Returning 10 result(s) out of 21 in 0.119 second(s)

  • 47.243.181.62:8013 (tcp/http/tls) - last seen on 2024-11-21 at 09:48:24 UTC

    • IP
      47.243.181.62
      Network
      47.240.0.0/14
      Domain(s)
      990aaa.org
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://47.243.181.62:8013/ 200

      ASN
      AS45102
      Organization
      Alibaba US Technology Co., Ltd.
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      E6
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      hk1.990aaa.org
      Subject Alt Name
      hk1.990aaa.org
      SHA256 Fingerprint
      5616efefa695eb728e827ddaa134ae95db20e5b744f1d07ba16837bd6efa63b0
      Validity Not Before
      2024-10-16T20:21:44Z
      Validity Not After
      2025-01-14T20:21:43Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:48:24.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -1017859736
            },
            "length" : 487
         },
         "asn" : "AS45102",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Hong Kong",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "990aaa.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "09965984d191360b63716ec885e90c3e",
            "sha1" : "22dec32ca146210d17225a2c778f36663c5ef843",
            "sha256" : "5616efefa695eb728e827ddaa134ae95db20e5b744f1d07ba16837bd6efa63b0"
         },
         "geolocus" : {
            "asn" : "AS45102",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "alibaba-inc.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AL-3",
            "organization" : "Alibaba Cloud LLC",
            "subnet" : "47.242.0.0/15"
         },
         "host" : [
            "hk1"
         ],
         "hostname" : [
            "hk1.990aaa.org"
         ],
         "ip" : "47.243.181.62",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "E6",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "22.2842",
         "location" : "22.2842,114.1759",
         "longitude" : "114.1759",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Alibaba US Technology Co., Ltd.",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "id-ecPublicKey",
            "length" : 256
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "04:a4:28:75:37:27:14:d0:95:cf:c0:63:f5:37:5a:ac:d7:24",
         "signature" : {
            "algorithm" : "ecdsa-with-SHA384"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "hk1.990aaa.org"
            ],
            "commonname" : "hk1.990aaa.org"
         },
         "subnet" : "47.240.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-01-14T20:21:43Z",
            "notbefore" : "2024-10-16T20:21:44Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 219.143.147.2:8013 (tcp/http/tls) - last seen on 2024-11-21 at 08:30:04 UTC

    • IP
      219.143.147.2
      Network
      219.143.0.0/16
      Domain(s)
      163data.com.cn
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://219.143.147.2:8013/ 200

      Reverse DNS
      2.147.143.219.broad.bj.bj.dynamic.163data.com.cn
      ASN
      AS4847
      Organization
      China Networks Inter-Exchange
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      unierm
      Subject Common Name
      unierm
      Subject Alt Name
      unierm
      SHA256 Fingerprint
      b0f59deba2af8c1a369d3c3b1cd07fa19b8cbaf8ab18202f15cd652d25d7c0da
      Validity Not Before
      2020-05-22T12:29:03Z
      Validity Not After
      2030-05-20T12:29:03Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:30:04.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -1017859736
            },
            "length" : 487
         },
         "asn" : "AS4847",
         "ca" : "false",
         "city" : "Beijing",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "163data.com.cn"
         ],
         "fingerprint" : {
            "md5" : "49d10c4ed43b6f15a68450866c527bb7",
            "sha1" : "8629e49fac223227de53adfd0dcac1edf66b0c3e",
            "sha256" : "b0f59deba2af8c1a369d3c3b1cd07fa19b8cbaf8ab18202f15cd652d25d7c0da"
         },
         "geolocus" : {
            "asn" : "AS4847",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163data.com.cn",
               "bjtelecom.net",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "BEijing-Telecom-IDC",
            "organization" : "Beijing Telecom IDC",
            "subnet" : "219.143.0.0/16"
         },
         "host" : [
            2
         ],
         "hostname" : [
            "2.147.143.219.broad.bj.bj.dynamic.163data.com.cn"
         ],
         "ip" : "219.143.147.2",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "unierm"
         },
         "latitude" : "39.9110",
         "location" : "39.9110,116.3950",
         "longitude" : "116.3950",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Networks Inter-Exchange",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "2.147.143.219.broad.bj.bj.dynamic.163data.com.cn"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "e7:dd:aa:a4:6c:b5:da:95",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "bj.dynamic.163data.com.cn",
            "bj.bj.dynamic.163data.com.cn",
            "dynamic.163data.com.cn",
            "broad.bj.bj.dynamic.163data.com.cn",
            "147.143.219.broad.bj.bj.dynamic.163data.com.cn",
            "219.broad.bj.bj.dynamic.163data.com.cn",
            "143.219.broad.bj.bj.dynamic.163data.com.cn"
         ],
         "subject" : {
            "altname" : [
               "unierm"
            ],
            "commonname" : "unierm"
         },
         "subnet" : "219.143.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com.cn"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2030-05-20T12:29:03Z",
            "notbefore" : "2020-05-22T12:29:03Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 101.32.37.116:8013 (tcp/http/tls) - last seen on 2024-11-21 at 06:08:43 UTC

    • IP
      101.32.37.116
      Network
      101.32.0.0/16
      Domain(s)
      990aaa.org
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://101.32.37.116:8013/ 200

      ASN
      AS132203
      Organization
      Tencent Building, Kejizhongyi Avenue
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      E6
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      txhk1.990aaa.org
      Subject Alt Name
      txhk1.990aaa.org
      SHA256 Fingerprint
      6129171a1ccf12a2da1ee392340f7c3ccb3ba8086d9e6618181ed52a8a006c8d
      Validity Not Before
      2024-09-28T15:22:44Z
      Validity Not After
      2024-12-27T15:22:43Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T06:08:43.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -565362670
            },
            "length" : 477
         },
         "asn" : "AS132203",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Hong Kong",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "990aaa.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "0bd9a35984093b005811066f1f6370d8",
            "sha1" : "bbb569ecea45887d4a28be184832da7618f34982",
            "sha256" : "6129171a1ccf12a2da1ee392340f7c3ccb3ba8086d9e6618181ed52a8a006c8d"
         },
         "geolocus" : {
            "asn" : "AS132203",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "ACEVILLEPTELTD-SG",
            "organization" : "ACEVILLE PTE.LTD.",
            "subnet" : "101.32.0.0/18"
         },
         "host" : [
            "txhk1"
         ],
         "hostname" : [
            "txhk1.990aaa.org"
         ],
         "ip" : "101.32.37.116",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "E6",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "22.2842",
         "location" : "22.2842,114.1759",
         "longitude" : "114.1759",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Tencent Building, Kejizhongyi Avenue",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "id-ecPublicKey",
            "length" : 256
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "04:85:66:69:6d:df:73:17:f6:5d:d0:23:59:f9:c1:b1:9e:75",
         "signature" : {
            "algorithm" : "ecdsa-with-SHA384"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "txhk1.990aaa.org"
            ],
            "commonname" : "txhk1.990aaa.org"
         },
         "subnet" : "101.32.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2024-12-27T15:22:43Z",
            "notbefore" : "2024-09-28T15:22:44Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 43.163.226.75:8013 (tcp/http/tls) - last seen on 2024-11-21 at 03:05:13 UTC

    • IP
      43.163.226.75
      Network
      43.162.0.0/15
      Domain(s)
      990aaa.org
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://43.163.226.75:8013/ 200

      ASN
      AS132203
      Organization
      Tencent Building, Kejizhongyi Avenue
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      E5
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      jp2.990aaa.org
      Subject Alt Name
      jp2.990aaa.org
      SHA256 Fingerprint
      d6cf551dbe9f2726150c227184cf819ed941fba43f990c50ef63e52c3b2be01a
      Validity Not Before
      2024-09-17T15:37:42Z
      Validity Not After
      2024-12-16T15:37:41Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T03:05:13.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -1017859736
            },
            "length" : 487
         },
         "asn" : "AS132203",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Tokyo",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "990aaa.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "3d42fa2c0f02778d0dcbdd6b0cb7f2ab",
            "sha1" : "d43ed6ed708bf92e1aa6a487058627fbc6d0eebc",
            "sha256" : "d6cf551dbe9f2726150c227184cf819ed941fba43f990c50ef63e52c3b2be01a"
         },
         "geolocus" : {
            "asn" : "AS132203",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "ACEVILLEPTELTD-SG",
            "organization" : "ACEVILLE PTE.LTD.",
            "subnet" : "43.163.224.0/19"
         },
         "host" : [
            "jp2"
         ],
         "hostname" : [
            "jp2.990aaa.org"
         ],
         "ip" : "43.163.226.75",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "E5",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "35.6893",
         "location" : "35.6893,139.6899",
         "longitude" : "139.6899",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Tencent Building, Kejizhongyi Avenue",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "id-ecPublicKey",
            "length" : 256
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "04:10:c7:b7:f9:c7:61:0e:49:e7:98:20:e0:65:6f:7f:10:a7",
         "signature" : {
            "algorithm" : "ecdsa-with-SHA384"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "jp2.990aaa.org"
            ],
            "commonname" : "jp2.990aaa.org"
         },
         "subnet" : "43.162.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2024-12-16T15:37:41Z",
            "notbefore" : "2024-09-17T15:37:42Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 54.255.193.145:8013 (tcp/http/tls) - last seen on 2024-11-20 at 22:25:46 UTC

    • IP
      54.255.193.145
      Network
      54.248.0.0/13
      Domain(s)
      990aaa.org amazonaws.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://54.255.193.145:8013/ 200

      Reverse DNS
      ec2-54-255-193-145.ap-southeast-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      R3
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      awsg1.990aaa.org
      Subject Alt Name
      awsg1.990aaa.org
      SHA256 Fingerprint
      9be6b536844d2291f52ade4ad36391bf08baaa7da22a3c8142df2a03bafc4485
      Validity Not Before
      2023-12-30T17:03:19Z
      Validity Not After
      2024-03-29T17:03:18Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T22:25:46.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -1017859736
            },
            "length" : 487
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Singapore",
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "990aaa.org",
            "amazonaws.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "a3883d924220f4119138356fad10e4e5",
            "sha1" : "86e6e4f04e3ee0300000080cabe0eb5ef3d0277f",
            "sha256" : "9be6b536844d2291f52ade4ad36391bf08baaa7da22a3c8142df2a03bafc4485"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "AMAZON-ASIA-SIN3",
            "organization" : "Amazon Data Services Japan",
            "subnet" : "54.255.0.0/16"
         },
         "host" : [
            "awsg1",
            "ec2-54-255-193-145"
         ],
         "hostname" : [
            "awsg1.990aaa.org",
            "ec2-54-255-193-145.ap-southeast-1.compute.amazonaws.com"
         ],
         "ip" : "54.255.193.145",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "R3",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "1.2868",
         "location" : "1.2868,103.8503",
         "longitude" : "103.8503",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "id-ecPublicKey",
            "length" : 384
         },
         "reason" : "OK",
         "reverse" : [
            "ec2-54-255-193-145.ap-southeast-1.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-20",
         "serial" : "04:6f:e5:38:62:75:ac:e5:c6:0d:ac:ed:26:f1:3f:1e:40:ee",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "ap-southeast-1.compute.amazonaws.com",
            "compute.amazonaws.com"
         ],
         "subject" : {
            "altname" : [
               "awsg1.990aaa.org"
            ],
            "commonname" : "awsg1.990aaa.org"
         },
         "subnet" : "54.248.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2024-03-29T17:03:18Z",
            "notbefore" : "2023-12-30T17:03:19Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 43.131.241.138:8013 (tcp/http/tls) - last seen on 2024-11-20 at 16:22:58 UTC

    • IP
      43.131.241.138
      Network
      43.131.224.0/19
      Domain(s)
      990aaa.org
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://43.131.241.138:8013/ 200

      ASN
      AS132203
      Organization
      Tencent Building, Kejizhongyi Avenue
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      E6
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      kr1.990aaa.org
      Subject Alt Name
      kr1.990aaa.org
      SHA256 Fingerprint
      8391bf55de7c5127a87d31cdb5da14e9d4210f9b28af75c981b7f7c2c9e17861
      Validity Not Before
      2024-09-07T11:33:43Z
      Validity Not After
      2024-12-06T11:33:42Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T16:22:58.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -1017859736
            },
            "length" : 487
         },
         "asn" : "AS132203",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Seoul",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "990aaa.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "56e6f8ec6fa5ea5892b717a0fd54bc96",
            "sha1" : "088e470eb70715b351f749d50e137cea01307a9c",
            "sha256" : "8391bf55de7c5127a87d31cdb5da14e9d4210f9b28af75c981b7f7c2c9e17861"
         },
         "geolocus" : {
            "asn" : "AS132203",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "ACEVILLEPTELTD-SG",
            "organization" : "ACEVILLE PTE.LTD.",
            "subnet" : "43.131.224.0/19"
         },
         "host" : [
            "kr1"
         ],
         "hostname" : [
            "kr1.990aaa.org"
         ],
         "ip" : "43.131.241.138",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "E6",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "37.5794",
         "location" : "37.5794,126.9754",
         "longitude" : "126.9754",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Tencent Building, Kejizhongyi Avenue",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "id-ecPublicKey",
            "length" : 256
         },
         "reason" : "OK",
         "seen_date" : "2024-11-20",
         "serial" : "04:0e:05:8e:d9:f6:ef:f6:cd:6a:e4:05:91:b7:ba:7a:6f:af",
         "signature" : {
            "algorithm" : "ecdsa-with-SHA384"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "kr1.990aaa.org"
            ],
            "commonname" : "kr1.990aaa.org"
         },
         "subnet" : "43.131.224.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2024-12-06T11:33:42Z",
            "notbefore" : "2024-09-07T11:33:43Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 43.134.231.66:8013 (tcp/http/tls) - last seen on 2024-11-18 at 12:20:59 UTC

    • IP
      43.134.231.66
      Network
      43.134.0.0/16
      Domain(s)
      990aaa.org
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://43.134.231.66:8013/ 200

      ASN
      AS132203
      Organization
      Tencent Building, Kejizhongyi Avenue
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      E6
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      sg1.990aaa.org
      Subject Alt Name
      sg1.990aaa.org
      SHA256 Fingerprint
      b91d5bf3b5dab7ed1258bda14c3791e122a45c9f28de307b9f81c3842594d1f6
      Validity Not Before
      2024-10-01T02:00:44Z
      Validity Not After
      2024-12-30T02:00:43Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-18T12:20:59.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -1017859736
            },
            "length" : 487
         },
         "asn" : "AS132203",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Singapore",
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "990aaa.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "2cf594468fb82167a5a5c11e5cea47c9",
            "sha1" : "369e87237d747490667f001df1554876f9e961ff",
            "sha256" : "b91d5bf3b5dab7ed1258bda14c3791e122a45c9f28de307b9f81c3842594d1f6"
         },
         "geolocus" : {
            "asn" : "AS132203",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "SG",
            "countryname" : "Singapore",
            "domain" : [
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "1.352083",
            "location" : "1.352083,103.819836",
            "longitude" : "103.819836",
            "netname" : "ACEVILLEPTELTD-SG",
            "organization" : "ACEVILLE PTE.LTD.",
            "subnet" : "43.134.224.0/19"
         },
         "host" : [
            "sg1"
         ],
         "hostname" : [
            "sg1.990aaa.org"
         ],
         "ip" : "43.134.231.66",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "E6",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "1.2868",
         "location" : "1.2868,103.8503",
         "longitude" : "103.8503",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Tencent Building, Kejizhongyi Avenue",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "id-ecPublicKey",
            "length" : 256
         },
         "reason" : "OK",
         "seen_date" : "2024-11-18",
         "serial" : "03:2c:3f:dd:21:1e:83:f1:6e:fe:f6:4f:1b:c3:4d:28:fb:d2",
         "signature" : {
            "algorithm" : "ecdsa-with-SHA384"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "sg1.990aaa.org"
            ],
            "commonname" : "sg1.990aaa.org"
         },
         "subnet" : "43.134.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2024-12-30T02:00:43Z",
            "notbefore" : "2024-10-01T02:00:44Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 108.181.7.44:8013 (tcp/http/tls) - last seen on 2024-11-18 at 06:17:55 UTC

    • IP
      108.181.7.44
      Alternative IP(s)
      195.54.171.181 74.117.56.170
      Network
      108.181.0.0/17
      Domain(s)
      990aaa.org psychz.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://108.181.7.44:8013/ 200

      Reverse DNS
      unassigned.psychz.net
      ASN
      AS40676
      Organization
      AS40676
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      E6
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      hkb.990aaa.org
      Subject Alt Name
      hkb.990aaa.org
      SHA256 Fingerprint
      ffb707ff747e62e17c5e683cf1fb098affe7c5726b88ca8bd160603041a91bcb
      Validity Not Before
      2024-10-04T01:49:50Z
      Validity Not After
      2025-01-02T01:49:49Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-18T06:17:55.000Z",
         "alternativeip" : [
            "195.54.171.181",
            "74.117.56.170"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -1017859736
            },
            "length" : 487
         },
         "asn" : "AS40676",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Los Angeles",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "990aaa.org",
            "psychz.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "cbef454e5adf2ad3eeabcdfa6e4114da",
            "sha1" : "b734c1f09d531e86c0ab98b2fc396a7d1f54ebc7",
            "sha256" : "ffb707ff747e62e17c5e683cf1fb098affe7c5726b88ca8bd160603041a91bcb"
         },
         "geolocus" : {
            "asn" : "AS40676",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "psychz.net",
               "telus.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "PROFUSE",
            "organization" : "Psychz Networks",
            "subnet" : "108.181.0.0/19"
         },
         "host" : [
            "hkb",
            "unassigned"
         ],
         "hostname" : [
            "hkb.990aaa.org",
            "unassigned.psychz.net"
         ],
         "ip" : "108.181.7.44",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "E6",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "34.0544",
         "location" : "34.0544,-118.2441",
         "longitude" : "-118.2441",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS40676",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "id-ecPublicKey",
            "length" : 256
         },
         "reason" : "OK",
         "reverse" : [
            "unassigned.psychz.net"
         ],
         "seen_date" : "2024-11-18",
         "serial" : "04:50:16:62:f0:fe:d6:6b:16:eb:0e:a1:99:8e:2e:4d:7c:7f",
         "signature" : {
            "algorithm" : "ecdsa-with-SHA384"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "hkb.990aaa.org"
            ],
            "commonname" : "hkb.990aaa.org"
         },
         "subnet" : "108.181.0.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net",
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-01-02T01:49:49Z",
            "notbefore" : "2024-10-04T01:49:50Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 195.54.171.181:8013 (tcp/http/tls) - last seen on 2024-11-16 at 04:12:44 UTC

    • IP
      195.54.171.181
      Network
      195.54.170.0/23
      Domain(s)
      990aaa.org
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://195.54.171.181:8013/ 200

      ASN
      AS9009
      Organization
      M247 Europe SRL
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      E6
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      hkb.990aaa.org
      Subject Alt Name
      hkb.990aaa.org
      SHA256 Fingerprint
      ffb707ff747e62e17c5e683cf1fb098affe7c5726b88ca8bd160603041a91bcb
      Validity Not Before
      2024-10-04T01:49:50Z
      Validity Not After
      2025-01-02T01:49:49Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-16T04:12:44.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -1017859736
            },
            "length" : 487
         },
         "asn" : "AS9009",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Hong Kong",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "990aaa.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "cbef454e5adf2ad3eeabcdfa6e4114da",
            "sha1" : "b734c1f09d531e86c0ab98b2fc396a7d1f54ebc7",
            "sha256" : "ffb707ff747e62e17c5e683cf1fb098affe7c5726b88ca8bd160603041a91bcb"
         },
         "host" : [
            "hkb"
         ],
         "hostname" : [
            "hkb.990aaa.org"
         ],
         "ip" : "195.54.171.181",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "E6",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "22.2842",
         "location" : "22.2842,114.1759",
         "longitude" : "114.1759",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "M247 Europe SRL",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "id-ecPublicKey",
            "length" : 256
         },
         "reason" : "OK",
         "seen_date" : "2024-11-16",
         "serial" : "04:50:16:62:f0:fe:d6:6b:16:eb:0e:a1:99:8e:2e:4d:7c:7f",
         "signature" : {
            "algorithm" : "ecdsa-with-SHA384"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "hkb.990aaa.org"
            ],
            "commonname" : "hkb.990aaa.org"
         },
         "subnet" : "195.54.170.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-01-02T01:49:49Z",
            "notbefore" : "2024-10-04T01:49:50Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 43.131.241.138:8013 (tcp/http/tls) - last seen on 2024-11-15 at 22:08:47 UTC

    • IP
      43.131.241.138
      Network
      43.131.224.0/19
      Domain(s)
      990aaa.org
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      https://43.131.241.138:8013/ 200

      ASN
      AS132203
      Organization
      Tencent Building, Kejizhongyi Avenue
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      E6
      Issuer Organization
      Let's Encrypt
      Subject Common Name
      kr1.990aaa.org
      Subject Alt Name
      kr1.990aaa.org
      SHA256 Fingerprint
      8391bf55de7c5127a87d31cdb5da14e9d4210f9b28af75c981b7f7c2c9e17861
      Validity Not Before
      2024-09-07T11:33:43Z
      Validity Not After
      2024-12-06T11:33:42Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      343b52be457ade5ea53a9e5d19fe10cb
      HTTP Header MD5
      f3f0f3c077ed0c7a95605037d5629200
      HTTP Body MD5
      da8d8cdd87111962f9de1b5d0797d655
    • HTTP/1.1 200 OK
      Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
      Content-Type: text/xml
      Content-Length: 306
      X-Transcend-Version: 1
      
      <?xml version="1.0" encoding="UTF-8"?>
      <config-auth client="vpn" type="auth-request">
      <version who="sg">0.1(1)</version>
      <auth id="main">
      <message>Please enter your username.</message>
      <form method="post" action="/auth">
      <input type="text" name="username" label="Username:" />
      </form></auth>
      </config-auth>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-15T22:08:47.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da8d8cdd87111962f9de1b5d0797d655",
               "bodymmh3" : 704940430,
               "headermd5" : "f3f0f3c077ed0c7a95605037d5629200",
               "headermmh3" : -1017859736
            },
            "length" : 487
         },
         "asn" : "AS132203",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Seoul",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly\r\nContent-Type: text/xml\r\nContent-Length: 306\r\nX-Transcend-Version: 1\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<config-auth client=\"vpn\" type=\"auth-request\">\n<version who=\"sg\">0.1(1)</version>\n<auth id=\"main\">\n<message>Please enter your username.</message>\n<form method=\"post\" action=\"/auth\">\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n</form></auth>\n</config-auth>",
         "datamd5" : "343b52be457ade5ea53a9e5d19fe10cb",
         "datammh3" : -651420844,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "990aaa.org"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "56e6f8ec6fa5ea5892b717a0fd54bc96",
            "sha1" : "088e470eb70715b351f749d50e137cea01307a9c",
            "sha256" : "8391bf55de7c5127a87d31cdb5da14e9d4210f9b28af75c981b7f7c2c9e17861"
         },
         "geolocus" : {
            "asn" : "AS132203",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "ACEVILLEPTELTD-SG",
            "organization" : "ACEVILLE PTE.LTD.",
            "subnet" : "43.131.224.0/19"
         },
         "host" : [
            "kr1"
         ],
         "hostname" : [
            "kr1.990aaa.org"
         ],
         "ip" : "43.131.241.138",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "E6",
            "country" : "US",
            "organization" : "Let's Encrypt"
         },
         "keyusage" : [
            "digitalSignature"
         ],
         "latitude" : "37.5794",
         "location" : "37.5794,126.9754",
         "longitude" : "126.9754",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Tencent Building, Kejizhongyi Avenue",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 8013,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "id-ecPublicKey",
            "length" : 256
         },
         "reason" : "OK",
         "seen_date" : "2024-11-15",
         "serial" : "04:0e:05:8e:d9:f6:ef:f6:cd:6a:e4:05:91:b7:ba:7a:6f:af",
         "signature" : {
            "algorithm" : "ecdsa-with-SHA384"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "kr1.990aaa.org"
            ],
            "commonname" : "kr1.990aaa.org"
         },
         "subnet" : "43.131.224.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2024-12-06T11:33:42Z",
            "notbefore" : "2024-09-07T11:33:43Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }