ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 39,804 in 0.170 second(s)

  • 76.12.28.217:1311 (tcp/unknown) - last seen on 2024-11-21 at 08:56:31 UTC

    • IP
      76.12.28.217
      Network
      76.12.0.0/16
      Domain(s)
      kcatscreativenetwork.com
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      Reverse DNS
      kcatscreativenetwork.com
      ASN
      AS20021
      Organization
      LNH-INC
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bca5bbe9fd2fdb94963c5d303418cb87 
    • \x15\x03\x01\x00\x02\x02

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:56:31.000Z",
   "app" : {
      "length" : 7
   },
   "asn" : "AS20021",
   "city" : "Wilmington",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x15\\x03\\x01\\x00\\x02\\x02\n",
   "datamd5" : "bca5bbe9fd2fdb94963c5d303418cb87",
   "datammh3" : 1602334322,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "kcatscreativenetwork.com"
   ],
   "geolocus" : {
      "asn" : "AS20021",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "hostmysite.com",
         "ntirety.com",
         "safesecureweb.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "PSICHOMETRICSINTERNATIONALLLC",
      "organization" : "Ntirety, Inc.",
      "subnet" : "76.12.0.0/16"
   },
   "hostname" : [
      "kcatscreativenetwork.com"
   ],
   "ip" : "76.12.28.217",
   "ipv6" : "false",
   "latitude" : "39.7552",
   "location" : "39.7552,-75.5312",
   "longitude" : "-75.5312",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "LNH-INC",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 1311,
   "protocol" : "unknown",
   "reverse" : [
      "kcatscreativenetwork.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "76.12.0.0/16",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 103.251.149.190:1311 (tcp/http) - last seen on 2024-11-21 at 08:49:25 UTC

    • IP
      103.251.149.190
      Network
      103.251.148.0/23
      Domain(s)
      maildirectsigma.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://103.251.149.190:1311/ 400

      Reverse DNS
      rlas3.maildirectsigma.com
      ASN
      AS133296
      Organization
      Web Werks India Pvt. Ltd.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      54ae69b91d04957050d982f54a92a601
      HTTP Header MD5
      50b14444800e6cbc220a6e6a9357469b
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=ISO-8859-1
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:49:25.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "50b14444800e6cbc220a6e6a9357469b",
         "headermmh3" : -1774634674
      },
      "length" : 143
   },
   "asn" : "AS133296",
   "country" : "IN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=ISO-8859-1\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "54ae69b91d04957050d982f54a92a601",
   "datammh3" : 1739185676,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "maildirectsigma.com"
   ],
   "geolocus" : {
      "asn" : "AS133296",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "IN",
      "countryname" : "India",
      "domain" : [
         "qlc.in"
      ],
      "isineu" : "false",
      "latitude" : "20.593684",
      "location" : "20.593684,78.96288",
      "longitude" : "78.96288",
      "netname" : "QUANTUM-LINK-COMMUNICATIONS",
      "organization" : "Quantum Link Communications Pvt. Ltd",
      "subnet" : "103.251.148.0/23"
   },
   "host" : [
      "rlas3"
   ],
   "hostname" : [
      "rlas3.maildirectsigma.com"
   ],
   "ip" : "103.251.149.190",
   "ipv6" : "false",
   "latitude" : "21.9974",
   "location" : "21.9974,79.0011",
   "longitude" : "79.0011",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Web Werks India Pvt. Ltd.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 1311,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "rlas3.maildirectsigma.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "103.251.148.0/23",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 65.36.192.186:1311 (tcp/unknown) - last seen on 2024-11-21 at 08:49:25 UTC

    • IP
      65.36.192.186
      Network
      65.36.128.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      ASN
      AS20021
      Organization
      LNH-INC
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bca5bbe9fd2fdb94963c5d303418cb87 
    • \x15\x03\x01\x00\x02\x02

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:49:25.000Z",
   "app" : {
      "length" : 7
   },
   "asn" : "AS20021",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x15\\x03\\x01\\x00\\x02\\x02\n",
   "datamd5" : "bca5bbe9fd2fdb94963c5d303418cb87",
   "datammh3" : 1602334322,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS20021",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "hostmysite.com",
         "ntirety.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "HOSTMYSITE",
      "organization" : "Ntirety, Inc.",
      "subnet" : "65.36.128.0/17"
   },
   "ip" : "65.36.192.186",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "LNH-INC",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 1311,
   "protocol" : "unknown",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "65.36.128.0/17",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 46.217.145.103:1311 (tcp/http) - last seen on 2024-11-21 at 08:49:24 UTC

    • IP
      46.217.145.103
      Network
      46.217.128.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://46.217.145.103:1311/ 200

      HTTP Title
      Garson6PosWebService Service
      ASN
      AS6821
      Organization
      Makedonski Telekom AD-Skopje
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bf24c604d588b59aeb8658078ddf2beb
      HTTP Header MD5
      73a836af96cd81b5b94bf90e39f4d8d2
      HTTP Body MD5
      fb5735de576c156bf82bd51fe5305ed2 
    • HTTP/1.1 200 OK
Content-Length: 3005
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0
Date: Thu, 21 Nov 2024 08:49:24 GMT
Connection: close

<HTML lang="en"><HEAD><link rel="alternate" type="text/xml" href="http://localhost:4002/?disco"/><STYLE type="text/css">#content{ FONT-SIZE: 0.7em; PADDING-BOTTOM: 2em; MARGIN-LEFT: 30px}BODY{MARGIN-TOP: 0px; MARGIN-LEFT: 0px; COLOR: #000000; FONT-FAMILY: Verdana; BACKGROUND-COLOR: white}P{MARGIN-TOP: 0px; MARGIN-BOTTOM: 12px; COLOR: #000000; FONT-FAMILY: Verdana}PRE{BORDER-RIGHT: #f0f0e0 1px solid; PADDING-RIGHT: 5px; BORDER-TOP: #f0f0e0 1px solid; MARGIN-TOP: -5px; PADDING-LEFT: 5px; FONT-SIZE: 1.2em; PADDING-BOTTOM: 5px; BORDER-LEFT: #f0f0e0 1px solid; PADDING-TOP: 5px; BORDER-BOTTOM: #f0f0e0 1px solid; FONT-FAMILY: Courier New; BACKGROUND-COLOR: #e5e5cc}.heading1{MARGIN-TOP: 0px; PADDING-LEFT: 15px; FONT-WEIGHT: normal; FONT-SIZE: 26px; MARGIN-BOTTOM: 0px; PADDING-BOTTOM: 3px; MARGIN-LEFT: -30px; WIDTH: 100%; COLOR: #ffffff; PADDING-TOP: 10px; FONT-FAMILY: Tahoma; BACKGROUND-COLOR: #003366}.intro{display: block; font-size: 1em;}</STYLE><TITLE>Garson6PosWebService Service</TITLE></HEAD><BODY><DIV id="content" role="main"><h1 class="heading1">Garson6PosWebService Service</h1><BR/><P class="intro">You have created a service.<P class='intro'>To test this service, you will need to create a client and use it to call the service. You can do this using the svcutil.exe tool from the command line with the following syntax:</P> <BR/><PRE>svcutil.exe <A HREF="http://localhost:4002/?wsdl">http://localhost:4002/?wsdl</A></PRE><P>You can also access the service description as a single file:<BR/><PRE><A HREF="http://localhost:4002/?singleWsdl">http://localhost:4002/?singleWsdl</A></PRE></P></P><P class="intro">This will generate a configuration file and a code file that contains the client class. Add the two files to your client application and use the generated client class to call the Service. For example:<BR/></P><h2 class='intro'>C#</h2><br /><PRE><font color="blue">class </font><font color="black">Test
</font>{
<font color="blue">    static void </font>Main()
    {
        <font color="black">Garson6PosWebServiceClient</font> client = <font color="blue">new </font><font color="black">Garson6PosWebServiceClient</font>();

<font color="darkgreen">        // Use the 'client' variable to call operations on the service.

</font><font color="darkgreen">        // Always close the client.
</font>        client.Close();
    }
}
</PRE><BR/><h2 class='intro'>Visual Basic</h2><br /><PRE><font color="blue">Class </font><font color="black">Test
</font><font color="blue">    Shared Sub </font>Main()
<font color="blue">        Dim </font>client As <font color="black">Garson6PosWebServiceClient</font> = <font color="blue">New </font><font color="black">Garson6PosWebServiceClient</font>()
<font color="darkgreen">        ' Use the 'client' variable to call operations on the service.

