Cyber Defense Search Engine

IP
81.227.134.128

Network
81.224.0.0/14

Domain(s)
telia.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://81.227.134.128:49153/ 404

Reverse DNS
81-227-134-128-no2668.digitaltv.telia.com

ASN
AS3301

Organization
Telia Company AB

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
2e19f1baedf0e5f8e9ada79cf26a3fc0

HTTP Header MD5
2240f6f61bc6cbf8d11edf2f0afa21d4

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 404 Not Found
Connection: close
Date: Thu, 21 Nov 2024 08:38:19 GMT

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:38:19.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "2240f6f61bc6cbf8d11edf2f0afa21d4",
         "headermmh3" : -1625784085
      },
      "length" : 82
   },
   "asn" : "AS3301",
   "city" : "Kinna",
   "country" : "SE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:38:19 GMT\r\n\r\n",
   "datamd5" : "2e19f1baedf0e5f8e9ada79cf26a3fc0",
   "datammh3" : 1273889098,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "telia.com"
   ],
   "geolocus" : {
      "asn" : "AS3301",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "SE",
      "countryname" : "Sweden",
      "domain" : [
         "skanova.net",
         "telia.com"
      ],
      "isineu" : "true",
      "latitude" : "60.128161",
      "location" : "60.128161,18.643501",
      "longitude" : "18.643501",
      "netname" : "TELIANET",
      "organization" : "TELIANET-BLK",
      "subnet" : "81.224.0.0/13"
   },
   "host" : [
      "81-227-134-128-no2668"
   ],
   "hostname" : [
      "81-227-134-128-no2668.digitaltv.telia.com"
   ],
   "ip" : "81.227.134.128",
   "ipv6" : "false",
   "latitude" : "57.5067",
   "location" : "57.5067,12.7021",
   "longitude" : "12.7021",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Telia Company AB",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 49153,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "reverse" : [
      "81-227-134-128-no2668.digitaltv.telia.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 404,
   "subdomains" : [
      "digitaltv.telia.com"
   ],
   "subnet" : "81.224.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
116.122.0.150

Network
116.122.0.0/19

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

ASN
AS9318

Organization
SK Broadband Co Ltd

Protocol
unknown

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8f7a1e29ed0a8a9d918b5d1f6399883f

HTTP/1.1 -101 \x0d
SERVER: Linux/3.18.20, UPnP/1.0, Portable SDK for UPnP devices/1.6.20\x0d
CONNECTION: close\x0d
CONTENT-LENGTH: 46\x0d
CONTENT-TYPE: text/html\x0d
\x0d
<html><body><h1>-101 (null)</h1></body></html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:37:54.000Z",
   "app" : {
      "length" : 199
   },
   "asn" : "AS9318",
   "city" : "Namdong-gu",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 -101 \\x0d\nSERVER: Linux/3.18.20, UPnP/1.0, Portable SDK for UPnP devices/1.6.20\\x0d\nCONNECTION: close\\x0d\nCONTENT-LENGTH: 46\\x0d\nCONTENT-TYPE: text/html\\x0d\n\\x0d\n<html><body><h1>-101 (null)</h1></body></html>",
   "datamd5" : "8f7a1e29ed0a8a9d918b5d1f6399883f",
   "datammh3" : -1135104368,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS9318",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "nic.or.kr",
         "skbroadband.com"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "broadNnet",
      "organization" : "SK Broadband Co Ltd",
      "subnet" : "116.122.0.0/19"
   },
   "ip" : "116.122.0.150",
   "ipv6" : "false",
   "latitude" : "37.4585",
   "location" : "37.4585,126.7015",
   "longitude" : "126.7015",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "SK Broadband Co Ltd",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 49153,
   "protocol" : "unknown",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "116.122.0.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
211.83.1.187

Network
211.80.0.0/13

Device

<enterprise field>: device.class

URL

http://211.83.1.187:49153/ 200

ASN
AS4538

Organization
China Education and Research Network Center

Protocol
http

Source
datascan
Product
Apache HTTP Server

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
9249e8f38e055cbef3146026915f50aa

HTTP Header MD5
97eb73c41d2d1f332d0a4ddd4c85c3de

HTTP Body MD5
68fad35a5bfd39887d7d640764b633df

HTTP/1.1 200 ok
Server: Apache
Content-Length:  222
Cache-Control: no-cache
Connection: close

<script>top.self.location.href='http://211.83.41.225/eportal/index.jsp?wlanuserip=<srcip>&wlanacname=NAS&ssid=Ruijie&nasip=10.100.100.114&mac=000000000000&t=wireless-v2-plain&url=http://<ip>:49153/'</script>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:37:53.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "10.100.100.114",
            "211.83.41.225"
         ],
         "url" : [
            "http://211.83.41.225/eportal/index.jsp?wlanuserip="
         ]
      },
      "http" : {
         "bodymd5" : "68fad35a5bfd39887d7d640764b633df",
         "bodymmh3" : 759060796,
         "headermd5" : "97eb73c41d2d1f332d0a4ddd4c85c3de",
         "headermmh3" : -1169498968
      },
      "length" : 312
   },
   "asn" : "AS4538",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 ok\r\nServer: Apache\r\nContent-Length:  222\r\nCache-Control: no-cache\r\nConnection: close\r\n\r\n<script>top.self.location.href='http://211.83.41.225/eportal/index.jsp?wlanuserip=<srcip>&wlanacname=NAS&ssid=Ruijie&nasip=10.100.100.114&mac=000000000000&t=wireless-v2-plain&url=http://<ip>:49153/'</script>\r\n\r\n",
   "datamd5" : "9249e8f38e055cbef3146026915f50aa",
   "datammh3" : -1367839970,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4538",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "211.in-addr.arpa",
         "apnic.net",
         "cernet.edu.cn",
         "scut.edu.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CERNET",
      "organization" : "China Education and Research Network",
      "subnet" : "211.80.0.0/13"
   },
   "ip" : "211.83.1.187",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Education and Research Network Center",
   "port" : 49153,
   "product" : "HTTP Server",
   "productvendor" : "Apache",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "ok",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "211.80.0.0/13",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
83.148.245.147

Network
83.148.192.0/18

Domain(s)
lounea.fi

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Mikrotik RouterOS

Reverse DNS
83-148-245-147.dynamic.lounea.fi

ASN
AS39699

Organization
Lounea Palvelut Oy

Protocol
btest

Source
datascan
Operating System
Mikrotik RouterOS

Product
Mikrotik Bandwidth Test Service

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
4352d88a78aa39750bf70cd6f27bcaa5
```
\x01\x00\x00\x00
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:37:31.000Z",
   "app" : {
      "length" : 4
   },
   "asn" : "AS39699",
   "city" : "Tampere",
   "country" : "FI",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x01\\x00\\x00\\x00",
   "datamd5" : "4352d88a78aa39750bf70cd6f27bcaa5",
   "datammh3" : -68075478,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "lounea.fi"
   ],
   "host" : [
      "83-148-245-147"
   ],
   "hostname" : [
      "83-148-245-147.dynamic.lounea.fi"
   ],
   "ip" : "83.148.245.147",
   "ipv6" : "false",
   "latitude" : "61.4886",
   "location" : "61.4886,23.7618",
   "longitude" : "23.7618",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Lounea Palvelut Oy",
   "os" : "RouterOS",
   "osvendor" : "Mikrotik",
   "port" : 49153,
   "product" : "Bandwidth Test Service",
   "productvendor" : "Mikrotik",
   "protocol" : "btest",
   "reverse" : [
      "83-148-245-147.dynamic.lounea.fi"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subdomains" : [
      "dynamic.lounea.fi"
   ],
   "subnet" : "83.148.192.0/18",
   "tld" : [
      "fi"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
122.100.106.139

Network
122.100.104.0/21

Device

<enterprise field>: device.class

Operating System
Linux Linux 3.18.20

URL

http://122.100.106.139:49153/ 200

HTTP Title

ASN
AS24163

Organization
UNION BROADBAND NETWORK

Protocol
http

Source
datascan
Operating System
Linux Linux 3.18.20

HTTP Component(s)
libupnp libupnp 1.6.22

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
196a30f6a8584ae10df7644270d5dd87

HTTP Header MD5
54025fa3f3992192d488863874e499cf

HTTP Body MD5
ffa358f59c48c16284b5626b9b065378

HTTP/1.1 200 OK
CONTENT-LENGTH: 963
CONTENT-TYPE: text/html
DATE: Thu, 21 Nov 2024 08:37:30 GMT
LAST-MODIFIED: Thu, 01 Jan 1970 00:00:00 GMT
SERVER: Linux/3.18.20, UPnP/1.0, Portable SDK for UPnP devices/1.6.22
X-User-Agent: redsonic
CONNECTION: close

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN">
<html>
	<head>
		<meta name="viewport" content="width=device-width; initial-scale=1.0"/>
		<title>
			</title>
	</head>

   <SCRIPT LANGUAGE="JavaSCRIPT">
   function msieversion()
   {
      var ua = window.navigator.userAgent;
      var msie = ua.indexOf ( "MSIE " );

      if ( msie > 0 )      // If Internet Explorer, return version number
         return parseInt (ua.substring (msie+5, ua.indexOf (".", msie )));
      else {
         // IE11 remove string "MSIE" in userAgent
         if (window.ActiveXObject !== undefined)
            return 11;
         else              // If another browser, return 0
            return 0;
      }

   }
   </SCRIPT>
   
  <SCRIPT LANGUAGE="javascript">
   if ( msieversion() >= 3 )
      window.location = 'ie.htm';
   else
      window.location = 'wap.htm';
     //document.write ( "This is another browser" );

   </SCRIPT>
     
	<body>

	</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:37:31.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ffa358f59c48c16284b5626b9b065378",
         "bodymmh3" : -1595685076,
         "component" : [
            {
               "product" : "libupnp",
               "productvendor" : "libupnp",
               "productversion" : "1.6.22"
            }
         ],
         "header" : [
            {
               "value" : "Thu, 01 Jan 1970 00:00:00 GMT",
               "name" : "LAST-MODIFIED"
            }
         ],
         "headermd5" : "54025fa3f3992192d488863874e499cf",
         "headermmh3" : -1923246193,
         "title" : ""
      },
      "length" : 1225
   },
   "asn" : "AS24163",
   "city" : "Jiaosi",
   "country" : "TW",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nCONTENT-LENGTH: 963\r\nCONTENT-TYPE: text/html\r\nDATE: Thu, 21 Nov 2024 08:37:30 GMT\r\nLAST-MODIFIED: Thu, 01 Jan 1970 00:00:00 GMT\r\nSERVER: Linux/3.18.20, UPnP/1.0, Portable SDK for UPnP devices/1.6.22\r\nX-User-Agent: redsonic\r\nCONNECTION: close\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\">\n<html>\n\t<head>\n\t\t<meta name=\"viewport\" content=\"width=device-width; initial-scale=1.0\"/>\n\t\t<title>\n\t\t\t</title>\n\t</head>\n\n   <SCRIPT LANGUAGE=\"JavaSCRIPT\">\n   function msieversion()\n   {\n      var ua = window.navigator.userAgent;\n      var msie = ua.indexOf ( \"MSIE \" );\n\n      if ( msie > 0 )      // If Internet Explorer, return version number\n         return parseInt (ua.substring (msie+5, ua.indexOf (\".\", msie )));\n      else {\n         // IE11 remove string \"MSIE\" in userAgent\n         if (window.ActiveXObject !== undefined)\n            return 11;\n         else              // If another browser, return 0\n            return 0;\n      }\n\n   }\n   </SCRIPT>\n   \n  <SCRIPT LANGUAGE=\"javascript\">\n   if ( msieversion() >= 3 )\n      window.location = 'ie.htm';\n   else\n      window.location = 'wap.htm';\n     //document.write ( \"This is another browser\" );\n\n   </SCRIPT>\n     \n\t<body>\n\n\t</body>\n</html>",
   "datamd5" : "196a30f6a8584ae10df7644270d5dd87",
   "datammh3" : 193091341,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS24164",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TW",
      "countryname" : "Taiwan",
      "domain" : [
         "e-lan.net.tw",
         "taiwanmobile.com",
         "twfn.com.tw",
         "twmbroadband.net",
         "twnic.net",
         "twnic.net.tw"
      ],
      "isineu" : "false",
      "latitude" : "23.69781",
      "location" : "23.69781,120.960515",
      "longitude" : "120.960515",
      "netname" : "UBBNET-NET",
      "organization" : "UNION BROADBAND NETWORK",
      "subnet" : "122.100.64.0/18"
   },
   "ip" : "122.100.106.139",
   "ipv6" : "false",
   "latitude" : "24.8286",
   "location" : "24.8286,121.7699",
   "longitude" : "121.7699",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "UNION BROADBAND NETWORK",
   "os" : "Linux",
   "osvendor" : "Linux",
   "osversion" : "3.18.20",
   "port" : 49153,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "122.100.104.0/21",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
83.249.244.250

Network
83.248.0.0/13

Domain(s)
tele2.se

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Mikrotik RouterOS

Reverse DNS
c83-249-244-250.bredband.tele2.se

ASN
AS1257

Organization
Tele2 SWIPnet

Protocol
btest

Source
datascan
Operating System
Mikrotik RouterOS

Product
Mikrotik Bandwidth Test Service

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
4352d88a78aa39750bf70cd6f27bcaa5
```
\x01\x00\x00\x00
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:37:30.000Z",
   "app" : {
      "length" : 4
   },
   "asn" : "AS1257",
   "city" : "Norsborg",
   "country" : "SE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x01\\x00\\x00\\x00",
   "datamd5" : "4352d88a78aa39750bf70cd6f27bcaa5",
   "datammh3" : -68075478,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "tele2.se"
   ],
   "geolocus" : {
      "asn" : "AS1257",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "SE",
      "countryname" : "Sweden",
      "domain" : [
         "comhem.se",
         "tele2.com"
      ],
      "isineu" : "true",
      "latitude" : "60.128161",
      "location" : "60.128161,18.643501",
      "longitude" : "18.643501",
      "netname" : "SE-TELE2-BROADBAND-CUSTOMER",
      "organization" : "Tele2 customer broadband access",
      "subnet" : "83.249.0.0/16"
   },
   "host" : [
      "c83-249-244-250"
   ],
   "hostname" : [
      "c83-249-244-250.bredband.tele2.se"
   ],
   "ip" : "83.249.244.250",
   "ipv6" : "false",
   "latitude" : "59.2539",
   "location" : "59.2539,17.7853",
   "longitude" : "17.7853",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Tele2 SWIPnet",
   "os" : "RouterOS",
   "osvendor" : "Mikrotik",
   "port" : 49153,
   "product" : "Bandwidth Test Service",
   "productvendor" : "Mikrotik",
   "protocol" : "btest",
   "reverse" : [
      "c83-249-244-250.bredband.tele2.se"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subdomains" : [
      "bredband.tele2.se"
   ],
   "subnet" : "83.248.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "se"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
79.192.88.116

Network
79.192.0.0/15

Domain(s)
t-ipconnect.de

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://79.192.88.116:49153/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
p4fc05874.dip0.t-ipconnect.de

ASN
AS3320

Organization
Deutsche Telekom AG

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.26.2

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
5a795bc4758c1f3b78e1e7e6c202d7e2

HTTP Header MD5
bc7733dbafc589be62a42644fe5b6fd8

HTTP Body MD5
c9abfd6216253e6f652566d960897d6a

HTTP/1.1 400 Bad Request
Server: nginx/1.26.2
Date: Thu, 21 Nov 2024 08:37:25 GMT
Content-Type: text/html
Content-Length: 255
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.26.2</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:37:25.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "c9abfd6216253e6f652566d960897d6a",
         "bodymmh3" : 2070515777,
         "headermd5" : "bc7733dbafc589be62a42644fe5b6fd8",
         "headermmh3" : -237380575,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS3320",
   "city" : "Bremen",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.26.2\r\nDate: Thu, 21 Nov 2024 08:37:25 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.26.2</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "5a795bc4758c1f3b78e1e7e6c202d7e2",
   "datammh3" : -383519270,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "t-ipconnect.de"
   ],
   "geolocus" : {
      "asn" : "AS3320",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "t-ipconnect.de",
         "telekom.de"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "DTAG-DIAL24",
      "organization" : "Deutsche Telekom AG",
      "subnet" : "79.192.0.0/11"
   },
   "host" : [
      "p4fc05874"
   ],
   "hostname" : [
      "p4fc05874.dip0.t-ipconnect.de"
   ],
   "ip" : "79.192.88.116",
   "ipv6" : "false",
   "latitude" : "53.0684",
   "location" : "53.0684,8.7990",
   "longitude" : "8.7990",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Deutsche Telekom AG",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 49153,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.26.2",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "p4fc05874.dip0.t-ipconnect.de"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "dip0.t-ipconnect.de"
   ],
   "subnet" : "79.192.0.0/15",
   "tld" : [
      "de"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
107.140.242.133

Network
107.140.0.0/15

Domain(s)
sbcglobal.net

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://107.140.242.133:49153/ 404

Reverse DNS
107-140-242-133.lightspeed.rlghnc.sbcglobal.net

ASN
AS7018

Organization
ATT-INTERNET4

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
2e19f1baedf0e5f8e9ada79cf26a3fc0

HTTP Header MD5
2240f6f61bc6cbf8d11edf2f0afa21d4

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 404 Not Found
Connection: close
Date: Thu, 21 Nov 2024 08:37:22 GMT

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:37:23.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "2240f6f61bc6cbf8d11edf2f0afa21d4",
         "headermmh3" : 931586843
      },
      "length" : 82
   },
   "asn" : "AS7018",
   "city" : "Wendell",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:37:22 GMT\r\n\r\n",
   "datamd5" : "2e19f1baedf0e5f8e9ada79cf26a3fc0",
   "datammh3" : 1273889098,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "sbcglobal.net"
   ],
   "geolocus" : {
      "asn" : "AS7018",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "att.com",
         "att.net",
         "sbcglobal.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "SIS-80-10-10-13",
      "organization" : "AT&T Corp.",
      "subnet" : "107.128.0.0/12"
   },
   "host" : [
      "107-140-242-133"
   ],
   "hostname" : [
      "107-140-242-133.lightspeed.rlghnc.sbcglobal.net"
   ],
   "ip" : "107.140.242.133",
   "ipv6" : "false",
   "latitude" : "35.7810",
   "location" : "35.7810,-78.3697",
   "longitude" : "-78.3697",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ATT-INTERNET4",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 49153,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "reverse" : [
      "107-140-242-133.lightspeed.rlghnc.sbcglobal.net"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 404,
   "subdomains" : [
      "lightspeed.rlghnc.sbcglobal.net",
      "rlghnc.sbcglobal.net"
   ],
   "subnet" : "107.140.0.0/15",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
113.61.203.189

Network
113.61.128.0/17

Domain(s)
veetime.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

Reverse DNS
113-61-203-189.veetime.com

ASN
AS17809

Organization
VEE TIME CORP.

Protocol
unknown

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
339907388cef938997d15849cb804903

HTTP/1.1 -101 \x0d
SERVER: Linux/4.9.118, UPnP/1.0, Portable SDK for UPnP devices/1.6.20\x0d
CONNECTION: close\x0d
CONTENT-LENGTH: 46\x0d
Accept-Ranges: bytes\x0d
CONTENT-TYPE: text/html\x0d
\x0d
<html><body><h1>-101 (null)</h1></body></html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:37:20.000Z",
   "app" : {
      "length" : 221
   },
   "asn" : "AS17809",
   "city" : "Taichung",
   "country" : "TW",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 -101 \\x0d\nSERVER: Linux/4.9.118, UPnP/1.0, Portable SDK for UPnP devices/1.6.20\\x0d\nCONNECTION: close\\x0d\nCONTENT-LENGTH: 46\\x0d\nAccept-Ranges: bytes\\x0d\nCONTENT-TYPE: text/html\\x0d\n\\x0d\n<html><body><h1>-101 (null)</h1></body></html>",
   "datamd5" : "339907388cef938997d15849cb804903",
   "datammh3" : -1941513932,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "veetime.com"
   ],
   "geolocus" : {
      "asn" : "AS17809",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TW",
      "countryname" : "Taiwan",
      "domain" : [
         "emax.net.tw",
         "twnic.net",
         "twnic.net.tw",
         "veetime.com"
      ],
      "isineu" : "false",
      "latitude" : "23.69781",
      "location" : "23.69781,120.960515",
      "longitude" : "120.960515",
      "netname" : "EMAX-NET",
      "organization" : "e-MAX NETWORK CORP.",
      "subnet" : "113.61.128.0/17"
   },
   "host" : [
      "113-61-203-189"
   ],
   "hostname" : [
      "113-61-203-189.veetime.com"
   ],
   "ip" : "113.61.203.189",
   "ipv6" : "false",
   "latitude" : "24.1440",
   "location" : "24.1440,120.6844",
   "longitude" : "120.6844",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "VEE TIME CORP.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 49153,
   "protocol" : "unknown",
   "reverse" : [
      "113-61-203-189.veetime.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "113.61.128.0/17",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
124.232.185.91

Network
124.232.176.0/20

Device

<enterprise field>: device.class

URL

http://124.232.185.91:49153/ 404

HTTP Title
404 Not Found

ASN
AS4134

Organization
Chinanet

Protocol
http

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8151087651e30d04ed9b257fd11b7c2f

HTTP Header MD5
46f5e48b3c76ad4e11f1ebda3f7cd45b

HTTP Body MD5
d764d7c34c48bb0454c20890c58723fc

HTTP/1.1 404 Not Found
Date: Thu, 21 Nov 2024 08:37:19 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
WZWS-RAY: 1249-1732207039.396-w-waf04zzst

188
<!DOCTYPE html>
<html>
<head>
	<title>404 Not Found</title>
	<meta charset="utf-8" />
	<meta name="viewport" content="width=device-width, initial-scale=1">
</head>
<body bgcolor="white">
	<center style="margin-top: 100px;"><h1>404 Not Found</h1></center>
	<hr>
	<center>Client IP: <srcip></center>
	<center>eventID: 1249-1732207039.396-w-waf04zzst reason:</center>
</body>
</html>





0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:37:19.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d764d7c34c48bb0454c20890c58723fc",
         "bodymmh3" : 718530170,
         "headermd5" : "46f5e48b3c76ad4e11f1ebda3f7cd45b",
         "headermmh3" : -1264118018,
         "title" : "404 Not Found"
      },
      "length" : 590
   },
   "asn" : "AS4134",
   "country" : "CN",
   "data" : "HTTP/1.1 404 Not Found\r\nDate: Thu, 21 Nov 2024 08:37:19 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nWZWS-RAY: 1249-1732207039.396-w-waf04zzst\r\n\r\n188\r\n<!DOCTYPE html>\n<html>\n<head>\n\t<title>404 Not Found</title>\n\t<meta charset=\"utf-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n</head>\n<body bgcolor=\"white\">\n\t<center style=\"margin-top: 100px;\"><h1>404 Not Found</h1></center>\n\t<hr>\n\t<center>Client IP: <srcip></center>\n\t<center>eventID: 1249-1732207039.396-w-waf04zzst reason:</center>\n</body>\n</html>\n\n\n\n\n\r\n0\r\n\r\n",
   "datamd5" : "8151087651e30d04ed9b257fd11b7c2f",
   "datammh3" : 2007494839,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4134",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "189.cn",
         "chinatelecom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-HN",
      "organization" : "CHINANET Hunan province network",
      "subnet" : "124.232.176.0/20"
   },
   "ip" : "124.232.185.91",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Chinanet",
   "port" : 49153,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 404,
   "subnet" : "124.232.176.0/20",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 139,443 in 0.122 second(s)

81.227.134.128:49153 (tcp/http) - last seen on 2024-11-21 at 08:38:19 UTC

116.122.0.150:49153 (tcp/unknown) - last seen on 2024-11-21 at 08:37:54 UTC

211.83.1.187:49153 (tcp/http) - last seen on 2024-11-21 at 08:37:53 UTC

83.148.245.147:49153 (tcp/btest) - last seen on 2024-11-21 at 08:37:31 UTC

122.100.106.139:49153 (tcp/http) - last seen on 2024-11-21 at 08:37:31 UTC

83.249.244.250:49153 (tcp/btest) - last seen on 2024-11-21 at 08:37:30 UTC

79.192.88.116:49153 (tcp/http) - last seen on 2024-11-21 at 08:37:25 UTC

107.140.242.133:49153 (tcp/http) - last seen on 2024-11-21 at 08:37:23 UTC

113.61.203.189:49153 (tcp/unknown) - last seen on 2024-11-21 at 08:37:20 UTC

124.232.185.91:49153 (tcp/http) - last seen on 2024-11-21 at 08:37:19 UTC