ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 6,592,823 in 0.638 second(s)

  • 198.177.120.82:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:41 UTC

    • IP
      198.177.120.82
      Network
      198.177.120.0/21
      Domain(s)
      numiindia.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      numiindia.com
      ASN
      AS22612
      Organization
      NAMECHEAP-NET
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:41.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS22612",
   "city" : "Amsterdam",
   "country" : "NL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "numiindia.com"
   ],
   "geolocus" : {
      "asn" : "AS22612",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "namecheap.com",
         "namecheaphosting.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NAMEC-4",
      "organization" : "Namecheap, Inc.",
      "subnet" : "198.177.120.0/24"
   },
   "hostname" : [
      "numiindia.com"
   ],
   "ip" : "198.177.120.82",
   "ipv6" : "false",
   "latitude" : "52.3759",
   "location" : "52.3759,4.8975",
   "longitude" : "4.8975",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "NAMECHEAP-NET",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "numiindia.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "198.177.120.0/21",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 94.152.13.8:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:40 UTC

    • IP
      94.152.13.8
      Network
      94.152.0.0/16
      Domain(s)
      e-kei.pl
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      host8.e-kei.pl
      ASN
      AS29522
      Organization
      Cyber_Folks S.A.
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c181c185094a2ae67f2f6b9db6dee5c8 
    • * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5 AUTH=DIGEST-MD5] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:40.000Z",
   "app" : {
      "length" : 153
   },
   "asn" : "AS29522",
   "country" : "PL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5 AUTH=DIGEST-MD5] Dovecot ready.\r\n",
   "datamd5" : "c181c185094a2ae67f2f6b9db6dee5c8",
   "datammh3" : 1889601108,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "e-kei.pl"
   ],
   "geolocus" : {
      "asn" : "AS29522",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "PL",
      "countryname" : "Poland",
      "domain" : [
         "kei.pl",
         "tld.pl"
      ],
      "isineu" : "true",
      "latitude" : "51.919438",
      "location" : "51.919438,19.145136",
      "longitude" : "19.145136",
      "netname" : "KEI",
      "organization" : "Hosting Servers",
      "subnet" : "94.152.0.0/16"
   },
   "host" : [
      "host8"
   ],
   "hostname" : [
      "host8.e-kei.pl"
   ],
   "ip" : "94.152.13.8",
   "ipv6" : "false",
   "latitude" : "52.2394",
   "location" : "52.2394,21.0362",
   "longitude" : "21.0362",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cyber_Folks S.A.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "host8.e-kei.pl"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "94.152.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "pl"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 142.11.216.193:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:39 UTC

    • IP
      142.11.216.193
      Network
      142.11.192.0/18
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      client-142-11-216-193.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:39.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS54290",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "hostwindsdns.com"
   ],
   "geolocus" : {
      "asn" : "AS54290",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "hostwinds.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "HOSTWINDS-18-1",
      "organization" : "Hostwinds LLC.",
      "subnet" : "142.11.192.0/18"
   },
   "host" : [
      "client-142-11-216-193"
   ],
   "hostname" : [
      "client-142-11-216-193.hostwindsdns.com"
   ],
   "ip" : "142.11.216.193",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "HOSTWINDS",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "client-142-11-216-193.hostwindsdns.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "142.11.192.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 192.185.170.116:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:38 UTC

    • IP
      192.185.170.116
      Network
      192.185.160.0/20
      Domain(s)
      unifiedlayer.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      192-185-170-116.unifiedlayer.com
      ASN
      AS19871
      Organization
      NETWORK-SOLUTIONS-HOSTING
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:38.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS19871",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "unifiedlayer.com"
   ],
   "geolocus" : {
      "asn" : "AS19871",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "endurance.com",
         "hostgator.com",
         "unifiedlayer.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "HGBLOCK-10",
      "organization" : "HostGator.com LLC",
      "subnet" : "192.185.160.0/20"
   },
   "host" : [
      "192-185-170-116"
   ],
   "hostname" : [
      "192-185-170-116.unifiedlayer.com"
   ],
   "ip" : "192.185.170.116",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "NETWORK-SOLUTIONS-HOSTING",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "192-185-170-116.unifiedlayer.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "192.185.160.0/20",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 41.77.116.69:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:38 UTC

    • IP
      41.77.116.69
      Network
      41.77.112.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      ASN
      AS36666
      Organization
      GTCOMM
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:38.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS36666",
   "city" : "Marrakesh",
   "country" : "MA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS36666",
      "continent" : "AF",
      "continentname" : "Africa",
      "country" : "MA",
      "countryname" : "Morocco",
      "domain" : [
         "genious.net"
      ],
      "isineu" : "false",
      "latitude" : "31.791702",
      "location" : "31.791702,-7.09262",
      "longitude" : "-7.09262",
      "netname" : "GeniousCloudManagement",
      "organization" : "Cloud Management Network",
      "subnet" : "41.77.112.0/21"
   },
   "ip" : "41.77.116.69",
   "ipv6" : "false",
   "latitude" : "31.6298",
   "location" : "31.6298,-8.0101",
   "longitude" : "-8.0101",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "GTCOMM",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "41.77.112.0/21",
   "tls" : "false",
   "transport" : "tcp"
}

  • 51.91.207.113:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:38 UTC

    • IP
      51.91.207.113
      Alternative IP(s)
      2001:41d0:69:e700:0:0:335b:cf71
      Network
      51.91.0.0/16
      Domain(s)
      waterthrone.fr
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      Reverse DNS
      mail.waterthrone.fr
      ASN
      AS16276
      Organization
      OVH SAS
      Protocol
      imap
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft Exchange Server
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      01882e47e35cbccc9aafa778197d6feb 
    • * OK The Microsoft Exchange IMAP4 service is ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:38.000Z",
   "alternativeip" : [
      "2001:41d0:69:e700:0:0:335b:cf71"
   ],
   "app" : {
      "length" : 53
   },
   "asn" : "AS16276",
   "country" : "FR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK The Microsoft Exchange IMAP4 service is ready.\r\n",
   "datamd5" : "01882e47e35cbccc9aafa778197d6feb",
   "datammh3" : 195069740,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "waterthrone.fr"
   ],
   "host" : [
      "mail"
   ],
   "hostname" : [
      "mail.waterthrone.fr"
   ],
   "ip" : "51.91.207.113",
   "ipv6" : "false",
   "latitude" : "48.8582",
   "location" : "48.8582,2.3387",
   "longitude" : "2.3387",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "OVH SAS",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 143,
   "product" : "Exchange Server",
   "productvendor" : "Microsoft",
   "protocol" : "imap",
   "reverse" : [
      "mail.waterthrone.fr"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "51.91.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "fr"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 180.149.229.9:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:38 UTC

    • IP
      180.149.229.9
      Network
      180.149.228.0/22
      Domain(s)
      zenhosting.com.au
      Device

      <enterprise field>: device.class

      Reverse DNS
      titan.zenhosting.com.au
      ASN
      AS136557
      Organization
      Host Universal Pty Ltd
      Protocol
      imap
      Source
      datascan
    • Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:38.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS136557",
   "city" : "Sydney",
   "country" : "AU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "zenhosting.com.au"
   ],
   "geolocus" : {
      "asn" : "AS136557",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "domain" : [
         "hostroyale.com",
         "ransomit.com.au"
      ],
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "Ransom_IT_Infrastructure",
      "organization" : "HostRoyale Technologies Pvt Ltd",
      "subnet" : "180.149.228.0/23"
   },
   "host" : [
      "titan"
   ],
   "hostname" : [
      "titan.zenhosting.com.au"
   ],
   "ip" : "180.149.229.9",
   "ipv6" : "false",
   "latitude" : "-33.8715",
   "location" : "-33.8715,151.2006",
   "longitude" : "151.2006",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Host Universal Pty Ltd",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "titan.zenhosting.com.au"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "180.149.228.0/22",
   "tld" : [
      "com.au"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 50.87.7.126:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:37 UTC

    • IP
      50.87.7.126
      Network
      50.87.0.0/16
      Domain(s)
      unifiedlayer.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      50-87-7-126.unifiedlayer.com
      ASN
      AS46606
      Organization
      UNIFIEDLAYER-AS-1
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:37.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS46606",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "unifiedlayer.com"
   ],
   "geolocus" : {
      "asn" : "AS46606",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "bluehost.com",
         "endurance.com",
         "unifiedlayer.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "UNIFIEDLAYER-NETWORK-9",
      "organization" : "Unified Layer",
      "subnet" : "50.87.0.0/16"
   },
   "host" : [
      "50-87-7-126"
   ],
   "hostname" : [
      "50-87-7-126.unifiedlayer.com"
   ],
   "ip" : "50.87.7.126",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "UNIFIEDLAYER-AS-1",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "50-87-7-126.unifiedlayer.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "50.87.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 108.167.142.15:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:37 UTC

    • IP
      108.167.142.15
      Network
      108.167.140.0/22
      Domain(s)
      unifiedlayer.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      108-167-142-15.unifiedlayer.com
      ASN
      AS46606
      Organization
      UNIFIEDLAYER-AS-1
      Protocol
      imap
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Dovecot Dovecot
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4e6d17ac64a645cec76946dc98a4efd 
    • * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:37.000Z",
   "app" : {
      "length" : 133
   },
   "asn" : "AS46606",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n",
   "datamd5" : "d4e6d17ac64a645cec76946dc98a4efd",
   "datammh3" : -1946364885,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "unifiedlayer.com"
   ],
   "geolocus" : {
      "asn" : "AS46606",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "endurance.com",
         "hostgator.com",
         "unifiedlayer.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "HGBLOCK-4",
      "organization" : "HostGator.com LLC",
      "subnet" : "108.167.140.0/22"
   },
   "host" : [
      "108-167-142-15"
   ],
   "hostname" : [
      "108-167-142-15.unifiedlayer.com"
   ],
   "ip" : "108.167.142.15",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "UNIFIEDLAYER-AS-1",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 143,
   "product" : "Dovecot",
   "productvendor" : "Dovecot",
   "protocol" : "imap",
   "reverse" : [
      "108-167-142-15.unifiedlayer.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "108.167.140.0/22",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

  • 143.95.251.73:143 (tcp/imap) - last seen on 2024-11-21 at 08:59:37 UTC

    • IP
      143.95.251.73
      Network
      143.95.224.0/19
      Domain(s)
      ip-143-95-251-73.iplocal
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      Reverse DNS
      ip-143-95-251-73.iplocal
      ASN
      AS46606
      Organization
      UNIFIEDLAYER-AS-1
      Protocol
      imap
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ef8a5ad91fa3c6e608bb492b66efad4 
    • * OK IMAP4rev1 SmarterMail

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:59:37.000Z",
   "app" : {
      "length" : 28
   },
   "asn" : "AS46606",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "* OK IMAP4rev1 SmarterMail\r\n",
   "datamd5" : "9ef8a5ad91fa3c6e608bb492b66efad4",
   "datammh3" : -1181153926,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ip-143-95-251-73.iplocal"
   ],
   "geolocus" : {
      "asn" : "AS46606",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "endurance.com",
         "ip-143-95-224-1.iplocal"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "ATHENIX",
      "organization" : "Newfold Digital, Inc.",
      "subnet" : "143.95.224.0/19"
   },
   "hostname" : [
      "ip-143-95-251-73.iplocal"
   ],
   "ip" : "143.95.251.73",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "UNIFIEDLAYER-AS-1",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 143,
   "protocol" : "imap",
   "reverse" : [
      "ip-143-95-251-73.iplocal"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "143.95.224.0/19",
   "tld" : [
      "iplocal"
   ],
   "tls" : "false",
   "transport" : "tcp"
}