</font><font color="darkgreen">        ' Always close the client.
</font>        client.Close()
<font color="blue">    End Sub
</font><font color="blue">End Class</font></PRE></DIV></BODY></HTML>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:49:24.000Z",
   "app" : {
      "extract" : {
         "hostname" : [
            "localhost"
         ],
         "url" : [
            "http://localhost:4002/?disco",
            "http://localhost:4002/?singleWsdl",
            "http://localhost:4002/?wsdl"
         ]
      },
      "http" : {
         "bodymd5" : "fb5735de576c156bf82bd51fe5305ed2",
         "bodymmh3" : -204100752,
         "headermd5" : "73a836af96cd81b5b94bf90e39f4d8d2",
         "headermmh3" : 1945108400,
         "title" : "Garson6PosWebService Service"
      },
      "length" : 3173
   },
   "asn" : "AS6821",
   "city" : "Skopje",
   "country" : "MK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nContent-Length: 3005\r\nContent-Type: text/html; charset=UTF-8\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 21 Nov 2024 08:49:24 GMT\r\nConnection: close\r\n\r\n<HTML lang=\"en\"><HEAD><link rel=\"alternate\" type=\"text/xml\" href=\"http://localhost:4002/?disco\"/><STYLE type=\"text/css\">#content{ FONT-SIZE: 0.7em; PADDING-BOTTOM: 2em; MARGIN-LEFT: 30px}BODY{MARGIN-TOP: 0px; MARGIN-LEFT: 0px; COLOR: #000000; FONT-FAMILY: Verdana; BACKGROUND-COLOR: white}P{MARGIN-TOP: 0px; MARGIN-BOTTOM: 12px; COLOR: #000000; FONT-FAMILY: Verdana}PRE{BORDER-RIGHT: #f0f0e0 1px solid; PADDING-RIGHT: 5px; BORDER-TOP: #f0f0e0 1px solid; MARGIN-TOP: -5px; PADDING-LEFT: 5px; FONT-SIZE: 1.2em; PADDING-BOTTOM: 5px; BORDER-LEFT: #f0f0e0 1px solid; PADDING-TOP: 5px; BORDER-BOTTOM: #f0f0e0 1px solid; FONT-FAMILY: Courier New; BACKGROUND-COLOR: #e5e5cc}.heading1{MARGIN-TOP: 0px; PADDING-LEFT: 15px; FONT-WEIGHT: normal; FONT-SIZE: 26px; MARGIN-BOTTOM: 0px; PADDING-BOTTOM: 3px; MARGIN-LEFT: -30px; WIDTH: 100%; COLOR: #ffffff; PADDING-TOP: 10px; FONT-FAMILY: Tahoma; BACKGROUND-COLOR: #003366}.intro{display: block; font-size: 1em;}</STYLE><TITLE>Garson6PosWebService Service</TITLE></HEAD><BODY><DIV id=\"content\" role=\"main\"><h1 class=\"heading1\">Garson6PosWebService Service</h1><BR/><P class=\"intro\">You have created a service.<P class='intro'>To test this service, you will need to create a client and use it to call the service. You can do this using the svcutil.exe tool from the command line with the following syntax:</P> <BR/><PRE>svcutil.exe <A HREF=\"http://localhost:4002/?wsdl\">http://localhost:4002/?wsdl</A></PRE><P>You can also access the service description as a single file:<BR/><PRE><A HREF=\"http://localhost:4002/?singleWsdl\">http://localhost:4002/?singleWsdl</A></PRE></P></P><P class=\"intro\">This will generate a configuration file and a code file that contains the client class. Add the two files to your client application and use the generated client class to call the Service. For example:<BR/></P><h2 class='intro'>C#</h2><br /><PRE><font color=\"blue\">class </font><font color=\"black\">Test\n</font>{\n<font color=\"blue\">    static void </font>Main()\n    {\n        <font color=\"black\">Garson6PosWebServiceClient</font> client = <font color=\"blue\">new </font><font color=\"black\">Garson6PosWebServiceClient</font>();\n\n<font color=\"darkgreen\">        // Use the 'client' variable to call operations on the service.\n\n</font><font color=\"darkgreen\">        // Always close the client.\n</font>        client.Close();\n    }\n}\n</PRE><BR/><h2 class='intro'>Visual Basic</h2><br /><PRE><font color=\"blue\">Class </font><font color=\"black\">Test\n</font><font color=\"blue\">    Shared Sub </font>Main()\n<font color=\"blue\">        Dim </font>client As <font color=\"black\">Garson6PosWebServiceClient</font> = <font color=\"blue\">New </font><font color=\"black\">Garson6PosWebServiceClient</font>()\n<font color=\"darkgreen\">        ' Use the 'client' variable to call operations on the service.\n\n</font><font color=\"darkgreen\">        ' Always close the client.\n</font>        client.Close()\n<font color=\"blue\">    End Sub\n</font><font color=\"blue\">End Class</font></PRE></DIV></BODY></HTML>",
   "datamd5" : "bf24c604d588b59aeb8658078ddf2beb",
   "datammh3" : 1894458126,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS6821",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "MK",
      "countryname" : "Macedonia [FYROM]",
      "domain" : [
         "telekom.mk"
      ],
      "isineu" : "false",
      "latitude" : "41.608635",
      "location" : "41.608635,21.745275",
      "longitude" : "21.745275",
      "netname" : "MK-MPT-20101229",
      "organization" : "Makedonski Telekom AD-Skopje",
      "subnet" : "46.217.0.0/16"
   },
   "ip" : "46.217.145.103",
   "ipv6" : "false",
   "latitude" : "41.9985",
   "location" : "41.9985,21.4313",
   "longitude" : "21.4313",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Makedonski Telekom AD-Skopje",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 1311,
   "product" : "HTTPAPI",
   "productvendor" : "Microsoft",
   "productversion" : "2.0",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "46.217.128.0/18",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 76.12.16.39:1311 (tcp/unknown) - last seen on 2024-11-21 at 08:48:59 UTC

    • IP
      76.12.16.39
      Alternative IP(s)
      15.197.148.33 3.33.130.190
      Network
      76.12.0.0/16
      Domain(s)
      hbvacationrental.com
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      Reverse DNS
      hbvacationrental.com
      ASN
      AS20021
      Organization
      LNH-INC
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bca5bbe9fd2fdb94963c5d303418cb87 
    • \x15\x03\x01\x00\x02\x02

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:48:59.000Z",
   "alternativeip" : [
      "15.197.148.33",
      "3.33.130.190"
   ],
   "app" : {
      "length" : 7
   },
   "asn" : "AS20021",
   "city" : "Wilmington",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x15\\x03\\x01\\x00\\x02\\x02\n",
   "datamd5" : "bca5bbe9fd2fdb94963c5d303418cb87",
   "datammh3" : 1602334322,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "hbvacationrental.com"
   ],
   "geolocus" : {
      "asn" : "AS20021",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "hostmysite.com",
         "ntirety.com",
         "safesecureweb.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "PSICHOMETRICSINTERNATIONALLLC",
      "organization" : "Ntirety, Inc.",
      "subnet" : "76.12.0.0/16"
   },
   "hostname" : [
      "hbvacationrental.com"
   ],
   "ip" : "76.12.16.39",
   "ipv6" : "false",
   "latitude" : "39.7552",
   "location" : "39.7552,-75.5312",
   "longitude" : "-75.5312",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "LNH-INC",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 1311,
   "protocol" : "unknown",
   "reverse" : [
      "hbvacationrental.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "76.12.0.0/16",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 118.27.243.103:1311 (tcp/http) - last seen on 2024-11-21 at 08:46:07 UTC

    • IP
      118.27.243.103
      Network
      118.27.240.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://118.27.243.103:1311/ 200

      ASN
      AS131934
      Organization
      ICC Corporation
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      lighttpd lighttpd 1.4.54
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c9cc947d7578763f6b81161340d373e7
      HTTP Header MD5
      fa33c07db528585c87b0a92092c749e2
      HTTP Body MD5
      f2b89e5374ba99a1f338f60894b36189
      Favicon MD5
      c002b931e14450e406e1ea733ff76047
      Favicon MMH3
      2107438913 
    • HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
ETag: "440008807"
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 1072
Connection: close
Date: Thu, 21 Nov 2024 08:39:04 GMT
Server: lighttpd/1.4.54

