Big Data for Cyber Defense

IP
138.68.44.231

Network
138.68.40.0/21

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

ASN
AS14061

Organization
DIGITALOCEAN-ASN

Protocol
telnet

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
a0208af99d532e1084d6ea1e5462089e

\xff\xfb\x01\xff\xfb\x03\xff\xfc'\xff\xfe\x01\xff\xfd\x03\xff\xfe"\xff\xfd'\xff\xfd\x18\xff\xfe\x1fUsername: GET / HTTP/1.1\x0d
Password: \x0d
welcome\x0d
>Connection: close

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:40.000Z",
   "app" : {
      "length" : 92
   },
   "asn" : "AS14061",
   "city" : "Santa Clara",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfc'\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfe\"\\xff\\xfd'\\xff\\xfd\\x18\\xff\\xfe\\x1fUsername: GET / HTTP/1.1\\x0d\nPassword: \\x0d\nwelcome\\x0d\n>Connection: close",
   "datamd5" : "a0208af99d532e1084d6ea1e5462089e",
   "datammh3" : -1872544805,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS14061",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "digitalocean.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "DIGITALOCEAN-138-68-0-0",
      "organization" : "DigitalOcean, LLC",
      "subnet" : "138.68.40.0/21"
   },
   "ip" : "138.68.44.231",
   "ipv6" : "false",
   "latitude" : "37.3417",
   "location" : "37.3417,-121.9753",
   "longitude" : "-121.9753",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "DIGITALOCEAN-ASN",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8545,
   "protocol" : "telnet",
   "rtt" : 0.043044,
   "seen_date" : "2025-01-08",
   "source" : "datascan",
   "srcip" : "51.81.181.160",
   "srcport" : 47323,
   "subnet" : "138.68.40.0/21",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "ttl" : 49,
   "url" : "/"
}

IP
167.99.240.149

Network
167.99.0.0/16

Device

<enterprise field>: device.class

Operating System
Linux Linux Ubuntu

ASN
AS14061

Organization
DIGITALOCEAN-ASN

Protocol
telnet

Source
datascan
Operating System
Linux Linux Ubuntu

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
a0208af99d532e1084d6ea1e5462089e

\xff\xfb\x01\xff\xfb\x03\xff\xfc'\xff\xfe\x01\xff\xfd\x03\xff\xfe"\xff\xfd'\xff\xfd\x18\xff\xfe\x1fUsername: GET / HTTP/1.1\x0d
Password: \x0d
welcome\x0d
>Connection: close\x0d
>User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:130.0) Gecko/20100101 Firefox/130.0\x0d
>Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\x0d
>Accept-Language: en-US,en;q=0.5\x0d
>\x0d
>

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:20.000Z",
   "app" : {
      "length" : 299
   },
   "asn" : "AS14061",
   "city" : "Frankfurt am Main",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfc'\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfe\"\\xff\\xfd'\\xff\\xfd\\x18\\xff\\xfe\\x1fUsername: GET / HTTP/1.1\\x0d\nPassword: \\x0d\nwelcome\\x0d\n>Connection: close\\x0d\n>User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:130.0) Gecko/20100101 Firefox/130.0\\x0d\n>Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\\x0d\n>Accept-Language: en-US,en;q=0.5\\x0d\n>\\x0d\n>",
   "datamd5" : "a0208af99d532e1084d6ea1e5462089e",
   "datammh3" : -1872544805,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS14061",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "digitalocean.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "DIGITALOCEAN-167-99-0-0",
      "organization" : "DigitalOcean, LLC",
      "subnet" : "167.99.240.0/20"
   },
   "ip" : "167.99.240.149",
   "ipv6" : "false",
   "latitude" : "50.1187",
   "location" : "50.1187,8.6842",
   "longitude" : "8.6842",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "DIGITALOCEAN-ASN",
   "os" : "Linux",
   "osdistribution" : "Ubuntu",
   "osvendor" : "Linux",
   "port" : 1222,
   "protocol" : "telnet",
   "rtt" : 0.422909,
   "seen_date" : "2025-01-08",
   "source" : "datascan",
   "srcip" : "51.81.144.36",
   "srcport" : 49167,
   "subnet" : "167.99.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "ttl" : 44,
   "url" : "/"
}

IP
157.122.184.38

Network
157.122.160.0/19

Device

<enterprise field>: device.class

Operating System
Linux Linux Ubuntu

ASN
AS17816

Organization
China Unicom IP network China169 Guangdong province

Protocol
telnet

Source
datascan
Operating System
Linux Linux Ubuntu

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
038690e70489f93cb3ff227ae8caea95

\xff\xfd\x01\xff\xfd\x1f\xff\xfd!\xff\xfb\x01\xff\xfb\x03H3C login: GET / HTTP/1.1\x0d
Host: <ip>:1234\x0d
Connection: close\x0d
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:130.0) Gecko/20100101 Firefox/130.0\x0d
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\x0d
Accept-Language: en-US,en;q=0.5\x0d
\x0d
Password:

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:18.000Z",
   "app" : {
      "length" : 288
   },
   "asn" : "AS17816",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03H3C login: GET / HTTP/1.1\\x0d\nHost: <ip>:1234\\x0d\nConnection: close\\x0d\nUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:130.0) Gecko/20100101 Firefox/130.0\\x0d\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\\x0d\nAccept-Language: en-US,en;q=0.5\\x0d\n\\x0d\nPassword: ",
   "datamd5" : "038690e70489f93cb3ff227ae8caea95",
   "datammh3" : -148093197,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS17816",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinaunicom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "UNICOM-GD",
      "organization" : "China Unicom Guangdong Province Network",
      "subnet" : "157.122.160.0/19"
   },
   "ip" : "157.122.184.38",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Unicom IP network China169 Guangdong province",
   "os" : "Linux",
   "osdistribution" : "Ubuntu",
   "osvendor" : "Linux",
   "port" : 1234,
   "protocol" : "telnet",
   "rtt" : 0.839389,
   "seen_date" : "2025-01-08",
   "source" : "datascan",
   "srcip" : "15.204.37.17",
   "srcport" : 50857,
   "subnet" : "157.122.160.0/19",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "ttl" : 106,
   "url" : "/"
}

IP

<access denied by policy>

Network

<access denied by policy>

Domain(s)

Operating System

<access denied by policy> <access denied by policy>

Reverse DNS

<access denied by policy>

ASN

<access denied by policy>

Organization

<access denied by policy>

Protocol

<access denied by policy>

Source

<access denied by policy>
Operating System

<access denied by policy> <access denied by policy>

Product

<access denied by policy> <access denied by policy>

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5

<access denied by policy>
```
<access denied by policy>
```

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:18.000Z",
   "app" : "<enterprise field>: app",
   "asn" : "<access denied by policy>",
   "city" : "<access denied by policy>",
   "country" : "<access denied by policy>",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<access denied by policy>",
   "datamd5" : "<access denied by policy>",
   "datammh3" : "<access denied by policy>",
   "device" : "<enterprise field>: device",
   "domain" : "<access denied by policy>",
   "geolocus" : "<enterprise field>: geolocus",
   "host" : "<access denied by policy>",
   "hostname" : "<access denied by policy>",
   "ip" : "<access denied by policy>",
   "ipv6" : "<access denied by policy>",
   "latitude" : "<access denied by policy>",
   "location" : "<access denied by policy>",
   "longitude" : "<access denied by policy>",
   "node" : "<enterprise field>: node",
   "organization" : "<access denied by policy>",
   "os" : "<access denied by policy>",
   "osvendor" : "<access denied by policy>",
   "port" : "<access denied by policy>",
   "product" : "<access denied by policy>",
   "productvendor" : "<access denied by policy>",
   "protocol" : "<access denied by policy>",
   "reverse" : "<access denied by policy>",
   "rtt" : "<access denied by policy>",
   "seen_date" : "<access denied by policy>",
   "source" : "<access denied by policy>",
   "srcip" : "<access denied by policy>",
   "srcport" : "<access denied by policy>",
   "subnet" : "<access denied by policy>",
   "tag" : "<enterprise field>: tag",
   "tld" : "<access denied by policy>",
   "tls" : "<access denied by policy>",
   "transport" : "<access denied by policy>",
   "ttl" : "<access denied by policy>"
}

IP
119.243.67.57

Network
119.240.0.0/14

Domain(s)
mesh.ad.jp

Device

<enterprise field>: device.class

Operating System
FreeBSD FreeBSD

Reverse DNS
fl9-119-243-67-57.tcg.mesh.ad.jp

ASN
AS2518

Organization
BIGLOBE Inc.

