Returning 10 result(s) out of 1,357 in 0.196 second(s)

  • 219.137.113.78:61617 (tcp/http) - last seen on 2024-11-21 at 10:36:08 UTC

    • IP
      219.137.113.78
      Network
      219.137.0.0/17
      Domain(s)
      163data.com.cn
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://219.137.113.78:61617/ 302

      Reverse DNS
      78.113.137.219.broad.gz.gd.dynamic.163data.com.cn
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      64d3239c17ba9208cd1e44e8dd927162
      HTTP Header MD5
      2c47052b05e76767aea4c32892d481f5
      HTTP Body MD5
      465981b2c7142b9fb660b39e2de874c1
    • HTTP/1.1 302 Found
      Connection: close
      Transfer-Encoding: chunked
      Location: /cgi-bin/luci/
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:36:08.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "465981b2c7142b9fb660b39e2de874c1",
               "bodymmh3" : -421333641,
               "headermd5" : "2c47052b05e76767aea4c32892d481f5",
               "headermmh3" : 104136391
            },
            "length" : 100
         },
         "asn" : "AS4134",
         "city" : "Guangzhou",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nLocation: /cgi-bin/luci/\r\n\r\n0\r\n\r\n",
         "datamd5" : "64d3239c17ba9208cd1e44e8dd927162",
         "datammh3" : 739140442,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "163data.com.cn"
         ],
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "163data.com.cn",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-GD",
            "organization" : "CHINANET Guangdong province network",
            "subnet" : "219.136.0.0/15"
         },
         "host" : [
            78
         ],
         "hostname" : [
            "78.113.137.219.broad.gz.gd.dynamic.163data.com.cn"
         ],
         "ip" : "219.137.113.78",
         "ipv6" : "false",
         "latitude" : "23.1181",
         "location" : "23.1181,113.2539",
         "longitude" : "113.2539",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 61617,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "reverse" : [
            "78.113.137.219.broad.gz.gd.dynamic.163data.com.cn"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subdomains" : [
            "dynamic.163data.com.cn",
            "113.137.219.broad.gz.gd.dynamic.163data.com.cn",
            "gz.gd.dynamic.163data.com.cn",
            "219.broad.gz.gd.dynamic.163data.com.cn",
            "broad.gz.gd.dynamic.163data.com.cn",
            "gd.dynamic.163data.com.cn",
            "137.219.broad.gz.gd.dynamic.163data.com.cn"
         ],
         "subnet" : "219.137.0.0/17",
         "tld" : [
            "com.cn"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 14.128.43.247:61617 (tcp/http) - last seen on 2024-11-21 at 10:17:58 UTC

    • IP
      14.128.43.247
      Network
      14.128.32.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://14.128.43.247:61617/ 302

      HTTP Title
      302 Found
      ASN
      AS152194
      Organization
      CTG Server Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      fec523b9aa4f35bf1e9de0046045ced3
      HTTP Header MD5
      d7becab03a8905d978f0985d2d16182f
      HTTP Body MD5
      29b5f7615598c74df0019844c163d80c
    • HTTP/1.1 302 Moved Temporarily
      Server: nginx
      Date: Thu, 21 Nov 2024 10:17:58 GMT
      Content-Type: text/html
      Content-Length: 138
      Connection: close
      Location: https://<ip>/
      Strict-Transport-Security: max-age=31536000
      
      <html>
      <head><title>302 Found</title></head>
      <body>
      <center><h1>302 Found</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:17:58.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "29b5f7615598c74df0019844c163d80c",
               "bodymmh3" : -23674247,
               "headermd5" : "d7becab03a8905d978f0985d2d16182f",
               "headermmh3" : 1930446371,
               "title" : "302 Found"
            },
            "length" : 359
         },
         "asn" : "AS152194",
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 10:17:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: close\r\nLocation: https://<ip>/\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "fec523b9aa4f35bf1e9de0046045ced3",
         "datammh3" : 576449098,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS64050",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "ctgserver.com",
               "rackip.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "CTG128-40-HK",
            "organization" : "RACKIP CONSULTANCY PTE. LTD.",
            "subnet" : "14.128.40.0/21"
         },
         "ip" : "14.128.43.247",
         "ipv6" : "false",
         "latitude" : "1.3673",
         "location" : "1.3673,103.8014",
         "longitude" : "103.8014",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CTG Server Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 61617,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "14.128.32.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 59.75.38.152:61617 (tcp/http) - last seen on 2024-11-21 at 08:56:34 UTC