<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
<!-- proxyd need 'no-cache'.
     For example, at nk1080 home page, top link(i.e., index.html) is same to nvr home page.
-->
    <meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/>
    <meta http-equiv="Pragma" content="no-cache"/>
    <meta http-equiv="Expires" content="0"/>
    <title></title>
</head>
<body>
    <script type="text/javascript" src="detect.min.js"></script>
    <script type="text/javascript">
        try{
            var ua = detect.parse(navigator.userAgent);
            if(ua.device.type !== 'Desktop'){
                window.location = './svc/mviewer.html';
            }else{
                if(ua.browser.family === 'IE'){
                    window.location = './main.htm';
                }else{
                    window.location = './wespjs/index.html';
                }
            }
        }catch(err){
            window.location = './main.html';
        }
       </script>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:46:07.000Z",
   "app" : {
      "favicon" : {
         "image" : "AAABAAEAEBAQAAAAAAAoAQAAFgAAACgAAAAQAAAAIAAAAAEABAAAAAAAgAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAA/4QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABERERERAAAAEREREREAAAARAAAAEQAAABEAAAARAAAAEQAAABEAAAARAAAAEQAAABEAAAARAAAAEQAAABEAAAARAAAAEQAAABEAAAARAAAAEREREREAAAAREREREQAAAAAAAAAAAAAAAAAAAAAAD//wAA//8AAOAHAADgBwAA5+cAAOfnAADn5wAA5+cAAOfnAADn5wAA5+cAAOfnAADgBwAA4AcAAP//AAD//wAA",
         "imagemd5" : "c002b931e14450e406e1ea733ff76047",
         "imagemmh3" : 2107438913,
         "length" : 318,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "f2b89e5374ba99a1f338f60894b36189",
         "bodymmh3" : 1033080940,
         "header" : [
            {
               "value" : 440008807,
               "name" : "ETag"
            },
            {
               "name" : "Last-Modified",
               "value" : "Thu, 01 Jan 1970 00:00:00 GMT"
            }
         ],
         "headermd5" : "fa33c07db528585c87b0a92092c749e2",
         "headermmh3" : 41158328
      },
      "length" : 1306
   },
   "asn" : "AS131934",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nAccept-Ranges: bytes\r\nETag: \"440008807\"\r\nLast-Modified: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 1072\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:39:04 GMT\r\nServer: lighttpd/1.4.54\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n    <meta charset=\"utf-8\">\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<!-- proxyd need 'no-cache'.\n     For example, at nk1080 home page, top link(i.e., index.html) is same to nvr home page.\n-->\n    <meta http-equiv=\"Cache-Control\" content=\"no-cache, no-store, must-revalidate\"/>\n    <meta http-equiv=\"Pragma\" content=\"no-cache\"/>\n    <meta http-equiv=\"Expires\" content=\"0\"/>\n    <title></title>\n</head>\n<body>\n    <script type=\"text/javascript\" src=\"detect.min.js\"></script>\n    <script type=\"text/javascript\">\n        try{\n            var ua = detect.parse(navigator.userAgent);\n            if(ua.device.type !== 'Desktop'){\n                window.location = './svc/mviewer.html';\n            }else{\n                if(ua.browser.family === 'IE'){\n                    window.location = './main.htm';\n                }else{\n                    window.location = './wespjs/index.html';\n                }\n            }\n        }catch(err){\n            window.location = './main.html';\n        }\n       </script>\n</body>\n</html>\n",
   "datamd5" : "c9cc947d7578763f6b81161340d373e7",
   "datammh3" : 1926557932,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS131934",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "icc-media.co.jp",
         "nic.ad.jp"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "ICC",
      "organization" : "ICC Corporation",
      "subnet" : "118.27.240.0/20"
   },
   "ip" : "118.27.243.103",
   "ipv6" : "false",
   "latitude" : "35.6897",
   "location" : "35.6897,139.6895",
   "longitude" : "139.6895",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ICC Corporation",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 1311,
   "product" : "lighttpd",
   "productvendor" : "lighttpd",
   "productversion" : "1.4.54",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "118.27.240.0/20",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 66.241.234.80:1311 (tcp/unknown) - last seen on 2024-11-21 at 08:40:55 UTC

