Returning 10 result(s) out of 36 in 0.086 second(s)

  • 103.168.172.24:9404 (tcp/pop3/tls) - last seen on 2024-11-07 at 03:20:39 UTC

    • IP
      103.168.172.24
      Alternative IP(s)
      103.168.172.36 103.168.172.46 103.168.172.51 103.168.172.61
      Network
      103.168.172.0/24
      Domain(s)
      messagingengine.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      pops-proxy.messagingengine.com
      ASN
      AS151847
      Organization
      Fastmail Pty Ltd
      Protocol
      pop3 Cert not expired pop3
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      FastMail Pty Ltd
      Subject Common Name
      *.messagingengine.com
      Subject Alt Name
      *.messagingengine.com messagingengine.com mail.messagingengine.com dav.messagingengine.com caldav.messagingengine.com carddav.messagingengine.com
      SHA256 Fingerprint
      fed61fcd9173eb3577648fa8fa215caf1579ff3fcc70c52daa02bb2df1b2b4ff
      Validity Not Before
      2024-02-22T00:00:00Z
      Validity Not After
      2025-03-15T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2605f3f174c5307e06cf0c0659ad109d
    • +OK POP3 ready
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:20:39.000Z",
         "alternativeip" : [
            "103.168.172.36",
            "103.168.172.46",
            "103.168.172.51",
            "103.168.172.61"
         ],
         "app" : {
            "length" : 16
         },
         "asn" : "AS151847",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "AU",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "+OK POP3 ready\r\n",
         "datamd5" : "2605f3f174c5307e06cf0c0659ad109d",
         "datammh3" : -1422211372,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "messagingengine.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "0489082fa3d7e1c150b6f1d9cf3f3a6d",
            "sha1" : "10981810b7914bd26d71a89df9f05940094c77ae",
            "sha256" : "fed61fcd9173eb3577648fa8fa215caf1579ff3fcc70c52daa02bb2df1b2b4ff"
         },
         "geolocus" : {
            "asn" : "AS209242",
            "continent" : "OC",
            "continentname" : "Oceania",
            "country" : "AU",
            "countryname" : "Australia",
            "domain" : [
               "fastmail.com",
               "fastmailteam.com"
            ],
            "isineu" : "false",
            "latitude" : "-25.274398",
            "location" : "-25.274398,133.775136",
            "longitude" : "133.775136",
            "netname" : "FASTMAILPTYLTD-AU",
            "organization" : "Fastmail",
            "subnet" : "103.168.172.0/24"
         },
         "host" : [
            "caldav",
            "carddav",
            "dav",
            "mail",
            "pops-proxy"
         ],
         "hostname" : [
            "caldav.messagingengine.com",
            "carddav.messagingengine.com",
            "dav.messagingengine.com",
            "mail.messagingengine.com",
            "messagingengine.com",
            "pops-proxy.messagingengine.com"
         ],
         "ip" : "103.168.172.24",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "-33.4940",
         "location" : "-33.4940,143.2104",
         "longitude" : "143.2104",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Fastmail Pty Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "protocol" : "pop3",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "pops-proxy.messagingengine.com"
         ],
         "seen_date" : "2024-11-07",
         "serial" : "09:36:25:8c:f1:5e:b1:b3:ca:f1:c0:de:6a:ab:64:60",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "altname" : [
               "*.messagingengine.com",
               "messagingengine.com",
               "mail.messagingengine.com",
               "dav.messagingengine.com",
               "caldav.messagingengine.com",
               "carddav.messagingengine.com"
            ],
            "city" : "Melbourne",
            "commonname" : "*.messagingengine.com",
            "country" : "AU",
            "organization" : "FastMail Pty Ltd"
         },
         "subnet" : "103.168.172.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-03-15T23:59:59Z",
            "notbefore" : "2024-02-22T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 206.79.222.33:9404 (tcp/http/tls) - last seen on 2024-11-07 at 02:52:53 UTC

    • IP
      206.79.222.33
      Alternative IP(s)
      168.62.175.202
      Network
      206.79.220.0/22
      Domain(s)
      ctl.io
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://206.79.222.33:9404/ 302

      ASN
      AS3561
      Organization
      CENTURYLINK-LEGACY-SAVVIS
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Lumen Technologies, Inc.
      Subject Common Name
      *.vcf.ctl.io
      Subject Alt Name
      *.vcf.ctl.io
      SHA256 Fingerprint
      cc909170bc8e380c8797a540e9562b4b8725f4c6b0af13da9169d2a95e7d00f7
      Validity Not Before
      2024-06-04T00:00:00Z
      Validity Not After
      2025-06-03T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4433f8c72b669699c376fbf4a7e13b0f
      HTTP Header MD5
      63ff1919756817b1dd39a7a0b9e6e674
      HTTP Body MD5
      e1c06d85ae7b8b032bef47e42e4c08f9
    • HTTP/1.1 302 Found
      Date: Thu, 07 Nov 2024 02:52:53 GMT
      Connection: close
      X-VMWARE-VCLOUD-REQUEST-ID: b75ec9fd-f700-4de3-bf13-9998b6c52caa
      X-VMWARE-VCLOUD-CEIP-ID: dae36bde-b637-4dd4-926b-f66a6b92d815
      Content-Type: text/html;charset=utf-8
      Location: /login
      Content-Length: 2
      
      
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:52:53.000Z",
         "alternativeip" : [
            "168.62.175.202"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "e1c06d85ae7b8b032bef47e42e4c08f9",
               "bodymmh3" : -197291711,
               "headermd5" : "63ff1919756817b1dd39a7a0b9e6e674",
               "headermmh3" : 543966073
            },
            "length" : 285
         },
         "asn" : "AS3561",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nDate: Thu, 07 Nov 2024 02:52:53 GMT\r\nConnection: close\r\nX-VMWARE-VCLOUD-REQUEST-ID: b75ec9fd-f700-4de3-bf13-9998b6c52caa\r\nX-VMWARE-VCLOUD-CEIP-ID: dae36bde-b637-4dd4-926b-f66a6b92d815\r\nContent-Type: text/html;charset=utf-8\r\nLocation: /login\r\nContent-Length: 2\r\n\r\n\n\n",
         "datamd5" : "4433f8c72b669699c376fbf4a7e13b0f",
         "datammh3" : -1446386358,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ctl.io"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "f1b7e651c023fa92d2b84444bd5727f8",
            "sha1" : "13ad15c20a89fb3c13eeedf14fdfadb6652c241a",
            "sha256" : "cc909170bc8e380c8797a540e9562b4b8725f4c6b0af13da9169d2a95e7d00f7"
         },
         "geolocus" : {
            "asn" : "AS3561",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "centurylink.com",
               "lumen.com",
               "pg.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "SAVV-S616909-0",
            "organization" : "Procter and Gamble - 2P Infra",
            "subnet" : "206.79.220.0/22"
         },
         "hostname" : [
            "ctl.io"
         ],
         "ip" : "206.79.222.33",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CENTURYLINK-LEGACY-SAVVIS",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Found",
         "seen_date" : "2024-11-07",
         "serial" : "01:53:f7:df:68:f2:26:7c:03:38:03:6f:37:d2:00:fa",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 302,
         "subdomains" : [
            "vcf.ctl.io"
         ],
         "subject" : {
            "altname" : [
               "*.vcf.ctl.io"
            ],
            "city" : "Monroe",
            "commonname" : "*.vcf.ctl.io",
            "country" : "US",
            "organization" : "Lumen Technologies, Inc."
         },
         "subnet" : "206.79.220.0/22",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "io"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-06-03T23:59:59Z",
            "notbefore" : "2024-06-04T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 82.219.63.28:9404 (tcp/http/tls) - last seen on 2024-11-06 at 09:22:01 UTC

    • IP
      82.219.63.28
      Alternative IP(s)
      104.18.20.202 104.18.21.202 2606:4700:0:0:0:0:6812:14ca 2606:4700:0:0:0:0:6812:15ca
      Network
      82.219.0.0/16
      Domain(s)
      creditstyle.co.uk
      Device

      <enterprise field>: device.class

      URL

      https://82.219.63.28:9404/ 302

      ASN
      AS30740
      Organization
      Exa Networks Limited
      Protocol
      http Cert not expired http
      Source
      datascan
    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Bristow & Sutor
      Subject Common Name
      *.creditstyle.co.uk
      Subject Alt Name
      *.creditstyle.co.uk creditstyle.co.uk
      SHA256 Fingerprint
      1a2c64a867d2b356eb6cfa86edb9d7bebfd63f520ed06f87a76f08340260e422
      Validity Not Before
      2024-03-19T00:00:00Z
      Validity Not After
      2025-04-19T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      424d210119278a42e7aeec6e5e213e1b
      HTTP Header MD5
      bac2ac0b57883af487af968571f0df0b
      HTTP Body MD5
      edf9c3097dbe9a56c00d8d3d5e838180
    • HTTP/1.1 302 Found
      Date: Wed, 06 Nov 2024 09:22:01 GMT
      Content-Type: text/html; charset=UTF-8
      Content-Length: 173
      Connection: close
      Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
      Location: /global-protect/login.esp
      Set-Cookie: SESSID=e9133e3b-578d-4251-9d9d-19eac48574b4; Path=/; SameSite=Lax; HttpOnly; Secure
      X-Frame-Options: DENY
      Strict-Transport-Security: max-age=31536000;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; frame-ancestors 'none';
      
      <script LANGUAGE="JavaScript">
      window.location="/global-protect/login.esp";
      </script>
      <html><head></head><body><p>JavaScript must be enabled to continue!</p></body></html>
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T09:22:01.000Z",
         "alternativeip" : [
            "104.18.20.202",
            "104.18.21.202",
            "2606:4700:0:0:0:0:6812:14ca",
            "2606:4700:0:0:0:0:6812:15ca"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "edf9c3097dbe9a56c00d8d3d5e838180",
               "bodymmh3" : 1559941397,
               "headermd5" : "bac2ac0b57883af487af968571f0df0b",
               "headermmh3" : -1744599894
            },
            "length" : 816
         },
         "asn" : "AS30740",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Leeds",
         "country" : "GB",
         "data" : "HTTP/1.1 302 Found\r\nDate: Wed, 06 Nov 2024 09:22:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 173\r\nConnection: close\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nLocation: /global-protect/login.esp\r\nSet-Cookie: SESSID=e9133e3b-578d-4251-9d9d-19eac48574b4; Path=/; SameSite=Lax; HttpOnly; Secure\r\nX-Frame-Options: DENY\r\nStrict-Transport-Security: max-age=31536000;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; frame-ancestors 'none';\r\n\r\n<script LANGUAGE=\"JavaScript\">\nwindow.location=\"/global-protect/login.esp\";\n</script>\n<html><head></head><body><p>JavaScript must be enabled to continue!</p></body></html>\n\n",
         "datamd5" : "424d210119278a42e7aeec6e5e213e1b",
         "datammh3" : 1160939286,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "creditstyle.co.uk"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "54580a2e0dc434e79d465b9e4ee227d5",
            "sha1" : "28dd9ba9dbd7b77de97bd431fb2c16b85893b75c",
            "sha256" : "1a2c64a867d2b356eb6cfa86edb9d7bebfd63f520ed06f87a76f08340260e422"
         },
         "hostname" : [
            "creditstyle.co.uk"
         ],
         "ip" : "82.219.63.28",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "53.7663",
         "location" : "53.7663,-1.5695",
         "longitude" : "-1.5695",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Exa Networks Limited",
         "port" : 9404,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Found",
         "seen_date" : "2024-11-06",
         "serial" : "0c:16:a2:e7:67:d6:a7:5e:0f:44:4c:30:d2:ae:64:56",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 302,
         "subject" : {
            "altname" : [
               "*.creditstyle.co.uk",
               "creditstyle.co.uk"
            ],
            "city" : "Redditch",
            "commonname" : "*.creditstyle.co.uk",
            "country" : "GB",
            "organization" : "Bristow & Sutor"
         },
         "subnet" : "82.219.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "co.uk"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-04-19T23:59:59Z",
            "notbefore" : "2024-03-19T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 194.12.27.239:9404 (tcp/http/tls) - last seen on 2024-11-06 at 07:05:51 UTC

    • IP
      194.12.27.239
      Alternative IP(s)
      83.166.157.24
      Network
      194.12.16.0/20
      Domain(s)
      netplus.ch
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://194.12.27.239:9404/ 302

      ASN
      AS15547
      Organization
      netplus.ch SA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      F5 Networks BIGIP
      HTTP Component(s)
      F5 Networks BIGIP
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      netplus.ch SA
      Subject Common Name
      *.netplus.ch
      Subject Alt Name
      *.netplus.ch netplus.ch
      SHA256 Fingerprint
      5574c042cc73c69f5d4ba6aef9863e9e78b44ea140fbfb2405c249d401ca5378
      Validity Not Before
      2024-07-15T00:00:00Z
      Validity Not After
      2025-08-11T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      de01915c5261cfc426b8d04cd528e378
      HTTP Header MD5
      951427201f7c56f7f27d812c7d0857a2
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.0 302 Found
      Location: http://www.esbk.admin.ch/dam/data/esbk/illegalesspiel/stoppage/stoppage-bgs.html
      Server: BigIP
      Connection: close
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T07:05:51.000Z",
         "alternativeip" : [
            "83.166.157.24"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "admin.ch"
               ],
               "hostname" : [
                  "www.esbk.admin.ch"
               ],
               "url" : [
                  "http://www.esbk.admin.ch/dam/data/esbk/illegalesspiel/stoppage/stoppage-bgs.html"
               ]
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "component" : [
                  {
                     "product" : "BIGIP",
                     "productvendor" : "F5 Networks"
                  }
               ],
               "headermd5" : "951427201f7c56f7f27d812c7d0857a2",
               "headermmh3" : -2123916253
            },
            "length" : 167
         },
         "asn" : "AS15547",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Fully",
         "country" : "CH",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nLocation: http://www.esbk.admin.ch/dam/data/esbk/illegalesspiel/stoppage/stoppage-bgs.html\r\nServer: BigIP\r\nConnection: close\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "de01915c5261cfc426b8d04cd528e378",
         "datammh3" : -534990089,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "netplus.ch"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "928aa6c17c3c5684c8f991d1167b0c7a",
            "sha1" : "af2df0c53f29b9e84f9184b91a426c5a078511ef",
            "sha256" : "5574c042cc73c69f5d4ba6aef9863e9e78b44ea140fbfb2405c249d401ca5378"
         },
         "geolocus" : {
            "asn" : "AS15547",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "CH",
            "countryname" : "Switzerland",
            "domain" : [
               "netplus.ch"
            ],
            "isineu" : "false",
            "latitude" : "46.818188",
            "location" : "46.818188,8.227512",
            "longitude" : "8.227512",
            "netname" : "ESR-0-DHCP",
            "organization" : "netplus.ch SA",
            "subnet" : "194.12.16.0/20"
         },
         "hostname" : [
            "netplus.ch"
         ],
         "ip" : "194.12.27.239",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "46.1582",
         "location" : "46.1582,7.1136",
         "longitude" : "7.1136",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "netplus.ch SA",
         "port" : 9404,
         "product" : "BIGIP",
         "productvendor" : "F5 Networks",
         "protocol" : "http",
         "protocolversion" : "1.0",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Found",
         "seen_date" : "2024-11-06",
         "serial" : "0f:c4:4d:fe:ce:3a:57:0e:f4:3e:f7:82:56:82:94:24",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 302,
         "subject" : {
            "altname" : [
               "*.netplus.ch",
               "netplus.ch"
            ],
            "city" : "Sierre",
            "commonname" : "*.netplus.ch",
            "country" : "CH",
            "organization" : "netplus.ch SA"
         },
         "subnet" : "194.12.16.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "ch"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-11T23:59:59Z",
            "notbefore" : "2024-07-15T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 130.102.181.19:9404 (tcp/undefined/tls) - last seen on 2024-11-05 at 16:09:36 UTC

    • IP
      130.102.181.19
      Alternative IP(s)
      130.102.180.86 130.102.181.86
      Network
      130.102.0.0/16
      Domain(s)
      uq.edu.au
      Reverse DNS
      mis-xi4-prod-ccr.lb.dc.uq.edu.au
      ASN
      AS24436
      Organization
      University of Queensland
      Protocol
      undefined Cert not expired undefined
      Source
      datascan
    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      The University of Queensland
      Subject Common Name
      *.pbi.uq.edu.au
      Subject Alt Name
      *.pbi.uq.edu.au pbi.uq.edu.au
      SHA256 Fingerprint
      14ca8467827b16e6fe242ce18a58d47d230a82e1f8332e6f3b27820463f87adc
      Validity Not Before
      2024-02-20T00:00:00Z
      Validity Not After
      2025-02-26T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3c768c4828bc7cf16f444a4228eaa0b3
    • <nodata>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-05T16:09:36.000Z",
         "alternativeip" : [
            "130.102.180.86",
            "130.102.181.86"
         ],
         "app" : {
            "length" : 8
         },
         "asn" : "AS24436",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Brisbane",
         "country" : "AU",
         "data" : "<nodata>",
         "datamd5" : "3c768c4828bc7cf16f444a4228eaa0b3",
         "datammh3" : -969888823,
         "domain" : [
            "uq.edu.au"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "2a900d9bef254b613e18be99cf4242eb",
            "sha1" : "f90298165b8afb529b8af7759be9dcdb86ce5ef2",
            "sha256" : "14ca8467827b16e6fe242ce18a58d47d230a82e1f8332e6f3b27820463f87adc"
         },
         "geolocus" : {
            "asn" : "AS24436",
            "continent" : "OC",
            "continentname" : "Oceania",
            "country" : "AU",
            "countryname" : "Australia",
            "domain" : [
               "uq.edu.au",
               "uqconnect.net"
            ],
            "isineu" : "false",
            "latitude" : "-25.274398",
            "location" : "-25.274398,133.775136",
            "longitude" : "133.775136",
            "netname" : "UQ-NET-1",
            "organization" : "University of Queensland",
            "subnet" : "130.102.0.0/16"
         },
         "host" : [
            "mis-xi4-prod-ccr",
            "pbi"
         ],
         "hostname" : [
            "mis-xi4-prod-ccr.lb.dc.uq.edu.au",
            "pbi.uq.edu.au"
         ],
         "ip" : "130.102.181.19",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "-27.4975",
         "location" : "-27.4975,152.9989",
         "longitude" : "152.9989",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "University of Queensland",
         "port" : 9404,
         "protocol" : "undefined",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "mis-xi4-prod-ccr.lb.dc.uq.edu.au"
         ],
         "seen_date" : "2024-11-05",
         "serial" : "02:e4:50:69:0f:c4:7c:f8:35:33:47:0a:ed:51:cc:09",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subdomains" : [
            "dc.uq.edu.au",
            "lb.dc.uq.edu.au",
            "pbi.uq.edu.au"
         ],
         "subject" : {
            "altname" : [
               "*.pbi.uq.edu.au",
               "pbi.uq.edu.au"
            ],
            "city" : "St Lucia",
            "commonname" : "*.pbi.uq.edu.au",
            "country" : "AU",
            "organization" : "The University of Queensland"
         },
         "subnet" : "130.102.0.0/16",
         "tld" : [
            "edu.au"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-02-26T23:59:59Z",
            "notbefore" : "2024-02-20T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 20.106.46.114:9404 (tcp/http/tls) - last seen on 2024-11-04 at 21:51:18 UTC

    • IP
      20.106.46.114
      Alternative IP(s)
      18.238.217.59 18.238.217.7 18.238.217.70 18.238.217.8 20.221.107.253 216.241.213.55
      Network
      20.64.0.0/10
      Domain(s)
      ansira.com
      Device

      <enterprise field>: device.class

      URL

      https://20.106.46.114:9404/ 404

      HTTP Title
      Not Found
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      ANSIRA PARTNERS II, LLC
      Subject Common Name
      *.ansira.com
      Subject Alt Name
      *.ansira.com www.ansira.com stage.ansira.com ansira.com
      SHA256 Fingerprint
      24ff316a5ea844009b173730d3ed05313a461b4a25bb277f874b3afc9376b1d5
      Validity Not Before
      2024-06-05T00:00:00Z
      Validity Not After
      2025-06-04T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      eabb20a4ef4767e81bebb0b71e8862ef
      HTTP Header MD5
      0123352ee18eb0cabdd5d48b93d6ad53
      HTTP Body MD5
      344d3f7baff022f79c37992e1bd5d040
    • HTTP/1.1 404 Not Found
      Content-Type: text/html; charset=us-ascii
      Date: Mon, 04 Nov 2024 21:51:18 GMT
      Connection: close
      Content-Length: 315
      Strict-Transport-Security: max-age=31536000; includeSubDomains
      Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
      Access-Control-Allow-Origin: *
      X-Frame-Options: SAMEORIGIN
      X-Content-Type-Options: nosniff
      X-Robots-Tag: noindex
      X-UA-Compatible: IE=edge,chrome=1
      X-XSS-Protection: 1; mode=block
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Not Found</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Not Found</h2>
      <hr><p>HTTP Error 404. The requested resource is not found.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-04T21:51:18.000Z",
         "alternativeip" : [
            "18.238.217.59",
            "18.238.217.7",
            "18.238.217.70",
            "18.238.217.8",
            "20.221.107.253",
            "216.241.213.55"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "344d3f7baff022f79c37992e1bd5d040",
               "bodymmh3" : 225052475,
               "headermd5" : "0123352ee18eb0cabdd5d48b93d6ad53",
               "headermmh3" : 1900602015,
               "title" : "Not Found"
            },
            "length" : 788
         },
         "asn" : "AS8075",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Des Moines",
         "country" : "US",
         "data" : "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nDate: Mon, 04 Nov 2024 21:51:18 GMT\r\nConnection: close\r\nContent-Length: 315\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-Robots-Tag: noindex\r\nX-UA-Compatible: IE=edge,chrome=1\r\nX-XSS-Protection: 1; mode=block\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "eabb20a4ef4767e81bebb0b71e8862ef",
         "datammh3" : -1206507868,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ansira.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "78266b985bfc70f4b38f9b8f613ff73d",
            "sha1" : "c9ecbbb47f0d76a85c8f91e6aecd433ed8631c83",
            "sha256" : "24ff316a5ea844009b173730d3ed05313a461b4a25bb277f874b3afc9376b1d5"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "20.106.0.0/16"
         },
         "host" : [
            "stage",
            "www"
         ],
         "hostname" : [
            "ansira.com",
            "stage.ansira.com",
            "www.ansira.com"
         ],
         "ip" : "20.106.46.114",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "41.6021",
         "location" : "41.6021,-93.6124",
         "longitude" : "-93.6124",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "port" : 9404,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Not Found",
         "seen_date" : "2024-11-04",
         "serial" : "0f:88:fe:62:eb:ca:10:c7:05:8e:a2:0e:47:6a:ff:41",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 404,
         "subject" : {
            "altname" : [
               "*.ansira.com",
               "www.ansira.com",
               "stage.ansira.com",
               "ansira.com"
            ],
            "city" : "St. Louis",
            "commonname" : "*.ansira.com",
            "country" : "US",
            "organization" : "ANSIRA PARTNERS II, LLC"
         },
         "subnet" : "20.64.0.0/10",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-06-04T23:59:59Z",
            "notbefore" : "2024-06-05T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 85.154.29.20:9404 (tcp/http/tls) - last seen on 2024-11-04 at 05:05:05 UTC

    • IP
      85.154.29.20
      Alternative IP(s)
      173.254.30.11
      Network
      85.154.0.0/16
      Domain(s)
      gccstat.org
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      https://85.154.29.20:9404/ 302

      HTTP Title
      Object moved
      ASN
      AS28885
      Organization
      Oman Telecommunications Company (S.A.O.G)
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      GCC STATISTICAL CENTER GCC STAT
      Subject Common Name
      *.gccstat.org
      Subject Alt Name
      *.gccstat.org gccstat.org
      SHA256 Fingerprint
      890bb6f53220653ecce5be05ab7335ee5cac7050a22e845b46b621ea2e0662e3
      Validity Not Before
      2024-08-12T00:00:00Z
      Validity Not After
      2024-12-04T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c7fa557a193bd9103c2e6dc9540a351f
      HTTP Header MD5
      159b9035e019fffdb0bddc1482ec379e
      HTTP Body MD5
      6a449bfcf0227867f7c0fd3942c73b26
    • HTTP/1.1 302 Found
      Cache-Control: private
      Content-Type: text/html; charset=utf-8
      Location: https://<ip>/sys/login
      Content-Security-Policy: frame-ancestors 'self' *.knoema.com *.knoema.org
      Set-Cookie: current-lang=en-US; expires=Tue, 04-Nov-2025 05:05:04 GMT; path=/
      Set-Cookie: KnoemaUserId=f35adc57-b80a-4e0b-8a9b-50a41d5ef5d1; expires=Tue, 04-Nov-2025 05:05:04 GMT; path=/; HttpOnly
      Access-Control-Allow-Origin: *
      Access-Control-Allow-Headers: Knoema-Data-Product, Content-Type, X-Requested-With, Authorization
      X-UA-Compatible: IE=Edge,chrome=1
      Date: Mon, 04 Nov 2024 05:05:04 GMT
      Connection: close
      Content-Length: 147
      
      <html><head><title>Object moved</title></head><body>
      <h2>Object moved to <a href="https://<ip>/sys/login">here</a>.</h2>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-04T05:05:05.000Z",
         "alternativeip" : [
            "173.254.30.11"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "6a449bfcf0227867f7c0fd3942c73b26",
               "bodymmh3" : -60798923,
               "headermd5" : "159b9035e019fffdb0bddc1482ec379e",
               "headermmh3" : 410643452,
               "title" : "Object moved"
            },
            "length" : 775
         },
         "asn" : "AS28885",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Salalah",
         "country" : "OM",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nLocation: https://<ip>/sys/login\r\nContent-Security-Policy: frame-ancestors 'self' *.knoema.com *.knoema.org\r\nSet-Cookie: current-lang=en-US; expires=Tue, 04-Nov-2025 05:05:04 GMT; path=/\r\nSet-Cookie: KnoemaUserId=f35adc57-b80a-4e0b-8a9b-50a41d5ef5d1; expires=Tue, 04-Nov-2025 05:05:04 GMT; path=/; HttpOnly\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Knoema-Data-Product, Content-Type, X-Requested-With, Authorization\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nDate: Mon, 04 Nov 2024 05:05:04 GMT\r\nConnection: close\r\nContent-Length: 147\r\n\r\n<html><head><title>Object moved</title></head><body>\r\n<h2>Object moved to <a href=\"https://<ip>/sys/login\">here</a>.</h2>\r\n</body></html>\r\n",
         "datamd5" : "c7fa557a193bd9103c2e6dc9540a351f",
         "datammh3" : -658353395,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "gccstat.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "4e054375f617be93b68341df60837125",
            "sha1" : "441e01d5ce51f0662631807190da0c4fa0f5dbe1",
            "sha256" : "890bb6f53220653ecce5be05ab7335ee5cac7050a22e845b46b621ea2e0662e3"
         },
         "geolocus" : {
            "asn" : "AS19905",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "OM",
            "countryname" : "Oman",
            "domain" : [
               "omantel.om"
            ],
            "isineu" : "false",
            "latitude" : "21.512583",
            "location" : "21.512583,55.923255",
            "longitude" : "55.923255",
            "netname" : "OM-GTO-OMAN-20041101",
            "organization" : "Oman Telecommunications Company (S.A.O.G)",
            "subnet" : "85.154.0.0/16"
         },
         "hostname" : [
            "gccstat.org"
         ],
         "ip" : "85.154.29.20",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "16.9930",
         "location" : "16.9930,54.0931",
         "longitude" : "54.0931",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Oman Telecommunications Company (S.A.O.G)",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 9404,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 4096
         },
         "reason" : "Found",
         "seen_date" : "2024-11-04",
         "serial" : "07:75:29:5b:3f:ec:39:3a:5f:8c:f7:48:2f:9a:1d:47",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 302,
         "subject" : {
            "altname" : [
               "*.gccstat.org",
               "gccstat.org"
            ],
            "city" : "Muscat",
            "commonname" : "*.gccstat.org",
            "country" : "OM",
            "organization" : "GCC STATISTICAL CENTER GCC STAT"
         },
         "subnet" : "85.154.0.0/16",
         "tld" : [
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2024-12-04T23:59:59Z",
            "notbefore" : "2024-08-12T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 185.29.141.12:9404 (tcp/http/tls) - last seen on 2024-11-03 at 16:40:51 UTC

    • IP
      185.29.141.12
      Alternative IP(s)
      173.254.30.11
      Network
      185.29.140.0/22
      Domain(s)
      awasr.om gccstat.org
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      https://185.29.141.12:9404/ 302

      HTTP Title
      Object moved
      Reverse DNS
      static-host-185-29-141-12.awasr.om
      ASN
      AS204170
      Organization
      Awaser Oman LLC
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      GCC STATISTICAL CENTER GCC STAT
      Subject Common Name
      *.gccstat.org
      Subject Alt Name
      *.gccstat.org gccstat.org
      SHA256 Fingerprint
      890bb6f53220653ecce5be05ab7335ee5cac7050a22e845b46b621ea2e0662e3
      Validity Not Before
      2024-08-12T00:00:00Z
      Validity Not After
      2024-12-04T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      733dab28a615ad1023d2638ae865219e
      HTTP Header MD5
      60c3e732a17250f0f1745692ca15d850
      HTTP Body MD5
      6a449bfcf0227867f7c0fd3942c73b26
    • HTTP/1.1 302 Found
      Cache-Control: private
      Content-Type: text/html; charset=utf-8
      Location: https://<ip>/sys/login
      Content-Security-Policy: frame-ancestors 'self' *.knoema.com *.knoema.org
      Set-Cookie: current-lang=en-US; expires=Mon, 03-Nov-2025 16:40:49 GMT; path=/
      Set-Cookie: KnoemaUserId=7bbeadab-5302-4218-a3bf-c38e49fbb79c; expires=Mon, 03-Nov-2025 16:40:49 GMT; path=/; HttpOnly
      Access-Control-Allow-Origin: *
      Access-Control-Allow-Headers: Knoema-Data-Product, Content-Type, X-Requested-With, Authorization
      X-UA-Compatible: IE=Edge,chrome=1
      Date: Sun, 03 Nov 2024 16:40:49 GMT
      Connection: close
      Content-Length: 148
      
      <html><head><title>Object moved</title></head><body>
      <h2>Object moved to <a href="https://<ip>/sys/login">here</a>.</h2>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-03T16:40:51.000Z",
         "alternativeip" : [
            "173.254.30.11"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "6a449bfcf0227867f7c0fd3942c73b26",
               "bodymmh3" : -60798923,
               "headermd5" : "60c3e732a17250f0f1745692ca15d850",
               "headermmh3" : 56927582,
               "title" : "Object moved"
            },
            "length" : 775
         },
         "asn" : "AS204170",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Muscat",
         "country" : "OM",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nLocation: https://<ip>/sys/login\r\nContent-Security-Policy: frame-ancestors 'self' *.knoema.com *.knoema.org\r\nSet-Cookie: current-lang=en-US; expires=Mon, 03-Nov-2025 16:40:49 GMT; path=/\r\nSet-Cookie: KnoemaUserId=7bbeadab-5302-4218-a3bf-c38e49fbb79c; expires=Mon, 03-Nov-2025 16:40:49 GMT; path=/; HttpOnly\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Knoema-Data-Product, Content-Type, X-Requested-With, Authorization\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nDate: Sun, 03 Nov 2024 16:40:49 GMT\r\nConnection: close\r\nContent-Length: 148\r\n\r\n<html><head><title>Object moved</title></head><body>\r\n<h2>Object moved to <a href=\"https://<ip>/sys/login\">here</a>.</h2>\r\n</body></html>\r\n",
         "datamd5" : "733dab28a615ad1023d2638ae865219e",
         "datammh3" : -199187722,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "awasr.om",
            "gccstat.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "4e054375f617be93b68341df60837125",
            "sha1" : "441e01d5ce51f0662631807190da0c4fa0f5dbe1",
            "sha256" : "890bb6f53220653ecce5be05ab7335ee5cac7050a22e845b46b621ea2e0662e3"
         },
         "host" : [
            "static-host-185-29-141-12"
         ],
         "hostname" : [
            "gccstat.org",
            "static-host-185-29-141-12.awasr.om"
         ],
         "ip" : "185.29.141.12",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "23.5780",
         "location" : "23.5780,58.4021",
         "longitude" : "58.4021",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Awaser Oman LLC",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 9404,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 4096
         },
         "reason" : "Found",
         "reverse" : [
            "static-host-185-29-141-12.awasr.om"
         ],
         "seen_date" : "2024-11-03",
         "serial" : "07:75:29:5b:3f:ec:39:3a:5f:8c:f7:48:2f:9a:1d:47",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 302,
         "subject" : {
            "altname" : [
               "*.gccstat.org",
               "gccstat.org"
            ],
            "city" : "Muscat",
            "commonname" : "*.gccstat.org",
            "country" : "OM",
            "organization" : "GCC STATISTICAL CENTER GCC STAT"
         },
         "subnet" : "185.29.140.0/22",
         "tld" : [
            "om",
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2024-12-04T23:59:59Z",
            "notbefore" : "2024-08-12T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 185.29.141.138:9404 (tcp/http/tls) - last seen on 2024-11-03 at 01:51:39 UTC

    • IP
      185.29.141.138
      Alternative IP(s)
      173.254.30.11
      Network
      185.29.140.0/22
      Domain(s)
      awasr.om gccstat.org
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      https://185.29.141.138:9404/ 404

      HTTP Title
      Not Found
      Reverse DNS
      static-host-185-29-141-138.awasr.om
      ASN
      AS204170
      Organization
      Awaser Oman LLC
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      GCC STATISTICAL CENTER GCC STAT
      Subject Common Name
      *.gccstat.org
      Subject Alt Name
      *.gccstat.org gccstat.org
      SHA256 Fingerprint
      890bb6f53220653ecce5be05ab7335ee5cac7050a22e845b46b621ea2e0662e3
      Validity Not Before
      2024-08-12T00:00:00Z
      Validity Not After
      2024-12-04T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      634d5281a64959deb2a0c361a16bcf44
      HTTP Header MD5
      d30ea3d8118160dd164e28b2fe124279
      HTTP Body MD5
      344d3f7baff022f79c37992e1bd5d040
    • HTTP/1.1 404 Not Found
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Sun, 03 Nov 2024 01:51:34 GMT
      Connection: close
      Content-Length: 315
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Not Found</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Not Found</h2>
      <hr><p>HTTP Error 404. The requested resource is not found.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-03T01:51:39.000Z",
         "alternativeip" : [
            "173.254.30.11"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "344d3f7baff022f79c37992e1bd5d040",
               "bodymmh3" : 225052475,
               "headermd5" : "d30ea3d8118160dd164e28b2fe124279",
               "headermmh3" : 1145429481,
               "title" : "Not Found"
            },
            "length" : 492
         },
         "asn" : "AS204170",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Muscat",
         "country" : "OM",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Sun, 03 Nov 2024 01:51:34 GMT\r\nConnection: close\r\nContent-Length: 315\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "634d5281a64959deb2a0c361a16bcf44",
         "datammh3" : 954872337,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "awasr.om",
            "gccstat.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "4e054375f617be93b68341df60837125",
            "sha1" : "441e01d5ce51f0662631807190da0c4fa0f5dbe1",
            "sha256" : "890bb6f53220653ecce5be05ab7335ee5cac7050a22e845b46b621ea2e0662e3"
         },
         "host" : [
            "static-host-185-29-141-138"
         ],
         "hostname" : [
            "gccstat.org",
            "static-host-185-29-141-138.awasr.om"
         ],
         "ip" : "185.29.141.138",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "23.5780",
         "location" : "23.5780,58.4021",
         "longitude" : "58.4021",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Awaser Oman LLC",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 9404,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 4096
         },
         "reason" : "Not Found",
         "reverse" : [
            "static-host-185-29-141-138.awasr.om"
         ],
         "seen_date" : "2024-11-03",
         "serial" : "07:75:29:5b:3f:ec:39:3a:5f:8c:f7:48:2f:9a:1d:47",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 404,
         "subject" : {
            "altname" : [
               "*.gccstat.org",
               "gccstat.org"
            ],
            "city" : "Muscat",
            "commonname" : "*.gccstat.org",
            "country" : "OM",
            "organization" : "GCC STATISTICAL CENTER GCC STAT"
         },
         "subnet" : "185.29.140.0/22",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "om",
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2024-12-04T23:59:59Z",
            "notbefore" : "2024-08-12T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 212.72.12.75:9404 (tcp/undefined/tls) - last seen on 2024-11-02 at 06:40:43 UTC

    • IP
      212.72.12.75
      Network
      212.72.0.0/19
      Domain(s)
      bankdhofar.com omantel.net.om
      Reverse DNS
      i75.tb-as-17.omantel.net.om
      ASN
      AS28885
      Organization
      Oman Telecommunications Company (S.A.O.G)
      Protocol
      undefined Cert not expired undefined
      Source
      datascan
    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Bank Dhofar SAOG
      Subject Common Name
      *.dob.bankdhofar.com
      Subject Alt Name
      *.dob.bankdhofar.com dob.bankdhofar.com
      SHA256 Fingerprint
      d2c90011055ce0c6b96696db747cb9fcde493d76bf523d27a6d543579f417f54
      Validity Not Before
      2023-12-05T00:00:00Z
      Validity Not After
      2024-12-11T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3c768c4828bc7cf16f444a4228eaa0b3
    • <nodata>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-02T06:40:43.000Z",
         "app" : {
            "length" : 8
         },
         "asn" : "AS28885",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Muscat",
         "country" : "OM",
         "data" : "<nodata>",
         "datamd5" : "3c768c4828bc7cf16f444a4228eaa0b3",
         "datammh3" : -969888823,
         "domain" : [
            "bankdhofar.com",
            "omantel.net.om"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "ba5b0d93746969e740143a57050f74de",
            "sha1" : "cfa68ad446addb473d20debe234c5743253d134d",
            "sha256" : "d2c90011055ce0c6b96696db747cb9fcde493d76bf523d27a6d543579f417f54"
         },
         "geolocus" : {
            "asn" : "AS28885",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "OM",
            "countryname" : "Oman",
            "domain" : [
               "omantel.net.om",
               "omantel.om"
            ],
            "isineu" : "false",
            "latitude" : "21.512583",
            "location" : "21.512583,55.923255",
            "longitude" : "55.923255",
            "netname" : "OM-GTO-OMAN-980924",
            "organization" : "Oman Telecommunications Company (S.A.O.G)",
            "subnet" : "212.72.0.0/19"
         },
         "host" : [
            "dob",
            "i75"
         ],
         "hostname" : [
            "dob.bankdhofar.com",
            "i75.tb-as-17.omantel.net.om"
         ],
         "ip" : "212.72.12.75",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "23.5780",
         "location" : "23.5780,58.4021",
         "longitude" : "58.4021",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Oman Telecommunications Company (S.A.O.G)",
         "port" : 9404,
         "protocol" : "undefined",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "i75.tb-as-17.omantel.net.om"
         ],
         "seen_date" : "2024-11-02",
         "serial" : "05:c2:e8:2f:9e:cc:29:74:06:64:ef:0f:dc:a4:88:05",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subdomains" : [
            "dob.bankdhofar.com",
            "tb-as-17.omantel.net.om"
         ],
         "subject" : {
            "altname" : [
               "*.dob.bankdhofar.com",
               "dob.bankdhofar.com"
            ],
            "city" : "Muscat",
            "commonname" : "*.dob.bankdhofar.com",
            "country" : "OM",
            "organization" : "Bank Dhofar SAOG"
         },
         "subnet" : "212.72.0.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "net.om"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2024-12-11T23:59:59Z",
            "notbefore" : "2023-12-05T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }