Returning 10 result(s) out of 3,600 in 0.503 second(s)

  • 80.247.238.69:587 (tcp/smtp) - last seen on 2025-09-06 at 11:04:23 UTC

    • IP
      80.247.238.69
      Alternative IP(s)
      80.247.233.145 80.247.233.146 80.247.238.70
      Network
      80.247.224.0/20
      Domain(s)
      nfrance.com
      Device

      <enterprise field>: device.class

      Operating System
      FreeBSD FreeBSD
      Reverse DNS
      bfc-prod.nfrance.com
      ASN
      AS15826
      Organization
      NFrance Conseil
      Protocol
      smtp
      Source
      datascan
    • Operating System
      FreeBSD FreeBSD
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7152ffdca32f8f456fc426636964fcc1
    • 220 bfc-prod-imap1.lan.nfrance.net JAMES SMTP Server Server (JAMES SMTP Server ) ready
      250-bfc-prod-imap1.lan.nfrance.net Hello <ip> [192.168.38.6])
      250-AUTH LOGIN PLAIN
      250-AUTH=LOGIN PLAIN
      250-PIPELINING
      250-ENHANCEDSTATUSCODES
      250 8BITMIME
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T11:04:23.000Z",
         "alternativeip" : [
            "80.247.233.145",
            "80.247.233.146",
            "80.247.238.70"
         ],
         "app" : {
            "extract" : {
               "ip" : [
                  "192.168.38.6"
               ]
            },
            "length" : 250
         },
         "asn" : "AS15826",
         "country" : "FR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 bfc-prod-imap1.lan.nfrance.net JAMES SMTP Server Server (JAMES SMTP Server ) ready\r\n250-bfc-prod-imap1.lan.nfrance.net Hello <ip> [192.168.38.6])\r\n250-AUTH LOGIN PLAIN\r\n250-AUTH=LOGIN PLAIN\r\n250-PIPELINING\r\n250-ENHANCEDSTATUSCODES\r\n250 8BITMIME\r\n",
         "datamd5" : "7152ffdca32f8f456fc426636964fcc1",
         "datammh3" : 80888708,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "nfrance.com"
         ],
         "geolocus" : {
            "asn" : "AS15826",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "FR",
            "countryname" : "France",
            "domain" : [
               "nfrance.com"
            ],
            "isineu" : "true",
            "latitude" : "46.227638",
            "location" : "46.227638,2.213749",
            "longitude" : "2.213749",
            "netname" : "FR-NFRANCE-20011113",
            "organization" : "NFrance Conseil",
            "subnet" : "80.247.224.0/20"
         },
         "host" : [
            "bfc-prod"
         ],
         "hostname" : [
            "bfc-prod.nfrance.com"
         ],
         "ip" : "80.247.238.69",
         "ipv6" : "false",
         "latitude" : "48.8582",
         "location" : "48.8582,2.3387",
         "longitude" : "2.3387",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "NFrance Conseil",
         "os" : "FreeBSD",
         "osvendor" : "FreeBSD",
         "port" : 587,
         "protocol" : "smtp",
         "reverse" : [
            "bfc-prod.nfrance.com"
         ],
         "rtt" : 0.450578,
         "seen_date" : "2025-09-06",
         "source" : "datascan",
         "srcip" : "45.43.33.210",
         "srcport" : 36599,
         "subnet" : "80.247.224.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 47
      }
      
  • 54.206.162.27:587 (tcp/smtp) - last seen on 2025-09-06 at 10:53:51 UTC

    • IP
      54.206.162.27
      Network
      54.206.0.0/15
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      ec2-54-206-162-27.ap-southeast-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      smtp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ec16a4ffc4bc7bf5730db1a1526cbfc7
    • 220 NAB-MEMS2-AZ2-WEB1-mt.sopranodesign.com JAMES SMTP Server Server (JAMES SMTP Server ) ready
      250-NAB-MEMS2-AZ2-WEB1-mt.sopranodesign.com Hello <ip> [<srcip>])
      250-PIPELINING
      250-ENHANCEDSTATUSCODES
      250-8BITMIME
      250 STARTTLS
      220 2.0.0 Ready to start TLS
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T10:53:51.000Z",
         "app" : {
            "length" : 261
         },
         "asn" : "AS16509",
         "city" : "Sydney",
         "country" : "AU",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 NAB-MEMS2-AZ2-WEB1-mt.sopranodesign.com JAMES SMTP Server Server (JAMES SMTP Server ) ready\r\n250-NAB-MEMS2-AZ2-WEB1-mt.sopranodesign.com Hello <ip> [<srcip>])\r\n250-PIPELINING\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250 STARTTLS\r\n220 2.0.0 Ready to start TLS",
         "datamd5" : "ec16a4ffc4bc7bf5730db1a1526cbfc7",
         "datammh3" : -269109358,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZO-ZSYD3",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "54.206.0.0/16"
         },
         "host" : [
            "ec2-54-206-162-27"
         ],
         "hostname" : [
            "ec2-54-206-162-27.ap-southeast-2.compute.amazonaws.com"
         ],
         "ip" : "54.206.162.27",
         "ipv6" : "false",
         "latitude" : "-33.8672",
         "location" : "-33.8672,151.1997",
         "longitude" : "151.1997",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 587,
         "protocol" : "smtp",
         "reverse" : [
            "ec2-54-206-162-27.ap-southeast-2.compute.amazonaws.com"
         ],
         "rtt" : 0.875623,
         "seen_date" : "2025-09-06",
         "source" : "datascan",
         "srcip" : "139.99.35.45",
         "srcport" : 53873,
         "subdomains" : [
            "ap-southeast-2.compute.amazonaws.com",
            "compute.amazonaws.com"
         ],
         "subnet" : "54.206.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 52
      }
      
  • 1.95.87.52:25 (tcp/smtp) - last seen on 2025-09-06 at 10:52:19 UTC

    • IP
      1.95.87.52
      Network
      1.94.0.0/15
      Domain(s)
      hwclouds-dns.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      ecs-1-95-87-52.compute.hwclouds-dns.com
      ASN
      AS55990
      Organization
      Huawei Cloud Service data center
      Protocol
      smtp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      76fb5f5ad138b06cc788ad6f3d7e2b81
    • 220 flexusx-226866 JAMES SMTP Server Server (JAMES SMTP Server ) ready
      250-flexusx-226866 Hello <ip> [<srcip>])
      250-AUTH LOGIN PLAIN
      250-AUTH=LOGIN PLAIN
      250-PIPELINING
      250-ENHANCEDSTATUSCODES
      250 8BITMIME
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T10:52:19.000Z",
         "app" : {
            "length" : 213
         },
         "asn" : "AS55990",
         "city" : "Guiyang",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 flexusx-226866 JAMES SMTP Server Server (JAMES SMTP Server ) ready\r\n250-flexusx-226866 Hello <ip> [<srcip>])\r\n250-AUTH LOGIN PLAIN\r\n250-AUTH=LOGIN PLAIN\r\n250-PIPELINING\r\n250-ENHANCEDSTATUSCODES\r\n250 8BITMIME\r\n",
         "datamd5" : "76fb5f5ad138b06cc788ad6f3d7e2b81",
         "datammh3" : -834619196,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "hwclouds-dns.com"
         ],
         "geolocus" : {
            "asn" : "AS55990",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnnic.cn",
               "drpeng.com.cn",
               "hwclouds-dns.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "DXTNET",
            "organization" : "Beijing Teletron Telecom Engineering Co., Ltd.",
            "subnet" : "1.95.0.0/16"
         },
         "host" : [
            "ecs-1-95-87-52"
         ],
         "hostname" : [
            "ecs-1-95-87-52.compute.hwclouds-dns.com"
         ],
         "ip" : "1.95.87.52",
         "ipv6" : "false",
         "latitude" : "26.5800",
         "location" : "26.5800,106.7223",
         "longitude" : "106.7223",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Huawei Cloud Service data center",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 25,
         "protocol" : "smtp",
         "reverse" : [
            "ecs-1-95-87-52.compute.hwclouds-dns.com"
         ],
         "rtt" : 0.621852,
         "seen_date" : "2025-09-06",
         "source" : "datascan",
         "srcip" : "91.196.152.86",
         "srcport" : 50265,
         "subdomains" : [
            "compute.hwclouds-dns.com"
         ],
         "subnet" : "1.94.0.0/15",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 40
      }
      
  • 146.56.169.177:587 (tcp/smtp/tls) - last seen on 2025-09-06 at 10:47:29 UTC

    • IP
      146.56.169.177
      Network
      146.56.128.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      ASN
      AS31898
      Organization
      ORACLE-BMC-31898
      Protocol
      smtp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Stockholic
      Issuer Organization
      Stockholic
      Subject Organization
      Stockholic
      Subject Common Name
      Stockholic
      SHA256 Fingerprint
      c28ba6c5d96639d57b73a36ec63ffbfd64e61d6d72f6c60fb7a72d79aefc2c75
      Validity Not Before
      2024-07-21T05:01:46Z
      Validity Not After
      2024-10-19T05:01:46Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8a7fdc43525ff79fe41cdc78a78ccc55
    • 220 cicd JAMES SMTP Server Server (JAMES SMTP Server ) ready
      250-cicd Hello <ip> [192.168.100.1])
      250-AUTH LOGIN PLAIN
      250-AUTH=LOGIN PLAIN
      250-PIPELINING
      250-ENHANCEDSTATUSCODES
      250-8BITMIME
      250 STARTTLS
      220 2.0.0 Ready to start TLS
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T10:47:29.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "192.168.100.1"
               ]
            },
            "length" : 241
         },
         "asn" : "AS31898",
         "ca" : "false",
         "city" : "Seoul",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 cicd JAMES SMTP Server Server (JAMES SMTP Server ) ready\r\n250-cicd Hello <ip> [192.168.100.1])\r\n250-AUTH LOGIN PLAIN\r\n250-AUTH=LOGIN PLAIN\r\n250-PIPELINING\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250 STARTTLS\r\n220 2.0.0 Ready to start TLS",
         "datamd5" : "8a7fdc43525ff79fe41cdc78a78ccc55",
         "datammh3" : 1954848573,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "fingerprint" : {
            "md5" : "1022fd536ff5c36a67ee388834934cf4",
            "sha1" : "802fc671a553d5c1e20b3465b11fbef99e6a2c39",
            "sha256" : "c28ba6c5d96639d57b73a36ec63ffbfd64e61d6d72f6c60fb7a72d79aefc2c75"
         },
         "geolocus" : {
            "asn" : "AS31898",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "oracle.com"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "ORACLECORP",
            "organization" : "Oracle Corporation",
            "subnet" : "146.56.128.0/18"
         },
         "ip" : "146.56.169.177",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Seoul",
            "commonname" : "Stockholic",
            "country" : "KR",
            "organization" : "Stockholic",
            "organizationalunit" : "Unknown"
         },
         "latitude" : "37.5392",
         "location" : "37.5392,126.8605",
         "longitude" : "126.8605",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ORACLE-BMC-31898",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 587,
         "protocol" : "smtp",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "rtt" : 0.166496,
         "seen_date" : "2025-09-06",
         "serial" : "96:7b:0f:59:46:55:4e:04",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "srcip" : "45.43.33.218",
         "srcport" : 42477,
         "subject" : {
            "city" : "Seoul",
            "commonname" : "Stockholic",
            "country" : "KR",
            "organization" : "Stockholic",
            "organizationalunit" : "Unknown"
         },
         "subnet" : "146.56.128.0/18",
         "tag" : "<enterprise field>: tag",
         "tls" : "true",
         "transport" : "tcp",
         "ttl" : 56,
         "validity" : {
            "notafter" : "2024-10-19T05:01:46Z",
            "notbefore" : "2024-07-21T05:01:46Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 210.226.189.165:25 (tcp/smtp) - last seen on 2025-09-06 at 10:38:13 UTC

    • IP
      210.226.189.165
      Network
      210.226.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      ASN
      AS4713
      Organization
      NTT Communications Corporation
      Protocol
      smtp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9b6342595dbceee3d46a5a8c8b9117d7
    • 220 rmsvn SMTP Server (JAMES SMTP Server 2.3.1) ready Sat, 6 Sep 2025 19:38:02 +0900 (JST)
      250-rmsvn Hello <ip> <hostname> [<srcip>])
      250-AUTH LOGIN PLAIN
      250-AUTH=LOGIN PLAIN
      250-PIPELINING
      250 ENHANCEDSTATUSCODES
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T10:38:13.000Z",
         "app" : {
            "length" : 221
         },
         "asn" : "AS4713",
         "city" : "Adachi",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 rmsvn SMTP Server (JAMES SMTP Server 2.3.1) ready Sat, 6 Sep 2025 19:38:02 +0900 (JST)\r\n250-rmsvn Hello <ip> <hostname> [<srcip>])\r\n250-AUTH LOGIN PLAIN\r\n250-AUTH=LOGIN PLAIN\r\n250-PIPELINING\r\n250 ENHANCEDSTATUSCODES\r\n",
         "datamd5" : "9b6342595dbceee3d46a5a8c8b9117d7",
         "datammh3" : -1967106711,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS10013",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "nic.ad.jp"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "JPNIC-NET-JP",
            "organization" : "Japan Network Information Center",
            "subnet" : "210.226.0.0/15"
         },
         "ip" : "210.226.189.165",
         "ipv6" : "false",
         "latitude" : "35.7747",
         "location" : "35.7747,139.7989",
         "longitude" : "139.7989",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "NTT Communications Corporation",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 25,
         "protocol" : "smtp",
         "rtt" : 0.330041,
         "seen_date" : "2025-09-06",
         "source" : "datascan",
         "srcip" : "45.43.33.218",
         "srcport" : 53639,
         "subnet" : "210.226.0.0/15",
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 50
      }
      
  • 13.213.253.190:2525 (tcp/smtp) - last seen on 2025-09-06 at 10:03:41 UTC

    • IP
      13.213.253.190
      Network
      13.208.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      ec2-13-213-253-190.ap-southeast-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      smtp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8b15f81f591ab12fcbe16525e6d6f2a5
    • 220 james-email-0 JAMES SMTP Server Server (JAMES SMTP Server ) ready
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T10:03:41.000Z",
         "app" : {
            "length" : 71
         },
         "asn" : "AS16509",
         "city" : "Singapore",
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 james-email-0 JAMES SMTP Server Server (JAMES SMTP Server ) ready\r\n",
         "datamd5" : "8b15f81f591ab12fcbe16525e6d6f2a5",
         "datammh3" : 49165734,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "SG",
            "countryname" : "Singapore",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "1.352083",
            "location" : "1.352083,103.819836",
            "longitude" : "103.819836",
            "netname" : "AMAZON-SIN",
            "organization" : "Amazon Data Services Singapore",
            "subnet" : "13.212.0.0/15"
         },
         "host" : [
            "ec2-13-213-253-190"
         ],
         "hostname" : [
            "ec2-13-213-253-190.ap-southeast-1.compute.amazonaws.com"
         ],
         "ip" : "13.213.253.190",
         "ipv6" : "false",
         "latitude" : "1.2872",
         "location" : "1.2872,103.8507",
         "longitude" : "103.8507",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 2525,
         "protocol" : "smtp",
         "reverse" : [
            "ec2-13-213-253-190.ap-southeast-1.compute.amazonaws.com"
         ],
         "rtt" : 0.246529,
         "seen_date" : "2025-09-06",
         "source" : "datascan",
         "srcip" : "91.230.168.98",
         "srcport" : 54741,
         "subdomains" : [
            "ap-southeast-1.compute.amazonaws.com",
            "compute.amazonaws.com"
         ],
         "subnet" : "13.208.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 105
      }
      
  • 80.247.224.245:465 (tcp/smtp/tls) - last seen on 2025-09-06 at 09:59:45 UTC

    • IP
      80.247.224.245
      Alternative IP(s)
      80.247.224.244 80.247.238.65 80.247.238.66
      Network
      80.247.224.0/20
      Domain(s)
      auvergnerhonealpes.fr nfrance.com
      Device

      <enterprise field>: device.class

      Operating System
      FreeBSD FreeBSD
      Reverse DNS
      rra-prod.nfrance.com
      ASN
      AS15826
      Organization
      NFrance Conseil
      Protocol
      smtp
      Source
      datascan
    • Operating System
      FreeBSD FreeBSD
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Sectigo Public Server Authentication CA OV R36
      Issuer Organization
      Sectigo Limited
      Subject Organization
      REGION AUVERGNE-RHONE-ALPES
      Subject Common Name
      *.ent.auvergnerhonealpes.fr
      Subject Alt Name
      *.ent.auvergnerhonealpes.fr ent.auvergnerhonealpes.fr
      SHA256 Fingerprint
      b6e7f3fd977ca13375b715fda3e6af5aa03fb52165afc2d9fb0ae6ef1cc38202
      Validity Not Before
      2025-06-26T00:00:00Z
      Validity Not After
      2026-07-27T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      841fcd736d65c8aa2fed81990e2dd863
    • 220 rra-prod-imap1.lan.nfrance.net JAMES SMTP Server Server (JAMES SMTP Server ) ready
      250-rra-prod-imap1.lan.nfrance.net Hello <ip> [192.168.195.2])
      250-AUTH LOGIN PLAIN
      250-AUTH=LOGIN PLAIN
      250-PIPELINING
      250-ENHANCEDSTATUSCODES
      250 8BITMIME
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T09:59:45.000Z",
         "alternativeip" : [
            "80.247.224.244",
            "80.247.238.65",
            "80.247.238.66"
         ],
         "app" : {
            "extract" : {
               "ip" : [
                  "192.168.195.2"
               ]
            },
            "length" : 251
         },
         "asn" : "AS15826",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "FR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 rra-prod-imap1.lan.nfrance.net JAMES SMTP Server Server (JAMES SMTP Server ) ready\r\n250-rra-prod-imap1.lan.nfrance.net Hello <ip> [192.168.195.2])\r\n250-AUTH LOGIN PLAIN\r\n250-AUTH=LOGIN PLAIN\r\n250-PIPELINING\r\n250-ENHANCEDSTATUSCODES\r\n250 8BITMIME\r\n",
         "datamd5" : "841fcd736d65c8aa2fed81990e2dd863",
         "datammh3" : -801765348,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "auvergnerhonealpes.fr",
            "nfrance.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "3d32353f74ba3581aa304728c89b434c",
            "sha1" : "71807af3055662aabe957609dbf822ab778018e4",
            "sha256" : "b6e7f3fd977ca13375b715fda3e6af5aa03fb52165afc2d9fb0ae6ef1cc38202"
         },
         "geolocus" : {
            "asn" : "AS15826",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "FR",
            "countryname" : "France",
            "domain" : [
               "nfrance.com"
            ],
            "isineu" : "true",
            "latitude" : "46.227638",
            "location" : "46.227638,2.213749",
            "longitude" : "2.213749",
            "netname" : "NET-80-247-NFRANCE-03",
            "organization" : "NFRANCE CONSEIL - bloc RIPE 1",
            "subnet" : "80.247.224.240/28"
         },
         "host" : [
            "ent",
            "rra-prod"
         ],
         "hostname" : [
            "ent.auvergnerhonealpes.fr",
            "rra-prod.nfrance.com"
         ],
         "ip" : "80.247.224.245",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Sectigo Public Server Authentication CA OV R36",
            "country" : "GB",
            "organization" : "Sectigo Limited"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "48.8582",
         "location" : "48.8582,2.3387",
         "longitude" : "2.3387",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "NFrance Conseil",
         "os" : "FreeBSD",
         "osvendor" : "FreeBSD",
         "port" : 465,
         "protocol" : "smtp",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "rra-prod.nfrance.com"
         ],
         "rtt" : 1.419176,
         "seen_date" : "2025-09-06",
         "serial" : "eb:2b:82:65:20:f0:25:69:65:b1:88:bc:9d:a1:cc:f7",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "srcip" : "45.43.33.218",
         "srcport" : 40867,
         "subdomains" : [
            "ent.auvergnerhonealpes.fr"
         ],
         "subject" : {
            "altname" : [
               "*.ent.auvergnerhonealpes.fr",
               "ent.auvergnerhonealpes.fr"
            ],
            "commonname" : "*.ent.auvergnerhonealpes.fr",
            "country" : "FR",
            "organization" : "REGION AUVERGNE-RHONE-ALPES"
         },
         "subnet" : "80.247.224.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "fr"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "ttl" : 47,
         "validity" : {
            "notafter" : "2026-07-27T23:59:59Z",
            "notbefore" : "2025-06-26T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 1.95.87.52:25 (tcp/smtp) - last seen on 2025-09-06 at 09:56:46 UTC

    • IP
      1.95.87.52
      Network
      1.94.0.0/15
      Domain(s)
      hwclouds-dns.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      ecs-1-95-87-52.compute.hwclouds-dns.com
      ASN
      AS55990
      Organization
      Huawei Cloud Service data center
      Protocol
      smtp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      76fb5f5ad138b06cc788ad6f3d7e2b81
    • 220 flexusx-226866 JAMES SMTP Server Server (JAMES SMTP Server ) ready
      250-flexusx-226866 Hello <ip> [<srcip>])
      250-AUTH LOGIN PLAIN
      250-AUTH=LOGIN PLAIN
      250-PIPELINING
      250-ENHANCEDSTATUSCODES
      250 8BITMIME
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T09:56:46.000Z",
         "app" : {
            "length" : 213
         },
         "asn" : "AS55990",
         "city" : "Guiyang",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 flexusx-226866 JAMES SMTP Server Server (JAMES SMTP Server ) ready\r\n250-flexusx-226866 Hello <ip> [<srcip>])\r\n250-AUTH LOGIN PLAIN\r\n250-AUTH=LOGIN PLAIN\r\n250-PIPELINING\r\n250-ENHANCEDSTATUSCODES\r\n250 8BITMIME\r\n",
         "datamd5" : "76fb5f5ad138b06cc788ad6f3d7e2b81",
         "datammh3" : -834619196,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "hwclouds-dns.com"
         ],
         "geolocus" : {
            "asn" : "AS55990",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnnic.cn",
               "drpeng.com.cn",
               "hwclouds-dns.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "DXTNET",
            "organization" : "Beijing Teletron Telecom Engineering Co., Ltd.",
            "subnet" : "1.95.0.0/16"
         },
         "host" : [
            "ecs-1-95-87-52"
         ],
         "hostname" : [
            "ecs-1-95-87-52.compute.hwclouds-dns.com"
         ],
         "ip" : "1.95.87.52",
         "ipv6" : "false",
         "latitude" : "26.5800",
         "location" : "26.5800,106.7223",
         "longitude" : "106.7223",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Huawei Cloud Service data center",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 25,
         "protocol" : "smtp",
         "reverse" : [
            "ecs-1-95-87-52.compute.hwclouds-dns.com"
         ],
         "rtt" : 0.283088,
         "seen_date" : "2025-09-06",
         "source" : "datascan",
         "srcip" : "195.184.76.82",
         "srcport" : 49813,
         "subdomains" : [
            "compute.hwclouds-dns.com"
         ],
         "subnet" : "1.94.0.0/15",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 34
      }
      
  • 34.124.188.198:25 (tcp/smtp) - last seen on 2025-09-06 at 09:40:21 UTC

    • IP
      34.124.188.198
      Network
      34.120.0.0/13
      Domain(s)
      googleusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      198.188.124.34.bc.googleusercontent.com
      ASN
      AS396982
      Organization
      GOOGLE-CLOUD-PLATFORM
      Protocol
      smtp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      141e410ecc1596dce0aac9c47567f761
    • 220 tkhd-smallgames SMTP Server (JAMES SMTP Server 2.3.2.1) ready Sat, 6 Sep 2025 09:40:10 +0000 (UTC)
      250-tkhd-smallgames Hello <ip> <hostname> [<srcip>])
      250-AUTH LOGIN PLAIN
      250-AUTH=LOGIN PLAIN
      250-PIPELINING
      250 ENHANCEDSTATUSCODES
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T09:40:21.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "2.3.2.1"
               ]
            },
            "length" : 243
         },
         "asn" : "AS396982",
         "city" : "Singapore",
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 tkhd-smallgames SMTP Server (JAMES SMTP Server 2.3.2.1) ready Sat, 6 Sep 2025 09:40:10 +0000 (UTC)\r\n250-tkhd-smallgames Hello <ip> <hostname> [<srcip>])\r\n250-AUTH LOGIN PLAIN\r\n250-AUTH=LOGIN PLAIN\r\n250-PIPELINING\r\n250 ENHANCEDSTATUSCODES\r\n",
         "datamd5" : "141e410ecc1596dce0aac9c47567f761",
         "datammh3" : 1173104819,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "googleusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS396982",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "google.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "GOOGL-2",
            "organization" : "Google LLC",
            "subnet" : "34.64.0.0/10"
         },
         "host" : [
            198
         ],
         "hostname" : [
            "198.188.124.34.bc.googleusercontent.com"
         ],
         "ip" : "34.124.188.198",
         "ipv6" : "false",
         "latitude" : "1.2872",
         "location" : "1.2872,103.8507",
         "longitude" : "103.8507",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "GOOGLE-CLOUD-PLATFORM",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 25,
         "protocol" : "smtp",
         "reverse" : [
            "198.188.124.34.bc.googleusercontent.com"
         ],
         "rtt" : 0.608685,
         "seen_date" : "2025-09-06",
         "source" : "datascan",
         "srcip" : "91.196.152.60",
         "srcport" : 58633,
         "subdomains" : [
            "124.34.bc.googleusercontent.com",
            "188.124.34.bc.googleusercontent.com",
            "34.bc.googleusercontent.com",
            "bc.googleusercontent.com"
         ],
         "subnet" : "34.120.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 47
      }
      
  • 13.213.253.190:2525 (tcp/smtp) - last seen on 2025-09-06 at 09:38:11 UTC

    • IP
      13.213.253.190
      Network
      13.208.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      ec2-13-213-253-190.ap-southeast-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      smtp
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8b15f81f591ab12fcbe16525e6d6f2a5
    • 220 james-email-0 JAMES SMTP Server Server (JAMES SMTP Server ) ready
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-09-06T09:38:11.000Z",
         "app" : {
            "length" : 71
         },
         "asn" : "AS16509",
         "city" : "Singapore",
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "220 james-email-0 JAMES SMTP Server Server (JAMES SMTP Server ) ready\r\n",
         "datamd5" : "8b15f81f591ab12fcbe16525e6d6f2a5",
         "datammh3" : 49165734,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "SG",
            "countryname" : "Singapore",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "1.352083",
            "location" : "1.352083,103.819836",
            "longitude" : "103.819836",
            "netname" : "AMAZON-SIN",
            "organization" : "Amazon Data Services Singapore",
            "subnet" : "13.212.0.0/15"
         },
         "host" : [
            "ec2-13-213-253-190"
         ],
         "hostname" : [
            "ec2-13-213-253-190.ap-southeast-1.compute.amazonaws.com"
         ],
         "ip" : "13.213.253.190",
         "ipv6" : "false",
         "latitude" : "1.2872",
         "location" : "1.2872,103.8507",
         "longitude" : "103.8507",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 2525,
         "protocol" : "smtp",
         "reverse" : [
            "ec2-13-213-253-190.ap-southeast-1.compute.amazonaws.com"
         ],
         "rtt" : 0.169773,
         "seen_date" : "2025-09-06",
         "source" : "datascan",
         "srcip" : "91.196.152.75",
         "srcport" : 57125,
         "subdomains" : [
            "ap-southeast-1.compute.amazonaws.com",
            "compute.amazonaws.com"
         ],
         "subnet" : "13.208.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 103
      }