    • IP
      59.75.38.152
      Network
      59.64.0.0/12
      Device

      <enterprise field>: device.class

      URL

      http://59.75.38.152:61617/ 302

      ASN
      AS4538
      Organization
      China Education and Research Network Center
      Protocol
      http
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      96d7aced4477a5334c7de4616620bcc7
      HTTP Header MD5
      17494da67b263d49a356f29516833bab
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 302 Moved Temporarily
      Server: DrcomServer1.0
      Location: http://192.168.254.3
      Cache-Control: no-cache
      Content-Length: 0
      Connection: close
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:56:34.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "192.168.254.3"
               ],
               "url" : [
                  "http://192.168.254.3"
               ]
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "17494da67b263d49a356f29516833bab",
               "headermmh3" : 1664562682
            },
            "length" : 153
         },
         "asn" : "AS4538",
         "country" : "CN",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: DrcomServer1.0\r\nLocation: http://192.168.254.3\r\nCache-Control: no-cache\r\nContent-Length: 0\r\nConnection: close\r\n\r\n",
         "datamd5" : "96d7aced4477a5334c7de4616620bcc7",
         "datammh3" : 1446480259,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4538",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cernet.edu.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "XAR-CERNET",
            "organization" : "China Education and Research Network",
            "subnet" : "59.75.32.0/21"
         },
         "ip" : "59.75.38.152",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Education and Research Network Center",
         "port" : 61617,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "59.64.0.0/12",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 212.174.54.243:61617 (tcp/http) - last seen on 2024-11-21 at 08:28:08 UTC

    • IP
      212.174.54.243
      Network
      212.174.54.0/23
      Domain(s)
      ttnet.com.tr
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://212.174.54.243:61617/ 302

      Reverse DNS
      212.174.54.243.static.ttnet.com.tr
      ASN
      AS47331
      Organization
      Turk Telekom
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft IIS 7.5
      HTTP Component(s)
      Microsoft ASP.NET 4.0.30319
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      448e7a47b67768fdc5e35314360b8f0f
      HTTP Header MD5
      818c80db057a06d0c588d47d0a69b0fc
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
      Favicon MD5
      87f30811a3ccd2a74b63ee28d27113f5
      Favicon MMH3
      -897565643
    • HTTP/1.1 302 Found
      Cache-Control: private
      Location: http://<ip>:61617/Account/Login?ReturnUrl=%2F
      Server: Microsoft-IIS/7.5
      X-AspNetMvc-Version: 5.2
      X-AspNet-Version: 4.0.30319
      X-Powered-By: ASP.NET
      Date: Thu, 21 Nov 2024 08:21:59 GMT
      Connection: close
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:28:08.000Z",
         "app" : {
            "favicon" : {
               "image" : "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",
               "imagemd5" : "87f30811a3ccd2a74b63ee28d27113f5",
               "imagemmh3" : -897565643,
               "length" : 15406,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "component" : [
                  {
                     "product" : "ASP.NET",
                     "productvendor" : "Microsoft",
                     "productversion" : "4.0.30319"
                  }
               ],
               "headermd5" : "818c80db057a06d0c588d47d0a69b0fc",
               "headermmh3" : -1353273659
            },
            "length" : 283
         },
         "asn" : "AS47331",
         "city" : "Istanbul",
         "country" : "TR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nCache-Control: private\r\nLocation: http://<ip>:61617/Account/Login?ReturnUrl=%2F\r\nServer: Microsoft-IIS/7.5\r\nX-AspNetMvc-Version: 5.2\r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Thu, 21 Nov 2024 08:21:59 GMT\r\nConnection: close\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "448e7a47b67768fdc5e35314360b8f0f",
         "datammh3" : -2114907869,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ttnet.com.tr"
         ],
         "geolocus" : {
            "asn" : "AS9121",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "TR",
            "countryname" : "Turkey",
            "domain" : [
               "turktelekom.com.tr"
            ],
            "isineu" : "false",
            "latitude" : "38.963745",
            "location" : "38.963745,35.243322",
            "longitude" : "35.243322",
            "netname" : "TR-TELEKOM-990407",
            "organization" : "Turk Telekomunikasyon Anonim Sirketi",
            "subnet" : "212.174.0.0/15"
         },
         "host" : [
            212
         ],
         "hostname" : [
            "212.174.54.243.static.ttnet.com.tr"
         ],
         "ip" : "212.174.54.243",
         "ipv6" : "false",
         "latitude" : "41.0300",
         "location" : "41.0300,28.9601",
         "longitude" : "28.9601",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Turk Telekom",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "osversion" : [
            "Server 2008",
            7
         ],
         "port" : 61617,
         "product" : "IIS",
         "productvendor" : "Microsoft",
         "productversion" : "7.5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "reverse" : [
            "212.174.54.243.static.ttnet.com.tr"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subdomains" : [
            "174.54.243.static.ttnet.com.tr",
            "243.static.ttnet.com.tr",
            "54.243.static.ttnet.com.tr",
            "static.ttnet.com.tr"
         ],
         "subnet" : "212.174.54.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com.tr"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 71.255.73.162:61617 (tcp/http) - last seen on 2024-11-21 at 07:10:32 UTC

    • IP
      71.255.73.162
      Network
      71.255.64.0/19
      Domain(s)
      verizon.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://71.255.73.162:61617/ 302

      HTTP Title
      Policy Jump
      Reverse DNS
      static-71-255-73-162.nycmny.fios.verizon.net
      ASN
      AS701
      Organization
      UUNET
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6e7b06e0cb45247a565f5e6f6202c1d3
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      d40e653eeb6203b39915f4a2a6d3f66e
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: http://<ip>/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="http://<ip>/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T07:10:32.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d40e653eeb6203b39915f4a2a6d3f66e",
               "bodymmh3" : 1728137019,
               "component" : [
                  {
                     "productvendor" : "SonicWall",
                     "product" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : 1746535694,
               "title" : "Policy Jump"
            },
            "length" : 513
         },
         "asn" : "AS701",
         "city" : "New York",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: http://<ip>/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"http://<ip>/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "6e7b06e0cb45247a565f5e6f6202c1d3",
         "datammh3" : 1628163922,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "verizon.net"
         ],
         "host" : [
            "static-71-255-73-162"
         ],
         "hostname" : [
            "static-71-255-73-162.nycmny.fios.verizon.net"
         ],
         "ip" : "71.255.73.162",
         "ipv6" : "false",
         "latitude" : "40.7820",
         "location" : "40.7820,-73.9953",
         "longitude" : "-73.9953",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "UUNET",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 61617,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "reverse" : [
            "static-71-255-73-162.nycmny.fios.verizon.net"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subdomains" : [
            "nycmny.fios.verizon.net",
            "fios.verizon.net"
         ],
         "subnet" : "71.255.64.0/19",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 45.77.165.105:61617 (tcp/http) - last seen on 2024-11-21 at 07:08:58 UTC

    • IP
      45.77.165.105
      Network
      45.76.0.0/15
      Domain(s)
      vultrusercontent.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Citrix Gateway Firmware
      URL

      http://45.77.165.105:61617/ 302

      Reverse DNS
      45.77.165.105.vultrusercontent.com
      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      http
      Source
      datascan
    • Operating System
      Citrix Gateway Firmware
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      44849f87bcf4bb81918e40b71919d9da
      HTTP Header MD5
      18ace997d16ca637eae1e741b04b6e3e
      HTTP Body MD5
      7f568770b024b5f553c2f46a4315d749
    • HTTP/1.1 302 Found
      Location: /vpn/index.html
      Set-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_EPAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_USER=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_BASEURL=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: CsrfToken=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: CtxsAuthId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: ASP.NET_SessionId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_TMAA=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Set-Cookie: NSC_TMAS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Set-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Set-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Connection: close
      Content-Length: 398
      Cache-control: no-cache, no-store, must-revalidate
      Pragma: no-cache
      Content-Type: text/html; charset=utf-8
      
      <html><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-8"><script type="text/javascript" src="/vpn/resources.js"></script><script type="text/javascript" src="/vpn/init/redirection_body_resources.js"></script></head><body><span id="This object may be found "></span><a href="/vpn/index.html"><span id="here"></span></a><span id="Trailing phrase after here"></span></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T07:08:58.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "7f568770b024b5f553c2f46a4315d749",
               "bodymmh3" : -1140647885,
               "headermd5" : "18ace997d16ca637eae1e741b04b6e3e",
               "headermmh3" : 985755436
            },
            "length" : 1826
         },
         "asn" : "AS20473",
         "city" : "Miami",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nLocation: /vpn/index.html\r\nSet-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_EPAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_USER=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_BASEURL=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: CsrfToken=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: CtxsAuthId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: ASP.NET_SessionId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_TMAA=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nSet-Cookie: NSC_TMAS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nSet-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nSet-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nConnection: close\r\nContent-Length: 398\r\nCache-control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nContent-Type: text/html; charset=utf-8\r\n\r\n<html><head><META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=UTF-8\"><script type=\"text/javascript\" src=\"/vpn/resources.js\"></script><script type=\"text/javascript\" src=\"/vpn/init/redirection_body_resources.js\"></script></head><body><span id=\"This object may be found \"></span><a href=\"/vpn/index.html\"><span id=\"here\"></span></a><span id=\"Trailing phrase after here\"></span></body></html>",
         "datamd5" : "44849f87bcf4bb81918e40b71919d9da",
         "datammh3" : -1525738187,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "vultrusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS20473",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "constant.com",
               "vultr.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "NET-45-77-160-0-23",
            "organization" : "Vultr Holdings, LLC",
            "subnet" : "45.77.160.0/21"
         },
         "host" : [
            45
         ],
         "hostname" : [
            "45.77.165.105.vultrusercontent.com"
         ],
         "ip" : "45.77.165.105",
         "ipv6" : "false",
         "latitude" : "25.8119",
         "location" : "25.8119,-80.2318",
         "longitude" : "-80.2318",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-VULTR",
         "os" : "Gateway Firmware",
         "osvendor" : "Citrix",
         "port" : 61617,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "reverse" : [
            "45.77.165.105.vultrusercontent.com"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subdomains" : [
            "105.vultrusercontent.com",
            "165.105.vultrusercontent.com",
            "77.165.105.vultrusercontent.com"
         ],
         "subnet" : "45.76.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 14.128.43.252:61617 (tcp/http) - last seen on 2024-11-21 at 05:48:57 UTC

    • IP
      14.128.43.252
      Network
      14.128.32.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://14.128.43.252:61617/ 302

      HTTP Title
      302 Found
      ASN
      AS152194
      Organization
      CTG Server Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      fec523b9aa4f35bf1e9de0046045ced3
      HTTP Header MD5
      d7becab03a8905d978f0985d2d16182f
      HTTP Body MD5
      29b5f7615598c74df0019844c163d80c
    • HTTP/1.1 302 Moved Temporarily
      Server: nginx
      Date: Thu, 21 Nov 2024 05:48:57 GMT
      Content-Type: text/html
      Content-Length: 138
      Connection: close
      Location: https://<ip>/
      Strict-Transport-Security: max-age=31536000
      
      <html>
      <head><title>302 Found</title></head>
      <body>
      <center><h1>302 Found</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T05:48:57.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "29b5f7615598c74df0019844c163d80c",
               "bodymmh3" : -23674247,
               "headermd5" : "d7becab03a8905d978f0985d2d16182f",
               "headermmh3" : 1535131282,
               "title" : "302 Found"
            },
            "length" : 359
         },
         "asn" : "AS152194",
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 05:48:57 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: close\r\nLocation: https://<ip>/\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "fec523b9aa4f35bf1e9de0046045ced3",
         "datammh3" : 576449098,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS64050",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "ctgserver.com",
               "rackip.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "CTG128-40-HK",
            "organization" : "RACKIP CONSULTANCY PTE. LTD.",
            "subnet" : "14.128.40.0/21"
         },
         "ip" : "14.128.43.252",
         "ipv6" : "false",
         "latitude" : "1.3673",
         "location" : "1.3673,103.8014",
         "longitude" : "103.8014",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CTG Server Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 61617,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "14.128.32.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 154.68.188.93:61617 (tcp/http) - last seen on 2024-11-21 at 05:47:33 UTC

    • IP
      154.68.188.93
      Network
      154.68.176.0/20
      Device

      <enterprise field>: device.class

      Operating System
      FreeBSD FreeBSD
      URL

      http://154.68.188.93:61617/ 302

      ASN
      AS328366
      Organization
      FirstnetTechnology-AS
      Protocol
      http
      Source
      datascan
    • Operating System
      FreeBSD FreeBSD
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7953d577dc8ba61fc77330f470378944
      HTTP Header MD5
      1f6e46db42893445e4c8edb8392e4899
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.0 302 Redirection
      Server: BlueServer/5.9.0.7
      Date: Thu, 21 Nov 2024 05:47:33 GMT
      P3P: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE"
      Access-Control-Allow-Origin: *
      Set-Cookie: session=4a162bf312e04572496333261de71b9a; path=/; SameSite=None
      Connection: close
      Location: /login.htm?page=%2F
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T05:47:33.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "5.9.0.7"
               ]
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "1f6e46db42893445e4c8edb8392e4899",
               "headermmh3" : -1964607557
            },
            "length" : 329
         },
         "asn" : "AS328366",
         "city" : "Durban",
         "country" : "ZA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Redirection\r\nServer: BlueServer/5.9.0.7\r\nDate: Thu, 21 Nov 2024 05:47:33 GMT\r\nP3P: CP=\"CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE\"\r\nAccess-Control-Allow-Origin: *\r\nSet-Cookie: session=4a162bf312e04572496333261de71b9a; path=/; SameSite=None\r\nConnection: close\r\nLocation: /login.htm?page=%2F\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "7953d577dc8ba61fc77330f470378944",
         "datammh3" : -748792317,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS328366",
            "continent" : "AF",
            "continentname" : "Africa",
            "country" : "ZA",
            "countryname" : "South Africa",
            "isineu" : "false",
            "latitude" : "-30.559482",
            "location" : "-30.559482,22.937506",
            "longitude" : "22.937506",
            "netname" : "UrbanXConnect",
            "organization" : "UrbanXConnect",
            "subnet" : "154.68.176.0/20"
         },
         "ip" : "154.68.188.93",
         "ipv6" : "false",
         "latitude" : "-29.9056",
         "location" : "-29.9056,30.9405",
         "longitude" : "30.9405",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "FirstnetTechnology-AS",
         "os" : "FreeBSD",
         "osvendor" : "FreeBSD",
         "port" : 61617,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Redirection",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "154.68.176.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 38.60.208.224:61617 (tcp/http) - last seen on 2024-11-21 at 05:29:01 UTC

    • IP
      38.60.208.224
      Network
      38.60.208.0/22
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Juniper JunOS
      URL

      http://38.60.208.224:61617/ 302

      ASN
      AS138915
      Organization
      Kaopu Cloud HK Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Juniper JunOS
      HTTP Component(s)
      PulseSecure Pulse Connect Secure
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      69d9ec1d2d90d96aaf19a01a8e999ace
      HTTP Header MD5
      20dd8e34a95f4c9b73d19038a53be7f8
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 302 Found
      Location: /dana-na/auth/url_11/welcome.cgi
      Content-Type: text/html; charset=utf-8
      Set-Cookie: DSSIGNIN=url_11; path=/dana-na/; expires=Thu, 31-Dec-2037 00:00:00 GMT; secure
      Set-Cookie: DSIVS=; path=/; expires=Thu, 01 Jan 1970 22:00:00 GMT; secure
      Set-Cookie: DSSignInURL=/; path=/; secure
      Connection: close
      Content-Length: 0
      Strict-Transport-Security: max-age=31536000
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T05:29:01.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1636538602,
               "component" : [
                  {
                     "productvendor" : "PulseSecure",
                     "product" : "Pulse Connect Secure"
                  }
               ],
               "headermd5" : "20dd8e34a95f4c9b73d19038a53be7f8",
               "headermmh3" : 1103171666
            },
            "length" : 399
         },
         "asn" : "AS138915",
         "city" : "Istanbul",
         "country" : "TR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nLocation: /dana-na/auth/url_11/welcome.cgi\r\nContent-Type: text/html; charset=utf-8\r\nSet-Cookie: DSSIGNIN=url_11; path=/dana-na/; expires=Thu, 31-Dec-2037 00:00:00 GMT; secure\r\nSet-Cookie: DSIVS=; path=/; expires=Thu, 01 Jan 1970 22:00:00 GMT; secure\r\nSet-Cookie: DSSignInURL=/; path=/; secure\r\nConnection: close\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n",
         "datamd5" : "69d9ec1d2d90d96aaf19a01a8e999ace",
         "datammh3" : -343912989,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS138915",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "cogentco.com",
               "kaopucloud.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "LIGHTNODE-TR",
            "organization" : "Kaopu Cloud HK Limited",
            "subnet" : "38.60.208.0/24"
         },
         "ip" : "38.60.208.224",
         "ipv6" : "false",
         "latitude" : "41.0011",
         "location" : "41.0011,28.9675",
         "longitude" : "28.9675",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Kaopu Cloud HK Limited",
         "os" : "JunOS",
         "osvendor" : "Juniper",
         "port" : 61617,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "38.60.208.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 59.75.40.219:61617 (tcp/http) - last seen on 2024-11-21 at 04:36:32 UTC

    • IP
      59.75.40.219
      Network
      59.64.0.0/12
      Device

      <enterprise field>: device.class

      URL

      http://59.75.40.219:61617/ 302

      ASN
      AS4538
      Organization
      China Education and Research Network Center
      Protocol
      http
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      96d7aced4477a5334c7de4616620bcc7
      HTTP Header MD5
      17494da67b263d49a356f29516833bab
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 302 Moved Temporarily
      Server: DrcomServer1.0
      Location: http://192.168.254.3
      Cache-Control: no-cache
      Content-Length: 0
      Connection: close
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T04:36:32.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "192.168.254.3"
               ],
               "url" : [
                  "http://192.168.254.3"
               ]
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "17494da67b263d49a356f29516833bab",
               "headermmh3" : 1664562682
            },
            "length" : 153
         },
         "asn" : "AS4538",
         "country" : "CN",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: DrcomServer1.0\r\nLocation: http://192.168.254.3\r\nCache-Control: no-cache\r\nContent-Length: 0\r\nConnection: close\r\n\r\n",
         "datamd5" : "96d7aced4477a5334c7de4616620bcc7",
         "datammh3" : 1446480259,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4538",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cernet.edu.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "XAR-CERNET",
            "organization" : "China Education and Research Network",
            "subnet" : "59.75.40.128/25"
         },
         "ip" : "59.75.40.219",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Education and Research Network Center",
         "port" : 61617,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "59.64.0.0/12",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }