Cyber Defense Search Engine

IP
154.21.237.189

Network
154.21.236.0/23

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://154.21.237.189:7548/ 407

ASN
AS174

Organization
COGENT-174

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
beff904528226673ee6dbdb9e7fe6002

HTTP Header MD5
4bd5a82db187fbf06a2b7f25b880c717

HTTP Body MD5
917a0ae17b6e9db13c448d39f37c69ca

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

Proxy Authentication Required

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:37:55.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
         "bodymmh3" : -1539650452,
         "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
         "headermmh3" : 372433470
      },
      "length" : 111
   },
   "asn" : "AS174",
   "city" : "New York",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
   "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
   "datammh3" : 501879459,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS174",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "COGENT-154-21-16",
      "organization" : "PSINet, Inc.",
      "subnet" : "154.21.236.0/23"
   },
   "ip" : "154.21.237.189",
   "ipv6" : "false",
   "latitude" : "40.7123",
   "location" : "40.7123,-74.0068",
   "longitude" : "-74.0068",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "COGENT-174",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7548,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "154.21.236.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
108.165.252.121

Network
108.165.252.0/24

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://108.165.252.121:7548/ 407

ASN
AS55720

Organization
Gigabit Hosting Sdn Bhd

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
beff904528226673ee6dbdb9e7fe6002

HTTP Header MD5
4bd5a82db187fbf06a2b7f25b880c717

HTTP Body MD5
917a0ae17b6e9db13c448d39f37c69ca

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

Proxy Authentication Required

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:37:53.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
         "bodymmh3" : -1539650452,
         "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
         "headermmh3" : 372433470
      },
      "length" : 111
   },
   "asn" : "AS55720",
   "city" : "Klang",
   "country" : "MY",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
   "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
   "datammh3" : 501879459,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS55720",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "acedatacenter.com",
         "ipxo.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "IPXO-108-165-224-0-19",
      "organization" : "IPXO LLC",
      "subnet" : "108.165.252.0/24"
   },
   "ip" : "108.165.252.121",
   "ipv6" : "false",
   "latitude" : "3.0249",
   "location" : "3.0249,101.4676",
   "longitude" : "101.4676",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Gigabit Hosting Sdn Bhd",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7548,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "108.165.252.0/24",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
45.152.186.169

Network
45.152.184.0/22

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux Kernel

URL

http://45.152.186.169:7548/ 401

ASN
AS60032

Organization
Coriolis Telecom SAS

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
4715142079c1707f19db51cf653b2274

HTTP Header MD5
89e8b448d70d6892eb699d6fc7b6c3c6

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 401 Unauthorized
Connection: Keep-Alive
WWW-Authenticate: Digest realm="HuaweiHomeGateway",nonce="d05eeab44f485ac82530b76155501f12", qop="auth", algorithm="MD5"
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:37:45.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "89e8b448d70d6892eb699d6fc7b6c3c6",
         "headermmh3" : -1531941010,
         "realm" : "HuaweiHomeGateway"
      },
      "length" : 194
   },
   "asn" : "AS60032",
   "city" : "Bussy-Saint-Georges",
   "country" : "FR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nConnection: Keep-Alive\r\nWWW-Authenticate: Digest realm=\"HuaweiHomeGateway\",nonce=\"d05eeab44f485ac82530b76155501f12\", qop=\"auth\", algorithm=\"MD5\"\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "4715142079c1707f19db51cf653b2274",
   "datammh3" : 1235639599,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "geolocus" : {
      "asn" : "AS55933",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "domain" : [
         "apnic.net"
      ],
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "IANA-NETBLOCK-45",
      "organization" : "This network range is not fully allocated to APNIC.",
      "subnet" : "45.0.0.0/8"
   },
   "ip" : "45.152.186.169",
   "ipv6" : "false",
   "latitude" : "48.8375",
   "location" : "48.8375,2.7037",
   "longitude" : "2.7037",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Coriolis Telecom SAS",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7548,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 401,
   "subnet" : "45.152.184.0/22",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
2.187.23.69

Network
2.187.0.0/17

Device

<enterprise field>: device.class

URL

http://2.187.23.69:7548/ 404

HTTP Title
Object Not Found

ASN
AS58224

Organization
Iran Telecommunication Company PJS

Protocol
http

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
6700e41b44df3bd36abcac3a0fe27e3a

HTTP Header MD5
f6da1085a25e39a018c7da0c5b43489f

HTTP Body MD5
b8515da520dc0eaee914d3ac11ca1204

HTTP/1.1 404 Not Found
Content-Type: text/html
Transfer-Encoding: chunked
X-Frame-Options: sameorigin
Server: WebServer/1.0 UPnP/1.0
Connection: close
EXT:

0bd
<html>
<head>
<title>Object Not Found</title></head><body>
<h1>Object Not Found</h1>The requested URL '/' was not found on the Server.<p>Return to <A HREF="">last page</A><p>
</body></html>
0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:37:35.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b8515da520dc0eaee914d3ac11ca1204",
         "bodymmh3" : -1319321634,
         "headermd5" : "f6da1085a25e39a018c7da0c5b43489f",
         "headermmh3" : -516785119,
         "title" : "Object Not Found"
      },
      "length" : 366
   },
   "asn" : "AS58224",
   "country" : "IR",
   "data" : "HTTP/1.1 404 Not Found\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nX-Frame-Options: sameorigin\r\nServer: WebServer/1.0 UPnP/1.0\r\nConnection: close\r\nEXT:\r\n\r\n0bd\r\n<html>\n<head>\n<title>Object Not Found</title></head><body>\n<h1>Object Not Found</h1>The requested URL '/' was not found on the Server.<p>Return to <A HREF=\"\">last page</A><p>\n</body></html>\r\n0\r\n\r\n",
   "datamd5" : "6700e41b44df3bd36abcac3a0fe27e3a",
   "datammh3" : 2039128351,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS58224",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "IR",
      "countryname" : "Iran",
      "domain" : [
         "ito.gov.ir"
      ],
      "isineu" : "false",
      "latitude" : "32.427908",
      "location" : "32.427908,53.688046",
      "longitude" : "53.688046",
      "netname" : "giltel",
      "organization" : "Gilan telecomunication company",
      "subnet" : "2.187.16.0/20"
   },
   "ip" : "2.187.23.69",
   "ipv6" : "false",
   "latitude" : "35.6980",
   "location" : "35.6980,51.4115",
   "longitude" : "51.4115",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Iran Telecommunication Company PJS",
   "port" : 7548,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 404,
   "subnet" : "2.187.0.0/17",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
185.120.213.33

Network
185.120.212.0/22

Device

<enterprise field>: device.class

URL

http://185.120.213.33:7548/ 404

ASN
AS58224

Organization
Iran Telecommunication Company PJS

Protocol
http

Source
datascan
Product
Genivia gSOAP 2.7

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
c1e904ca652653e75545ba3ccaed56cf

HTTP Header MD5
cf9e2e81f854821f65e1e1f34c676f69

HTTP Body MD5
dda09448d5ef340322c043138c9af44f

HTTP/1.1 404 Not Found
Server: gSOAP/2.7
Content-Type: text/xml; charset=utf-8
Content-Length: 459
Connection: close

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cwmp="urn:dslforum-org:cwmp-1-0"><SOAP-ENV:Body><SOAP-ENV:Fault><faultcode>SOAP-ENV:Client</faultcode>
<faultstring>HTTP Error: 404 Not Found</faultstring>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:37:33.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "w3.org",
            "xmlsoap.org"
         ],
         "hostname" : [
            "schemas.xmlsoap.org",
            "www.w3.org"
         ],
         "url" : [
            "http://schemas.xmlsoap.org/soap/encoding/",
            "http://schemas.xmlsoap.org/soap/envelope/",
            "http://www.w3.org/2001/XMLSchema",
            "http://www.w3.org/2001/XMLSchema-instance"
         ]
      },
      "http" : {
         "bodymd5" : "dda09448d5ef340322c043138c9af44f",
         "bodymmh3" : -1376936442,
         "headermd5" : "cf9e2e81f854821f65e1e1f34c676f69",
         "headermmh3" : -549546715
      },
      "length" : 583
   },
   "asn" : "AS58224",
   "country" : "IR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\nServer: gSOAP/2.7\r\nContent-Type: text/xml; charset=utf-8\r\nContent-Length: 459\r\nConnection: close\r\n\r\n<SOAP-ENV:Envelope xmlns:SOAP-ENV=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:SOAP-ENC=\"http://schemas.xmlsoap.org/soap/encoding/\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:cwmp=\"urn:dslforum-org:cwmp-1-0\"><SOAP-ENV:Body><SOAP-ENV:Fault><faultcode>SOAP-ENV:Client</faultcode>\r\n<faultstring>HTTP Error: 404 Not Found</faultstring>\r\n</SOAP-ENV:Fault>\r\n</SOAP-ENV:Body>\r\n</SOAP-ENV:Envelope>\r\n",
   "datamd5" : "c1e904ca652653e75545ba3ccaed56cf",
   "datammh3" : 555021997,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "185.120.213.33",
   "ipv6" : "false",
   "latitude" : "35.6980",
   "location" : "35.6980,51.4115",
   "longitude" : "51.4115",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Iran Telecommunication Company PJS",
   "port" : 7548,
   "product" : "gSOAP",
   "productvendor" : "Genivia",
   "productversion" : "2.7",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 404,
   "subnet" : "185.120.212.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
41.71.47.166

Network
41.71.0.0/17

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://41.71.47.166:7548/ 404

ASN
AS37053

Organization
RSAWEB Internet Services

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
tr069 http server

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
27f2bba2f146cdb49cb2ec026d5939e8

HTTP Header MD5
61b31b6c679c206a03dfafe8ee46e018

HTTP Body MD5
4cd45e012b769de5451c14d4a0e5d773

HTTP/1.1 404 Not Found
Date: Thu Nov 21 10:37:28 2024
Server: tr069 http server
Content-Length: 15
Connection: close
Content-Type: text/plain; charset=ISO-8859-1

File not found

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:37:28.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "4cd45e012b769de5451c14d4a0e5d773",
         "bodymmh3" : -1223848615,
         "headermd5" : "61b31b6c679c206a03dfafe8ee46e018",
         "headermmh3" : 712920835
      },
      "length" : 185
   },
   "asn" : "AS37053",
   "city" : "Cape Town",
   "country" : "ZA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\nDate: Thu Nov 21 10:37:28 2024\r\nServer: tr069 http server\r\nContent-Length: 15\r\nConnection: close\r\nContent-Type: text/plain; charset=ISO-8859-1\r\n\r\nFile not found\n",
   "datamd5" : "27f2bba2f146cdb49cb2ec026d5939e8",
   "datammh3" : -1565860993,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS37053",
      "continent" : "AF",
      "continentname" : "Africa",
      "country" : "ZA",
      "countryname" : "South Africa",
      "isineu" : "false",
      "latitude" : "-30.559482",
      "location" : "-30.559482,22.937506",
      "longitude" : "22.937506",
      "netname" : "RSAWEB",
      "organization" : "RSAWEB",
      "subnet" : "41.71.0.0/18"
   },
   "ip" : "41.71.47.166",
   "ipv6" : "false",
   "latitude" : "-33.9100",
   "location" : "-33.9100,18.4304",
   "longitude" : "18.4304",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "RSAWEB Internet Services",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7548,
   "product" : "tr069 http server",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 404,
   "subnet" : "41.71.0.0/17",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
188.54.227.142

Network
188.54.0.0/16

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://188.54.227.142:7548/ 302

ASN
AS25019

Organization
Saudi Telecom Company JSC

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
e93745ea8abf103467e999915a8000be

HTTP Header MD5
ddd52f01ff1a8fcd316f591b36e16519

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 302 Found
Location: /index.php
Content-Length: 0
Connection: close
Date: Wed, 20 Nov 2024 22:36:46 GMT

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:37:07.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "ddd52f01ff1a8fcd316f591b36e16519",
         "headermmh3" : 1413540095
      },
      "length" : 119
   },
   "asn" : "AS25019",
   "city" : "Riyadh",
   "country" : "SA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 302 Found\r\nLocation: /index.php\r\nContent-Length: 0\r\nConnection: close\r\nDate: Wed, 20 Nov 2024 22:36:46 GMT\r\n\r\n",
   "datamd5" : "e93745ea8abf103467e999915a8000be",
   "datammh3" : -753839963,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS25019",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SA",
      "countryname" : "Saudi Arabia",
      "domain" : [
         "stc.com.sa"
      ],
      "isineu" : "false",
      "latitude" : "23.885942",
      "location" : "23.885942,45.079162",
      "longitude" : "45.079162",
      "netname" : "SAUDINET_DSL_POOL",
      "organization" : "Saudinet, Saudi Telecom Company ISP",
      "subnet" : "188.54.0.0/16"
   },
   "ip" : "188.54.227.142",
   "ipv6" : "false",
   "latitude" : "24.6869",
   "location" : "24.6869,46.7224",
   "longitude" : "46.7224",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Saudi Telecom Company JSC",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7548,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Found",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 302,
   "subnet" : "188.54.0.0/16",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
204.242.3.202

Network
204.242.0.0/18

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://204.242.3.202:7548/ 407

ASN
AS6079

Organization
RCN-AS

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
beff904528226673ee6dbdb9e7fe6002

HTTP Header MD5
4bd5a82db187fbf06a2b7f25b880c717

HTTP Body MD5
917a0ae17b6e9db13c448d39f37c69ca

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

Proxy Authentication Required

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:37:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
         "bodymmh3" : -1539650452,
         "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
         "headermmh3" : 372433470
      },
      "length" : 111
   },
   "asn" : "AS6079",
   "city" : "Ashburn",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
   "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
   "datammh3" : 501879459,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS6079",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com",
         "northerncablefiber.com",
         "rackdog.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "RCN",
      "organization" : "NORTHERN CABLE AND FIBER, LLC",
      "subnet" : "204.242.0.0/18"
   },
   "ip" : "204.242.3.202",
   "ipv6" : "false",
   "latitude" : "39.0469",
   "location" : "39.0469,-77.4903",
   "longitude" : "-77.4903",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "RCN-AS",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7548,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "204.242.0.0/18",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
212.115.108.5

Network
212.115.108.0/23

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://212.115.108.5:7548/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS210329

Organization
Kamatera Inc

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 21 Nov 2024 10:36:33 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:36:33.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : 1307453956,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS210329",
   "city" : "Canary Wharf",
   "country" : "GB",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 10:36:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "212.115.108.5",
   "ipv6" : "false",
   "latitude" : "51.5064",
   "location" : "51.5064,-0.0200",
   "longitude" : "-0.0200",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Kamatera Inc",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7548,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "212.115.108.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
2.176.239.144

Network
2.176.0.0/15

Device

<enterprise field>: device.class

URL

http://2.176.239.144:7548/ 400

ASN
AS58224

Organization
Iran Telecommunication Company PJS

Protocol
http

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
99e4e9e719630302e9ddd452a052c21b

HTTP Header MD5
7f0643b43073a70c5eac463fc6fe57c5

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 400 Bad Request
Content-Length: 0
Date: Thu, 21 Nov 2024 10:36:42 GMT

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:36:33.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "7f0643b43073a70c5eac463fc6fe57c5",
         "headermmh3" : 1708108897
      },
      "length" : 84
   },
   "asn" : "AS58224",
   "city" : "Tehran",
   "country" : "IR",
   "data" : "HTTP/1.1 400 Bad Request\r\nContent-Length: 0\r\nDate: Thu, 21 Nov 2024 10:36:42 GMT\r\n\r\n",
   "datamd5" : "99e4e9e719630302e9ddd452a052c21b",
   "datammh3" : 755774535,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS204650",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "IR",
      "countryname" : "Iran",
      "domain" : [
         "tci.ir"
      ],
      "isineu" : "false",
      "latitude" : "32.427908",
      "location" : "32.427908,53.688046",
      "longitude" : "53.688046",
      "netname" : "TCTNET",
      "organization" : "Telecommunication Company of Tehran",
      "subnet" : "2.176.128.0/17"
   },
   "ip" : "2.176.239.144",
   "ipv6" : "false",
   "latitude" : "35.6824",
   "location" : "35.6824,51.4158",
   "longitude" : "51.4158",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Iran Telecommunication Company PJS",
   "port" : 7548,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "2.176.0.0/15",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 164,350 in 0.115 second(s)

154.21.237.189:7548 (tcp/http) - last seen on 2024-11-21 at 10:37:55 UTC

108.165.252.121:7548 (tcp/http) - last seen on 2024-11-21 at 10:37:53 UTC

45.152.186.169:7548 (tcp/http) - last seen on 2024-11-21 at 10:37:45 UTC

2.187.23.69:7548 (tcp/http) - last seen on 2024-11-21 at 10:37:35 UTC

185.120.213.33:7548 (tcp/http) - last seen on 2024-11-21 at 10:37:33 UTC

41.71.47.166:7548 (tcp/http) - last seen on 2024-11-21 at 10:37:28 UTC

188.54.227.142:7548 (tcp/http) - last seen on 2024-11-21 at 10:37:07 UTC

204.242.3.202:7548 (tcp/http) - last seen on 2024-11-21 at 10:37:05 UTC

212.115.108.5:7548 (tcp/http) - last seen on 2024-11-21 at 10:36:33 UTC

2.176.239.144:7548 (tcp/http) - last seen on 2024-11-21 at 10:36:33 UTC