ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 3 result(s) out of 3 in 0.021 second(s)

  • 178.92.18.165:30005 (tcp/http) - last seen on 2024-11-01 at 00:36:05 UTC

    • IP
      178.92.18.165
      Network
      178.92.0.0/14
      Domain(s)
      ukrtel.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor

      URL

      http://178.92.18.165:30005/ 401

      Reverse DNS
      165-18-92-178.pool.ukrtel.net
      ASN
      AS6849
      Organization
      JSC Ukrtelecom
      Protocol
      http
      Source
      sniffer
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      ukrtel.net
      Hostname(s)
      165-18-92-178.pool.ukrtel.net
      IP(s)
      178.92.18.165
      Port(s)
      30005 5431 80
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      42edacf0ec49f6ea22b366bb485028b5
      HTTP Header MD5
      307302355f9435d7f05cc7a7b344839e
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="ZGYyMjZhNzY6Njk1NTA4MzY6IGIzNzgzMmU=", qop="auth", algorithm=MD5, opaque="5ccc09c403ebaf9f0171e9517f40e41" 


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T00:36:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "headermd5" : "307302355f9435d7f05cc7a7b344839e",
         "realm" : "IgdAuthentication"
      },
      "length" : "228"
   },
   "asn" : "AS6849",
   "country" : "UA",
   "data" : "HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"ZGYyMjZhNzY6Njk1NTA4MzY6IGIzNzgzMmU=\", qop=\"auth\", algorithm=MD5, opaque=\"5ccc09c403ebaf9f0171e9517f40e41\" \r\n\r\n",
   "datamd5" : "42edacf0ec49f6ea22b366bb485028b5",
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "ukrtel.net"
   ],
   "geolocus" : {
      "asn" : "AS6849",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "UA",
      "countryname" : "Ukraine",
      "domain" : [
         "ukrtel.net",
         "ukrtelecom.ua"
      ],
      "isineu" : "false",
      "latitude" : "48.379433",
      "location" : "48.379433,31.16558",
      "longitude" : "31.16558",
      "netname" : "UKRTELNET-ADSL",
      "organization" : "AGGREGATE BLOCK FOR UKRTELECOM",
      "subnet" : "178.92.0.0/16"
   },
   "host" : [
      "165-18-92-178"
   ],
   "hostname" : [
      "165-18-92-178.pool.ukrtel.net"
   ],
   "ip" : "178.92.18.165",
   "ipv6" : "false",
   "latitude" : "50.4522",
   "location" : "50.4522,30.5287",
   "longitude" : "30.5287",
   "organization" : "JSC Ukrtelecom",
   "port" : "30005",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "165-18-92-178.pool.ukrtel.net"
   ],
   "seen_date" : "2024-11-01",
   "source" : "sniffer",
   "status" : "401",
   "subdomains" : [
      "pool.ukrtel.net"
   ],
   "subnet" : "178.92.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 178.92.18.165:80 (tcp/http) - last seen on 2024-11-01 at 00:36:05 UTC

    • IP
      178.92.18.165
      Network
      178.92.0.0/14
      Domain(s)
      ukrtel.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor

      URL

      http://178.92.18.165/ 401

      HTTP Title
      401 Unauthorized
      Reverse DNS
      165-18-92-178.pool.ukrtel.net
      ASN
      AS6849
      Organization
      JSC Ukrtelecom
      Protocol
      http
      Source
      sniffer
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      ukrtel.net
      Hostname(s)
      165-18-92-178.pool.ukrtel.net
      IP(s)
      178.92.18.165
      Port(s)
      30005 5431 80
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /
    • Product
      ACME micro_httpd
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d2382ce7dcde7cbac39889c978303a9b
      HTTP Header MD5
      ac111c1dd309e2b2ec5b89365ced7ba1
      HTTP Body MD5
      bacf8a0c6f3e702db9be393989b2a0b5 
    • HTTP/1.1 401 Unauthorized
Server: micro_httpd
Cache-Control: no-cache
Date: Fri, 01 Nov 2024 02:36:41 GMT
WWW-Authenticate: Basic realm="Broadband Router"
Content-Type: text/html
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR="#cc9999"><H4>401 Unauthorized</H4>
Authorization required.
<HR>
<ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS>
</BODY></HTML>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T00:36:05.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "acme.com"
         ],
         "hostname" : [
            "www.acme.com"
         ],
         "url" : [
            "http://www.acme.com/software/micro_httpd/"
         ]
      },
      "http" : {
         "bodymd5" : "bacf8a0c6f3e702db9be393989b2a0b5",
         "headermd5" : "ac111c1dd309e2b2ec5b89365ced7ba1",
         "realm" : "Broadband Router",
         "title" : "401 Unauthorized"
      },
      "length" : "438"
   },
   "asn" : "AS6849",
   "country" : "UA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 401 Unauthorized\r\nServer: micro_httpd\r\nCache-Control: no-cache\r\nDate: Fri, 01 Nov 2024 02:36:41 GMT\r\nWWW-Authenticate: Basic realm=\"Broadband Router\"\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR=\"#cc9999\"><H4>401 Unauthorized</H4>\nAuthorization required.\n<HR>\n<ADDRESS><A HREF=\"http://www.acme.com/software/micro_httpd/\">micro_httpd</A></ADDRESS>\n</BODY></HTML>\n",
   "datamd5" : "d2382ce7dcde7cbac39889c978303a9b",
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "ukrtel.net"
   ],
   "geolocus" : {
      "asn" : "AS6849",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "UA",
      "countryname" : "Ukraine",
      "domain" : [
         "ukrtel.net",
         "ukrtelecom.ua"
      ],
      "isineu" : "false",
      "latitude" : "48.379433",
      "location" : "48.379433,31.16558",
      "longitude" : "31.16558",
      "netname" : "UKRTELNET-ADSL",
      "organization" : "AGGREGATE BLOCK FOR UKRTELECOM",
      "subnet" : "178.92.0.0/16"
   },
   "host" : [
      "165-18-92-178"
   ],
   "hostname" : [
      "165-18-92-178.pool.ukrtel.net"
   ],
   "ip" : "178.92.18.165",
   "ipv6" : "false",
   "latitude" : "50.4522",
   "location" : "50.4522,30.5287",
   "longitude" : "30.5287",
   "organization" : "JSC Ukrtelecom",
   "port" : "80",
   "product" : "micro_httpd",
   "productvendor" : "ACME",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Unauthorized",
   "reverse" : [
      "165-18-92-178.pool.ukrtel.net"
   ],
   "seen_date" : "2024-11-01",
   "source" : "sniffer",
   "status" : "401",
   "subdomains" : [
      "pool.ukrtel.net"
   ],
   "subnet" : "178.92.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 178.92.18.165:5431 (tcp/http) - last seen on 2024-11-01 at 00:36:05 UTC

    • IP
      178.92.18.165
      Network
      178.92.0.0/14
      Domain(s)
      ukrtel.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux 2.4
      URL

      http://178.92.18.165:5431/ 404

      Reverse DNS
      165-18-92-178.pool.ukrtel.net
      ASN
      AS6849
      Organization
      JSC Ukrtelecom
      Protocol
      http
      Source
      sniffer
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      ukrtel.net
      Hostname(s)
      165-18-92-178.pool.ukrtel.net
      IP(s)
      178.92.18.165
      Port(s)
      30005 5431 80
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /
    • Operating System
      Linux Linux 2.4

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      37306169ee9ef778ed8bf616b90c7ea0
      HTTP Header MD5
      6b35a75d1aff27c4a97738e7cae530ee
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e 
    • HTTP/1.1 404 Not Found
DATE: Fri, 01 Nov 2024 02:36:40 GMT
Connection: Keep-Alive
Server: LINUX/2.4 UPnP/1.0 BRCM400/1.0
Content-Length: 0
Content-Type: text/xml; charset="utf-8"
EXT:


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T00:36:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "headermd5" : "6b35a75d1aff27c4a97738e7cae530ee"
      },
      "length" : "193"
   },
   "asn" : "AS6849",
   "country" : "UA",
   "data" : "HTTP/1.1 404 Not Found\r\nDATE: Fri, 01 Nov 2024 02:36:40 GMT\r\nConnection: Keep-Alive\r\nServer: LINUX/2.4 UPnP/1.0 BRCM400/1.0\r\nContent-Length: 0\r\nContent-Type: text/xml; charset=\"utf-8\"\r\nEXT:\r\n\r\n",
   "datamd5" : "37306169ee9ef778ed8bf616b90c7ea0",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ukrtel.net"
   ],
   "geolocus" : {
      "asn" : "AS6849",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "UA",
      "countryname" : "Ukraine",
      "domain" : [
         "ukrtel.net",
         "ukrtelecom.ua"
      ],
      "isineu" : "false",
      "latitude" : "48.379433",
      "location" : "48.379433,31.16558",
      "longitude" : "31.16558",
      "netname" : "UKRTELNET-ADSL",
      "organization" : "AGGREGATE BLOCK FOR UKRTELECOM",
      "subnet" : "178.92.0.0/16"
   },
   "host" : [
      "165-18-92-178"
   ],
   "hostname" : [
      "165-18-92-178.pool.ukrtel.net"
   ],
   "ip" : "178.92.18.165",
   "ipv6" : "false",
   "latitude" : "50.4522",
   "location" : "50.4522,30.5287",
   "longitude" : "30.5287",
   "organization" : "JSC Ukrtelecom",
   "os" : "Linux",
   "osvendor" : "Linux",
   "osversion" : "2.4",
   "port" : "5431",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "reverse" : [
      "165-18-92-178.pool.ukrtel.net"
   ],
   "seen_date" : "2024-11-01",
   "source" : "sniffer",
   "status" : "404",
   "subdomains" : [
      "pool.ukrtel.net"
   ],
   "subnet" : "178.92.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}