Protocol
telnet

Source
datascan
Operating System
FreeBSD FreeBSD

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
1babb642dfd4d1d6b2c955779ca23415

\xff\xfb\x03\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x05\xff\xfd!

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:08.000Z",
   "app" : {
      "length" : 15
   },
   "asn" : "AS2518",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x05\\xff\\xfd!",
   "datamd5" : "1babb642dfd4d1d6b2c955779ca23415",
   "datammh3" : -851396014,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "mesh.ad.jp"
   ],
   "geolocus" : {
      "asn" : "AS2518",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "mesh.ad.jp",
         "nic.ad.jp"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "BIGLOBE",
      "organization" : "BIGLOBE Inc.",
      "subnet" : "119.240.0.0/14"
   },
   "host" : [
      "fl9-119-243-67-57"
   ],
   "hostname" : [
      "fl9-119-243-67-57.tcg.mesh.ad.jp"
   ],
   "ip" : "119.243.67.57",
   "ipv6" : "false",
   "latitude" : "35.6897",
   "location" : "35.6897,139.6895",
   "longitude" : "139.6895",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "BIGLOBE Inc.",
   "os" : "FreeBSD",
   "osvendor" : "FreeBSD",
   "port" : 8090,
   "protocol" : "telnet",
   "reverse" : [
      "fl9-119-243-67-57.tcg.mesh.ad.jp"
   ],
   "rtt" : 0.265486,
   "seen_date" : "2025-01-08",
   "source" : "datascan",
   "srcip" : "51.81.181.175",
   "srcport" : 53629,
   "subdomains" : [
      "tcg.mesh.ad.jp"
   ],
   "subnet" : "119.240.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "ad.jp"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "ttl" : 237,
   "url" : "/"
}

IP
95.173.14.92

Network
95.173.0.0/19

Device

<enterprise field>: device.class

ASN
AS20978

Organization
TT Mobil Iletisim Hizmetleri A.S

Protocol
telnet

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
14946864981ada7885d583bcdd4b48f0

\xff\xfb\x01\xff\xfb\x03\xff\xfd\x18\xff\xfd\x1f

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:07.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS20978",
   "country" : "TR",
   "data" : "\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f",
   "datamd5" : "14946864981ada7885d583bcdd4b48f0",
   "datammh3" : -820559249,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "95.173.14.92",
   "ipv6" : "false",
   "latitude" : "41.0214",
   "location" : "41.0214,28.9948",
   "longitude" : "28.9948",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "TT Mobil Iletisim Hizmetleri A.S",
   "port" : 2004,
   "protocol" : "telnet",
   "rtt" : 0.12293,
   "seen_date" : "2025-01-08",
   "source" : "datascan",
   "srcip" : "5.135.58.193",
   "srcport" : 56805,
   "subnet" : "95.173.0.0/19",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "ttl" : 233,
   "url" : "/"
}

IP
119.244.83.115

Network
119.244.0.0/16

Domain(s)
mesh.ad.jp

Device

<enterprise field>: device.class

Operating System
Linux Linux 2.6.26

Reverse DNS
dcm9-119-244-83-115.tky.mesh.ad.jp

ASN
AS2518

Organization
BIGLOBE Inc.

Protocol
telnet

Source
datascan
Operating System
Linux Linux 2.6.26

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
038690e70489f93cb3ff227ae8caea95

\xff\xfd\x01\xff\xfd\x1f\xff\xfd!\xff\xfb\x01\xff\xfb\x03\x0d\x0d
atmark-dist v1.55.1 (AtmarkTechno/Armadillo-460)\x0d
\x0dLinux 2.6.26-at31 [armv5tejl arch]\x0d
\x0d\x0d
\x0dl^@^K^@^@^@^@^@^@^@^@RHss login:

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:06.000Z",
   "app" : {
      "length" : 142
   },
   "asn" : "AS2518",
   "city" : "Nakano",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\x0d\\x0d\natmark-dist v1.55.1 (AtmarkTechno/Armadillo-460)\\x0d\n\\x0dLinux 2.6.26-at31 [armv5tejl arch]\\x0d\n\\x0d\\x0d\n\\x0dl^@^K^@^@^@^@^@^@^@^@RHss login: ",
   "datamd5" : "038690e70489f93cb3ff227ae8caea95",
   "datammh3" : -148093197,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "mesh.ad.jp"
   ],
   "geolocus" : {
      "asn" : "AS2518",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "mesh.ad.jp",
         "nic.ad.jp"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "BIGLOBE",
      "organization" : "BIGLOBE Inc.",
      "subnet" : "119.244.0.0/16"
   },
   "host" : [
      "dcm9-119-244-83-115"
   ],
   "hostname" : [
      "dcm9-119-244-83-115.tky.mesh.ad.jp"
   ],
   "ip" : "119.244.83.115",
   "ipv6" : "false",
   "latitude" : "35.7040",
   "location" : "35.7040,139.6713",
   "longitude" : "139.6713",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "BIGLOBE Inc.",
   "os" : "Linux",
   "osvendor" : "Linux",
   "osversion" : "2.6.26",
   "port" : 6001,
   "protocol" : "telnet",
   "reverse" : [
      "dcm9-119-244-83-115.tky.mesh.ad.jp"
   ],
   "rtt" : 1.245513,
   "seen_date" : "2025-01-08",
   "source" : "datascan",
   "srcip" : "5.135.58.198",
   "srcport" : 40423,
   "subdomains" : [
      "tky.mesh.ad.jp"
   ],
   "subnet" : "119.244.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "ad.jp"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "ttl" : 51
}

IP
52.195.148.224

Network
52.192.0.0/13

Domain(s)
amazonaws.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

Reverse DNS
ec2-52-195-148-224.ap-northeast-1.compute.amazonaws.com

ASN
AS16509

Organization
AMAZON-02

Protocol
telnet

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
a0208af99d532e1084d6ea1e5462089e

\xff\xfb\x01\xff\xfb\x03\xff\xfc'\xff\xfe\x01\xff\xfd\x03\xff\xfe"\xff\xfd'\xff\xfd\x18\xff\xfe\x1fUsername: ^P^R\x0d
^D ABORT (QUIT)\x0d
Password: \x0d
welcome\x0d
>^B^^^FONYPHE

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:03.000Z",
   "app" : {
      "length" : 94
   },
   "asn" : "AS16509",
   "city" : "Tokyo",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfc'\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfe\"\\xff\\xfd'\\xff\\xfd\\x18\\xff\\xfe\\x1fUsername: ^P^R\\x0d\n^D ABORT (QUIT)\\x0d\nPassword: \\x0d\nwelcome\\x0d\n>^B^^^FONYPHE",
   "datamd5" : "a0208af99d532e1084d6ea1e5462089e",
   "datammh3" : -1872544805,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "AMAZON-NRT",
      "organization" : "Amazon Data Services Japan",
      "subnet" : "52.194.0.0/15"
   },
   "host" : [
      "ec2-52-195-148-224"
   ],
   "hostname" : [
      "ec2-52-195-148-224.ap-northeast-1.compute.amazonaws.com"
   ],
   "ip" : "52.195.148.224",
   "ipv6" : "false",
   "latitude" : "35.6893",
   "location" : "35.6893,139.6899",
   "longitude" : "139.6899",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 1883,
   "protocol" : "telnet",
   "reverse" : [
      "ec2-52-195-148-224.ap-northeast-1.compute.amazonaws.com"
   ],
   "rtt" : 0.224012,
   "seen_date" : "2025-01-08",
   "source" : "datascan",
   "srcip" : "178.32.72.222",
   "srcport" : 49543,
   "subdomains" : [
      "ap-northeast-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "52.192.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "ttl" : 50
}

IP
3.27.230.153

Network
3.24.0.0/14

Domain(s)
amazonaws.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

Reverse DNS
ec2-3-27-230-153.ap-southeast-2.compute.amazonaws.com

ASN
AS16509

Organization
AMAZON-02

Protocol
telnet

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
a0208af99d532e1084d6ea1e5462089e

\xff\xfb\x01\xff\xfb\x03\xff\xfc'\xff\xfe\x01\xff\xfd\x03\xff\xfe"\xff\xfd'\xff\xfd\x18\xff\xfe\x1fUsername: GET / HTTP/1.1\x0d
Password: \x0d
welcome\x0d
>Connection: close

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:03.000Z",
   "app" : {
      "length" : 92
   },
   "asn" : "AS16509",
   "city" : "Sydney",
   "country" : "AU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfc'\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfe\"\\xff\\xfd'\\xff\\xfd\\x18\\xff\\xfe\\x1fUsername: GET / HTTP/1.1\\x0d\nPassword: \\x0d\nwelcome\\x0d\n>Connection: close",
   "datamd5" : "a0208af99d532e1084d6ea1e5462089e",
   "datammh3" : -1872544805,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "domain" : [
         "amazon.com",
         "amazonaws.com"
      ],
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "AMAZO-SYD",
      "organization" : "Amazon Corporate Services Pty Ltd",
      "subnet" : "3.24.0.0/14"
   },
   "host" : [
      "ec2-3-27-230-153"
   ],
   "hostname" : [
      "ec2-3-27-230-153.ap-southeast-2.compute.amazonaws.com"
   ],
   "ip" : "3.27.230.153",
   "ipv6" : "false",
   "latitude" : "-33.8715",
   "location" : "-33.8715,151.2006",
   "longitude" : "151.2006",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 20256,
   "protocol" : "telnet",
   "reverse" : [
      "ec2-3-27-230-153.ap-southeast-2.compute.amazonaws.com"
   ],
   "rtt" : 0.278977,
   "seen_date" : "2025-01-08",
   "source" : "datascan",
   "srcip" : "37.59.165.84",
   "srcport" : 37915,
   "subdomains" : [
      "ap-southeast-2.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "3.24.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "ttl" : 44,
   "url" : "/"
}

IP

<access denied by policy>

Network

<access denied by policy>

Operating System

<access denied by policy> <access denied by policy>

ASN

<access denied by policy>

Organization

<access denied by policy>

Protocol

<access denied by policy>

Source

<access denied by policy>
Operating System

<access denied by policy> <access denied by policy>

Product

<access denied by policy> <access denied by policy>

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5

<access denied by policy>
```
<access denied by policy>
```

{
   "@category" : "datascan",
   "@timestamp" : "2025-01-08T06:12:03.000Z",
   "app" : "<enterprise field>: app",
   "asn" : "<access denied by policy>",
   "city" : "<access denied by policy>",
   "country" : "<access denied by policy>",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<access denied by policy>",
   "datamd5" : "<access denied by policy>",
   "datammh3" : "<access denied by policy>",
   "device" : "<enterprise field>: device",
   "ip" : "<access denied by policy>",
   "ipv6" : "<access denied by policy>",
   "latitude" : "<access denied by policy>",
   "location" : "<access denied by policy>",
   "longitude" : "<access denied by policy>",
   "node" : "<enterprise field>: node",
   "organization" : "<access denied by policy>",
   "os" : "<access denied by policy>",
   "osvendor" : "<access denied by policy>",
   "port" : "<access denied by policy>",
   "product" : "<access denied by policy>",
   "productvendor" : "<access denied by policy>",
   "protocol" : "<access denied by policy>",
   "rtt" : "<access denied by policy>",
   "seen_date" : "<access denied by policy>",
   "source" : "<access denied by policy>",
   "srcip" : "<access denied by policy>",
   "srcport" : "<access denied by policy>",
   "subnet" : "<access denied by policy>",
   "tag" : "<enterprise field>: tag",
   "tls" : "<access denied by policy>",
   "transport" : "<access denied by policy>",
   "ttl" : "<access denied by policy>"
}

Returning 10 result(s) out of 3,184,412 in 0.176 second(s)

138.68.44.231:8545 (tcp/telnet) - last seen on 2025-01-08 at 06:12:40 UTC

167.99.240.149:1222 (tcp/telnet) - last seen on 2025-01-08 at 06:12:20 UTC

157.122.184.38:1234 (tcp/telnet) - last seen on 2025-01-08 at 06:12:18 UTC

<access denied by policy>:<access denied by policy> (<access denied by policy>/<access denied by policy>) - last seen on 2025-01-08 at 06:12:18 UTC

119.243.67.57:8090 (tcp/telnet) - last seen on 2025-01-08 at 06:12:08 UTC

95.173.14.92:2004 (tcp/telnet) - last seen on 2025-01-08 at 06:12:07 UTC

119.244.83.115:6001 (tcp/telnet) - last seen on 2025-01-08 at 06:12:06 UTC

52.195.148.224:1883 (tcp/telnet) - last seen on 2025-01-08 at 06:12:03 UTC

3.27.230.153:20256 (tcp/telnet) - last seen on 2025-01-08 at 06:12:03 UTC

<access denied by policy>:<access denied by policy> (<access denied by policy>/<access denied by policy>) - last seen on 2025-01-08 at 06:12:03 UTC