    • IP
      66.241.234.80
      Network
      66.241.192.0/18
      Domain(s)
      r-kilim.com
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      Reverse DNS
      r-kilim.com
      ASN
      AS20021
      Organization
      LNH-INC
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bca5bbe9fd2fdb94963c5d303418cb87 
    • \x15\x03\x01\x00\x02\x02

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:40:55.000Z",
   "app" : {
      "length" : 7
   },
   "asn" : "AS20021",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x15\\x03\\x01\\x00\\x02\\x02\n",
   "datamd5" : "bca5bbe9fd2fdb94963c5d303418cb87",
   "datammh3" : 1602334322,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "r-kilim.com"
   ],
   "geolocus" : {
      "asn" : "AS20021",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "hostmysite.com",
         "ntirety.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "HOSTMYSITE",
      "organization" : "Ntirety, Inc.",
      "subnet" : "66.241.192.0/18"
   },
   "hostname" : [
      "r-kilim.com"
   ],
   "ip" : "66.241.234.80",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "LNH-INC",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 1311,
   "protocol" : "unknown",
   "reverse" : [
      "r-kilim.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "66.241.192.0/18",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 223.197.55.84:1311 (tcp/http) - last seen on 2024-11-21 at 08:40:23 UTC

    • IP
      223.197.55.84
      Network
      223.197.54.0/23
      Domain(s)
      imsbiz.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://223.197.55.84:1311/ 400

      Reverse DNS
      223-197-55-84.static.imsbiz.com
      ASN
      AS4515
      Organization
      HKT Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      54ae69b91d04957050d982f54a92a601
      HTTP Header MD5
      50b14444800e6cbc220a6e6a9357469b
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=ISO-8859-1
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:40:23.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "50b14444800e6cbc220a6e6a9357469b",
         "headermmh3" : -1774634674
      },
      "length" : 143
   },
   "asn" : "AS4515",
   "city" : "Sai Kung",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=ISO-8859-1\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "54ae69b91d04957050d982f54a92a601",
   "datammh3" : 1739185676,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "imsbiz.com"
   ],
   "geolocus" : {
      "asn" : "AS4515",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "ampco.com.hk",
         "imsbiz.com"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "AMPCO-HK",
      "organization" : "PCCW IMSBiz route object",
      "subnet" : "223.197.55.80/29"
   },
   "host" : [
      "223-197-55-84"
   ],
   "hostname" : [
      "223-197-55-84.static.imsbiz.com"
   ],
   "ip" : "223.197.55.84",
   "ipv6" : "false",
   "latitude" : "22.3807",
   "location" : "22.3807,114.2742",
   "longitude" : "114.2742",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "HKT Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 1311,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "223-197-55-84.static.imsbiz.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "static.imsbiz.com"
   ],
   "subnet" : "223.197.54.0/23",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 18.191.96.197:1311 (tcp/http) - last seen on 2024-11-21 at 08:40:23 UTC

    • IP
      18.191.96.197
      Network
      18.188.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://18.191.96.197:1311/ 200

      HTTP Title
      Mirth Connect Administrator
      Reverse DNS
      ec2-18-191-96-197.us-east-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Mortbay Jetty 9.4.9
      HTTP Component(s)
      NextGen Mirth Connect jQuery jQuery 1.7.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      dc731b26c068226ccc6f4d93f767debc
      HTTP Header MD5
      96b45a51fc55ce67da41c77a816ded1a
      HTTP Body MD5
      7b724ebb4da17721f96e0a76b46163ef 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 08:40:23 GMT
Server: Jetty(9.4.9.v20180320)
Content-Security-Policy: frame-ancestors 'none'
X-Frame-Options: DENY
Content-Language: en-US
Expires: Thu, 21 Nov 2024 08:40:23 GMT
Content-Type: text/html;charset=iso-8859-1
Content-Length: 3676

<!doctype html>
<html>
<head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <meta http-equiv="x-ua-compatible" content="IE=edge">
        <meta http-equiv="cache-control" content="no-cache">
        <meta http-equiv="cache-control" content="no-store">

        <title>Mirth Connect Administrator</title>

        <link rel="shortcut icon" type="image/x-icon" href="images/favicon.ico" />
        <link rel="stylesheet" type="text/css" href="css/bootstrap.css" />
        <link rel="stylesheet" type="text/css" href="css/main.css" />

        <script type="text/javascript">
                /* Break out of frame if inside a frame. */
                if (window != window.top) {
                        window.top.location = window.location;
                }
        </script>

        <script type="text/javascript" src="js/jquery-1.7.1.min.js"></script>
</head>

<body id="body" style="display:none;" class="subpage">
        <div id="centerWrapper">
                <div class="row">
                        <div style="padding: 10px; text-align: center;">
                                <img id="mirthLogo" src="images/mirthconnectlogowide.png"/>
                        </div>

                        <div id="mcadministrator" class="span9">
                                <h1 style="text-align: center;">Mirth Connect Administrator</h1>

                                <div class="help-block">
                                        <strong>Overview of Web Start:</strong><br /> Java Web Start is a framework developed by Sun Microsystems
                                        that enables launching Java applications directly from a browser.
                                        Unlike Java applets, Web Start applications do not run inside the
                                        browser.
                                </div>
                                <div class="help-block">
                                        <br/>Click the big green button below to launch the Mirth Connect
                                        Administrator using Java Web Start.
                                </div>

                                <div style="text-align: center; margin-top: 10px;">
                                        <a class="btn btn-large btn-themebutton" type="submit" href="javascript:launchAdministrator()">Launch Mirth Connect Administrator</a>
                                </div>
                        </div>
                </div>
        </div>

        <footer class="smallSubPage" style="width:100%;">
                <table>
                        <tr>
                                <td style="text-align: center;">&copy; 2017 Mirth Corporation | Mirth Connect</td>
                        </tr>
                </table>
        </footer>

        <script type="text/javascript">
                $(document).ready(function() {
                        $.ajax({
                            type: 'HEAD',
                            url: 'webadmin/Index.action',
                                success: function() {
                                        window.location.replace("webadmin/Index.action");
                                },
                                error: function() {
                                        $("#body").css("display", "inline");
                                }
                        });
                });
        </script>

