ONYPHE - Cyber Defense Search Engine

Summary view

Latest 10 results (maximum) for datascan category:

89.58.26.77:8081 (tcp) - v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-21 at 14:40:58

Linked domain(s): adobe.com, purl.org, w3.org
Domain(s): supersrv.de
Protocol: http
Source: favicon
HTTP URL: http://89.58.26.77:8081/favicon.ico 200

Hardware & software

HTTP component(s): expressjs Express

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Geolocus asn: AS197540
Geolocus netname: DE-NETCUP-20051123
Geolocus organization: netcup GmbH
Geolocus subnet: 89.58.0.0/18
Hostname: v2202201165704175234.supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

Analytic pivot(s)

HTTP body MD5: ce84d26bca93ef35f31700d4bb21ade1
HTTP header MD5: ba8797ad498d90b7c77c4bf29d68c3f1
Data MD5: 246e629267c597b96c364e5393071af3

{
   "subnet" : "89.58.24.0/22",
   "tld" : [
      "de"
   ],
   "app" : {
      "length" : "4096",
      "http" : {
         "component" : [
            {
               "productvendor" : "expressjs",
               "product" : "Express"
            }
         ],
         "bodymmh3" : -806792710,
         "headermmh3" : 103442813,
         "header" : [
            {
               "value" : "45b7-Itt7973BapCwv6XW/jdcxJVpnNQ",
               "name" : "ETag"
            }
         ],
         "headermd5" : "ba8797ad498d90b7c77c4bf29d68c3f1",
         "bodymd5" : "ce84d26bca93ef35f31700d4bb21ade1"
      },
      "extract" : {
         "domain" : [
            "w3.org",
            "purl.org",
            "adobe.com"
         ],
         "hostname" : [
            "ns.adobe.com",
            "purl.org",
            "www.w3.org"
         ],
         "url" : [
            "http://ns.adobe.com/xap/1.0/sType/ResourceEvent",
            "http://ns.adobe.com/xap/1.0/",
            "http://ns.adobe.com/photoshop/1.0/",
            "http://purl.org/dc/elements/1.1/",
            "http://ns.adobe.com/exif/1.0/",
            "http://ns.adobe.com/tiff/1.0/",
            "http://ns.adobe.com/xap/1.0/mm/",
            "http://www.w3.org/1999/02/22-rdf-syntax-ns"
         ]
      }
   },
   "location" : "51.2993,9.4910",
   "protocolversion" : "1.1",
   "hostname" : [
      "v2202201165704175234.supersrv.de"
   ],
   "status" : "200",
   "domain" : [
      "supersrv.de"
   ],
   "@category" : "datascan",
   "ip" : "89.58.26.77",
   "reason" : "OK",
   "ipv6" : "false",
   "tls" : "false",
   "url" : "/favicon.ico",
   "country" : "DE",
   "asn" : "AS197540",
   "source" : "favicon",
   "transport" : "tcp",
   "reverse" : [
      "v2202201165704175234.supersrv.de"
   ],
   "protocol" : "http",
   "host" : [
      "v2202201165704175234"
   ],
   "datammh3" : 480458317,
   "geolocus" : {
      "organization" : "netcup GmbH",
      "continent" : "EU",
      "domain" : [
         "netcup.de"
      ],
      "longitude" : "10.451526",
      "countryname" : "Germany",
      "latitude" : "51.165691",
      "isineu" : "true",
      "netname" : "DE-NETCUP-20051123",
      "asn" : "AS197540",
      "location" : "51.165691,10.451526",
      "subnet" : "89.58.0.0/18",
      "country" : "DE",
      "continentname" : "Europe"
   },
   "port" : 8081,
   "@timestamp" : "2022-06-21T14:40:58.000Z",
   "datamd5" : "246e629267c597b96c364e5393071af3",
   "organization" : "netcup GmbH"
}

89.58.26.77:8081 (tcp) - v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-21 at 13:03:08

HTTP title: Home - Mongo Express
Domain(s): supersrv.de
Protocol: http
Source: datascan
HTTP URL: http://89.58.26.77:8081/ 200

