ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 5,010 in 0.063 second(s)

  • 45.163.67.222:8043 (tcp/http) - last seen on 2024-11-21 at 10:26:08 UTC

    • IP
      45.163.67.222
      Network
      45.163.64.0/22
      Device

      <enterprise field>: device.class

      URL

      http://45.163.67.222:8043/ 400

      ASN
      AS268554
      Organization
      CDM TELECOM
      Protocol
      http
      Source
      datascan::redirect::1

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:26:08.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS268554",
   "city" : "Caldazinha",
   "country" : "BR",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "forward" : "45.163.67.222",
   "geolocus" : {
      "asn" : "AS268554",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "cert.br",
         "gmail.com",
         "hotmail.com"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "12.238.443/0001-02",
      "organization" : "TULIUS SILVESTER CARVALHO DE MORAIS - ME",
      "subnet" : "45.163.64.0/22"
   },
   "hostname" : [
      "45.163.67.222"
   ],
   "ip" : "45.163.67.222",
   "ipv6" : "false",
   "latitude" : "-16.7494",
   "location" : "-16.7494,-49.0009",
   "longitude" : "-49.0009",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CDM TELECOM",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "seen_date" : "2024-11-21",
   "source" : "datascan::redirect::1",
   "status" : 400,
   "subnet" : "45.163.64.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 35.202.238.23:8043 (tcp/http) - last seen on 2024-11-21 at 10:26:07 UTC

    • IP
      35.202.238.23
      Network
      35.200.0.0/14
      Domain(s)
      googleusercontent.com
      Device

      <enterprise field>: device.class

      URL

      http://35.202.238.23:8043/ 400

      Reverse DNS
      23.238.202.35.bc.googleusercontent.com
      ASN
      AS396982
      Organization
      GOOGLE-CLOUD-PLATFORM
      Protocol
      http
      Source
      datascan::redirect::1

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:26:07.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS396982",
   "city" : "Council Bluffs",
   "country" : "US",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "googleusercontent.com"
   ],
   "forward" : "35.202.238.23",
   "geolocus" : {
      "asn" : "AS396982",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "google.com",
         "googleusercontent.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "GOOGLE-CLOUD",
      "organization" : "Google LLC",
      "subnet" : "35.202.0.0/16"
   },
   "host" : [
      23
   ],
   "hostname" : [
      "23.238.202.35.bc.googleusercontent.com",
      "35.202.238.23"
   ],
   "ip" : "35.202.238.23",
   "ipv6" : "false",
   "latitude" : "41.2591",
   "location" : "41.2591,-95.8517",
   "longitude" : "-95.8517",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "GOOGLE-CLOUD-PLATFORM",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "23.238.202.35.bc.googleusercontent.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan::redirect::1",
   "status" : 400,
   "subdomains" : [
      "238.202.35.bc.googleusercontent.com",
      "202.35.bc.googleusercontent.com",
      "35.bc.googleusercontent.com",
      "bc.googleusercontent.com"
   ],
   "subnet" : "35.200.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 77.171.52.175:8043 (tcp/http) - last seen on 2024-11-21 at 10:22:06 UTC

    • IP
      77.171.52.175
      Network
      77.168.0.0/13
      Domain(s)
      kpn.net
      Device

      <enterprise field>: device.class

      URL

      http://77.171.52.175:8043/ 400

      Reverse DNS
      77-171-52-175.fixed.kpn.net
      ASN
      AS1136
      Organization
      KPN B.V.
      Protocol
      http
      Source
      datascan::redirect::1

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:22:06.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS1136",
   "city" : "Geldrop",
   "country" : "NL",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "kpn.net"
   ],
   "forward" : "77.171.52.175",
   "host" : [
      "77-171-52-175"
   ],
   "hostname" : [
      "77-171-52-175.fixed.kpn.net",
      "77.171.52.175"
   ],
   "ip" : "77.171.52.175",
   "ipv6" : "false",
   "latitude" : "51.4332",
   "location" : "51.4332,5.5602",
   "longitude" : "5.5602",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "KPN B.V.",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "77-171-52-175.fixed.kpn.net"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan::redirect::1",
   "status" : 400,
   "subdomains" : [
      "fixed.kpn.net"
   ],
   "subnet" : "77.168.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 144.202.67.149:8043 (tcp/http) - last seen on 2024-11-21 at 10:22:00 UTC

    • IP
      144.202.67.149
      Network
      144.202.0.0/17
      Domain(s)
      vultrusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://144.202.67.149:8043/ 400

      Reverse DNS
      144.202.67.149.vultrusercontent.com
      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:22:00.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS20473",
   "city" : "Dallas",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vultrusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "constant.com",
         "vultr.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NET-144-202-0-0-23",
      "organization" : "Vultr Holdings, LLC",
      "subnet" : "144.202.0.0/17"
   },
   "host" : [
      144
   ],
   "hostname" : [
      "144.202.67.149.vultrusercontent.com"
   ],
   "ip" : "144.202.67.149",
   "ipv6" : "false",
   "latitude" : "32.7889",
   "location" : "32.7889,-96.8021",
   "longitude" : "-96.8021",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "144.202.67.149.vultrusercontent.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "149.vultrusercontent.com",
      "202.67.149.vultrusercontent.com",
      "67.149.vultrusercontent.com"
   ],
   "subnet" : "144.202.0.0/17",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 44.223.219.160:8043 (tcp/http) - last seen on 2024-11-21 at 10:18:08 UTC

    • IP
      44.223.219.160
      Network
      44.192.0.0/11
      Domain(s)
      qualityhealthnd.org
      Device

      <enterprise field>: device.class

      URL

      http://44.223.219.160:8043/ 400

      Reverse DNS
      qualityhealthnd.org
      ASN
      AS14618
      Organization
      AMAZON-AES
      Protocol
      http
      Source
      datascan::redirect::1

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:18:08.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS14618",
   "city" : "Ashburn",
   "country" : "US",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "qualityhealthnd.org"
   ],
   "forward" : "44.223.219.160",
   "geolocus" : {
      "asn" : "AS14618",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AMAZON-IAD",
      "organization" : "Amazon Data Services NoVa",
      "subnet" : "44.192.0.0/11"
   },
   "hostname" : [
      "44.223.219.160",
      "qualityhealthnd.org"
   ],
   "ip" : "44.223.219.160",
   "ipv6" : "false",
   "latitude" : "39.0469",
   "location" : "39.0469,-77.4903",
   "longitude" : "-77.4903",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-AES",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "qualityhealthnd.org"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan::redirect::1",
   "status" : 400,
   "subnet" : "44.192.0.0/11",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "org"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 199.47.149.72:8043 (tcp/http) - last seen on 2024-11-21 at 10:12:21 UTC

    • IP
      199.47.149.72
      Network
      199.47.148.0/23
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://199.47.149.72:8043/ 400

      ASN
      AS204631
      Organization
      VIVANET GmbH
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:12:21.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS204631",
   "country" : "CA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS53636",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "CH",
      "countryname" : "Switzerland",
      "domain" : [
         "xerio.ch",
         "xerio.net"
      ],
      "isineu" : "false",
      "latitude" : "46.818188",
      "location" : "46.818188,8.227512",
      "longitude" : "8.227512",
      "netname" : "199-47-148-0-XERIO-CH",
      "organization" : "Xerio GmbH",
      "subnet" : "199.47.148.0/23"
   },
   "ip" : "199.47.149.72",
   "ipv6" : "false",
   "latitude" : "43.6319",
   "location" : "43.6319,-79.3716",
   "longitude" : "-79.3716",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "VIVANET GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "199.47.148.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 178.208.10.21:8043 (tcp/http) - last seen on 2024-11-21 at 10:10:10 UTC

    • IP
      178.208.10.21
      Network
      178.208.0.0/19
      Domain(s)
      leonix.net
      Device

      <enterprise field>: device.class

      URL

      http://178.208.10.21:8043/ 400

      Reverse DNS
      21.10.208.178.rev.leonix.net
      ASN
      AS50628
      Organization
      Always On SAS
      Protocol
      http
      Source
      datascan::redirect::1

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:10:10.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS50628",
   "city" : "Paris",
   "country" : "FR",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "leonix.net"
   ],
   "forward" : "178.208.10.21",
   "host" : [
      21
   ],
   "hostname" : [
      "178.208.10.21",
      "21.10.208.178.rev.leonix.net"
   ],
   "ip" : "178.208.10.21",
   "ipv6" : "false",
   "latitude" : "48.8323",
   "location" : "48.8323,2.4075",
   "longitude" : "2.4075",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Always On SAS",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "21.10.208.178.rev.leonix.net"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan::redirect::1",
   "status" : 400,
   "subdomains" : [
      "rev.leonix.net",
      "178.rev.leonix.net",
      "10.208.178.rev.leonix.net",
      "208.178.rev.leonix.net"
   ],
   "subnet" : "178.208.0.0/19",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 1.202.249.126:8043 (tcp/http) - last seen on 2024-11-21 at 10:02:30 UTC

    • IP
      1.202.249.126
      Network
      1.202.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://1.202.249.126:8043/ 400

      ASN
      AS4847
      Organization
      China Networks Inter-Exchange
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:02:30.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS4847",
   "city" : "Beijing",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4847",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "bjtelecom.net",
         "chinatelecom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-BJ",
      "organization" : "CHINANET Beijing Province Network",
      "subnet" : "1.202.0.0/16"
   },
   "ip" : "1.202.249.126",
   "ipv6" : "false",
   "latitude" : "39.9110",
   "location" : "39.9110,116.3950",
   "longitude" : "116.3950",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Networks Inter-Exchange",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "1.202.0.0/16",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 177.155.128.3:8043 (tcp/http) - last seen on 2024-11-21 at 09:54:19 UTC

    • IP
      177.155.128.3
      Network
      177.155.128.0/20
      Domain(s)
      gegnet.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://177.155.128.3:8043/ 400

      Reverse DNS
      177-155-128-3.gegnet.com.br
      ASN
      AS53062
      Organization
      ALT|GGNET TELECOM BACKBONE
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T09:54:19.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS53062",
   "city" : "Tijucas",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "gegnet.com.br"
   ],
   "geolocus" : {
      "asn" : "AS53062",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "cert.br",
         "gegnet.com.br",
         "net.br"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "04.873.690/0001-44",
      "organization" : "GGNET TELECOM BACKBONE",
      "subnet" : "177.155.128.0/20"
   },
   "host" : [
      "177-155-128-3"
   ],
   "hostname" : [
      "177-155-128-3.gegnet.com.br"
   ],
   "ip" : "177.155.128.3",
   "ipv6" : "false",
   "latitude" : "-27.2492",
   "location" : "-27.2492,-48.7174",
   "longitude" : "-48.7174",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ALT|GGNET TELECOM BACKBONE",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "177-155-128-3.gegnet.com.br"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "177.155.128.0/20",
   "tld" : [
      "com.br"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 148.243.132.93:8043 (tcp/http) - last seen on 2024-11-21 at 09:51:07 UTC

    • IP
      148.243.132.93
      Network
      148.243.128.0/20
      Domain(s)
      axtel.net
      Device

      <enterprise field>: device.class

      URL

      http://148.243.132.93:8043/ 400

      Reverse DNS
      148-243-132-93.static.axtel.net
      ASN
      AS6503
      Organization
      Axtel, S.A.B. de C.V.
      Protocol
      http
      Source
      datascan::redirect::1

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bd933a926de9d9a8dd8992a468aa4b06
      HTTP Header MD5
      c97a40b207b58a030b7e6218ddc027ab
      HTTP Body MD5
      00bd1919cd6e866a50f1172fcabdddd0 
    • HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T09:51:07.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS6503",
   "city" : "Ciudad L\u00f3pez Mateos",
   "country" : "MX",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "axtel.net"
   ],
   "forward" : "148.243.132.93",
   "host" : [
      "148-243-132-93"
   ],
   "hostname" : [
      "148-243-132-93.static.axtel.net",
      "148.243.132.93"
   ],
   "ip" : "148.243.132.93",
   "ipv6" : "false",
   "latitude" : "19.5641",
   "location" : "19.5641,-99.2783",
   "longitude" : "-99.2783",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Axtel, S.A.B. de C.V.",
   "port" : 8043,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reverse" : [
      "148-243-132-93.static.axtel.net"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan::redirect::1",
   "status" : 400,
   "subdomains" : [
      "static.axtel.net"
   ],
   "subnet" : "148.243.128.0/20",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}