    <script type="text/javascript">
                function launchAdministrator(){
                window.location.href = 'webstart.jnlp?time=' + new Date().getTime();
                }
        </script>
</body>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:40:23.000Z",
   "app" : {
      "favicon" : {
         "url" : "/images/favicon.ico"
      },
      "http" : {
         "bodymd5" : "7b724ebb4da17721f96e0a76b46163ef",
         "bodymmh3" : 494211827,
         "component" : [
            {
               "product" : "jQuery",
               "productvendor" : "jQuery",
               "productversion" : "1.7.1"
            },
            {
               "productvendor" : "NextGen",
               "product" : "Mirth Connect"
            }
         ],
         "headermd5" : "96b45a51fc55ce67da41c77a816ded1a",
         "headermmh3" : -23890979,
         "title" : "Mirth Connect Administrator"
      },
      "length" : 3986
   },
   "asn" : "AS16509",
   "city" : "Columbus",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:40:23 GMT\r\nServer: Jetty(9.4.9.v20180320)\r\nContent-Security-Policy: frame-ancestors 'none'\r\nX-Frame-Options: DENY\r\nContent-Language: en-US\r\nExpires: Thu, 21 Nov 2024 08:40:23 GMT\r\nContent-Type: text/html;charset=iso-8859-1\r\nContent-Length: 3676\r\n\r\n<!doctype html>\n<html>\n<head>\n        <meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\">\n        <meta http-equiv=\"x-ua-compatible\" content=\"IE=edge\">\n        <meta http-equiv=\"cache-control\" content=\"no-cache\">\n        <meta http-equiv=\"cache-control\" content=\"no-store\">\n\n        <title>Mirth Connect Administrator</title>\n\n        <link rel=\"shortcut icon\" type=\"image/x-icon\" href=\"images/favicon.ico\" />\n        <link rel=\"stylesheet\" type=\"text/css\" href=\"css/bootstrap.css\" />\n        <link rel=\"stylesheet\" type=\"text/css\" href=\"css/main.css\" />\n\n        <script type=\"text/javascript\">\n                /* Break out of frame if inside a frame. */\n                if (window != window.top) {\n                        window.top.location = window.location;\n                }\n        </script>\n\n        <script type=\"text/javascript\" src=\"js/jquery-1.7.1.min.js\"></script>\n</head>\n\n<body id=\"body\" style=\"display:none;\" class=\"subpage\">\n        <div id=\"centerWrapper\">\n                <div class=\"row\">\n                        <div style=\"padding: 10px; text-align: center;\">\n                                <img id=\"mirthLogo\" src=\"images/mirthconnectlogowide.png\"/>\n                        </div>\n\n                        <div id=\"mcadministrator\" class=\"span9\">\n                                <h1 style=\"text-align: center;\">Mirth Connect Administrator</h1>\n\n                                <div class=\"help-block\">\n                                        <strong>Overview of Web Start:</strong><br /> Java Web Start is a framework developed by Sun Microsystems\n                                        that enables launching Java applications directly from a browser.\n                                        Unlike Java applets, Web Start applications do not run inside the\n                                        browser.\n                                </div>\n                                <div class=\"help-block\">\n                                        <br/>Click the big green button below to launch the Mirth Connect\n                                        Administrator using Java Web Start.\n                                </div>\n\n                                <div style=\"text-align: center; margin-top: 10px;\">\n                                        <a class=\"btn btn-large btn-themebutton\" type=\"submit\" href=\"javascript:launchAdministrator()\">Launch Mirth Connect Administrator</a>\n                                </div>\n                        </div>\n                </div>\n        </div>\n\n        <footer class=\"smallSubPage\" style=\"width:100%;\">\n                <table>\n                        <tr>\n                                <td style=\"text-align: center;\">&copy; 2017 Mirth Corporation | Mirth Connect</td>\n                        </tr>\n                </table>\n        </footer>\n\n        <script type=\"text/javascript\">\n                $(document).ready(function() {\n                        $.ajax({\n                            type: 'HEAD',\n                            url: 'webadmin/Index.action',\n                                success: function() {\n                                        window.location.replace(\"webadmin/Index.action\");\n                                },\n                                error: function() {\n                                        $(\"#body\").css(\"display\", \"inline\");\n                                }\n                        });\n                });\n        </script>\n\n    <script type=\"text/javascript\">\n                function launchAdministrator(){\n                window.location.href = 'webstart.jnlp?time=' + new Date().getTime();\n                }\n        </script>\n</body>\n",
   "datamd5" : "dc731b26c068226ccc6f4d93f767debc",
   "datammh3" : 1209870071,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AT-88-Z",
      "organization" : "Amazon Technologies Inc.",
      "subnet" : "18.188.0.0/14"
   },
   "host" : [
      "ec2-18-191-96-197"
   ],
   "hostname" : [
      "ec2-18-191-96-197.us-east-2.compute.amazonaws.com"
   ],
   "ip" : "18.191.96.197",
   "ipv6" : "false",
   "latitude" : "39.9625",
   "location" : "39.9625,-83.0061",
   "longitude" : "-83.0061",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 1311,
   "product" : "Jetty",
   "productvendor" : "Mortbay",
   "productversion" : "9.4.9",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-18-191-96-197.us-east-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "us-east-2.compute.amazonaws.com"
   ],
   "subnet" : "18.188.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 192.41.237.92:1311 (tcp/http) - last seen on 2024-11-21 at 08:39:56 UTC

    • IP
      192.41.237.92
      Alternative IP(s)
      2001:48a8:68f7:8001:192:41:237:92
      Network
      192.41.236.0/23
      Domain(s)
      aglt2.org
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://192.41.237.92:1311/ 400

      Reverse DNS
      c-210-37-2.aglt2.org
      ASN
      AS229
      Organization
      MERIT-AS-6
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:39:56.000Z",
   "alternativeip" : [
      "2001:48a8:68f7:8001:192:41:237:92"
   ],
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS229",
   "city" : "East Lansing",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "aglt2.org"
   ],
   "geolocus" : {
      "asn" : "AS229",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "aglt2.org",
         "merit.edu",
         "umich.edu"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "MICH-6865",
      "organization" : "University of Michigan",
      "subnet" : "192.41.236.0/23"
   },
   "host" : [
      "c-210-37-2"
   ],
   "hostname" : [
      "c-210-37-2.aglt2.org"
   ],
   "ip" : "192.41.237.92",
   "ipv6" : "false",
   "latitude" : "42.7307",
   "location" : "42.7307,-84.4853",
   "longitude" : "-84.4853",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "MERIT-AS-6",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 1311,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "c-210-37-2.aglt2.org"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "192.41.236.0/23",
   "tld" : [
      "org"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}