whois.handle: SBCIS-SBIS-6BLK
whois.name: AT&T Enterprises, LLC
whois.cidrs: 76.197.192.0/18 76.198.0.0/15 76.200.0.0/14 76.204.0.0/16 76.205.0.0/18
whois.created: 2006-09-15T00:00:00.000000
whois.updated: 2024-12-05T00:00:00.000000
whois.allocation_type: ALLOCATION
whois.handle: AEL-360
whois.name: AT&T Enterprises, LLC
whois.street: 208 S. Akard St.
whois.city: Dallas
whois.state: TX
whois.postal_code: 75202
whois.country: US
whois.handle: ABUSE7-ARIN
whois.name: abuse
whois.email: abuse@att.net
whois.handle: ZS44-ARIN
whois.name: IPAdmin-ATT Internet Services
whois.email: ipadmin@att.com
whois.handle: ICC-ARIN
whois.name: IP Team
whois.email: rm-ipspecialist@att.com
whois.handle: ZS44-ARIN
whois.name: IPAdmin-ATT Internet Services
whois.email: ipadmin@att.com
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T14:36:39.423855
services.banner: HTTP/1.1 200 OK
  Server: nginx
  Date:  <REDACTED>
  Content-Type: text/html
  Content-Length: 1345
  Last-Modified: Mon, 05 Dec 2022 17:35:47 GMT
  Connection: keep-alive
  ETag: "638e2bf3-541"
  Accept-Ranges: bytes
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.fingerprint_sha256: 76e9e288aafc0e37f4390cbf946aad997d5c1c901b3ce513d3d8fadbabe2ab85
services.subject_dn: C=US, O=Let's Encrypt, CN=E6
services.issuer_dn: C=US, O=Internet Security Research Group, CN=ISRG Root X1
services.ja4s: t130200_1303_a56c5b993250
services.version: TLSv1_3
services.ja4s: t130200_1303_a56c5b993250
services.version: TLSv1_2
services.ja4s: t120200_cca9_344b4dce5a52
services.names: *.ballantine.net ballantine.net
services.issuer_dn: C=US, O=Let's Encrypt, CN=E6
services.common_name: E6
services.country: US
services.organization: Let's Encrypt
services.subject_dn: CN=ballantine.net
services.common_name: ballantine.net
services.scan_time: 2025-07-26T21:20:10.241223
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: nginx
services.product: nginx
services.cpe: cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T14:36:39.423855
services.uri: https://76.204.96.55/
services.protocol: HTTP/1.1
services.status_reason: OK
services.key: Last-Modified
services.headers: Mon, 05 Dec 2022 17:35:47 GMT
services.key: Server
services.headers: nginx
services.key: Accept-Ranges
services.headers: bytes
services.key: Content-Type
services.headers: text/html
services.key: Date
services.headers: <REDACTED>
services.key: ETag
services.headers: "638e2bf3-541"
services.key: Connection
services.headers: keep-alive
services.key: Content-Length
services.headers: 1345
services.html_tags: <title>Welcome to your SWAG instance</title>
services.body: <html>
      <head>
          <title>Welcome to your SWAG instance</title>
          <style>
          body{
              font-family: Helvetica, Arial, sans-serif;
          }
          .message{
              width:440px;
              padding:20px 40px;
              margin:0 auto;
              background-color:#f9f9f9;
              border:1px solid #ddd;
              color: #1e3d62;
          }
          center{
              margin:40px 0;
          }
          h1{
              font-size: 18px;
              line-height: 26px;
          }
          p{
              font-size: 12px;
          }
          a{
              color: rgb(207, 48, 139);
          }
          </style>
      </head>
      <body>
          <div class="message">
              <h1>Welcome to your <a target="_blank" href="https://github.com/linuxserver/docker-swag">SWAG</a> instance</h1>
              <p>A webserver and reverse proxy solution brought to you by <a target="_blank" href="https://www.linuxserver.io/">linuxserver.io</a> with php support and a built-in Certbot client.</p>
              <p>We have an article on how to use swag here: <a target="_blank" href="https://docs.linuxserver.io/general/swag">docs.linuxserver.io</a></p>
              <p>For help and support, please visit: <a target="_blank" href="https://www.linuxserver.io/support">linuxserver.io/support</a></p>
          </div>
      </body>
  </html>
  
services.body_hash_sha1: sha1:e3f0741982688a44d9402d48e7d2f2ec50af0a90
services.supported_versions: HTTP/1.1 HTTP/2
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T14:43:19.576892
services.banner: HTTP/1.1 401 Unauthorized
  X-Plex-Protocol: 1.0
  Content-Type: text/html
  Connection: Keep-Alive
  Keep-Alive: timeout=20
  Content-Encoding: gzip
  X-Plex-Content-Original-Length: 193
  X-Plex-Content-Compressed-Length: 157
  Content-Length: 157
  Cache-Control: no-cache
  Date:  <REDACTED>
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.fingerprint_sha256: 591e9ce6c863d3a079e9fabe1478c7339a26b21269dde795211361024ae31a44
services.subject_dn: C=US, O=Let's Encrypt, CN=R11
services.issuer_dn: C=US, O=Internet Security Research Group, CN=ISRG Root X1
services.ja4s: t130200_1303_a56c5b993250
services.version: TLSv1_3
services.ja4s: t130200_1303_a56c5b993250
services.version: TLSv1_2
services.ja4s: t120200_cca8_344b4dce5a52
services.names: *.2a0ea2619f5d40fdaf97cc9361602a52.plex.direct
services.issuer_dn: C=US, O=Let's Encrypt, CN=R11
services.common_name: R11
services.country: US
services.organization: Let's Encrypt
services.subject_dn: CN=*.2a0ea2619f5d40fdaf97cc9361602a52.plex.direct
services.common_name: *.2a0ea2619f5d40fdaf97cc9361602a52.plex.direct
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Plex
services.product: Media Server
services.cpe: cpe:2.3:a:plex:media_server:*:*:*:*:*:*:*:*
services.value: media-streaming
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T14:43:19.576892
services.uri: https://76.204.96.55:32400/
services.protocol: HTTP/1.1
services.status_reason: Unauthorized
services.key: X-Plex-Content-Original-Length
services.headers: 193
services.key: Keep-Alive
services.headers: timeout=20
services.key: X-Plex-Protocol
services.headers: 1.0
services.key: X-Plex-Content-Compressed-Length
services.headers: 157
services.key: Cache-Control
services.headers: no-cache
services.key: Content-Type
services.headers: text/html
services.key: Date
services.headers: <REDACTED>
services.key: Content-Encoding
services.headers: gzip
services.key: Connection
services.headers: Keep-Alive
services.key: Content-Length
services.headers: 157
services.html_tags: <title>Unauthorized</title>
services.body: <html><head><script>window.location = window.location.href.match(/(^.+\/)[^\/]*$/)[1] + 'web/index.html';</script><title>Unauthorized</title></head><body><h1>401 Unauthorized</h1></body></html>
services.body_hash_sha1: sha1:a6f5a69ee2856aa97d1055a62bde449a2bf8d469
services.supported_versions: HTTP/1.1
[binary data, 17 values, 414 bytes]