Returning 10 result(s) out of 40 in 0.100 second(s)

  • 49.0.72.37:4899 (tcp/http) - last seen on 2024-11-21 at 08:35:05 UTC

    • IP
      49.0.72.37
      Alternative IP(s)
      58.64.57.151
      Network
      49.0.64.0/19
      Domain(s)
      myaisfibre.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://49.0.72.37:4899/ 200

      Reverse DNS
      49-0-72-0.24.fixed-public.cmbp-mser.myaisfibre.com
      ASN
      AS133481
      Organization
      AIS Fibre
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6f1d995ad1e612af69a1f1dc48de85af
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      19ce80ad916050c19153c60cf2c04363
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Thu, 21 Nov 2024 08:35:05 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5001' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:35:05.000Z",
         "alternativeip" : [
            "58.64.57.151"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "19ce80ad916050c19153c60cf2c04363",
               "bodymmh3" : -2028702394,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : 1351335458
            },
            "length" : 386
         },
         "asn" : "AS133481",
         "city" : "Bangkok",
         "country" : "TH",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:35:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5001' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6f1d995ad1e612af69a1f1dc48de85af",
         "datammh3" : -288649625,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "myaisfibre.com"
         ],
         "geolocus" : {
            "asn" : "AS45430",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "TH",
            "countryname" : "Thailand",
            "domain" : [
               "ais.co.th",
               "myaisfibre.com",
               "sbn.co.th"
            ],
            "isineu" : "false",
            "latitude" : "15.870032",
            "location" : "15.870032,100.992541",
            "longitude" : "100.992541",
            "netname" : "TH-AIS-Fibre",
            "organization" : "AIS Fibre",
            "subnet" : "49.0.72.0/24"
         },
         "host" : [
            "49-0-72-0"
         ],
         "hostname" : [
            "49-0-72-0.24.fixed-public.cmbp-mser.myaisfibre.com"
         ],
         "ip" : "49.0.72.37",
         "ipv6" : "false",
         "latitude" : "13.7618",
         "location" : "13.7618,100.5324",
         "longitude" : "100.5324",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AIS Fibre",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "49-0-72-0.24.fixed-public.cmbp-mser.myaisfibre.com"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "24.fixed-public.cmbp-mser.myaisfibre.com",
            "cmbp-mser.myaisfibre.com",
            "fixed-public.cmbp-mser.myaisfibre.com"
         ],
         "subnet" : "49.0.64.0/19",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 1.54.218.202:4899 (tcp/http) - last seen on 2024-11-21 at 07:52:55 UTC

    • IP
      1.54.218.202
      Network
      1.54.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://1.54.218.202:4899/ 200

      ASN
      AS18403
      Organization
      FPT Telecom Company
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6f1d995ad1e612af69a1f1dc48de85af
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      19ce80ad916050c19153c60cf2c04363
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Thu, 21 Nov 2024 07:52:55 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5001' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T07:52:55.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "19ce80ad916050c19153c60cf2c04363",
               "bodymmh3" : -2028702394,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : -1183564245
            },
            "length" : 386
         },
         "asn" : "AS18403",
         "city" : "Ho Chi Minh City",
         "country" : "VN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 07:52:55 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5001' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6f1d995ad1e612af69a1f1dc48de85af",
         "datammh3" : -288649625,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS18403",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "VN",
            "countryname" : "Vietnam",
            "domain" : [
               "fpt.com",
               "fpt.net",
               "fpt.vn",
               "vnnic.vn"
            ],
            "isineu" : "false",
            "latitude" : "14.058324",
            "location" : "14.058324,108.277199",
            "longitude" : "108.277199",
            "netname" : "FPTDYNAMICIP-NET",
            "organization" : "Vietnam Internet Network Information Center (VNNIC)",
            "subnet" : "1.54.208.0/20"
         },
         "ip" : "1.54.218.202",
         "ipv6" : "false",
         "latitude" : "10.8220",
         "location" : "10.8220,106.6257",
         "longitude" : "106.6257",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "FPT Telecom Company",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "1.54.0.0/15",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 42.114.221.59:4899 (tcp/http) - last seen on 2024-11-20 at 19:49:06 UTC

    • IP
      42.114.221.59
      Network
      42.112.0.0/13
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://42.114.221.59:4899/ 200

      ASN
      AS18403
      Organization
      FPT Telecom Company
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6f1d995ad1e612af69a1f1dc48de85af
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      19ce80ad916050c19153c60cf2c04363
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Wed, 20 Nov 2024 19:49:05 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5001' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T19:49:06.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "19ce80ad916050c19153c60cf2c04363",
               "bodymmh3" : -2028702394,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : -692886917
            },
            "length" : 386
         },
         "asn" : "AS18403",
         "city" : "Ho Chi Minh City",
         "country" : "VN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 20 Nov 2024 19:49:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5001' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6f1d995ad1e612af69a1f1dc48de85af",
         "datammh3" : -288649625,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS18403",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "VN",
            "countryname" : "Vietnam",
            "domain" : [
               "fpt.com",
               "fpt.net",
               "fpt.vn",
               "vnnic.vn"
            ],
            "isineu" : "false",
            "latitude" : "14.058324",
            "location" : "14.058324,108.277199",
            "longitude" : "108.277199",
            "netname" : "FPTDYNAMICIP-NET",
            "organization" : "Vietnam Internet Network Information Center (VNNIC)",
            "subnet" : "42.114.208.0/20"
         },
         "ip" : "42.114.221.59",
         "ipv6" : "false",
         "latitude" : "10.8220",
         "location" : "10.8220,106.6257",
         "longitude" : "106.6257",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "FPT Telecom Company",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-20",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "42.112.0.0/13",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 213.14.130.221:4899 (tcp/http) - last seen on 2024-11-19 at 17:34:54 UTC

    • IP
      213.14.130.221
      Network
      213.14.128.0/18
      Domain(s)
      superonline.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://213.14.130.221:4899/ 200

      Reverse DNS
      host-213-14-130-221.reverse.superonline.net
      ASN
      AS34984
      Organization
      Superonline Iletisim Hizmetleri A.S.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6f1d995ad1e612af69a1f1dc48de85af
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      19ce80ad916050c19153c60cf2c04363
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Tue, 19 Nov 2024 17:34:54 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5001' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-19T17:34:54.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "19ce80ad916050c19153c60cf2c04363",
               "bodymmh3" : -2028702394,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : 1643507200
            },
            "length" : 386
         },
         "asn" : "AS34984",
         "city" : "Istanbul",
         "country" : "TR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Nov 2024 17:34:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5001' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6f1d995ad1e612af69a1f1dc48de85af",
         "datammh3" : -288649625,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "superonline.net"
         ],
         "geolocus" : {
            "asn" : "AS34984",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "TR",
            "countryname" : "Turkey",
            "domain" : [
               "superonline.net",
               "turkcell.com.tr"
            ],
            "isineu" : "false",
            "latitude" : "38.963745",
            "location" : "38.963745,35.243322",
            "longitude" : "35.243322",
            "netname" : "SOLNET-3",
            "organization" : "Superonline-Net",
            "subnet" : "213.14.128.0/20"
         },
         "host" : [
            "host-213-14-130-221"
         ],
         "hostname" : [
            "host-213-14-130-221.reverse.superonline.net"
         ],
         "ip" : "213.14.130.221",
         "ipv6" : "false",
         "latitude" : "41.0551",
         "location" : "41.0551,28.9347",
         "longitude" : "28.9347",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Superonline Iletisim Hizmetleri A.S.",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "host-213-14-130-221.reverse.superonline.net"
         ],
         "seen_date" : "2024-11-19",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "reverse.superonline.net"
         ],
         "subnet" : "213.14.128.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 102.117.187.245:4899 (tcp/http) - last seen on 2024-11-19 at 04:25:05 UTC

    • IP
      102.117.187.245
      Network
      102.112.0.0/13
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://102.117.187.245:4899/ 200

      ASN
      AS23889
      Organization
      MauritiusTelecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3fadbc6ce89dfdbe3c0aa82a71924cbe
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      702277993cf9f6b99fdb26a0bd7b5fb2
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Tue, 19 Nov 2024 04:25:05 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e9
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':46003' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-19T04:25:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "702277993cf9f6b99fdb26a0bd7b5fb2",
               "bodymmh3" : -725494884,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : 285650990
            },
            "length" : 387
         },
         "asn" : "AS23889",
         "city" : "Beau Bassin-Rose Hill",
         "country" : "MU",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Nov 2024 04:25:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne9\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':46003' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "3fadbc6ce89dfdbe3c0aa82a71924cbe",
         "datammh3" : 140207297,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS23889",
            "continent" : "AF",
            "continentname" : "Africa",
            "country" : "MU",
            "countryname" : "Mauritius",
            "isineu" : "false",
            "latitude" : "-20.348404",
            "location" : "-20.348404,57.552152",
            "longitude" : "57.552152",
            "netname" : "MauritiusTelecom-v4",
            "organization" : "Mauritius Telecom Ltd",
            "subnet" : "102.116.0.0/14"
         },
         "ip" : "102.117.187.245",
         "ipv6" : "false",
         "latitude" : "-20.2275",
         "location" : "-20.2275,57.4787",
         "longitude" : "57.4787",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MauritiusTelecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-19",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "102.112.0.0/13",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 110.80.171.15:4899 (tcp/http) - last seen on 2024-11-18 at 21:32:56 UTC

    • IP
      110.80.171.15
      Network
      110.80.160.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://110.80.171.15:4899/ 200

      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6f1d995ad1e612af69a1f1dc48de85af
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      19ce80ad916050c19153c60cf2c04363
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Mon, 18 Nov 2024 21:32:56 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5001' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-18T21:32:56.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "19ce80ad916050c19153c60cf2c04363",
               "bodymmh3" : -2028702394,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : -1417079586
            },
            "length" : 386
         },
         "asn" : "AS4134",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Nov 2024 21:32:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5001' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6f1d995ad1e612af69a1f1dc48de85af",
         "datammh3" : -288649625,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163data.com.cn",
               "chinatelecom.cn",
               "fz.fj.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-FJ",
            "organization" : "CHINANET FUJIAN PROVINCE NETWORK",
            "subnet" : "110.80.160.0/19"
         },
         "ip" : "110.80.171.15",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-18",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "110.80.160.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 78.30.18.142:4899 (tcp/http) - last seen on 2024-11-18 at 09:47:51 UTC

    • IP
      78.30.18.142
      Network
      78.30.0.0/18
      Domain(s)
      masmovil.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://78.30.18.142:4899/ 200

      Reverse DNS
      static.masmovil.com
      ASN
      AS15704
      Organization
      Xtra Telecom S.A.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6f1d995ad1e612af69a1f1dc48de85af
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      19ce80ad916050c19153c60cf2c04363
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Mon, 18 Nov 2024 09:47:50 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5001' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-18T09:47:51.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "19ce80ad916050c19153c60cf2c04363",
               "bodymmh3" : -2028702394,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : 755967230
            },
            "length" : 386
         },
         "asn" : "AS15704",
         "city" : "M\u00e1laga",
         "country" : "ES",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Nov 2024 09:47:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5001' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6f1d995ad1e612af69a1f1dc48de85af",
         "datammh3" : -288649625,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "masmovil.com"
         ],
         "geolocus" : {
            "asn" : "AS15704",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "ES",
            "countryname" : "Spain",
            "domain" : [
               "masmovil.com"
            ],
            "isineu" : "true",
            "latitude" : "40.463667",
            "location" : "40.463667,-3.74922",
            "longitude" : "-3.74922",
            "netname" : "ES-MUNDITELECOM-20071003",
            "organization" : "XTRA TELECOM S.A.",
            "subnet" : "78.30.0.0/18"
         },
         "host" : [
            "static"
         ],
         "hostname" : [
            "static.masmovil.com"
         ],
         "ip" : "78.30.18.142",
         "ipv6" : "false",
         "latitude" : "36.7125",
         "location" : "36.7125,-4.4070",
         "longitude" : "-4.4070",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Xtra Telecom S.A.",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "static.masmovil.com"
         ],
         "seen_date" : "2024-11-18",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "78.30.0.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 161.81.46.54:4899 (tcp/http) - last seen on 2024-11-16 at 23:36:22 UTC

    • IP
      161.81.46.54
      Network
      161.81.0.0/17
      Domain(s)
      chinamobile.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://161.81.46.54:4899/ 200

