Cyber Defense Search Engine

IP
176.44.191.214

Network
176.44.0.0/15

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

ASN
AS25019

Organization
Saudi Telecom Company JSC

Protocol
winrm

Source
datascan
NOTE
This tab is a merge from current page results.

CPE(s)

IP(s)
176.44.191.214

Port(s)
1799

Protocol(s)
winrm

Tag(s)
Operating System
Microsoft Windows

Product
Microsoft HTTPAPI 2.0

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
237f6d104e9a28cabef732c942b46274

HTTP Header MD5
f635c1b0f4421513da954467eb5f8a3f

HTTP Body MD5
6f4eef9a510d3a0bba642140b4658278

HTTP/1.1 401 Access Denied
Allow: GET, POST
Content-Length: 2232
Content-Type: text/html
Accept-Ranges: bytes
Server: Microsoft-HTTPAPI/2.0
Set-Cookie: GWSID=21A9B79C98034E319BEBDCFFFB460BEA; expires=Fri, 21 Nov 2025 00:00:00 UTC; path=/;HttpOnly
Set-Cookie: fmxs_userid=;Path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT;HttpOnly
Set-Cookie: fmxs_accesskey=;Path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT;HttpOnly
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Content-Security-Policy: connect-src 'self' ws: wss: http: https:; child-src 'self'; style-src 'self' 'sha256-47XaZds7UlsDQ+atdqJAp+3rZKSWalqaCa4r84a3K50='; default-src 'none'; script-src 'self' blob: 'unsafe-inline'; form-action 'self'; font-src 'self' data:; media-src 'self' data:; object-src 'none'; img-src 'self' data: blob:; frame-ancestors 'self'; frame-src 'self' https://www.google.com/ https://*.duosecurity.com/; worker-src 'self' data: blob:
Access-Control-Allow-Credentials: true
Referrer-Policy: same-origin
Access-Control-Allow-Methods: GET, POST
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10080;
Feature-Policy: geolocation 'none'
WWW-Authenticate: Basic realm="Secure Area"
Date: Thu, 21 Nov 2024 08:19:56 GMT
Connection: close

<!DOCTYPE HTML PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
    <meta name="thinfinity-header" data-name="Content-Security-Policy" data-value="frame-ancestors 'self'; default-src 'none'; frame-src 'self';  script-src 'self' blob: ;form-action 'self'; style-src 'self' 'sha256-47XaZds7UlsDQ+atdqJAp+3rZKSWalqaCa4r84a3K50=' ;base-uri 'self'; img-src 'self' data: blob:; font-src 'self' data:; object-src 'none'; connect-src 'self'; media-src 'self' data:;" />
    <meta name="thinfinity-header" data-name="X-Content-Type-Options" data-value="nosniff" />
    <meta name="thinfinity-header" data-name="X-XSS-Protection" data-value="1; mode=block" />
    <meta name="thinfinity-header" data-name="Referrer-Policy" data-value="same-origin" />
    <meta name="thinfinity-header" data-name="Feature-Policy" data-value="geolocation 'none'" />
    <title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
    <style type="text/css">
        body{margin:0;font-size:.7em;font-family:Verdana,Arial,Helvetica,sans-serif;background:#eee}fieldset{padding:0 15px 10px 15px}.divbuttons{margin-top:-25px!important}
        h1{font-size:1.4em;margin:0;color:#fff}h2{display:none;font-size:1.7em;margin:0;color:#c00}h3{font-size:1.2em;margin:10px 0 0 0;color:#000}
        #header{display:none;width:96%;margin:0;padding:6px 2% 6px 2%;font-family:"trebuchet MS",Verdana,sans-serif;color:#fff;background-color:#555}
        #content{margin:0;position:relative}.content-container{background:#fff;width:96%;margin-top:8px;padding:10px;position:relative}
    </style>
</head>
<body>
    <div id="header"><h1>Server Error</h1></div>
    <div id="content">
        <div class="content-container">
            <fieldset>
                <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
                <span class="error_message">You do not have permission to view this directory or page using the credentials that you supplied.</span>
            </fieldset>
        </div>
    </div>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:31:31.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "w3.org",
            "google.com"
         ],
         "hostname" : [
            "www.google.com",
            "www.w3.org"
         ],
         "url" : [
            "http://www.w3.org/1999/xhtml",
            "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd",
            "https://www.google.com/"
         ]
      },
      "http" : {
         "bodymd5" : "6f4eef9a510d3a0bba642140b4658278",
         "bodymmh3" : 1431924284,
         "headermd5" : "f635c1b0f4421513da954467eb5f8a3f",
         "headermmh3" : 1563880037,
         "realm" : "Secure Area",
         "title" : "401 - Unauthorized: Access is denied due to invalid credentials."
      },
      "length" : 3744
   },
   "asn" : "AS25019",
   "city" : "Riyadh",
   "country" : "SA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Access Denied\r\nAllow: GET, POST\r\nContent-Length: 2232\r\nContent-Type: text/html\r\nAccept-Ranges: bytes\r\nServer: Microsoft-HTTPAPI/2.0\r\nSet-Cookie: GWSID=21A9B79C98034E319BEBDCFFFB460BEA; expires=Fri, 21 Nov 2025 00:00:00 UTC; path=/;HttpOnly\r\nSet-Cookie: fmxs_userid=;Path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT;HttpOnly\r\nSet-Cookie: fmxs_accesskey=;Path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT;HttpOnly\r\nX-Content-Type-Options: nosniff\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control\r\nP3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'\r\nContent-Security-Policy: connect-src 'self' ws: wss: http: https:; child-src 'self'; style-src 'self' 'sha256-47XaZds7UlsDQ+atdqJAp+3rZKSWalqaCa4r84a3K50='; default-src 'none'; script-src 'self' blob: 'unsafe-inline'; form-action 'self'; font-src 'self' data:; media-src 'self' data:; object-src 'none'; img-src 'self' data: blob:; frame-ancestors 'self'; frame-src 'self' https://www.google.com/ https://*.duosecurity.com/; worker-src 'self' data: blob:\r\nAccess-Control-Allow-Credentials: true\r\nReferrer-Policy: same-origin\r\nAccess-Control-Allow-Methods: GET, POST\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=10080;\r\nFeature-Policy: geolocation 'none'\r\nWWW-Authenticate: Basic realm=\"Secure Area\"\r\nDate: Thu, 21 Nov 2024 08:19:56 GMT\r\nConnection: close\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n    <meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />\r\n    <meta name=\"thinfinity-header\" data-name=\"Content-Security-Policy\" data-value=\"frame-ancestors 'self'; default-src 'none'; frame-src 'self';  script-src 'self' blob: ;form-action 'self'; style-src 'self' 'sha256-47XaZds7UlsDQ+atdqJAp+3rZKSWalqaCa4r84a3K50=' ;base-uri 'self'; img-src 'self' data: blob:; font-src 'self' data:; object-src 'none'; connect-src 'self'; media-src 'self' data:;\" />\r\n    <meta name=\"thinfinity-header\" data-name=\"X-Content-Type-Options\" data-value=\"nosniff\" />\r\n    <meta name=\"thinfinity-header\" data-name=\"X-XSS-Protection\" data-value=\"1; mode=block\" />\r\n    <meta name=\"thinfinity-header\" data-name=\"Referrer-Policy\" data-value=\"same-origin\" />\r\n    <meta name=\"thinfinity-header\" data-name=\"Feature-Policy\" data-value=\"geolocation 'none'\" />\r\n    <title>401 - Unauthorized: Access is denied due to invalid credentials.</title>\r\n    <style type=\"text/css\">\r\n        body{margin:0;font-size:.7em;font-family:Verdana,Arial,Helvetica,sans-serif;background:#eee}fieldset{padding:0 15px 10px 15px}.divbuttons{margin-top:-25px!important}\r\n        h1{font-size:1.4em;margin:0;color:#fff}h2{display:none;font-size:1.7em;margin:0;color:#c00}h3{font-size:1.2em;margin:10px 0 0 0;color:#000}\r\n        #header{display:none;width:96%;margin:0;padding:6px 2% 6px 2%;font-family:\"trebuchet MS\",Verdana,sans-serif;color:#fff;background-color:#555}\r\n        #content{margin:0;position:relative}.content-container{background:#fff;width:96%;margin-top:8px;padding:10px;position:relative}\r\n    </style>\r\n</head>\r\n<body>\r\n    <div id=\"header\"><h1>Server Error</h1></div>\r\n    <div id=\"content\">\r\n        <div class=\"content-container\">\r\n            <fieldset>\r\n                <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>\r\n                <span class=\"error_message\">You do not have permission to view this directory or page using the credentials that you supplied.</span>\r\n            </fieldset>\r\n        </div>\r\n    </div>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "237f6d104e9a28cabef732c942b46274",
   "datammh3" : 893386710,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS25019",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SA",
      "countryname" : "Saudi Arabia",
      "domain" : [
         "stc.com.sa"
      ],
      "isineu" : "false",
      "latitude" : "23.885942",
      "location" : "23.885942,45.079162",
      "longitude" : "45.079162",
      "netname" : "SAUDINET_DSL_POOL",
      "organization" : "SAUDINET_DSL_POOL",
      "subnet" : "176.44.0.0/16"
   },
   "ip" : "176.44.191.214",
   "ipv6" : "false",
   "latitude" : "24.6869",
   "location" : "24.6869,46.7224",
   "longitude" : "46.7224",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Saudi Telecom Company JSC",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 1799,
   "product" : "HTTPAPI",
   "productvendor" : "Microsoft",
   "productversion" : "2.0",
   "protocol" : "winrm",
   "protocolversion" : "1.1",
   "reason" : "Access Denied",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 401,
   "subnet" : "176.44.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

Returning 1 result(s) out of 1 in 0.078 second(s)

176.44.191.214:1799 (tcp/winrm) - last seen on 2024-11-21 at 08:31:31 UTC