Hardware & software

OS: Linux Linux Kernel
HTTP component(s): expressjs Express, mongo-express project mongo-express

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Geolocus asn: AS197540
Geolocus netname: DE-NETCUP-20051123
Geolocus organization: netcup GmbH
Geolocus subnet: 89.58.0.0/18
Hostname: v2202201165704175234.supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

Analytic pivot(s)

HTTP body MD5: 64e4093aca2cbf12c89280a98707ea47
HTTP header MD5: 60e050dbe6bb954b58ee21b7c4637e55
Data MD5: 560c6f00f5ed2947f6f48368632ed315

{
   "host" : [
      "v2202201165704175234"
   ],
   "reverse" : [
      "v2202201165704175234.supersrv.de"
   ],
   "protocol" : "http",
   "datamd5" : "560c6f00f5ed2947f6f48368632ed315",
   "organization" : "netcup GmbH",
   "datammh3" : -59241550,
   "geolocus" : {
      "latitude" : "51.165691",
      "continentname" : "Europe",
      "country" : "DE",
      "subnet" : "89.58.0.0/18",
      "location" : "51.165691,10.451526",
      "netname" : "DE-NETCUP-20051123",
      "asn" : "AS197540",
      "isineu" : "true",
      "continent" : "EU",
      "organization" : "netcup GmbH",
      "domain" : [
         "netcup.de"
      ],
      "countryname" : "Germany",
      "longitude" : "10.451526"
   },
   "port" : 8081,
   "@timestamp" : "2022-06-21T13:03:08.000Z",
   "source" : "datascan",
   "asn" : "AS197540",
   "transport" : "tcp",
   "country" : "DE",
   "osvendor" : "Linux",
   "os" : "Linux Kernel",
   "reason" : "OK",
   "@category" : "datascan",
   "domain" : [
      "supersrv.de"
   ],
   "ip" : "89.58.26.77",
   "url" : "/",
   "tls" : "false",
   "ipv6" : "false",
   "app" : {
      "length" : "4096",
      "http" : {
         "component" : [
            {
               "product" : "mongo-express",
               "productvendor" : "mongo-express project"
            },
            {
               "product" : "Express",
               "productvendor" : "expressjs"
            }
         ],
         "bodymd5" : "64e4093aca2cbf12c89280a98707ea47",
         "headermd5" : "60e050dbe6bb954b58ee21b7c4637e55",
         "header" : [
            {
               "name" : "ETag",
               "value" : "W/\"1ef8-mhPT6nvISDhIMGxYZiaG7qkrxu0"
            }
         ],
         "headermmh3" : 1718409603,
         "bodymmh3" : -2052629523,
         "title" : "Home - Mongo Express"
      }
   },
   "location" : "51.2993,9.4910",
   "subnet" : "89.58.24.0/22",
   "tld" : [
      "de"
   ],
   "hostname" : [
      "v2202201165704175234.supersrv.de"
   ],
   "status" : "200",
   "protocolversion" : "1.1"
}

89.58.26.77:80 (tcp) - v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-19 at 08:33:56

Linked domain(s): googleapis.com, jsdelivr.net, w3.org
HTTP description: 7
HTTP title: Radsportlife
Domain(s): supersrv.de
Protocol: http
Source: datascan
HTTP URL: http://89.58.26.77/ 200

Hardware & software

OS: Linux Linux Kernel

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Geolocus asn: AS197540
Geolocus netname: DE-NETCUP-20051123
Geolocus organization: netcup GmbH
Geolocus subnet: 89.58.0.0/18
Hostname: v2202201165704175234.supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

Analytic pivot(s)

HTTP body MD5: 1588bb77285a70ffa154fe4787d92181
HTTP header MD5: 259907bd341cc8db21f4844bade5397b
Data MD5: 4c8c8d033b5844929f9db27667b2e80a

{
   "transport" : "tcp",
   "asn" : "AS197540",
   "source" : "datascan",
   "osvendor" : "Linux",
   "country" : "DE",
   "os" : "Linux Kernel",
   "host" : [
      "v2202201165704175234"
   ],
   "protocol" : "http",
   "reverse" : [
      "v2202201165704175234.supersrv.de"
   ],
   "organization" : "netcup GmbH",
   "datamd5" : "4c8c8d033b5844929f9db27667b2e80a",
   "@timestamp" : "2022-06-19T08:33:56.000Z",
   "port" : 80,
   "datammh3" : 602443399,
   "geolocus" : {
      "asn" : "AS197540",
      "netname" : "DE-NETCUP-20051123",
      "isineu" : "true",
      "location" : "51.165691,10.451526",
      "country" : "DE",
      "subnet" : "89.58.0.0/18",
      "continentname" : "Europe",
      "latitude" : "51.165691",
      "longitude" : "10.451526",
      "countryname" : "Germany",
      "domain" : [
         "netcup.de"
      ],
      "organization" : "netcup GmbH",
      "continent" : "EU"
   },
   "app" : {
      "extract" : {
         "domain" : [
            "w3.org",
            "jsdelivr.net",
            "googleapis.com"
         ],
         "hostname" : [
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "www.w3.org"
         ],
         "url" : [
            "http://www.w3.org/2000/svg",
            "https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css",
            "https://fonts.googleapis.com/css2?family=Roboto:wght@300&amp;display=swap"
         ]
      },
      "http" : {
         "headermd5" : "259907bd341cc8db21f4844bade5397b",
         "header" : [
            {
               "name" : "ETag",
               "value" : "1274-TEc3nejCgsuGPw8A9lkPoetZ/7w"
            }
         ],
         "bodymd5" : "1588bb77285a70ffa154fe4787d92181",
         "title" : "Radsportlife",
         "headermmh3" : 796801387,
         "description" : "7",
         "bodymmh3" : -1861714053
      },
      "length" : "4096"
   },
   "location" : "51.2993,9.4910",
   "tld" : [
      "de"
   ],
   "subnet" : "89.58.24.0/22",
   "status" : "200",
   "hostname" : [
      "v2202201165704175234.supersrv.de"
   ],
   "protocolversion" : "1.1",
   "reason" : "OK",
   "ip" : "89.58.26.77",
   "domain" : [
      "supersrv.de"
   ],
   "@category" : "datascan",
   "url" : "/",
   "ipv6" : "false",
   "tls" : "false"
}

89.58.26.77:22 (tcp) - v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-06 at 17:59:50

Domain(s): supersrv.de
Protocol: ssh
Source: datascan

Hardware & software

OS: Linux Linux (Debian)
Product: OpenBSD OpenSSH 7.9

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Geolocus asn: AS197540
Geolocus netname: DE-NETCUP-20051123
Geolocus organization: netcup GmbH
Geolocus subnet: 89.58.0.0/18
Hostname: v2202201165704175234.supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

Analytic pivot(s)

Data MD5: 88eda005d0d1987783e7b664b620d2ea

{
   "@category" : "datascan",
   "domain" : [
      "supersrv.de"
   ],
   "ip" : "89.58.26.77",
   "productvendor" : "OpenBSD",
   "ipv6" : "false",
   "tls" : "false",
   "app" : {
      "length" : "41"
   },
   "location" : "51.2993,9.4910",
   "subnet" : "89.58.24.0/22",
   "product" : "OpenSSH",
   "tld" : [
      "de"
   ],
   "hostname" : [
      "v2202201165704175234.supersrv.de"
   ],
   "protocolversion" : "2.0",
   "osdistribution" : "Debian",
   "host" : [
      "v2202201165704175234"
   ],
   "protocol" : "ssh",
   "reverse" : [
      "v2202201165704175234.supersrv.de"
   ],
   "datamd5" : "88eda005d0d1987783e7b664b620d2ea",
   "organization" : "netcup GmbH",
   "geolocus" : {
      "domain" : [
         "netcup.de"
      ],
      "countryname" : "Germany",
      "longitude" : "10.451526",
      "continent" : "EU",
      "organization" : "netcup GmbH",
      "continentname" : "Europe",
      "country" : "DE",
      "subnet" : "89.58.0.0/18",
      "location" : "51.165691,10.451526",
      "asn" : "AS197540",
      "netname" : "DE-NETCUP-20051123",
      "isineu" : "true",
      "latitude" : "51.165691"
   },
   "datammh3" : 1937738909,
   "port" : 22,
   "@timestamp" : "2022-06-06T17:59:50.000Z",
   "asn" : "AS197540",
   "source" : "datascan",
   "transport" : "tcp",
   "country" : "DE",
   "osvendor" : "Linux",
   "productversion" : "7.9",
   "os" : "Linux"
}

Latest 10 results (maximum) for geoloc category:

89.58.24.0/22 - hosted at "netcup GmbH" - last seen on 2022-06-25 at 00:14:45

Country: DE
Organization: netcup GmbH
Source: geolite2

Company pivot(s)

Asn: AS197540
Organization: netcup GmbH
Subnet: 89.58.24.0/22

{
   "@category" : "geoloc",
   "@timestamp" : "2022-06-25T00:14:45.000Z",
   "ipv6" : "false",
   "organization" : "netcup GmbH",
   "subnet" : "89.58.24.0/22",
   "country" : "DE",
   "location" : "51.2993,9.4910",
   "source" : "geolite2",
   "asn" : "AS197540"
}

Latest 10 results (maximum) for inetnum category:

89.58.0.0/18 - hosted at "netcup GmbH" - last seen on 2022-06-26 at 01:35:29

Netname: DE-NETCUP-20051123
Organization: netcup GmbH
Source: RIPE

Company pivot(s)

Asn: AS197540
Netname: DE-NETCUP-20051123
Organization: netcup GmbH
Subnet: 89.58.0.0/18

{
   "asn" : "AS197540",
   "netname" : "DE-NETCUP-20051123",
   "location" : "51.2993,9.4910",
   "source" : "RIPE",
   "country" : "DE",
   "subnet" : "89.58.0.0/18",
   "@category" : "inetnum",
   "organization" : "netcup GmbH",
   "ipv6" : "false",
   "@timestamp" : "2022-06-26T01:35:29.000Z"
}

Latest 10 results (maximum) for resolver category:

v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-21 at 14:41:21

Forward: v2202201165704175234.supersrv.de
IP address(es): 89.58.26.77
Organization: netcup GmbH
Source: datascan
Type: forward

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

{
   "organization" : "netcup GmbH",
   "forward" : "v2202201165704175234.supersrv.de",
   "ipv6" : "false",
   "@timestamp" : "2022-06-21T14:41:21.000Z",
   "host" : "v2202201165704175234",
   "@category" : "resolver",
   "domain" : "supersrv.de",
   "type" : "forward",
   "ip" : "89.58.26.77",
   "hostname" : "v2202201165704175234.supersrv.de",
   "ttl" : "7200",
   "asn" : "AS197540",
   "source" : "datascan",
   "location" : "51.2993,9.4910",
   "subnet" : "89.58.24.0/22",
   "country" : "DE",
   "tld" : "de"
}

v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-21 at 14:41:17

IP address(es): 89.58.26.77
Organization: netcup GmbH
Reverse: v2202201165704175234.supersrv.de
Source: datascan
Type: reverse

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

{
   "organization" : "netcup GmbH",
   "ipv6" : "false",
   "@timestamp" : "2022-06-21T14:41:17.000Z",
   "host" : "v2202201165704175234",
   "@category" : "resolver",
   "domain" : "supersrv.de",
   "reverse" : "v2202201165704175234.supersrv.de",
   "type" : "reverse",
   "ip" : "89.58.26.77",
   "hostname" : "v2202201165704175234.supersrv.de",
   "ttl" : "86400",
   "asn" : "AS197540",
   "location" : "51.2993,9.4910",
   "source" : "datascan",
   "country" : "DE",
   "subnet" : "89.58.24.0/22",
   "tld" : "de"
}

v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-19 at 08:34:13

Forward: v2202201165704175234.supersrv.de
IP address(es): 89.58.26.77
Organization: netcup GmbH
Source: datascan
Type: forward

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

{
   "domain" : "supersrv.de",
   "@category" : "resolver",
   "type" : "forward",
   "ip" : "89.58.26.77",
   "host" : "v2202201165704175234",
   "forward" : "v2202201165704175234.supersrv.de",
   "@timestamp" : "2022-06-19T08:34:13.000Z",
   "ipv6" : "false",
   "organization" : "netcup GmbH",
   "subnet" : "89.58.24.0/22",
   "country" : "DE",
   "tld" : "de",
   "source" : "datascan",
   "location" : "51.2993,9.4910",
   "asn" : "AS197540",
   "ttl" : "7200",
   "hostname" : "v2202201165704175234.supersrv.de"
}

v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-19 at 08:34:10

IP address(es): 89.58.26.77
Organization: netcup GmbH
Reverse: v2202201165704175234.supersrv.de
Source: datascan
Type: reverse

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

{
   "ttl" : "21600",
   "hostname" : "v2202201165704175234.supersrv.de",
   "subnet" : "89.58.24.0/22",
   "country" : "DE",
   "tld" : "de",
   "asn" : "AS197540",
   "location" : "51.2993,9.4910",
   "source" : "datascan",
   "ipv6" : "false",
   "@timestamp" : "2022-06-19T08:34:10.000Z",
   "organization" : "netcup GmbH",
   "@category" : "resolver",
   "domain" : "supersrv.de",
   "reverse" : "v2202201165704175234.supersrv.de",
   "type" : "reverse",
   "ip" : "89.58.26.77",
   "host" : "v2202201165704175234"
}

v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-06 at 17:59:56

Forward: v2202201165704175234.supersrv.de
IP address(es): 89.58.26.77
Organization: netcup GmbH
Source: datascan
Type: forward

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

{
   "forward" : "v2202201165704175234.supersrv.de",
   "ipv6" : "false",
   "@timestamp" : "2022-06-06T17:59:56.000Z",
   "organization" : "netcup GmbH",
   "@category" : "resolver",
   "domain" : "supersrv.de",
   "type" : "forward",
   "ip" : "89.58.26.77",
   "host" : "v2202201165704175234",
   "ttl" : "7200",
   "hostname" : "v2202201165704175234.supersrv.de",
   "subnet" : "89.58.24.0/22",
   "country" : "DE",
   "tld" : "de",
   "asn" : "AS197540",
   "location" : "51.2993,9.4910",
   "source" : "datascan"
}

v2202201165704175234.supersrv.de - hosted at "netcup GmbH" - last seen on 2022-06-06 at 17:59:53

IP address(es): 89.58.26.77
Organization: netcup GmbH
Reverse: v2202201165704175234.supersrv.de
Source: datascan
Type: reverse

Company pivot(s)

Asn: AS197540
Domain(s): supersrv.de
Organization: netcup GmbH
Subnet: 89.58.24.0/22

{
   "host" : "v2202201165704175234",
   "domain" : "supersrv.de",
   "@category" : "resolver",
   "type" : "reverse",
   "reverse" : "v2202201165704175234.supersrv.de",
   "ip" : "89.58.26.77",
   "organization" : "netcup GmbH",
   "@timestamp" : "2022-06-06T17:59:53.000Z",
   "ipv6" : "false",
   "source" : "datascan",
   "location" : "51.2993,9.4910",
   "asn" : "AS197540",
   "country" : "DE",
   "subnet" : "89.58.24.0/22",
   "tld" : "de",
   "hostname" : "v2202201165704175234.supersrv.de",
   "ttl" : "43200"
}

Latest 10 results (maximum) for synscan category:

89.58.26.77:8081 (Linux Kernel) - hosted at "netcup GmbH" - last seen on 2022-06-21 at 10:21:42

IP address(es): 89.58.26.77
Os: Linux Kernel
Port: 8081
RTT: 90.244
Source: massyphe
TTL: 48

Hardware & software

OS: Linux Linux Kernel

Company pivot(s)

Asn: AS197540
Geolocus asn: AS197540
Geolocus domain: netcup.de
Geolocus netname: DE-NETCUP-20051123
Geolocus organization: netcup GmbH
Geolocus subnet: 89.58.0.0/18
Organization: netcup GmbH
Subnet: 89.58.24.0/22

Analytic pivot(s)

Country: DE
Geolocus country: DE
Os: Linux Kernel
Port: 8081
Source: massyphe
Fingerprint: 0204ffff0402080affffffff44454144010303ff

{
   "port" : 8081,
   "@timestamp" : "2022-06-21T10:21:42.598Z",
   "ipv6" : "false",
   "geolocus" : {
      "continent" : "EU",
      "organization" : "netcup GmbH",
      "domain" : [
         "netcup.de"
      ],
      "countryname" : "Germany",
      "longitude" : "10.451526",
      "latitude" : "51.165691",
      "continentname" : "Europe",
      "country" : "DE",
      "subnet" : "89.58.0.0/18",
      "location" : "51.165691,10.451526",
      "netname" : "DE-NETCUP-20051123",
      "isineu" : "true",
      "asn" : "AS197540"
   },
   "organization" : "netcup GmbH",
   "ip" : "89.58.26.77",
   "@category" : "synscan",
   "tcp" : {
      "window" : 43440,
      "fingerprint" : "43440:0204ffff0402080affffffff44454144010303ff",
      "options" : "0204ffff0402080affffffff44454144010303ff"
   },
   "ttl" : 48,
   "city" : "Frankfurt am Main",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "subnet" : "89.58.24.0/22",
   "country" : "DE",
   "rtt" : "90.244",
   "source" : "massyphe",
   "location" : "50.1288,8.7034",
   "asn" : "AS197540"
}

89.58.26.77:80 (Linux Kernel) - hosted at "netcup GmbH" - last seen on 2022-06-19 at 07:29:31

IP address(es): 89.58.26.77
Os: Linux Kernel
Port: 80
RTT: 94.007
Source: massyphe
TTL: 48

Hardware & software

OS: Linux Linux Kernel

Company pivot(s)

Asn: AS197540
Geolocus asn: AS197540
Geolocus domain: netcup.de
Geolocus netname: DE-NETCUP-20051123
Geolocus organization: netcup GmbH
Geolocus subnet: 89.58.0.0/18
Organization: netcup GmbH
Subnet: 89.58.24.0/22

Analytic pivot(s)

Country: DE
Geolocus country: DE
Os: Linux Kernel
Port: 80
Source: massyphe
Fingerprint: 0204ffff0402080affffffff44454144010303ff

{
   "ip" : "89.58.26.77",
   "tcp" : {
      "window" : 43440,
      "fingerprint" : "43440:0204ffff0402080affffffff44454144010303ff",
      "options" : "0204ffff0402080affffffff44454144010303ff"
   },
   "@category" : "synscan",
   "ipv6" : "false",
   "@timestamp" : "2022-06-19T07:29:31.594Z",
   "port" : 80,
   "geolocus" : {
      "countryname" : "Germany",
      "longitude" : "10.451526",
      "domain" : [
         "netcup.de"
      ],
      "continent" : "EU",
      "organization" : "netcup GmbH",
      "continentname" : "Europe",
      "subnet" : "89.58.0.0/18",
      "country" : "DE",
      "location" : "51.165691,10.451526",
      "netname" : "DE-NETCUP-20051123",
      "asn" : "AS197540",
      "isineu" : "true",
      "latitude" : "51.165691"
   },
   "organization" : "netcup GmbH",
   "osvendor" : "Linux",
   "country" : "DE",
   "subnet" : "89.58.24.0/22",
   "asn" : "AS197540",
   "source" : "massyphe",
   "rtt" : "94.007",
   "location" : "50.1288,8.7034",
   "city" : "Frankfurt am Main",
   "ttl" : 48,
   "os" : "Linux Kernel"
}

89.58.26.77:22 (Linux Kernel) - hosted at "netcup GmbH" - last seen on 2022-06-06 at 15:21:34

IP address(es): 89.58.26.77
Os: Linux Kernel
Port: 22
RTT: 11.427
Source: massyphe
TTL: 52

Hardware & software

OS: Linux Linux Kernel

Company pivot(s)

Asn: AS197540
Geolocus asn: AS197540
Geolocus domain: netcup.de
Geolocus netname: DE-NETCUP-20051123
Geolocus organization: netcup GmbH
Geolocus subnet: 89.58.0.0/18
Organization: netcup GmbH
Subnet: 89.58.24.0/22

Analytic pivot(s)

Country: DE
Geolocus country: DE
Os: Linux Kernel
Port: 22
Source: massyphe
Fingerprint: 0204ffff0402080affffffff44454144010303ff

{
   "ip" : "89.58.26.77",
   "@category" : "synscan",
   "tcp" : {
      "options" : "0204ffff0402080affffffff44454144010303ff",
      "fingerprint" : "43440:0204ffff0402080affffffff44454144010303ff",
      "window" : 43440
   },
   "ipv6" : "false",
   "port" : 22,
   "@timestamp" : "2022-06-06T15:21:34.204Z",
   "geolocus" : {
      "country" : "DE",
      "subnet" : "89.58.0.0/18",
      "continentname" : "Europe",
      "asn" : "AS197540",
      "netname" : "DE-NETCUP-20051123",
      "isineu" : "true",
      "location" : "51.165691,10.451526",
      "latitude" : "51.165691",
      "longitude" : "10.451526",
      "countryname" : "Germany",
      "domain" : [
         "netcup.de"
      ],
      "continent" : "EU",
      "organization" : "netcup GmbH"
   },
   "organization" : "netcup GmbH",
   "osvendor" : "Linux",
   "subnet" : "89.58.24.0/22",
   "country" : "DE",
   "asn" : "AS197540",
   "source" : "massyphe",
   "rtt" : "11.427",
   "location" : "51.2993,9.4910",
   "ttl" : 52,
   "os" : "Linux Kernel"
}

Latest 10 results (maximum) for threatlist category:

89.58.24.0/22 - hosted at "netcup GmbH" - last seen on 2022-06-28 at 06:17:03

Source: uceprotect
Threatlist: Uceprotect - IP blacklist level-3

Company pivot(s)

Asn: AS197540
Organization: netcup GmbH
Subnet: 89.58.24.0/22

Analytic pivot(s)

Country: DE
Source: uceprotect

{
   "organization" : "netcup GmbH",
   "ipv6" : "false",
   "@timestamp" : "2022-06-28T06:17:03.000Z",
   "ip" : "89.58.24.1",
   "type" : "ip",
   "@category" : "threatlist",
   "threatlist" : "Uceprotect - IP blacklist level-3",
   "asn" : "AS197540",
   "source" : "uceprotect",
   "location" : "51.2993,9.4910",
   "country" : "DE",
   "subnet" : "89.58.24.0/22"
}

89.58.24.0/22 - hosted at "netcup GmbH" - last seen on 2022-06-27 at 06:14:20

Source: uceprotect
Threatlist: Uceprotect - IP blacklist level-3

Company pivot(s)

Asn: AS197540
Organization: netcup GmbH
Subnet: 89.58.24.0/22

Analytic pivot(s)

Country: DE
Source: uceprotect

{
   "@category" : "threatlist",
   "threatlist" : "Uceprotect - IP blacklist level-3",
   "type" : "ip",
   "ip" : "89.58.24.1",
   "organization" : "netcup GmbH",
   "@timestamp" : "2022-06-27T06:14:20.000Z",
   "ipv6" : "false",
   "source" : "uceprotect",
   "location" : "51.2993,9.4910",
   "asn" : "AS197540",
   "country" : "DE",
   "subnet" : "89.58.24.0/22"
}