ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 1 result(s) out of 1 in 0.109 second(s)

  • 216.59.187.10:5061 (tcp/sip/tls) - last seen on 2024-10-28 at 05:17:12 UTC

    • IP
      216.59.187.10
      Network
      216.59.160.0/19
      Domain(s)
      mhcable.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      sip.meta.mhcable.com
      ASN
      AS32953
      Organization
      MHCV-AS1
      Protocol
      sip Cert not expired sip
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • Issuer Common Name
      Go Daddy Secure Certificate Authority - G2
      Issuer Organization
      GoDaddy.com, Inc.
      Subject Common Name
      sip.meta.mhcable.com
      Subject Alt Name
      sip.meta.mhcable.com www.sip.meta.mhcable.com
      SHA256 Fingerprint
      c5f2e92830901b0415e23536467410526a501dfd0ca9eb237dd5f4cdede0f979
      Validity Not Before
      2024-06-12T11:35:26Z
      Validity Not After
      2025-07-14T11:35:26Z

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8c8c46cdf3f3380df65936afc6de8bee 
    • SIP/2.0 400 Bad Request\x0d
Warning: 399 sip "Missing Via"\x0d
Host: <ip>:5061\x0d
Connection: close\x0d
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:130.0) Gecko/20100101 Firefox/130.0\x0d
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\x0d
Accept-Language: en-US,en;q=0.5\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-10-28T05:17:12.000Z",
   "app" : {
      "length" : 293
   },
   "asn" : "AS32953",
   "basicconstraints" : "critical",
   "ca" : "false",
   "city" : "Catskill",
   "country" : "US",
   "data" : "SIP/2.0 400 Bad Request\\x0d\nWarning: 399 sip \"Missing Via\"\\x0d\nHost: <ip>:5061\\x0d\nConnection: close\\x0d\nUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:130.0) Gecko/20100101 Firefox/130.0\\x0d\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\\x0d\nAccept-Language: en-US,en;q=0.5\\x0d\n\\x0d\n",
   "datamd5" : "8c8c46cdf3f3380df65936afc6de8bee",
   "datammh3" : -1115542879,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "mhcable.com"
   ],
   "extkeyusage" : [
      "serverAuth",
      "clientAuth"
   ],
   "fingerprint" : {
      "md5" : "d64bd2392ef7fb50113e9081c4e986cf",
      "sha1" : "0cceaa529115550491fdfcf908787b45ad5c62a3",
      "sha256" : "c5f2e92830901b0415e23536467410526a501dfd0ca9eb237dd5f4cdede0f979"
   },
   "geolocus" : {
      "asn" : "AS32953",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "mhcable.com",
         "mid-hudson.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "MHCV",
      "organization" : "Mid-Hudson Cablevision, Inc.",
      "subnet" : "216.59.160.0/19"
   },
   "host" : [
      "sip",
      "www"
   ],
   "hostname" : [
      "sip.meta.mhcable.com",
      "www.sip.meta.mhcable.com"
   ],
   "ip" : "216.59.187.10",
   "ipv6" : "false",
   "issuer" : {
      "city" : "Scottsdale",
      "commonname" : "Go Daddy Secure Certificate Authority - G2",
      "country" : "US",
      "organization" : "GoDaddy.com, Inc.",
      "organizationalunit" : "http://certs.godaddy.com/repository/"
   },
   "keyusage" : [
      "digitalSignature",
      "keyEncipherment"
   ],
   "latitude" : "42.2215",
   "location" : "42.2215,-73.8889",
   "longitude" : "-73.8889",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "MHCV-AS1",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 5061,
   "protocol" : "sip",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "reverse" : [
      "sip.meta.mhcable.com"
   ],
   "seen_date" : "2024-10-28",
   "serial" : "2f:0c:fc:77:e9:5d:99:48",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "subdomains" : [
      "meta.mhcable.com",
      "sip.meta.mhcable.com"
   ],
   "subject" : {
      "altname" : [
         "sip.meta.mhcable.com",
         "www.sip.meta.mhcable.com"
      ],
      "commonname" : "sip.meta.mhcable.com"
   },
   "subnet" : "216.59.160.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "true",
   "transport" : "tcp",
   "url" : "/",
   "validity" : {
      "notafter" : "2025-07-14T11:35:26Z",
      "notbefore" : "2024-06-12T11:35:26Z"
   },
   "version" : "v3",
   "wildcard" : "false"
}