      Reverse DNS
      161.81.46.54.hk.chinamobile.com
      ASN
      AS137872
      Organization
      China Mobile Hong Kong Company Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6f1d995ad1e612af69a1f1dc48de85af
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      19ce80ad916050c19153c60cf2c04363
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 16 Nov 2024 23:36:22 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5001' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-16T23:36:22.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "19ce80ad916050c19153c60cf2c04363",
               "bodymmh3" : -2028702394,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : 1088504458
            },
            "length" : 386
         },
         "asn" : "AS137872",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 16 Nov 2024 23:36:22 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5001' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6f1d995ad1e612af69a1f1dc48de85af",
         "datammh3" : -288649625,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "chinamobile.com"
         ],
         "geolocus" : {
            "asn" : "AS137872",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "chinamobile.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "PEOPLESPHONE",
            "organization" : "China Mobile Hong Kong Company Limited",
            "subnet" : "161.81.0.0/17"
         },
         "host" : [
            161
         ],
         "hostname" : [
            "161.81.46.54.hk.chinamobile.com"
         ],
         "ip" : "161.81.46.54",
         "ipv6" : "false",
         "latitude" : "22.2908",
         "location" : "22.2908,114.1501",
         "longitude" : "114.1501",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Mobile Hong Kong Company Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "161.81.46.54.hk.chinamobile.com"
         ],
         "seen_date" : "2024-11-16",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "54.hk.chinamobile.com",
            "81.46.54.hk.chinamobile.com",
            "46.54.hk.chinamobile.com",
            "hk.chinamobile.com"
         ],
         "subnet" : "161.81.0.0/17",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 117.5.41.224:4899 (tcp/http) - last seen on 2024-11-16 at 06:51:23 UTC

    • IP
      117.5.41.224
      Network
      117.4.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://117.5.41.224:4899/ 200

      Reverse DNS
      localhost
      ASN
      AS7552
      Organization
      Viettel Group
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6f1d995ad1e612af69a1f1dc48de85af
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      19ce80ad916050c19153c60cf2c04363
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 16 Nov 2024 06:51:23 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5001' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-16T06:51:23.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "19ce80ad916050c19153c60cf2c04363",
               "bodymmh3" : -2028702394,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : -1116664255
            },
            "length" : 386
         },
         "asn" : "AS7552",
         "city" : "Hanoi",
         "country" : "VN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 16 Nov 2024 06:51:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5001' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6f1d995ad1e612af69a1f1dc48de85af",
         "datammh3" : -288649625,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS7552",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "VN",
            "countryname" : "Vietnam",
            "domain" : [
               "viettel.com.vn",
               "vnnic.vn"
            ],
            "isineu" : "false",
            "latitude" : "14.058324",
            "location" : "14.058324,108.277199",
            "longitude" : "108.277199",
            "netname" : "VIETTEL-VN",
            "organization" : "VIETTEL-VN",
            "subnet" : "117.5.0.0/16"
         },
         "hostname" : [
            "localhost"
         ],
         "ip" : "117.5.41.224",
         "ipv6" : "false",
         "latitude" : "21.0292",
         "location" : "21.0292,105.8526",
         "longitude" : "105.8526",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Viettel Group",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "localhost"
         ],
         "seen_date" : "2024-11-16",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "117.4.0.0/15",
         "tld" : [
            "localhost"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 162.213.65.29:4899 (tcp/http) - last seen on 2024-11-15 at 05:10:50 UTC

    • IP
      162.213.65.29
      Network
      162.213.64.0/22
      Domain(s)
      somvera.cat
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://162.213.65.29:4899/ 200

      Reverse DNS
      29.65.234.162-ip.somvera.cat
      ASN
      AS208909
      Organization
      Gurbtec Iguana Telecom SL
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6f1d995ad1e612af69a1f1dc48de85af
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      19ce80ad916050c19153c60cf2c04363
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Fri, 15 Nov 2024 05:10:50 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5001' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-15T05:10:50.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "19ce80ad916050c19153c60cf2c04363",
               "bodymmh3" : -2028702394,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : 1120818637
            },
            "length" : 386
         },
         "asn" : "AS208909",
         "city" : "Matar\u00f3",
         "country" : "ES",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 15 Nov 2024 05:10:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5001' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6f1d995ad1e612af69a1f1dc48de85af",
         "datammh3" : -288649625,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "somvera.cat"
         ],
         "host" : [
            29
         ],
         "hostname" : [
            "29.65.234.162-ip.somvera.cat"
         ],
         "ip" : "162.213.65.29",
         "ipv6" : "false",
         "latitude" : "41.5453",
         "location" : "41.5453,2.4414",
         "longitude" : "2.4414",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Gurbtec Iguana Telecom SL",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "29.65.234.162-ip.somvera.cat"
         ],
         "seen_date" : "2024-11-15",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "65.234.162-ip.somvera.cat",
            "162-ip.somvera.cat",
            "234.162-ip.somvera.cat"
         ],
         "subnet" : "162.213.64.0/22",
         "tld" : [
            "cat"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }