thu, 21 Nov 2024 08:22:53 GMT\r\nExpires: Thu, 21 Nov 2024 08:22:53 GMT\r\nLast-Modified: Fri, 07 Jun 2019 23:09:54 GMT\r\nPragma: no-cache\r\nServer: wfe\r\nVary: Origin\r\nX-Content-Type-Options: nosniff\r\nX-Digest: Oz4zbonYk/pzJSP8LCAbpYc9oO65UA56y9nJ0gpR1CU=\r\nX-Frame-Options: SAMEORIGIN\r\nX-Xss-Protection: 1; mode=block\r\nConnection: close\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\">\r\n<html>\r\n<head>\r\n<title>Index</title>\r\n</head>\r\n<body onload=\"location.replace('login.web');\">\r\n<div><a href=\"login.web\">Click here to login</a></div>\r\n</body>\r\n</html>",
   "datamd5" : "d8e2f0e48aa604f863b0cae487a62144",
   "datammh3" : 98473601,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS30600",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "metronetinc.com",
         "metronetinc.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "CINER-3-104-254-216-0-26",
      "organization" : "Metronet",
      "subnet" : "104.254.216.0/21"
   },
   "ip" : "104.254.220.235",
   "ipv6" : "false",
   "latitude" : "38.0405",
   "location" : "38.0405,-84.7293",
   "longitude" : "-84.7293",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-CMN",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 789,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "104.254.216.0/21",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}