Cyber Defense Search Engine

IP
46.16.100.122

Network
46.16.96.0/21

Device

<enterprise field>: device.class

Operating System
FreeBSD FreeBSD

ASN
AS16345

Organization
PVimpelCom

Protocol
modbus

Source
datascan
Operating System
FreeBSD FreeBSD

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
68fcaad6ee34ca12e0c90149f5397853
```
\x137\x00\x00\x00\x03\x00\xab\x01
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:06.000Z",
   "app" : {
      "length" : 9,
      "modbus" : {
         "code" : "ILLEGAL_FUNCTION",
         "function" : "ENCAPSULATED_INTERFACE_TRANSPORT"
      }
   },
   "asn" : "AS16345",
   "country" : "RU",
   "data" : "\\x137\\x00\\x00\\x00\\x03\\x00\\xab\\x01",
   "datamd5" : "68fcaad6ee34ca12e0c90149f5397853",
   "datammh3" : 2064163797,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "46.16.100.122",
   "ipv6" : "false",
   "latitude" : "55.7386",
   "location" : "55.7386,37.6068",
   "longitude" : "37.6068",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "PVimpelCom",
   "os" : "FreeBSD",
   "osvendor" : "FreeBSD",
   "port" : 502,
   "protocol" : "modbus",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "46.16.96.0/21",
   "tls" : "false",
   "transport" : "tcp"
}

IP
213.233.79.126

Network
213.233.64.0/18

Domain(s)
vodafone.ro

Device

<enterprise field>: device.class

Reverse DNS
static-sub-mobile-213.233.79.126.vodafone.ro

ASN
AS12302

Organization
Vodafone Romania S.A.

Protocol
modbus

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
68fcaad6ee34ca12e0c90149f5397853
```
\x137\x00\x00\x00\x03\x00\xab\x01
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:03.000Z",
   "app" : {
      "length" : 9,
      "modbus" : {
         "code" : "ILLEGAL_FUNCTION",
         "function" : "ENCAPSULATED_INTERFACE_TRANSPORT"
      }
   },
   "asn" : "AS12302",
   "city" : "Bucharest",
   "country" : "RO",
   "data" : "\\x137\\x00\\x00\\x00\\x03\\x00\\xab\\x01",
   "datamd5" : "68fcaad6ee34ca12e0c90149f5397853",
   "datammh3" : 2064163797,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vodafone.ro"
   ],
   "host" : [
      "static-sub-mobile-213"
   ],
   "hostname" : [
      "static-sub-mobile-213.233.79.126.vodafone.ro"
   ],
   "ip" : "213.233.79.126",
   "ipv6" : "false",
   "latitude" : "44.3903",
   "location" : "44.3903,26.1227",
   "longitude" : "26.1227",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Vodafone Romania S.A.",
   "port" : 502,
   "protocol" : "modbus",
   "reverse" : [
      "static-sub-mobile-213.233.79.126.vodafone.ro"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subdomains" : [
      "126.vodafone.ro",
      "233.79.126.vodafone.ro",
      "79.126.vodafone.ro"
   ],
   "subnet" : "213.233.64.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "ro"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
213.168.179.54

Network
213.168.176.0/20

Domain(s)
dragon.cz

Device

<enterprise field>: device.class

Reverse DNS
si-31198-444103.dragon.cz

ASN
AS15614

Organization
Dragon Internet a.s.

Protocol
modbus

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
68fcaad6ee34ca12e0c90149f5397853
```
\x137\x00\x00\x00\x03\x00\xab\x01
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:02.000Z",
   "app" : {
      "length" : 9,
      "modbus" : {
         "code" : "ILLEGAL_FUNCTION",
         "function" : "ENCAPSULATED_INTERFACE_TRANSPORT"
      }
   },
   "asn" : "AS15614",
   "city" : "Mlad\u00e1 Boleslav",
   "country" : "CZ",
   "data" : "\\x137\\x00\\x00\\x00\\x03\\x00\\xab\\x01",
   "datamd5" : "68fcaad6ee34ca12e0c90149f5397853",
   "datammh3" : 2064163797,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "dragon.cz"
   ],
   "geolocus" : {
      "asn" : "AS15614",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "CZ",
      "countryname" : "Czech Republic",
      "domain" : [
         "dragon.cz"
      ],
      "isineu" : "true",
      "latitude" : "49.817492",
      "location" : "49.817492,15.472962",
      "longitude" : "15.472962",
      "netname" : "DRAGON-INTERNET",
      "organization" : "Dragon Internet",
      "subnet" : "213.168.176.0/20"
   },
   "host" : [
      "si-31198-444103"
   ],
   "hostname" : [
      "si-31198-444103.dragon.cz"
   ],
   "ip" : "213.168.179.54",
   "ipv6" : "false",
   "latitude" : "50.4113",
   "location" : "50.4113,14.9113",
   "longitude" : "14.9113",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Dragon Internet a.s.",
   "port" : 502,
   "protocol" : "modbus",
   "reverse" : [
      "si-31198-444103.dragon.cz"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "213.168.176.0/20",
   "tld" : [
      "cz"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
160.120.28.100

Network
160.120.0.0/16

Domain(s)
aviso.ci

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

HTTP Title
400 Bad Request

Reverse DNS
oci-160.120.28.100.aviso.ci

ASN
AS29571

Organization
ORANGE-COTE-IVOIRE

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
28715c6ec3fd38b6ed232e3e37959e9c

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
16444d0bf46608253d591db62f41e7c3

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 21 Nov 2024 08:49:51 GMT
Content-Type: text/html
Content-Length: 150
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:49:52.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "16444d0bf46608253d591db62f41e7c3",
         "bodymmh3" : -534304446,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -1870371668,
         "title" : "400 Bad Request"
      },
      "length" : 295
   },
   "asn" : "AS29571",
   "city" : "Abidjan",
   "country" : "CI",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:49:51 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "28715c6ec3fd38b6ed232e3e37959e9c",
   "datammh3" : -1512152686,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "aviso.ci"
   ],
   "geolocus" : {
      "asn" : "AS29571",
      "continent" : "AF",
      "continentname" : "Africa",
      "country" : "CI",
      "countryname" : "C\u00f4te d'Ivoire",
      "domain" : [
         "orange-cit.ci",
         "orange.com"
      ],
      "isineu" : "false",
      "latitude" : "7.539989",
      "location" : "7.539989,-5.54708",
      "longitude" : "-5.54708",
      "netname" : "ADSL_FTTH",
      "organization" : "ORANGE COTE D'IVOIRE",
      "subnet" : "160.120.0.0/16"
   },
   "host" : [
      "oci-160"
   ],
   "hostname" : [
      "oci-160.120.28.100.aviso.ci"
   ],
   "ip" : "160.120.28.100",
   "ipv6" : "false",
   "latitude" : "5.3536",
   "location" : "5.3536,-4.0012",
   "longitude" : "-4.0012",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ORANGE-COTE-IVOIRE",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 502,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "oci-160.120.28.100.aviso.ci"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "28.100.aviso.ci",
      "100.aviso.ci",
      "120.28.100.aviso.ci"
   ],
   "subnet" : "160.120.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "ci"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
176.9.121.226

Network
176.9.0.0/16

Domain(s)
your-server.de

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

Reverse DNS
static.226.121.9.176.clients.your-server.de

ASN
AS24940

Organization
Hetzner Online GmbH

Protocol
modbus

Source
datascan
Operating System
Microsoft Windows

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
ef220f9003f962b1be50957b02fa8d3a
```
\x137\x00\x00\x00	\x00\xab\x01
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:49:38.000Z",
   "app" : {
      "length" : 9,
      "modbus" : {
         "code" : "ILLEGAL_FUNCTION",
         "function" : "ENCAPSULATED_INTERFACE_TRANSPORT"
      }
   },
   "asn" : "AS24940",
   "city" : "Falkenstein",
   "country" : "DE",
   "data" : "\\x137\\x00\\x00\\x00\t\\x00\\xab\\x01",
   "datamd5" : "ef220f9003f962b1be50957b02fa8d3a",
   "datammh3" : 532086415,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "your-server.de"
   ],
   "host" : [
      "static"
   ],
   "hostname" : [
      "static.226.121.9.176.clients.your-server.de"
   ],
   "ip" : "176.9.121.226",
   "ipv6" : "false",
   "latitude" : "50.4777",
   "location" : "50.4777,12.3649",
   "longitude" : "12.3649",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Hetzner Online GmbH",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 502,
   "protocol" : "modbus",
   "reverse" : [
      "static.226.121.9.176.clients.your-server.de"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subdomains" : [
      "121.9.176.clients.your-server.de",
      "176.clients.your-server.de",
      "226.121.9.176.clients.your-server.de",
      "9.176.clients.your-server.de",
      "clients.your-server.de"
   ],
   "subnet" : "176.9.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "de"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
84.15.201.10

Network
84.15.0.0/16

Device

<enterprise field>: device.class

ASN
AS13194

Organization
UAB Bite Lietuva

Protocol
modbus

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
68fcaad6ee34ca12e0c90149f5397853
```
\x137\x00\x00\x00\x03\x00\xab\x01
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:47:39.000Z",
   "app" : {
      "length" : 9,
      "modbus" : {
         "code" : "ILLEGAL_FUNCTION",
         "function" : "ENCAPSULATED_INTERFACE_TRANSPORT"
      }
   },
   "asn" : "AS13194",
   "city" : "Riga",
   "country" : "LV",
   "data" : "\\x137\\x00\\x00\\x00\\x03\\x00\\xab\\x01",
   "datamd5" : "68fcaad6ee34ca12e0c90149f5397853",
   "datammh3" : 2064163797,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "84.15.201.10",
   "ipv6" : "false",
   "latitude" : "56.9496",
   "location" : "56.9496,24.0978",
   "longitude" : "24.0978",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "UAB Bite Lietuva",
   "port" : 502,
   "protocol" : "modbus",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "84.15.0.0/16",
   "tls" : "false",
   "transport" : "tcp"
}

IP
175.201.107.130

Network
175.201.0.0/16

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

ASN
AS4766

Organization
Korea Telecom

Protocol
modbus

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
68fcaad6ee34ca12e0c90149f5397853
```
\x137\x00\x00\x00\x03\x00\xab\x01
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:47:31.000Z",
   "app" : {
      "length" : 9,
      "modbus" : {
         "code" : "ILLEGAL_FUNCTION",
         "function" : "ENCAPSULATED_INTERFACE_TRANSPORT"
      }
   },
   "asn" : "AS4766",
   "city" : "Wando-gun",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x137\\x00\\x00\\x00\\x03\\x00\\xab\\x01",
   "datamd5" : "68fcaad6ee34ca12e0c90149f5397853",
   "datammh3" : 2064163797,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "175.201.0.0/16"
   },
   "ip" : "175.201.107.130",
   "ipv6" : "false",
   "latitude" : "34.3115",
   "location" : "34.3115,126.7345",
   "longitude" : "126.7345",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 502,
   "protocol" : "modbus",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "175.201.0.0/16",
   "tls" : "false",
   "transport" : "tcp"
}

IP
47.113.23.176

Network
47.112.0.0/13

Device

<enterprise field>: device.class

HTTP Title
400 Bad Request

ASN
AS37963

Organization
Hangzhou Alibaba Advertising Co.,Ltd.

Protocol
http

Source
datascan
Product
Taobao Tengine

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
2c930b41d3a1799ac1eb01e3825a55c8

HTTP Header MD5
21eee2fc4259e3c5998052d3c83cd900

HTTP Body MD5
c7a3a0283d7eab90dd22b23e12868d29

HTTP/1.1 400 Bad Request
Server: Tengine
Date: Thu, 21 Nov 2024 08:47:30 GMT
Content-Type: text/html
Connection: close

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr/>Powered by Tengine<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:47:30.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "c7a3a0283d7eab90dd22b23e12868d29",
         "bodymmh3" : -106954995,
         "headermd5" : "21eee2fc4259e3c5998052d3c83cd900",
         "headermmh3" : -1636547529,
         "title" : "400 Bad Request"
      },
      "length" : 351
   },
   "asn" : "AS37963",
   "city" : "Shenzhen",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: Tengine\r\nDate: Thu, 21 Nov 2024 08:47:30 GMT\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr/>Powered by Tengine<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "2c930b41d3a1799ac1eb01e3825a55c8",
   "datammh3" : -1896149615,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS45102",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "alibaba-inc.com",
         "cnnic.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "ALISOFT",
      "organization" : "Alibaba (US) Technology Co., Ltd.",
      "subnet" : "47.113.0.0/16"
   },
   "ip" : "47.113.23.176",
   "ipv6" : "false",
   "latitude" : "22.5559",
   "location" : "22.5559,114.0577",
   "longitude" : "114.0577",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Hangzhou Alibaba Advertising Co.,Ltd.",
   "port" : 502,
   "product" : "Tengine",
   "productvendor" : "Taobao",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "47.112.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP

<access denied by policy>

Network

<access denied by policy>

Operating System

<access denied by policy> <access denied by policy>

ASN

<access denied by policy>

Organization

<access denied by policy>

Protocol

<access denied by policy>

Source

<access denied by policy>
Operating System

<access denied by policy> <access denied by policy>

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5

<access denied by policy>
```
<access denied by policy>
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:47:15.000Z",
   "app" : "<enterprise field>: app",
   "asn" : "<access denied by policy>",
   "city" : "<access denied by policy>",
   "country" : "<access denied by policy>",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<access denied by policy>",
   "datamd5" : "<access denied by policy>",
   "datammh3" : "<access denied by policy>",
   "device" : "<enterprise field>: device",
   "geolocus" : "<enterprise field>: geolocus",
   "ip" : "<access denied by policy>",
   "ipv6" : "<access denied by policy>",
   "latitude" : "<access denied by policy>",
   "location" : "<access denied by policy>",
   "longitude" : "<access denied by policy>",
   "node" : "<enterprise field>: node",
   "organization" : "<access denied by policy>",
   "os" : "<access denied by policy>",
   "osvendor" : "<access denied by policy>",
   "port" : "<access denied by policy>",
   "protocol" : "<access denied by policy>",
   "protocolversion" : "<access denied by policy>",
   "reason" : "<access denied by policy>",
   "seen_date" : "<access denied by policy>",
   "source" : "<access denied by policy>",
   "status" : "<access denied by policy>",
   "subnet" : "<access denied by policy>",
   "tag" : "<enterprise field>: tag",
   "tls" : "<access denied by policy>",
   "transport" : "<access denied by policy>"
}

IP
61.167.99.34

Network
61.167.0.0/16

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

ASN
AS4837

Organization
CHINA UNICOM China169 Backbone

Protocol
modbus

Source
datascan
Operating System
Microsoft Windows

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
68fcaad6ee34ca12e0c90149f5397853
```
\x137\x00\x00\x00\x03\x00\xab\x01
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:47:15.000Z",
   "app" : {
      "length" : 9,
      "modbus" : {
         "code" : "ILLEGAL_FUNCTION",
         "function" : "ENCAPSULATED_INTERFACE_TRANSPORT"
      }
   },
   "asn" : "AS4837",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x137\\x00\\x00\\x00\\x03\\x00\\xab\\x01",
   "datamd5" : "68fcaad6ee34ca12e0c90149f5397853",
   "datammh3" : 2064163797,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4837",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinaunicom.cn",
         "mail.hl.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "UNICOM-HL",
      "organization" : "CNC Group CHINA169 Heilongjiang Province Network",
      "subnet" : "61.167.0.0/16"
   },
   "ip" : "61.167.99.34",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CHINA UNICOM China169 Backbone",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 502,
   "protocol" : "modbus",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "subnet" : "61.167.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

Returning 10 result(s) out of 117,223 in 0.347 second(s)

46.16.100.122:502 (tcp/modbus) - last seen on 2024-11-21 at 08:50:06 UTC

213.233.79.126:502 (tcp/modbus) - last seen on 2024-11-21 at 08:50:03 UTC

213.168.179.54:502 (tcp/modbus) - last seen on 2024-11-21 at 08:50:02 UTC

160.120.28.100:502 (tcp/http) - last seen on 2024-11-21 at 08:49:52 UTC

176.9.121.226:502 (tcp/modbus) - last seen on 2024-11-21 at 08:49:38 UTC

84.15.201.10:502 (tcp/modbus) - last seen on 2024-11-21 at 08:47:39 UTC

175.201.107.130:502 (tcp/modbus) - last seen on 2024-11-21 at 08:47:31 UTC

47.113.23.176:502 (tcp/http) - last seen on 2024-11-21 at 08:47:30 UTC

<access denied by policy>:<access denied by policy> (<access denied by policy>/<access denied by policy>) - last seen on 2024-11-21 at 08:47:15 UTC

61.167.99.34:502 (tcp/modbus) - last seen on 2024-11-21 at 08:47:15 UTC