This page looks best with JavaScript enabled

Shodan me prepara para ser el último Samurai conociendo su API

 ·   ·   56 min read

Hey hoy temprano vimos algo mas de Shodan terminando las 3 entradas relacionadas a conocer mas de este buscador un poco de lo que se, ahora toca jugar con la API de Shodan específicamente desde Python como lo dije en la entrada anterior.

 Preparándome con Shodan

  • Condiciones Previas
  • Instalación de Shodan
  • Buscando con el filtro Apache
  • Entiendo el resultado que nos brinda Shodan

**Condiciones Previas **

Para la realización del script tenemos una limitante la cual es bastante por decirlo así, ya que el resto de los buscadores de páginas web como Google o Bing son totalmente gratuitos y no ponen limitaciones en sus búsquedas, Shodan no es así es el niño malo ¬_¬°, del mismo modo tenemos que tener una cuenta en Shodan lo cual nos dará acceso a la API. 

A la vez es necesario que tengamos Python2.X esta mas que claro 3.X aun no es mi fuerte me falta por conocerlo más, pero este no es el único lenguaje que podemos interactuar con Shodan tambien se tiene Ruby  y Node JS acontinuacion les dejo los enlaces para cada caso incluyendo Python.

Por si lo quieren hacer en otro lenguaje ahí tienen los links  pero bueno ya manos a la obra tras tener todo esto y python2.7 toca ponernos en ello por si acaso para solucionar algun incoveniente si andan con python3 en sus equipos les invito a usar VirtualEnviroment que hable hace una semanas (Hay errores de por medio y valores deprecados de dicha entrada :þ).
 
Instalación de Shodan

Tras tener todo ello nos metemos a instalar Shodan, ok la libreria para ello nos dirigimos a la terminal y hacemos uso del siguiente comando:

$(python2.7)\[snifer@rizel GPT\]$ pip install shodan

Despues de ello nos saldra que instalo correctamente y listo ahora para ver si esta debidamente instalado hacemos un import tras llamar a Python import shodan.

(python2.7)\[snifer@rizel GPT\]$ python  
Python 2.7.8 (default, Jul  1 2014, 17:30:21)   
\[GCC 4.9.0 20140604 (prerelease)\] on linux2  
Type "help", "copyright", "credits" or "license" for more information.  
\>>> import shodan  
\>>>

Al realizar el import de la libreria no, nos dio ningun problema asi que estamos listos para comenzar con nuestro script, cabe recordar que en esta primera parte iremos solo jugando con algunos datos no estaremos realizando aun nuestro script con las características necesarias.

Antes de todo! al principio de la entrada les hable del key para manejar shodan la cual nos da acceso a la API para poder interactuar, por ello tras loguearnos ya sea por los diferentes medios que tenemos disponibles, podremos acceder en la seccion de Developer Center  a  nuestra key como se muestra en la siguiente captura es de 32 caracteres.

Para esta pequeña prueba del uso de la API usaremos la documentación de Shodan que nos brinda para Python

Asi que lo primero es ir a  nuestro editor favorito, y comenzar a codear.

#!/usr/bin/env python  
import sys  
import shodan #Importamos la libreria de Shodan  
  
\# Configuration  
Shodan\_API = "TU API DE SHODAN ;)"

Esta pequeña parte solo nos sirve para configurar la API, y poder hacer uso de ella ahora lo que haremos es que nos permita hacer una busqueda como si estuvieramos en el buscador y nos muestre el resultado en la terminal.

#!/usr/bin/env python  
  
import sys  
import shodan  
  
\# Configuration  
Shodan\_API = "TU API DE SHODAN ;)"  
  
\# Configuracion de la API  
api = shodan.Shodan(Shodan\_API)  
  
if len(sys.argv) == 1:  
        print 'Uso del Script: %s ' % sys.argv\[0\]  
        sys.exit(1)  
try:  
        query = ' '.join(sys.argv\[1:\])  
        result = api.search(query)  
        print result #Imprimimos nuestro resultado  
except Exception, e:  
        print 'Error: %s' % e  
        sys.exit(1)

Si nos vamos a la terminal, y lanzamos el script tendremos como respuesta la mini ayuda, es decir como usar el script dicho resultado se ve a continuación

(python2.7)\[snifer@rizel GPT\]$ python shodan.py  
Uso del Script: shodan.py < filtro >

Bueno ahora si realizamos alguna busqueda es decir dando como parametro apache por ejemplo, tendremos lo siguiente:

Buscando con el filtro Apache

(python2.7)\[snifer@rizel GPT\]$ python shodan.py apache

Resultado:

Entiendo el resultado que nos brinda Shodan

Antes de que vayan a renegar, recien estamos comenzando asi que calmense ;), la idea es aprender paso a paso primero el resultado por lo que se llega a ver es un Json, pero anda todo desordenado calmense lo que haremos ahora es enbellecerlo para ello usaremos Jsbeautifier copy & paste y lo hara sepsimente bello, como el siguiente resultado.

{  
    u 'matches': \[{  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T02:05:45.595054', u 'isp': u 'Telekom Austria', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:10:10 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Wed, 12 Sep 2012 14:29:35 GMT\\r\\nETag: "a02090-129-50509c4f"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 297\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'b2b.telekom.at'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 13.333300000000008, u 'country\_code3': u 'AUT', u 'latitude': 47.33330000000001, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'AT', u 'country\_name': u 'Austria'  
        }, u 'ip': 3271781698, u 'domains': \[u 'telekom.at'\], u 'org': u 'Telekom Austria', u 'os': None, u 'asn': u 'AS15824', u 'ip\_str': u '195.3.109.66'  
    }, {  
        u 'info': u 'Ben-SSL/1.60 (Unix)', u 'product': u 'Apache httpd', u 'title': u '403 Forbidden', u 'timestamp': u '2014-09-09T02:05:45.171474', u 'isp': u 'NTT', u 'cpe': u 'a:apache:http\_server:1.3.42', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Tue, 09 Sep 2014 02:09:58 GMT\\r\\nServer: Apache/1.3.42 Ben-SSL/1.60 (Unix)\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '1.3.42', u 'location': {  
            u 'city': u 'Tokyo', u 'region\_name': None, u 'area\_code': None, u 'longitude': 139.7514, u 'country\_code3': u 'JPN', u 'latitude': 35.685, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'JP', u 'country\_name': u 'Japan'  
        }, u 'ip': 3734110522, u 'domains': \[u 'securesites.net'\], u 'org': u 'NTT', u 'os': None, u 'asn': u 'AS4713', u 'hostnames': \[u 'fv62283mon.securesites.net'\], u 'ip\_str': u '222.146.1.58'  
    }, {  
        u 'info': u '(Debian)', u 'product': u 'Apache httpd', u 'title': u 'Index of /', u 'timestamp': u '2014-09-09T02:05:44.983287', u 'isp': u 'Ifx Networks Colombia', u 'cpe': u 'a:apache:http\_server:2.2.16', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:10:57 GMT\\r\\nServer: Apache/2.2.16 (Debian)\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 529\\r\\nConnection: close\\r\\nContent-Type: text/html;charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.16', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -74.0628, u 'country\_code3': u 'COL', u 'latitude': 4.6492000000000075, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'CO', u 'country\_name': u 'Colombia'  
        }, u 'ip': 3191696140, u 'domains': \[u 'ifxnetworks.com'\], u 'org': u 'IFX Communication Ventures', u 'os': None, u 'asn': u 'AS18747', u 'hostnames': \[u '12.107.61.190.host.ifxnetworks.com'\], u 'ip\_str': u '190.61.107.12'  
    }, {  
        u 'product': u 'Apache Tomcat/Coyote JSP engine', u 'timestamp': u '2014-09-09T02:05:44.814777', u 'isp': u 'China Telecom Jiangsu', u 'data': u 'HTTP/1.0 302 Moved Temporarily\\r\\nSet-Cookie: JSESSIONID=8238FD12DFBF884E144FBA5DB8F9F8E2; Path=/\\r\\nLocation: http://221.226.86.36/webpage/index.jsp\\r\\nContent-Type: text/html;charset=GBK\\r\\nContent-Length: 0\\r\\nDate: Mon, 08 Sep 2014 23:31:17 GMT\\r\\nServer: Apache-Coyote/1.1\\r\\n\\r\\n', u 'port': 80, u 'version': u '1.1', u 'location': {  
            u 'city': u 'Nanjing', u 'region\_name': None, u 'area\_code': None, u 'longitude': 118.77780000000001, u 'country\_code3': u 'CHN', u 'latitude': 32.0617, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'CN', u 'country\_name': u 'China'  
        }, u 'ip': 3722597924, u 'domains': \[\], u 'org': u 'China Telecom Jiangsu', u 'os': None, u 'asn': u 'AS4134', u 'hostnames': \[\], u 'ip\_str': u '221.226.86.36'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T02:02:45.884290', u 'isp': u 'Washington Mutual', u 'cpe': u 'a:apache:http\_server:2.2.15', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 02:04:00 GMT\\r\\nServer: Apache/2.2.15 (CentOS)\\r\\nContent-Length: 281\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'version': u '2.2.15', u 'location': {  
            u 'city': u 'Seattle', u 'region\_name': None, u 'area\_code': 206, u 'longitude': -122.3284, u 'country\_code3': u 'USA', u 'latitude': 47.602599999999995, u 'postal\_code': u '98104', u 'dma\_code': 819, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 2812313511, u 'domains': \[\], u 'org': u 'Washington Mutual', u 'os': None, u 'port': 8080, u 'hostnames': \[\], u 'ip\_str': u '167.160.127.167'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T02:02:45.852393', u 'isp': u 'Dacentec', u 'cpe': u 'a:apache:http\_server:2.2.15', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Mon, 08 Sep 2014 21:57:45 GMT\\r\\nServer: Apache/2.2.15 (CentOS)\\r\\nX-Powered-By: PHP/5.4.27\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.15', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -84.0, u 'country\_code3': u 'CRI', u 'latitude': 10.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'CR', u 'country\_name': u 'Costa Rica'  
        }, u 'ip': 3007276970, u 'domains': \[\], u 'org': u 'Dacentec', u 'os': None, u 'asn': u 'AS31863', u 'hostnames': \[\], u 'ip\_str': u '179.63.103.170'  
    }, {  
        u 'info': u '(Debian) PHP/5.2.6-1+lenny13 with Suhosin-Patch mod\_python/3.3.1 Python/2.5.2 mod\_ssl/2.2.9 OpenSSL/0.9.8g', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T02:02:45.795819', u 'isp': u 'LeaseWeb B.V.', u 'cpe': u 'a:apache:http\_server:2.2.9', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:44:30 GMT\\r\\nServer: Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny13 with Suhosin-Patch mod\_python/3.3.1 Python/2.5.2 mod\_ssl/2.2.9 OpenSSL/0.9.8g\\r\\nX-Powered-By: PHP/5.2.6-1+lenny13\\r\\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\\r\\nLast-Modified: Tue, 09 Sep 2014 01:44:30 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate\\r\\nPragma: no-cache\\r\\nContent-Length: 266\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.9', u 'location': {  
            u 'city': u 'Amsterdam', u 'region\_name': None, u 'area\_code': None, u 'longitude': 4.916699999999992, u 'country\_code3': u 'NLD', u 'latitude': 52.349999999999994, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'NL', u 'country\_name': u 'Netherlands'  
        }, u 'ip': 1538800074, u 'domains': \[u 'as34225.net'\], u 'org': u 'VCN Corp.', u 'os': None, u 'asn': u 'AS16265', u 'hostnames': \[u '202.57.184.91.unassigned.as34225.net'\], u 'ip\_str': u '91.184.57.202'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T02:02:45.200886', u 'isp': None, u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Tue, 09 Sep 2014 02:02:06 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.2.17p1\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 402178877, u 'domains': \[\], u 'org': None, u 'os': None, u 'asn': u 'AS15003', u 'ip\_str': u '23.248.195.61'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T02:02:45.186175', u 'isp': u 'Trusted Network GmbH', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:52:38 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Wed, 20 Jan 2010 23:34:33 GMT\\r\\nETag: "1605da-1a-47da107541440"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 26\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'vs2038001a1.tnib.de'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 9.0, u 'country\_code3': u 'DEU', u 'latitude': 51.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 1365024778, u 'domains': \[u 'tnib.de'\], u 'org': u 'Trusted Network GmbH', u 'os': None, u 'asn': u 'AS21385', u 'ip\_str': u '81.92.160.10'  
    }, {  
        u 'info': u '(Debian) PHP/5.3.3-7+squeeze8 with Suhosin-Patch mod\_ssl/2.2.9 OpenSSL/0.9.8o', u 'product': u 'Apache httpd', u 'title': u '403 Forbidden', u 'timestamp': u '2014-09-09T02:02:44.942413', u 'isp': u 'First Colo GmbH', u 'cpe': u 'a:apache:http\_server:2.2.9', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Tue, 09 Sep 2014 02:07:05 GMT\\r\\nServer: Apache/2.2.9 (Debian) PHP/5.3.3-7+squeeze8 with Suhosin-Patch mod\_ssl/2.2.9 OpenSSL/0.9.8o\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 353\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 8080, u 'version': u '2.2.9', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 9.0, u 'country\_code3': u 'DEU', u 'latitude': 51.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 3571481075, u 'domains': \[u 'club-wot.ru'\], u 'org': u 'First Colo GmbH', u 'os': None, u 'asn': u 'AS44066', u 'hostnames': \[u 'club-wot.ru'\], u 'ip\_str': u '212.224.121.243'  
    }, {  
        u 'info': u '(Red Hat)', u 'product': u 'Apache httpd', u 'title': u 'EliteOffers - Overview', u 'timestamp': u '2014-09-09T02:00:45.750573', u 'isp': u 'Rackspace Hosting', u 'cpe': u 'a:apache:http\_server:2.2.3', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:49:32 GMT\\r\\nServer: Apache/2.2.3 (Red Hat)\\r\\nX-Powered-By: PHP/5.3.8\\r\\nP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"\\r\\nSet-Cookie: PHPSESSID=ge6p7fop2qr2h2qvp6vmp0jkn1; path=/\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.3', u 'location': {  
            u 'city': u 'San Antonio', u 'region\_name': None, u 'area\_code': 210, u 'longitude': -98.3987, u 'country\_code3': u 'USA', u 'latitude': 29.4889, u 'postal\_code': u '78218', u 'dma\_code': 641, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1210060533, u 'domains': \[u 'netsolutionsna.com'\], u 'org': u 'Rackspace Hosting', u 'os': None, u 'asn': u 'AS33070', u 'hostnames': \[u '88376-web2.netsolutionsna.com'\], u 'ip\_str': u '72.32.14.245'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'Site Temporarily Unavailable', u 'timestamp': u '2014-09-09T02:00:45.673553', u 'isp': u 'New Dream Network, LLC', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:44:23 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Fri, 06 Aug 2010 21:48:01 GMT\\r\\nETag: "153-48d2e9eea2640"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 339\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': u 'Brea', u 'region\_name': None, u 'area\_code': 714, u 'longitude': -117.8612, u 'country\_code3': u 'USA', u 'latitude': 33.92689999999999, u 'postal\_code': u '92821', u 'dma\_code': 803, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1079655311, u 'domains': \[\], u 'org': u 'New Dream Network, LLC', u 'os': None, u 'asn': u 'AS26347', u 'ip\_str': u '64.90.59.143'  
    }, {  
        u 'product': u 'Apache Tomcat/Coyote JSP engine', u 'timestamp': u '2014-09-09T02:00:45.559995', u 'isp': u 'Amazon Technologies', u 'data': u 'HTTP/1.0 302 Moved Temporarily\\r\\nContent-Type: text/plain; charset=UTF-8\\r\\nDate: Tue, 09 Sep 2014 01:29:33 GMT\\r\\nLocation: http://adscdn.jetpackdigital.com/tracking\_pixel.gif\\r\\nServer: Apache-Coyote/1.1\\r\\nContent-Length: 165\\r\\nConnection: keep-alive\\r\\n\\r\\n', u 'port': 80, u 'version': u '1.1', u 'location': {  
            u 'city': u 'Ashburn', u 'region\_name': None, u 'area\_code': 703, u 'longitude': -77.4875, u 'country\_code3': u 'USA', u 'latitude': 39.0437, u 'postal\_code': None, u 'dma\_code': 511, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 921917561, u 'domains': \[u 'ec2-54-243-88-121.compute-1.amazonaws.com'\], u 'org': u 'Amazon.com', u 'os': None, u 'asn': u 'AS14618', u 'hostnames': \[u 'ec2-54-243-88-121.compute-1.amazonaws.com'\], u 'ip\_str': u '54.243.88.121'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'ChristianKido | Just another WordPress site', u 'timestamp': u '2014-09-09T02:00:45.547637', u 'isp': u 'Ecommerce Corporation', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:02:06 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.2.17\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\nX-Pingback: http://www.christianaikido.com/xmlrpc.php\\r\\nSet-Cookie: PHPSESSID=l67m5tsm03hdvhfjemitdbcup7; path=/\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': u 'Columbus', u 'region\_name': None, u 'area\_code': 614, u 'longitude': -83.1383, u 'country\_code3': u 'USA', u 'latitude': 39.9649, u 'postal\_code': u '43228', u 'dma\_code': 535, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1210699939, u 'domains': \[\], u 'org': u 'Ecommerce Corporation', u 'os': None, u 'asn': u 'AS32392', u 'ip\_str': u '72.41.208.163'  
    }, {  
        u 'info': u 'mod\_fcgid/2.3.10-dev', u 'product': u 'Apache httpd', u 'title': u '', u 'timestamp': u '2014-09-09T02:00:45.343068', u 'isp': None, u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:05:10 GMT\\r\\nServer: Apache mod\_fcgid/2.3.10-dev\\r\\nX-Powered-By: PHP/5.4.31\\r\\nContent-Length: 3523\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'ip-23-229-131-79.ip.secureserver.net'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 400917327, u 'domains': \[u 'secureserver.net'\], u 'org': None, u 'os': None, u 'asn': u 'AS26496', u 'ip\_str': u '23.229.131.79'  
    }, {  
        u 'info': u '(Ubuntu)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T02:00:45.050477', u 'isp': u 'Colo4, LLC', u 'cpe': u 'a:apache:http\_server:2.2.22', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:05:09 GMT\\r\\nServer: Apache/2.2.22 (Ubuntu)\\r\\nLast-Modified: Tue, 01 May 2012 02:12:49 GMT\\r\\nETag: "402ca-b1-4bef01b762a40"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 177\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\nX-Pad: avoid browser bug\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.22', u 'location': {  
            u 'city': u 'Saint Louis', u 'region\_name': None, u 'area\_code': 314, u 'longitude': -90.4444, u 'country\_code3': u 'USA', u 'latitude': 38.614299999999986, u 'postal\_code': u '63131', u 'dma\_code': 609, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1224326680, u 'domains': \[\], u 'org': u 'Colo4, LLC', u 'os': None, u 'asn': u 'AS36024', u 'hostnames': \[\], u 'ip\_str': u '72.249.190.24'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u 'Bandwidth Speed Test', u 'timestamp': u '2014-09-09T01:58:45.479010', u 'isp': u 'Reliablehosting.com', u 'cpe': u 'a:apache:http\_server:2.2.15', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 00:57:32 GMT\\r\\nServer: Apache/2.2.15 (CentOS)\\r\\nLast-Modified: Fri, 04 Apr 2014 17:28:37 GMT\\r\\nETag: "df4e6-943-4f63ad90ebb40"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 2371\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.15', u 'location': {  
            u 'city': u 'San Francisco', u 'region\_name': None, u 'area\_code': 415, u 'longitude': -122.3826, u 'country\_code3': u 'USA', u 'latitude': 37.7312, u 'postal\_code': u '94124', u 'dma\_code': 807, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 3486317278, u 'domains': \[u 'as22781.net'\], u 'org': u 'Black Oak Computers Inc - San Francisco', u 'os': None, u 'asn': u 'AS22781', u 'hostnames': \[u '222.250.204.207.client.static.strong30.as22781.net'\], u 'ip\_str': u '207.204.250.222'  
    }, {  
        u 'info': u '(Unix) mod\_auth\_tkt/2.1.0 FrontPage/5.0.2.2635 mod\_ssl/2.8.31 OpenSSL/0.9.8r', u 'product': u 'Apache httpd', u 'title': u 'R & F Imaging - Georgia Medical X-Ray, atlanta GA X-Ray Equipment, GA X-Ray Equipment, Georgia x-ray supply, Georgia Digital X-Ray, GA xray systems', u 'timestamp': u '2014-09-09T01:58:45.374315', u 'isp': u 'NTT America', u 'cpe': u 'a:apache:http\_server:1.3.42', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:03:10 GMT\\r\\nServer: Apache/1.3.42 (Unix) mod\_auth\_tkt/2.1.0 FrontPage/5.0.2.2635 mod\_ssl/2.8.31 OpenSSL/0.9.8r\\r\\nLast-Modified: Tue, 24 May 2011 22:37:04 GMT\\r\\nETag: "2b0ecc0-3d6f-4ddc3310"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 15727\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '1.3.42', u 'location': {  
            u 'city': u 'Englewood', u 'region\_name': None, u 'area\_code': 303, u 'longitude': -104.8738, u 'country\_code3': u 'USA', u 'latitude': 39.623700000000014, u 'postal\_code': u '80111', u 'dma\_code': 751, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 3333113581, u 'domains': \[u 'rfisystemsinc.com'\], u 'org': u 'Verio Web Hosting', u 'os': None, u 'asn': u 'AS2914', u 'hostnames': \[u 'rfisystemsinc.com'\], u 'ip\_str': u '198.171.70.237'  
    }, {  
        u 'product': u 'Apache Tomcat/Coyote JSP engine', u 'timestamp': u '2014-09-09T01:58:45.246915', u 'isp': u 'CDNetworks', u 'data': u 'HTTP/1.0 200 OK\\r\\nServer: Apache-Coyote/1.1\\r\\nSet-Cookie: JSESSIONID=CF9AF3C649E2AD9DCDD95067CFCEF847; Path=/\\r\\nETag: W/"214-1335151104000"\\r\\nLast-Modified: Mon, 23 Apr 2012 03:18:24 GMT\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nContent-Length: 214\\r\\nDate: Tue, 09 Sep 2014 02:03:08 GMT\\r\\n\\r\\n', u 'port': 8080, u 'version': u '1.1', u 'location': {  
            u 'city': u 'Seoul', u 'region\_name': None, u 'area\_code': None, u 'longitude': 126.97829999999999, u 'country\_code3': u 'KOR', u 'latitude': 37.5985, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'KR', u 'country\_name': u 'Korea, Republic of'  
        }, u 'ip': 1958829402, u 'domains': \[\], u 'org': u 'CDNetworks', u 'os': None, u 'asn': u 'AS38107', u 'hostnames': \[\], u 'ip\_str': u '116.193.93.90'  
    }, {  
        u 'info': u '(Unix) mod\_ssl/2.2.22 OpenSSL/0.9.7a mod\_auth\_passthrough/2.1 mod\_bwlimited/1.4 FrontPage/5.0.2.2635', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:58:45.177696', u 'isp': u 'Colo4, LLC', u 'cpe': u 'a:apache:http\_server:2.2.22', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:03:09 GMT\\r\\nServer: Apache/2.2.22 (Unix) mod\_ssl/2.2.22 OpenSSL/0.9.7a mod\_auth\_passthrough/2.1 mod\_bwlimited/1.4 FrontPage/5.0.2.2635\\r\\nLast-Modified: Fri, 17 Feb 2012 00:38:57 GMT\\r\\nETag: "62c2184-6f-4b91e2b82ea40"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 111\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.22', u 'location': {  
            u 'city': u 'Saint Louis', u 'region\_name': None, u 'area\_code': 314, u 'longitude': -90.4444, u 'country\_code3': u 'USA', u 'latitude': 38.614299999999986, u 'postal\_code': u '63131', u 'dma\_code': 609, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1224289952, u 'domains': \[u 'nelsonjoyce.com.au'\], u 'org': u 'Colo4, LLC', u 'os': None, u 'asn': u 'AS30496', u 'hostnames': \[u 'ns1.nelsonjoyce.com.au'\], u 'ip\_str': u '72.249.46.160'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:58:45.152951', u 'isp': u 'ZeXoTeK IT-Services GmbH', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 01:53:55 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.3.3\\r\\nContent-Length: 259\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 9.0, u 'country\_code3': u 'DEU', u 'latitude': 51.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 89056747, u 'domains': \[\], u 'org': u 'ZeXoTeK IT-Services GmbH', u 'os': None, u 'asn': u 'AS8649', u 'ip\_str': u '5.78.229.235'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u 'Apache HTTP Server Test Page powered by CentOS', u 'timestamp': u '2014-09-09T01:58:45.136623', u 'isp': None, u 'cpe': u 'a:apache:http\_server:2.2.15', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:03:09 GMT\\r\\nServer: Apache/2.2.15 (CentOS)\\r\\nX-Powered-By: PHP/5.3.3\\r\\nContent-Length: 5126\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'version': u '2.2.15', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 1807122794, u 'domains': \[u 'queryfoundry.net'\], u 'org': None, u 'os': None, u 'port': 80, u 'hostnames': \[u '106-129-182-107-static.reverse.queryfoundry.net'\], u 'ip\_str': u '107.182.129.106'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '302 Found', u 'timestamp': u '2014-09-09T01:58:45.126274', u 'isp': u 'OVH Hosting', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 302 Found\\r\\nDate: Tue, 09 Sep 2014 02:03:09 GMT\\r\\nServer: Apache\\r\\nLocation: http://142.4.215.9/index.php\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 212\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'ns503377.ip-142-4-215.net'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -73.5804, u 'country\_code3': u 'CAN', u 'latitude': 45.5078, u 'postal\_code': u 'H3A', u 'dma\_code': None, u 'country\_code': u 'CA', u 'country\_name': u 'Canada'  
        }, u 'ip': 2382681865, u 'domains': \[u 'ip-142-4-215.net'\], u 'org': u 'OVH Hosting', u 'os': None, u 'asn': u 'AS16276', u 'ip\_str': u '142.4.215.9'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:58:45.123341', u 'isp': None, u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 00:28:35 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.1.6\\r\\nContent-Length: 261\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'hostnames': \[u 'host.colocrossing.com'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 1806638561, u 'domains': \[u 'colocrossing.com'\], u 'org': None, u 'os': None, u 'port': 80, u 'ip\_str': u '107.175.29.225'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '302 Document moved', u 'timestamp': u '2014-09-09T01:58:45.093132', u 'isp': u 'Vodafone Spain', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 302 Found\\r\\nServer: Apache\\r\\nPragma: no-cache\\r\\nCache-Control: max-age=0, must-revalidate\\r\\nConnection: close\\r\\nLocation: http://95.60.232.151/access\_deny.htm\\r\\nContent-type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'static-151-232-60-95.ipcom.comunitel.net'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -4.0, u 'country\_code3': u 'ESP', u 'latitude': 40.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'ES', u 'country\_name': u 'Spain'  
        }, u 'ip': 1597827223, u 'domains': \[u 'comunitel.net'\], u 'org': u 'Vodafone Spain', u 'os': None, u 'asn': u 'AS12357', u 'ip\_str': u '95.60.232.151'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:58:44.966298', u 'isp': u 'HL komm Telekommunikations GmbH', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 303 See other\\r\\nDate: Tue, 09 Sep 2014 01:46:24 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.5.1-pl1-gentoo\\r\\nSet-Cookie: 93d6ec05b5aa93b25bd853343cd2ddbe=8g3bie232un0orin03ckvk29t4; path=/; HttpOnly\\r\\nLocation: http://85.239.120.169/index.php?lang=de\\r\\nContent-Length: 0\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 9.0, u 'country\_code3': u 'DEU', u 'latitude': 51.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 1441757353, u 'domains': \[\], u 'org': u 'HL komm Telekommunikations GmbH', u 'os': None, u 'asn': u 'AS16097', u 'ip\_str': u '85.239.120.169'  
    }, {  
        u 'info': u '(Red Hat)', u 'product': u 'Apache httpd', u 'title': u '', u 'timestamp': u '2014-09-09T01:58:44.935586', u 'isp': u 'Peer 1 Network', u 'cpe': u 'a:apache:http\_server:2.0.52', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:34:04 GMT\\r\\nServer: Apache/2.0.52 (Red Hat)\\r\\nLast-Modified: Wed, 03 Mar 2010 16:50:20 GMT\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 6817\\r\\nVary: Accept-Encoding,User-Agent\\r\\nCache-Control: max-age=60\\r\\nExpires: Tue, 09 Sep 2014 01:35:04 GMT\\r\\nX-Cache-Status: ENABLED!\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.0.52', u 'location': {  
            u 'city': u 'New York', u 'region\_name': None, u 'area\_code': 212, u 'longitude': -74.0203, u 'country\_code3': u 'USA', u 'latitude': 40.688799999999986, u 'postal\_code': u '10004', u 'dma\_code': 501, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1093109065, u 'domains': \[u 'bijouxbelts.com'\], u 'org': u 'Peer 1 Network', u 'os': None, u 'asn': u 'AS13768', u 'hostnames': \[u 'bijouxbelts.com'\], u 'ip\_str': u '65.39.133.73'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:58:44.932197', u 'isp': u 'Open Computer Network', u 'cpe': u 'a:apache:http\_server:2.0.59', u 'data': u 'HTTP/1.0 302 Found\\r\\nDate: Tue, 09 Sep 2014 01:31:44 GMT\\r\\nServer: Apache/2.0.59\\r\\nLocation: http://180.43.127.185/cgi/group0/login.cgi\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/plain\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.0.59', u 'location': {  
            u 'city': u 'Tokyo', u 'region\_name': None, u 'area\_code': None, u 'longitude': 139.7514, u 'country\_code3': u 'JPN', u 'latitude': 35.685, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'JP', u 'country\_name': u 'Japan'  
        }, u 'ip': 3022749625, u 'domains': \[u 'ocn.ne.jp'\], u 'org': u 'Open Computer Network', u 'os': None, u 'asn': u 'AS4713', u 'hostnames': \[u 'p11185-ipngnfx01fukuokachu.fukuoka.ocn.ne.jp'\], u 'ip\_str': u '180.43.127.185'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u 'WEB MAIL TCARS', u 'timestamp': u '2014-09-09T01:58:44.747984', u 'isp': u 'Telecom Italia', u 'cpe': u 'a:apache:http\_server:2.2.15', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 00:49:36 GMT\\r\\nServer: Apache/2.2.15 (CentOS)\\r\\nLast-Modified: Wed, 24 Jul 2013 16:52:09 GMT\\r\\nETag: "140362-152-4e244baf7f4a1"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 338\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.15', u 'location': {  
            u 'city': u 'Perugia', u 'region\_name': None, u 'area\_code': None, u 'longitude': 12.366700000000009, u 'country\_code3': u 'ITA', u 'latitude': 43.13329999999999, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'IT', u 'country\_name': u 'Italy'  
        }, u 'ip': 1608552859, u 'domains': \[u 'telecomitalia.it'\], u 'org': u 'Telecom Italia', u 'os': None, u 'asn': u 'AS3269', u 'hostnames': \[u 'host155-145-static.224-95-b.business.telecomitalia.it'\], u 'ip\_str': u '95.224.145.155'  
    }, {  
        u 'info': u '(Ubuntu)', u 'product': u 'Apache httpd', u 'title': u '401 Authorization Required', u 'timestamp': u '2014-09-09T01:58:44.700932', u 'isp': u 'KPNQWest Italia S.p.a.', u 'cpe': u 'a:apache:http\_server:2.2.14', u 'data': u 'HTTP/1.0 401 Authorization Required\\r\\nDate: Tue, 09 Sep 2014 00:27:12 GMT\\r\\nServer: Apache/2.2.14 (Ubuntu)\\r\\nWWW-Authenticate: Basic realm="Newlogic - Area protetta"\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 479\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.14', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 12.833300000000008, u 'country\_code3': u 'ITA', u 'latitude': 42.83330000000001, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'IT', u 'country\_name': u 'Italy'  
        }, u 'ip': 93752614, u 'domains': \[u 'kpnqwest.it'\], u 'org': u 'KPNQWest Italia S.p.a.', u 'os': None, u 'asn': u 'AS5602', u 'hostnames': \[u '38.141.150.5.host.static.ip.kpnqwest.it'\], u 'ip\_str': u '5.150.141.38'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '403 Forbidden', u 'timestamp': u '2014-09-09T01:56:44.643597', u 'isp': u '1&1 Internet AG', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Tue, 09 Sep 2014 01:31:21 GMT\\r\\nServer: Apache\\r\\nContent-Length: 321\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'startistics.at'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 9.0, u 'country\_code3': u 'DEU', u 'latitude': 51.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 1466595859, u 'domains': \[u 'startistics.at'\], u 'org': u '1&1 Internet AG', u 'os': None, u 'asn': u 'AS8560', u 'ip\_str': u '87.106.122.19'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'The Best Life - Promoting the love of Jesus on the internet', u 'timestamp': u '2014-09-09T01:56:44.533639', u 'isp': u 'Ecommerce Corporation', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Mon, 08 Sep 2014 23:08:57 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.2.17\\r\\nX-Pingback: http://thebestlife.net/xmlrpc.php\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u '206.webhosting.ecommerce.com'\], u 'location': {  
            u 'city': u 'Columbus', u 'region\_name': None, u 'area\_code': 614, u 'longitude': -83.1383, u 'country\_code3': u 'USA', u 'latitude': 39.9649, u 'postal\_code': u '43228', u 'dma\_code': 535, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1247529678, u 'domains': \[u 'ecommerce.com'\], u 'org': u 'Ecommerce Corporation', u 'os': None, u 'asn': u 'AS32392', u 'ip\_str': u '74.91.202.206'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '403 Forbidden', u 'timestamp': u '2014-09-09T01:56:44.343830', u 'isp': u 'Cyberverse', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Mon, 08 Sep 2014 23:07:42 GMT\\r\\nServer: Apache\\r\\nContent-Length: 321\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': u 'Los Angeles', u 'region\_name': None, u 'area\_code': 213, u 'longitude': -118.2642, u 'country\_code3': u 'USA', u 'latitude': 34.053, u 'postal\_code': u '90017', u 'dma\_code': 803, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1119144259, u 'domains': \[\], u 'org': u 'Cyberverse', u 'os': None, u 'asn': u 'AS11051', u 'ip\_str': u '66.180.201.67'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:56:44.024588', u 'isp': None, u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 01:44:45 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.1.6\\r\\nContent-Length: 261\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'hostnames': \[u 'host.colocrossing.com'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 1806648224, u 'domains': \[u 'colocrossing.com'\], u 'org': None, u 'os': None, u 'port': 80, u 'ip\_str': u '107.175.67.160'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u '301 Moved Permanently', u 'timestamp': u '2014-09-09T01:56:44.013559', u 'isp': u 'Savvis', u 'cpe': u 'a:apache:http\_server:2.2.3', u 'data': u 'HTTP/1.0 301 Moved Permanently\\r\\nDate: Tue, 09 Sep 2014 01:43:48 GMT\\r\\nServer: Apache/2.2.3 (CentOS)\\r\\nLocation: http://www.steinmitchell.com/\\r\\nCache-Control: max-age=1\\r\\nExpires: Tue, 09 Sep 2014 01:43:49 GMT\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 315\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.3', u 'location': {  
            u 'city': u 'Mountain View', u 'region\_name': None, u 'area\_code': 650, u 'longitude': -122.0574, u 'country\_code3': u 'USA', u 'latitude': 37.41919999999999, u 'postal\_code': u '94043', u 'dma\_code': 807, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1076464321, u 'domains': \[\], u 'org': u 'Justia', u 'os': None, u 'asn': u 'AS3561', u 'hostnames': \[\], u 'ip\_str': u '64.41.138.193'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:53:06.236428', u 'isp': u 'Level 3 Communications', u 'cpe': u 'a:apache:http\_server:2.2.3', u 'data': u 'HTTP/1.0 302 Found\\r\\nDate: Tue, 09 Sep 2014 02:00:16 GMT\\r\\nServer: Apache/2.2.3 (CentOS)\\r\\nX-Powered-By: PHP/5.1.6\\r\\nLocation: /404.php\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.3', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 25.0, u 'country\_code3': u 'ROU', u 'latitude': 46.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'RO', u 'country\_name': u 'Romania'  
        }, u 'ip': 1539391190, u 'domains': \[\], u 'org': u 'Level 3 Communications', u 'os': None, u 'asn': u 'AS3356', u 'hostnames': \[\], u 'ip\_str': u '91.193.62.214'  
    }, {  
        u 'info': u '(Unix) mod\_gzip/1.3.26.1a mod\_perl/1.29', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:53:06.178557', u 'isp': u 'Verio Web Hosting - Tokyo', u 'cpe': u 'a:apache:http\_server:1.3.42', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:57:31 GMT\\r\\nServer: Apache/1.3.42 (Unix) mod\_gzip/1.3.26.1a mod\_perl/1.29\\r\\nVary: \*\\r\\nLast-Modified: Tue, 04 Nov 2003 21:44:21 GMT\\r\\nETag: "336795f-10-3fa81db5"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 16\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 8080, u 'version': u '1.3.42', u 'location': {  
            u 'city': u 'Tokyo', u 'region\_name': None, u 'area\_code': None, u 'longitude': 139.7514, u 'country\_code3': u 'JPN', u 'latitude': 35.685, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'JP', u 'country\_name': u 'Japan'  
        }, u 'ip': 1866769553, u 'domains': \[u 'st-nagaya.jp'\], u 'org': u 'Verio Web Hosting', u 'os': None, u 'asn': u 'AS2914', u 'hostnames': \[u 'st-nagaya.jp'\], u 'ip\_str': u '111.68.164.145'  
    }, {  
        u 'title': u 'Index of /', u 'timestamp': u '2014-09-09T01:53:06.149635', u 'isp': u 'Host Revenda', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:57:18 GMT\\r\\nServer: HTTPD-HR Server powered by Apache\\r\\nContent-Length: 288\\r\\nContent-Type: text/html;charset=ISO-8859-1\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'mailer.impulsa.com.br'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -55.0, u 'country\_code3': u 'BRA', u 'latitude': -10.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'BR', u 'country\_name': u 'Brazil'  
        }, u 'ip': 2972116045, u 'domains': \[u 'impulsa.com.br'\], u 'org': u 'Host Revenda', u 'os': None, u 'asn': u 'AS28216', u 'ip\_str': u '177.38.228.77'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '403 Forbidden', u 'timestamp': u '2014-09-09T01:53:06.044094', u 'isp': u 'Sun Network (Hong Kong) Limited', u 'cpe': u 'a:apache:http\_server:2', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Tue, 09 Sep 2014 01:56:40 GMT\\r\\nServer: Apache/2\\r\\nContent-Length: 386\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 114.16669999999999, u 'country\_code3': u 'HKG', u 'latitude': 22.25, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'HK', u 'country\_name': u 'Hong Kong'  
        }, u 'ip': 1964116684, u 'domains': \[\], u 'org': u 'Sun Network (Hong Kong) Limited', u 'os': None, u 'asn': u 'AS38197', u 'hostnames': \[\], u 'ip\_str': u '117.18.10.204'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:53:05.975799', u 'isp': None, u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 01:57:30 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.1.6\\r\\nContent-Length: 261\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'hostnames': \[u 'host.colocrossing.com'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 1806688280, u 'domains': \[u 'colocrossing.com'\], u 'org': None, u 'os': None, u 'port': 80, u 'ip\_str': u '107.175.224.24'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:53:05.901542', u 'isp': u 'e.discom Telekommunikation GmbH', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 301 Moved Permanently\\r\\nDate: Tue, 09 Sep 2014 01:58:14 GMT\\r\\nServer: Apache\\r\\nCache-control: no-store\\r\\nLocation: http://85.199.98.9:5000/webman/index.cgi\\r\\nContent-Length: 0\\r\\nContent-Type: text/plain\\r\\n\\r\\n', u 'port': 5000, u 'hostnames': \[\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 9.0, u 'country\_code3': u 'DEU', u 'latitude': 51.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 1439130121, u 'domains': \[\], u 'org': u 'neu-medianet GmbH', u 'os': None, u 'asn': u 'AS12693', u 'ip\_str': u '85.199.98.9'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:53:05.897298', u 'isp': None, u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 01:57:30 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.1.6\\r\\nContent-Length: 262\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'hostnames': \[u 'host.colocrossing.com'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 1806663050, u 'domains': \[u 'colocrossing.com'\], u 'org': None, u 'os': None, u 'port': 80, u 'ip\_str': u '107.175.125.138'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'Tech Grafx, Technical Illustrations, Technical Writing, Interactive Electronic Media', u 'timestamp': u '2014-09-09T01:53:05.500220', u 'isp': u 'OLM, LLC', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:56:47 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/4.3.4\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'techgrafx.com'\], u 'location': {  
            u 'city': u 'Trumbull', u 'region\_name': None, u 'area\_code': 203, u 'longitude': -73.2076, u 'country\_code3': u 'USA', u 'latitude': 41.25989999999999, u 'postal\_code': u '06611', u 'dma\_code': 501, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1075921880, u 'domains': \[u 'techgrafx.com'\], u 'org': u 'OLM, LLC', u 'os': None, u 'asn': u 'AS19916', u 'ip\_str': u '64.33.67.216'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'INCOWA Structure Solutions Pvt Ltd excelling in the field of Building Construction, Repairs, Waterproofing and Interior works undertakes various rehabilitation works for Companies and society buildings throughout Mumbai.', u 'timestamp': u '2014-09-09T01:53:04.910697', u 'isp': u 'Ecommerce Corporation', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:57:23 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.2.17\\r\\nP3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nSet-Cookie: 75f6237c9075b7dd7944c54a95d974bd=9p06n2led7mc8g3qf7u66rmdb4; path=/\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u '5.webhosting.ecommerce.com'\], u 'location': {  
            u 'city': u 'Columbus', u 'region\_name': None, u 'area\_code': 614, u 'longitude': -83.1383, u 'country\_code3': u 'USA', u 'latitude': 39.9649, u 'postal\_code': u '43228', u 'dma\_code': 535, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1247513093, u 'domains': \[u 'ecommerce.com'\], u 'org': u 'Ecommerce Corporation', u 'os': None, u 'asn': u 'AS32392', u 'ip\_str': u '74.91.138.5'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u 'Home Page', u 'timestamp': u '2014-09-09T01:53:04.596402', u 'isp': u '7Host Web Hosting', u 'cpe': u 'a:apache:http\_server:2.2.15', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:57:24 GMT\\r\\nServer: Apache/2.2.15 (CentOS)\\r\\nX-Powered-By: PHP/5.2.17\\r\\nContent-Length: 3324\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.15', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 12.833300000000008, u 'country\_code3': u 'ITA', u 'latitude': 42.83330000000001, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'IT', u 'country\_name': u 'Italy'  
        }, u 'ip': 772844562, u 'domains': \[u 'investcitytraders.com'\], u 'org': u '7Host Web Hosting', u 'os': None, u 'asn': u 'AS28716', u 'hostnames': \[u 'investcitytraders.com'\], u 'ip\_str': u '46.16.172.18'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u '302 Found', u 'timestamp': u '2014-09-09T01:53:04.167459', u 'isp': u 'Renater', u 'cpe': u 'a:apache:http\_server:2.2.15', u 'data': u 'HTTP/1.0 302 Found\\r\\nDate: Tue, 09 Sep 2014 01:57:29 GMT\\r\\nServer: Apache/2.2.15 (CentOS)\\r\\nLocation: http://193.51.202.66/PageLcs/index.php\\r\\nContent-Length: 301\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.15', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 2.3499999999999943, u 'country\_code3': u 'FRA', u 'latitude': 48.860000000000014, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'FR', u 'country\_name': u 'France'  
        }, u 'ip': 3241396802, u 'domains': \[u 'ac-rouen.fr'\], u 'org': u 'Renater', u 'os': None, u 'asn': u 'AS2200', u 'hostnames': \[u 'clg-ezy.ac-rouen.fr'\], u 'ip\_str': u '193.51.202.66'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'Home - Paramount Resources Ltd.', u 'timestamp': u '2014-09-09T01:53:03.912781', u 'isp': u 'Telus Communications', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:57:27 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.3.10-1ubuntu3.11\\r\\nExpires: Tue, 09 Sep 2014 02:02:27 GMT\\r\\nCache-Control: max-age=300, must-revalidate\\r\\nVary: Accept-Encoding\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'www.paramountres.com'\], u 'location': {  
            u 'city': u 'Calgary', u 'region\_name': None, u 'area\_code': None, u 'longitude': -114.0833, u 'country\_code3': u 'CAN', u 'latitude': 51.08330000000001, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'CA', u 'country\_name': u 'Canada'  
        }, u 'ip': 3514036076, u 'domains': \[u 'paramountres.com'\], u 'org': u 'Telus Communications', u 'os': None, u 'asn': u 'AS852', u 'ip\_str': u '209.115.239.108'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:53:03.713232', u 'isp': u 'Akna Tecnologia da Informa\\xe7\\xe3o Ltda.', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 301 Moved Permanently\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.1.6\\r\\nSet-Cookie: PHPSESSID=7eit6pdj4vraps5k88tdmsn8l1; path=/\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\nLocation: http://www.akna.com\\r\\nContent-Type: text/html\\r\\nContent-Length: 0\\r\\nDate: Tue, 09 Sep 2014 01:12:29 GMT\\r\\nX-Varnish: 1963146701\\r\\nAge: 0\\r\\nVia: 1.1 varnish\\r\\nConnection: keep-alive\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -55.0, u 'country\_code3': u 'BRA', u 'latitude': -10.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'BR', u 'country\_name': u 'Brazil'  
        }, u 'ip': 2979582515, u 'domains': \[\], u 'org': u 'Akna Tecnologia da Informa\\xe7\\xe3o Ltda.', u 'os': None, u 'asn': u 'AS263034', u 'ip\_str': u '177.152.210.51'  
    }, {  
        u 'info': u '(Win32) mod\_ssl/2.0.59 OpenSSL/0.9.8d mod\_jk/1.2.23', u 'product': u 'Apache httpd', u 'title': u '403 Forbidden', u 'timestamp': u '2014-09-09T01:53:03.692999', u 'isp': u 'eBay', u 'cpe': u 'a:apache:http\_server:2.0.59', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Tue, 09 Sep 2014 00:42:30 GMT\\r\\nServer: Apache/2.0.59 (Win32) mod\_ssl/2.0.59 OpenSSL/0.9.8d mod\_jk/1.2.23\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 444\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.0.59', u 'location': {  
            u 'city': u 'Campbell', u 'region\_name': None, u 'area\_code': 408, u 'longitude': -121.9567, u 'country\_code3': u 'USA', u 'latitude': 37.28030000000001, u 'postal\_code': u '95008', u 'dma\_code': 807, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1121165986, u 'domains': \[u 'carad.com'\], u 'org': u 'eBay', u 'os': None, u 'asn': u 'AS11643', u 'hostnames': \[u 'd3.carad.com'\], u 'ip\_str': u '66.211.162.162'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:53:03.678578', u 'isp': u 'New Guoxin Telecom Corporation', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Mon, 08 Sep 2014 21:02:14 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.3.3\\r\\nContent-Length: 262\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'hostnames': \[\], u 'location': {  
            u 'city': u 'Chaoyang', u 'region\_name': None, u 'area\_code': None, u 'longitude': 120.45859999999999, u 'country\_code3': u 'CHN', u 'latitude': 41.5703, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'CN', u 'country\_name': u 'China'  
        }, u 'ip': 1955913714, u 'domains': \[\], u 'org': u 'New Guoxin Telecom Corporation', u 'os': None, u 'port': 80, u 'ip\_str': u '116.148.223.242'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '403 Forbidden', u 'timestamp': u '2014-09-09T01:53:03.624235', u 'isp': u 'Online Breedband B.V.', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Tue, 09 Sep 2014 01:57:27 GMT\\r\\nServer: Apache\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'sd4406efa.adsl.online.nl'\], u 'location': {  
            u 'city': u 'Amsterdam', u 'region\_name': None, u 'area\_code': None, u 'longitude': 4.916699999999992, u 'country\_code3': u 'NLD', u 'latitude': 52.349999999999994, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'NL', u 'country\_name': u 'Netherlands'  
        }, u 'ip': 3560992506, u 'domains': \[u 'online.nl'\], u 'org': u 'Online Breedband B.V.', u 'os': None, u 'asn': u 'AS5390', u 'ip\_str': u '212.64.110.250'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u '301 Moved Permanently', u 'timestamp': u '2014-09-09T01:53:03.599233', u 'isp': u 'Server Block', u 'cpe': u 'a:apache:http\_server:2.2.3', u 'data': u 'HTTP/1.0 301 Moved Permanently\\r\\nDate: Tue, 09 Sep 2014 01:57:21 GMT\\r\\nServer: Apache/2.2.3 (CentOS)\\r\\nLocation: http://148.251.237.120/index.html/\\r\\nContent-Length: 322\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.3', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 9.0, u 'country\_code3': u 'DEU', u 'latitude': 51.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 2499538296, u 'domains': \[u 'your-server.de'\], u 'org': u 'Server Block', u 'os': None, u 'asn': u 'AS24940', u 'hostnames': \[u 'static.120.237.251.148.clients.your-server.de'\], u 'ip\_str': u '148.251.237.120'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'Default Parallels Plesk Panel Page', u 'timestamp': u '2014-09-09T01:53:03.559901', u 'isp': u 'Host Europe GmbH', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:57:27 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Mon, 29 Oct 2012 17:15:00 GMT\\r\\nETag: "11bb05d8-2476-4cd35cf328d00"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 9334\\r\\nVary: Accept-Encoding\\r\\nX-Powered-By: PleskLin\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'lvps5-35-241-96.dedicated.hosteurope.de'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 6.183300000000003, u 'country\_code3': u 'DEU', u 'latitude': 51.650000000000006, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 86241632, u 'domains': \[u 'hosteurope.de'\], u 'org': u 'Host Europe GmbH', u 'os': None, u 'asn': u 'AS20773', u 'ip\_str': u '5.35.241.96'  
    }, {  
        u 'info': u '(FreeBSD) PHP/5.4.28 mod\_ssl/2.2.27 OpenSSL/1.0.1e-freebsd DAV/2', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:53:03.475776', u 'isp': u 'Ipe Informatica Ltda', u 'cpe': u 'a:apache:http\_server:2.2.27', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:54:18 GMT\\r\\nServer: Apache/2.2.27 (FreeBSD) PHP/5.4.28 mod\_ssl/2.2.27 OpenSSL/1.0.1e-freebsd DAV/2\\r\\nLast-Modified: Mon, 04 Nov 2013 17:17:23 GMT\\r\\nETag: "2c252e-d1-4ea5d16d8aec0"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 209\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.27', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -55.0, u 'country\_code3': u 'BRA', u 'latitude': -10.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'BR', u 'country\_name': u 'Brazil'  
        }, u 'ip': 3369834014, u 'domains': \[u 'sul.com.br'\], u 'org': u 'Ipe Informatica Ltda', u 'os': None, u 'asn': u 'AS11835', u 'hostnames': \[u 'listas.sul.com.br'\], u 'ip\_str': u '200.219.150.30'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:53:02.835338', u 'isp': None, u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 01:57:27 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.1.6\\r\\nContent-Length: 261\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'hostnames': \[u 'host.colocrossing.com'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 1806670901, u 'domains': \[u 'colocrossing.com'\], u 'org': None, u 'os': None, u 'port': 80, u 'ip\_str': u '107.175.156.53'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:53:02.818571', u 'isp': u 'Pilot Network Services', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 01:19:37 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.3.3\\r\\nContent-Length: 262\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': u 'Alameda', u 'region\_name': None, u 'area\_code': 510, u 'longitude': -122.27879999999999, u 'country\_code3': u 'USA', u 'latitude': 37.77350000000001, u 'postal\_code': u '94501', u 'dma\_code': 807, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 3468550636, u 'domains': \[\], u 'org': u 'Pilot Network Services', u 'os': None, u 'asn': u 'AS3563', u 'ip\_str': u '206.189.225.236'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:53:02.763963', u 'isp': None, u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 01:57:23 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.3.3\\r\\nContent-Length: 260\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'hostnames': \[u 'step-semilog.bikerhode.net'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 1806583054, u 'domains': \[u 'bikerhode.net'\], u 'org': None, u 'os': None, u 'port': 80, u 'ip\_str': u '107.174.69.14'  
    }, {  
        u 'info': u '(Debian)', u 'product': u 'Apache httpd', u 'title': u 'Observium :: Network Observation and Monitoring', u 'timestamp': u '2014-09-09T01:53:02.712032', u 'isp': u 'Medyabim Internet Hizmetleri', u 'cpe': u 'a:apache:http\_server:2.2.22', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:57:27 GMT\\r\\nServer: Apache/2.2.22 (Debian)\\r\\nX-Powered-By: PHP/5.4.4-14+deb7u9\\r\\nSet-Cookie: OBSID=knqjbr71nfg74pqpu3m34mm219p3k5l2; path=/; HttpOnly\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 3678\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.22', u 'location': {  
            u 'city': u 'Bursa', u 'region\_name': None, u 'area\_code': None, u 'longitude': 29.06110000000001, u 'country\_code3': u 'TUR', u 'latitude': 40.1917, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'TR', u 'country\_name': u 'Turkey'  
        }, u 'ip': 1566117989, u 'domains': \[u 'medyabim.com'\], u 'org': u 'Medyabim Internet Hizmetleri', u 'os': None, u 'asn': u 'AS44922', u 'hostnames': \[u 'monitor.medyabim.com'\], u 'ip\_str': u '93.89.16.101'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '401 Authorization Required', u 'timestamp': u '2014-09-09T01:53:02.661480', u 'isp': u '1&1 Internet AG', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 401 Authorization Required\\r\\nDate: Tue, 09 Sep 2014 01:57:21 GMT\\r\\nServer: Apache\\r\\nWWW-Authenticate: Basic realm="WebDAV"\\r\\nContent-Length: 401\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 81, u 'hostnames': \[u 'microtracer.de'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 9.0, u 'country\_code3': u 'DEU', u 'latitude': 51.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 3571694077, u 'domains': \[u 'microtracer.de'\], u 'org': u '1&1 Internet AG', u 'os': None, u 'asn': u 'AS8560', u 'ip\_str': u '212.227.185.253'  
    }, {  
        u 'info': u '(Ubuntu)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:53:02.594210', u 'isp': None, u 'cpe': u 'a:apache:http\_server:2.4.7', u 'data': u 'HTTP/1.0 302 Found\\r\\nDate: Tue, 09 Sep 2014 01:57:23 GMT\\r\\nServer: Apache/2.4.7 (Ubuntu)\\r\\nX-Powered-By: PHP/5.5.9-1ubuntu4.3\\r\\nSet-Cookie: cryptoGlance=f2g79mjk804ua36ef3q9ge6v16; path=/; HttpOnly\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\nLocation: login.php\\r\\nContent-Length: 0\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'version': u '2.4.7', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 1753449903, u 'domains': \[\], u 'org': None, u 'os': None, u 'port': 80, u 'hostnames': \[\], u 'ip\_str': u '104.131.133.175'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:53:02.589174', u 'isp': u 'Oso Grande Technologies', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:48:43 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Wed, 09 Apr 2014 18:39:14 GMT\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 111\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'adria.seoboxes.com'\], u 'location': {  
            u 'city': u 'Albuquerque', u 'region\_name': None, u 'area\_code': 505, u 'longitude': -106.6406, u 'country\_code3': u 'USA', u 'latitude': 35.07570000000001, u 'postal\_code': u '87102', u 'dma\_code': 790, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 2172251929, u 'domains': \[u 'seoboxes.com'\], u 'org': u 'Nexcess.net L.L.C.', u 'os': None, u 'asn': u 'AS36444', u 'ip\_str': u '129.121.239.25'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:53:02.585579', u 'isp': u 'SC Izo Group Network SRL', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:01:49 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Tue, 10 Mar 2009 19:47:02 GMT\\r\\nETag: "2dc27b-0-464c903cfd980"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 0\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 25.0, u 'country\_code3': u 'ROU', u 'latitude': 46.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'RO', u 'country\_name': u 'Romania'  
        }, u 'ip': 1496230305, u 'domains': \[\], u 'org': u 'SC Izo Group Network SRL', u 'os': None, u 'asn': u 'AS44739', u 'ip\_str': u '89.46.169.161'  
    }, {  
        u 'info': u '(Debian)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:53:02.581480', u 'isp': u 'Entidad Publica Empresarial Red.es', u 'cpe': u 'a:apache:http\_server:2.2.22', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:57:16 GMT\\r\\nServer: Apache/2.2.22 (Debian)\\r\\nLast-Modified: Wed, 15 Jan 2014 22:59:01 GMT\\r\\nETag: "b1bf8-5a-4f00a41325740"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 90\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.22', u 'location': {  
            u 'city': u 'Sevilla', u 'region\_name': None, u 'area\_code': None, u 'longitude': -5.976100000000002, u 'country\_code3': u 'ESP', u 'latitude': 37.38239999999999, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'ES', u 'country\_name': u 'Spain'  
        }, u 'ip': 3247678121, u 'domains': \[u 'us.es'\], u 'org': u 'Universidad de Sevilla', u 'os': None, u 'asn': u 'AS766', u 'hostnames': \[u 'ait08.us.es'\], u 'ip\_str': u '193.147.162.169'  
    }, {  
        u 'info': u '(Red Hat)', u 'product': u 'Apache httpd', u 'title': u 'TCEA', u 'timestamp': u '2014-09-09T01:53:02.514828', u 'isp': u 'Jumpline', u 'cpe': u 'a:apache:http\_server:2.0.52', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Mon, 08 Sep 2014 23:49:50 GMT\\r\\nServer: Apache/2.0.52 (Red Hat)\\r\\nLast-Modified: Thu, 10 Sep 2009 17:17:58 GMT\\r\\nETag: "4bc0dd3-969-61823d80"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 2409\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.0.52', u 'location': {  
            u 'city': u 'Columbus', u 'region\_name': None, u 'area\_code': 614, u 'longitude': -83.0726, u 'country\_code3': u 'USA', u 'latitude': 40.04859999999999, u 'postal\_code': u '43220', u 'dma\_code': 535, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1112816202, u 'domains': \[u 'myhostcenter.com'\], u 'org': u 'Jumpline', u 'os': None, u 'asn': u 'AS17054', u 'hostnames': \[u 's74.n58.n84.n66.static.myhostcenter.com'\], u 'ip\_str': u '66.84.58.74'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'Your internet access has been restricted!', u 'timestamp': u '2014-09-09T01:53:02.502387', u 'isp': None, u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:57:21 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.3.3\\r\\nCache-Control: max-age=1\\r\\nExpires: Tue, 09 Sep 2014 01:57:22 GMT\\r\\nContent-Length: 1645\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'hostnames': \[u '107-152-90-216.net.iwantwireless.ca'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': None, u 'country\_code3': None, u 'latitude': None, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': None, u 'country\_name': None  
        }, u 'ip': 1805146840, u 'domains': \[u 'iwantwireless.ca'\], u 'org': None, u 'os': None, u 'port': 80, u 'ip\_str': u '107.152.90.216'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:59.168669', u 'isp': u 'Washington Mutual', u 'cpe': u 'a:apache:http\_server:2.2.15', u 'data': u 'HTTP/1.0 302 Found\\r\\nDate: Tue, 09 Sep 2014 01:50:08 GMT\\r\\nServer: Apache/2.2.15 (CentOS)\\r\\nX-Powered-By: PHP/5.3.3\\r\\nLocation: /404.php\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'version': u '2.2.15', u 'location': {  
            u 'city': u 'Seattle', u 'region\_name': None, u 'area\_code': 206, u 'longitude': -122.3284, u 'country\_code3': u 'USA', u 'latitude': 47.602599999999995, u 'postal\_code': u '98104', u 'dma\_code': 819, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 2812300750, u 'domains': \[u 'mainsandflixlikes.com'\], u 'org': u 'Washington Mutual', u 'os': None, u 'port': 80, u 'hostnames': \[u 'suitek7.mainsandflixlikes.com'\], u 'ip\_str': u '167.160.77.206'  
    }, {  
        u 'info': u '(Debian)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:59.153524', u 'isp': u 'Digital Ocean', u 'cpe': u 'a:apache:http\_server:2.2.16', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:25:52 GMT\\r\\nServer: Apache/2.2.16 (Debian)\\r\\nX-Powered-By: PHP/5.4.21-1~dotdeb.0\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 10\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.16', u 'location': {  
            u 'city': u 'New York', u 'region\_name': None, u 'area\_code': 212, u 'longitude': -73.9981, u 'country\_code3': u 'USA', u 'latitude': 40.726699999999994, u 'postal\_code': u '10012', u 'dma\_code': 501, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 3237064486, u 'domains': \[\], u 'org': u 'Digital Ocean', u 'os': None, u 'asn': u 'AS62567', u 'hostnames': \[\], u 'ip\_str': u '192.241.175.38'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u 'Apache HTTP Server Test Page powered by CentOS', u 'timestamp': u '2014-09-09T01:51:59.132780', u 'isp': u 'SOFTBANK TELECOM Corp.', u 'cpe': u 'a:apache:http\_server:2.2.3', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Mon, 08 Sep 2014 22:57:55 GMT\\r\\nServer: Apache/2.2.3 (CentOS)\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 5043\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=EUC-JP\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.3', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 139.69, u 'country\_code3': u 'JPN', u 'latitude': 35.69, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'JP', u 'country\_name': u 'Japan'  
        }, u 'ip': 1728890584, u 'domains': \[\], u 'org': u 'SOFTBANK TELECOM Corp.', u 'os': None, u 'asn': u 'AS4725', u 'hostnames': \[\], u 'ip\_str': u '103.12.198.216'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:51:59.078653', u 'isp': u 'ZeXoTeK IT-Services GmbH', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 01:56:03 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.1.6\\r\\nContent-Length: 260\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 9.0, u 'country\_code3': u 'DEU', u 'latitude': 51.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 622567918, u 'domains': \[\], u 'org': u 'ZeXoTeK IT-Services GmbH', u 'os': None, u 'asn': u 'AS8649', u 'ip\_str': u '37.27.161.238'  
    }, {  
        u 'info': u '(Debian)', u 'product': u 'Apache httpd', u 'title': u '401 Authorization Required', u 'timestamp': u '2014-09-09T01:51:59.060821', u 'isp': u 'Iomart Hosting Limited', u 'cpe': u 'a:apache:http\_server:2.2.16', u 'data': u 'HTTP/1.0 401 Authorization Required\\r\\nDate: Tue, 09 Sep 2014 01:56:24 GMT\\r\\nServer: Apache/2.2.16 (Debian)\\r\\nWWW-Authenticate: Basic realm="Auth obligatoire sinon arrache toi"\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 481\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.16', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -0.12999999999999545, u 'country\_code3': u 'GBR', u 'latitude': 51.5, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'GB', u 'country\_name': u 'United Kingdom'  
        }, u 'ip': 1467335320, u 'domains': \[\], u 'org': u 'RapidSwitch Ltd', u 'os': None, u 'asn': u 'AS20860', u 'hostnames': \[\], u 'ip\_str': u '87.117.194.152'  
    }, {  
        u 'info': u '(CentOS)', u 'product': u 'Apache httpd', u 'title': u 'Apache HTTP Server Test Page powered by CentOS', u 'timestamp': u '2014-09-09T01:51:59.055494', u 'isp': u 'PacketExchange', u 'cpe': u 'a:apache:http\_server:2.2.15', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Mon, 08 Sep 2014 18:03:56 GMT\\r\\nServer: Apache/2.2.15 (CentOS)\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 5039\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.15', u 'location': {  
            u 'city': u 'Miami', u 'region\_name': None, u 'area\_code': 305, u 'longitude': -80.2401, u 'country\_code3': u 'USA', u 'latitude': 25.812399999999997, u 'postal\_code': u '33142', u 'dma\_code': 528, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 2915914543, u 'domains': \[u 'quadranet.com'\], u 'org': u 'IPTelligent LLC', u 'os': None, u 'asn': u 'AS8100', u 'hostnames': \[u '173.205.83.47.static.quadranet.com'\], u 'ip\_str': u '173.205.83.47'  
    }, {  
        u 'info': u '(Ubuntu)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:59.031448', u 'isp': u 'Choopa.com', u 'cpe': u 'a:apache:http\_server:2.4.7', u 'data': u 'HTTP/1.0 302 Found\\r\\nDate: Tue, 09 Sep 2014 00:05:46 GMT\\r\\nServer: Apache/2.4.7 (Ubuntu)\\r\\nX-Powered-By: PHP/5.5.9-1ubuntu4.3\\r\\nSet-Cookie: ocf967c0357a=f9js6hp4a2m0d1db4q3dn54md1; path=/; HttpOnly\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\nStrict-Transport-Security: max-age=31536000\\r\\nLocation: https://zcloud.cf/\\r\\nContent-Length: 0\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.4.7', u 'location': {  
            u 'city': u 'Matawan', u 'region\_name': None, u 'area\_code': 732, u 'longitude': -74.2579, u 'country\_code3': u 'USA', u 'latitude': 40.4169, u 'postal\_code': u '07747', u 'dma\_code': 501, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1815975821, u 'domains': \[\], u 'org': u 'Choopa.com', u 'os': None, u 'asn': u 'AS20473', u 'hostnames': \[\], u 'ip\_str': u '108.61.151.141'  
    }, {  
        u 'info': u '(Unix) mod\_ssl/2.2.23 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.3.18', u 'product': u 'Apache httpd', u 'title': u '301 Moved Permanently', u 'timestamp': u '2014-09-09T01:51:59.016309', u 'isp': u 'ServerBeach', u 'cpe': u 'a:apache:http\_server:2.2.23', u 'data': u 'HTTP/1.0 301 Moved Permanently\\r\\nDate: Tue, 09 Sep 2014 01:05:01 GMT\\r\\nServer: Apache/2.2.23 (Unix) mod\_ssl/2.2.23 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.3.18\\r\\nLocation: http://www.homiesphonecards.com\\r\\nContent-Length: 239\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.23', u 'location': {  
            u 'city': u 'San Antonio', u 'region\_name': None, u 'area\_code': 210, u 'longitude': -98.3987, u 'country\_code3': u 'USA', u 'latitude': 29.4889, u 'postal\_code': u '78218', u 'dma\_code': 641, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 3633829336, u 'domains': \[\], u 'org': u 'Peer 1 Network', u 'os': None, u 'asn': u 'AS13768', u 'hostnames': \[\], u 'ip\_str': u '216.151.213.216'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:58.997976', u 'isp': u 'LeaseWeb B.V.', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:56:24 GMT\\r\\nServer: Apache\\r\\nContent-Length: 0\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'www.welovereclame.nl'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 5.75, u 'country\_code3': u 'NLD', u 'latitude': 52.5, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'NL', u 'country\_name': u 'Netherlands'  
        }, u 'ip': 1582031640, u 'domains': \[u 'welovereclame.nl'\], u 'org': u 'LeaseWeb B.V.', u 'os': None, u 'asn': u 'AS16265', u 'ip\_str': u '94.75.227.24'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:58.986963', u 'isp': u 'GoDaddy.com, LLC', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:06:30 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Wed, 06 Nov 2013 05:33:21 GMT\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 76\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': u 'Scottsdale', u 'region\_name': None, u 'area\_code': 480, u 'longitude': -111.8906, u 'country\_code3': u 'USA', u 'latitude': 33.61189999999999, u 'postal\_code': u '85260', u 'dma\_code': 753, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 842936506, u 'domains': \[\], u 'org': u 'GoDaddy.com, LLC', u 'os': None, u 'asn': u 'AS26496', u 'ip\_str': u '50.62.48.186'  
    }, {  
        u 'info': u '(Ubuntu)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:58.953509', u 'isp': u 'Host Europe GmbH', u 'cpe': u 'a:apache:http\_server:2.2.14', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:47:47 GMT\\r\\nServer: Apache/2.2.14 (Ubuntu)\\r\\nLast-Modified: Tue, 14 Aug 2012 11:53:21 GMT\\r\\nETag: "1a59c8a2-b1-4c73874f2ae40"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 177\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.14', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 6.183300000000003, u 'country\_code3': u 'DEU', u 'latitude': 51.650000000000006, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'DE', u 'country\_name': u 'Germany'  
        }, u 'ip': 782454616, u 'domains': \[u 'hosteurope.de'\], u 'org': u 'Host Europe GmbH', u 'os': None, u 'asn': u 'AS20773', u 'hostnames': \[u 'lvps46-163-79-88.dedicated.hosteurope.de'\], u 'ip\_str': u '46.163.79.88'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'Coming Soon - Future home of something quite cool', u 'timestamp': u '2014-09-09T01:51:58.948816', u 'isp': u 'GoDaddy.com, LLC', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 00:24:30 GMT\\r\\nServer: Apache\\r\\nAccept-Ranges: bytes\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 1016\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[\], u 'location': {  
            u 'city': u 'Scottsdale', u 'region\_name': None, u 'area\_code': 480, u 'longitude': -111.8906, u 'country\_code3': u 'USA', u 'latitude': 33.61189999999999, u 'postal\_code': u '85260', u 'dma\_code': 753, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 843008337, u 'domains': \[\], u 'org': u 'GoDaddy.com, LLC', u 'os': None, u 'asn': u 'AS26496', u 'ip\_str': u '50.63.73.81'  
    }, {  
        u 'info': u '(Unix) mod\_ssl/2.2.21 OpenSSL/1.0.0-fips mod\_bwlimited/1.4 FrontPage/5.0.2.2635 mod\_qos/9.74 mod\_auth\_passthrough/2.1 mod\_perl/2.0.5 Perl/v5.8.8', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:58.939038', u 'isp': u 'EBL Global Networks', u 'cpe': u 'a:apache:http\_server:2.2.21', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Mon, 08 Sep 2014 22:29:29 GMT\\r\\nServer: Apache/2.2.21 (Unix) mod\_ssl/2.2.21 OpenSSL/1.0.0-fips mod\_bwlimited/1.4 FrontPage/5.0.2.2635 mod\_qos/9.74 mod\_auth\_passthrough/2.1 mod\_perl/2.0.5 Perl/v5.8.8\\r\\nLast-Modified: Sun, 29 Jan 2012 00:54:18 GMT\\r\\nETag: "84251-6f-4b7a02b6c2280"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 111\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.21', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -97.0, u 'country\_code3': u 'USA', u 'latitude': 38.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 3324793762, u 'domains': \[u 'hostwindsdns.com'\], u 'org': u 'EBL Global Networks', u 'os': None, u 'asn': u 'AS13354', u 'hostnames': \[u 'client-198-44-83-162.hostwindsdns.com'\], u 'ip\_str': u '198.44.83.162'  
    }, {  
        u 'info': u '(Red Hat)', u 'product': u 'Apache httpd', u 'title': u '', u 'timestamp': u '2014-09-09T01:51:58.903718', u 'isp': u 'SouthWeb Ventures', u 'cpe': u 'a:apache:http\_server:2.2.3', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:52:20 GMT\\r\\nServer: Apache/2.2.3 (Red Hat)\\r\\nLast-Modified: Thu, 07 Aug 2008 16:06:09 GMT\\r\\nETag: "d4811-ee7-ddfd7e40"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 3815\\r\\nX-Powered-By: PleskLin\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.3', u 'location': {  
            u 'city': u 'Austin', u 'region\_name': None, u 'area\_code': 512, u 'longitude': -97.7138, u 'country\_code3': u 'USA', u 'latitude': 30.26429999999999, u 'postal\_code': u '78702', u 'dma\_code': 635, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 3633045705, u 'domains': \[u 'siteprotect.com'\], u 'org': u 'SouthWeb Ventures', u 'os': None, u 'asn': u 'AS32400', u 'hostnames': \[u '216-139-224-201.aus.us.siteprotect.com'\], u 'ip\_str': u '216.139.224.201'  
    }, {  
        u 'info': u '(Fedora)', u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:58.872629', u 'isp': u 'EZ Publishing', u 'cpe': u 'a:apache:http\_server:2.0.54', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Mon, 08 Sep 2014 23:28:46 GMT\\r\\nServer: Apache/2.0.54 (Fedora)\\r\\nLast-Modified: Wed, 06 Jul 2011 21:37:09 GMT\\r\\nETag: "d94145-8b-670cab40"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 139\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.0.54', u 'location': {  
            u 'city': u 'Sacramento', u 'region\_name': None, u 'area\_code': 916, u 'longitude': -121.4944, u 'country\_code3': u 'USA', u 'latitude': 38.58160000000001, u 'postal\_code': u '95811', u 'dma\_code': 862, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1111164546, u 'domains': \[\], u 'org': u 'EZ Publishing', u 'os': None, u 'asn': u 'AS18687', u 'hostnames': \[\], u 'ip\_str': u '66.59.6.130'  
    }, {  
        u 'info': u '(Ubuntu)', u 'product': u 'Apache httpd', u 'title': u '302 Found', u 'timestamp': u '2014-09-09T01:51:58.862276', u 'isp': u 'Prometeus Di Daniela Agro', u 'cpe': u 'a:apache:http\_server:2.2.22', u 'data': u 'HTTP/1.0 302 Found\\r\\nDate: Tue, 09 Sep 2014 01:56:19 GMT\\r\\nServer: Apache/2.2.22 (Ubuntu)\\r\\nLocation: https://store.bglnet.it/\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 288\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.22', u 'location': {  
            u 'city': u 'Agro', u 'region\_name': None, u 'area\_code': None, u 'longitude': 8.199999999999989, u 'country\_code3': u 'ITA', u 'latitude': 46.2167, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'IT', u 'country\_name': u 'Italy'  
        }, u 'ip': 3164897329, u 'domains': \[\], u 'org': u 'Prometeus Di Daniela Agro', u 'os': None, u 'asn': u 'AS34971', u 'hostnames': \[\], u 'ip\_str': u '188.164.128.49'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:58.855286', u 'isp': u 'Surfland Systemy Komputerowe SA', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 00:06:33 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Fri, 05 Apr 2013 14:13:40 GMT\\r\\nETag: "443df13d-33-4d99db1ae95ab"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 51\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'alpha.ssk.pl'\], u 'location': {  
            u 'city': u 'Wroclaw', u 'region\_name': None, u 'area\_code': None, u 'longitude': 17.033299999999997, u 'country\_code3': u 'POL', u 'latitude': 51.099999999999994, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'PL', u 'country\_name': u 'Poland'  
        }, u 'ip': 1346694401, u 'domains': \[u 'ssk.pl'\], u 'org': u 'Surfland Systemy Komputerowe SA', u 'os': None, u 'asn': u 'AS20829', u 'ip\_str': u '80.68.237.1'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '301 Moved Permanently', u 'timestamp': u '2014-09-09T01:51:58.845778', u 'isp': u 'Merck and Co.', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 301 Moved Permanently\\r\\nDate: Tue, 09 Sep 2014 01:51:27 GMT\\r\\nServer: Apache\\r\\nLocation: https://staging.themisbar.com/\\r\\nCache-Control: max-age=0\\r\\nExpires: Tue, 09 Sep 2014 01:51:27 GMT\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 238\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'hostnames': \[u 'ec2-54-89-102-182.compute-1.amazonaws.com'\], u 'location': {  
            u 'city': u 'Woodbridge', u 'region\_name': None, u 'area\_code': 732, u 'longitude': -74.2915, u 'country\_code3': u 'USA', u 'latitude': 40.55250000000001, u 'postal\_code': u '07095', u 'dma\_code': 501, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 911828662, u 'domains': \[u 'ec2-54-89-102-182.compute-1.amazonaws.com'\], u 'org': u 'Merck and Co.', u 'os': None, u 'port': 80, u 'ip\_str': u '54.89.102.182'  
    }, {  
        u 'info': u '(Unix) mod\_ssl/2.2.9 OpenSSL/0.9.8o PHP/5.2.8 mod\_wsgi/2.4 Python/2.6.2', u 'product': u 'Apache httpd', u 'title': u '301 Moved Permanently', u 'timestamp': u '2014-09-09T01:51:58.829519', u 'isp': u 'UPC Hungary', u 'cpe': u 'a:apache:http\_server:2.2.9', u 'data': u 'HTTP/1.0 301 Moved Permanently\\r\\nDate: Tue, 09 Sep 2014 02:10:47 GMT\\r\\nServer: Apache/2.2.9 (Unix) mod\_ssl/2.2.9 OpenSSL/0.9.8o PHP/5.2.8 mod\_wsgi/2.4 Python/2.6.2\\r\\nLocation: http://89.132.238.130/playzone,/\\r\\nContent-Length: 382\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.9', u 'location': {  
            u 'city': u 'Budapest', u 'region\_name': None, u 'area\_code': None, u 'longitude': 19.08330000000001, u 'country\_code3': u 'HUN', u 'latitude': 47.5, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'HU', u 'country\_name': u 'Hungary'  
        }, u 'ip': 1501884034, u 'domains': \[u 'broadband.hu'\], u 'org': u 'UPC Hungary', u 'os': None, u 'asn': u 'AS6830', u 'hostnames': \[u 'catv-89-132-238-130.catv.broadband.hu'\], u 'ip\_str': u '89.132.238.130'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '404 Not Found', u 'timestamp': u '2014-09-09T01:51:58.822520', u 'isp': u 'New Guoxin Telecom Corporation', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 404 Not Found\\r\\nDate: Tue, 09 Sep 2014 01:17:53 GMT\\r\\nServer: Apache\\r\\nX-Powered-By: PHP/5.3.3\\r\\nContent-Length: 262\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'hostnames': \[\], u 'location': {  
            u 'city': u 'Chaoyang', u 'region\_name': None, u 'area\_code': None, u 'longitude': 120.45859999999999, u 'country\_code3': u 'CHN', u 'latitude': 41.5703, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'CN', u 'country\_name': u 'China'  
        }, u 'ip': 1956033271, u 'domains': \[\], u 'org': u 'New Guoxin Telecom Corporation', u 'os': None, u 'port': 80, u 'ip\_str': u '116.150.178.247'  
    }, {  
        u 'info': u '(Debian)', u 'product': u 'Apache httpd', u 'title': u 'visionen vamsys', u 'timestamp': u '2014-09-09T01:51:58.757970', u 'isp': u 'euNetworks Managed Services GmbH', u 'cpe': u 'a:apache:http\_server:2.2.16', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 01:16:19 GMT\\r\\nServer: Apache/2.2.16 (Debian)\\r\\nLast-Modified: Tue, 12 Oct 2010 09:22:44 GMT\\r\\nETag: "622b42-370-4926804f10100"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 880\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html; charset=iso-8859-15;\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.16', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 8.0, u 'country\_code3': u 'EU', u 'latitude': 47.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'EU', u 'country\_name': u 'Europe'  
        }, u 'ip': 1400708125, u 'domains': \[u 'q-nic.de'\], u 'org': u 'euNetworks Managed Services GmbH', u 'os': None, u 'asn': u 'AS13237', u 'hostnames': \[u 'ix-29.myrack.q-nic.de'\], u 'ip\_str': u '83.125.28.29'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u '403 Forbidden', u 'timestamp': u '2014-09-09T01:51:58.748110', u 'isp': u 'root SA', u 'cpe': u 'a:apache:http\_server:2.2.3', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Tue, 09 Sep 2014 01:56:24 GMT\\r\\nServer: Apache/2.2.3\\r\\nContent-Length: 272\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n', u 'port': 80, u 'version': u '2.2.3', u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 6.166699999999992, u 'country\_code3': u 'LUX', u 'latitude': 49.75, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'LU', u 'country\_name': u 'Luxembourg'  
        }, u 'ip': 1592970357, u 'domains': \[u 'as5577.net'\], u 'org': u 'root SA', u 'os': None, u 'asn': u 'AS5577', u 'hostnames': \[u 'ip-static-94-242-204-117.as5577.net'\], u 'ip\_str': u '94.242.204.117'  
    }, {  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T01:51:58.743344', u 'isp': u 'Mandic S.A.', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:21:32 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Sun, 07 Sep 2014 22:23:31 GMT\\r\\nETag: "19e2ba-55-5028126f23ec0"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 85\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'cwa193.cloudworld.com.br'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': -55.0, u 'country\_code3': u 'BRA', u 'latitude': -10.0, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'BR', u 'country\_name': u 'Brazil'  
        }, u 'ip': 2974184641, u 'domains': \[u 'cloudworld.com.br'\], u 'org': u 'Mandic S.A.', u 'os': None, u 'asn': u 'AS262545', u 'ip\_str': u '177.70.116.193'  
    }, {  
        u 'product': u 'Apache httpd', u 'title': u 'Apache HTTP Server Test Page powered by CentOS', u 'timestamp': u '2014-09-09T01:51:58.713789', u 'isp': u 'Network Application Services', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 403 Forbidden\\r\\nDate: Tue, 09 Sep 2014 01:19:37 GMT\\r\\nServer: Apache\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 4958\\r\\nContent-Type: text/html\\r\\nContent-Language: it\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'ux06.9netweb.it'\], u 'location': {  
            u 'city': u 'Parsippany', u 'region\_name': None, u 'area\_code': 973, u 'longitude': -74.4026, u 'country\_code3': u 'USA', u 'latitude': 40.859700000000004, u 'postal\_code': u '07054', u 'dma\_code': 501, u 'country\_code': u 'US', u 'country\_name': u 'United States'  
        }, u 'ip': 1111985067, u 'domains': \[u '9netweb.it'\], u 'org': u 'Network Application Services', u 'os': None, u 'asn': u 'AS31034', u 'ip\_str': u '66.71.139.171'  
    }\], u 'total': 34341150  
}

Como veran tenemos un resultado cuantos ?? cuales y que es lo que nos devuelve???? eso lo veremos ahora mismo toca analizar el resultado de lo que nos devuelve, para ello sacaremos una pequeña parte del resultado

{  
    u 'matches': \[{  
        u 'product': u 'Apache httpd', u 'timestamp': u '2014-09-09T02:05:45.595054', u 'isp': u 'Telekom Austria', u 'cpe': u 'a:apache:http\_server', u 'data': u 'HTTP/1.0 200 OK\\r\\nDate: Tue, 09 Sep 2014 02:10:10 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Wed, 12 Sep 2012 14:29:35 GMT\\r\\nETag: "a02090-129-50509c4f"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 297\\r\\nContent-Type: text/html\\r\\n\\r\\n', u 'port': 80, u 'hostnames': \[u 'b2b.telekom.at'\], u 'location': {  
            u 'city': None, u 'region\_name': None, u 'area\_code': None, u 'longitude': 13.333300000000008, u 'country\_code3': u 'AUT', u 'latitude': 47.33330000000001, u 'postal\_code': None, u 'dma\_code': None, u 'country\_code': u 'AT', u 'country\_name': u 'Austria'  
        }, u 'ip': 3271781698, u 'domains': \[u 'telekom.at'\], u 'org': u 'Telekom Austria', u 'os': None, u 'asn': u 'AS15824', u 'ip\_str': u '195.3.109.66'  
    }\], u 'total': 34341150  
}

Se observa que el primer nodo es matches,  y dentro de el tenemos las siguientes variables:

  • product
  • timestamp
  • isp
  • cpe
  • data
  • port
  • hostnames

Seguido de ello tenemos el otro nodo que es location:

  • city
  • region_name
  • area_code
  • longitude
  • country_code3
  • latitude
  • postal_code
  • dma_code
  • country_code
  • country_name

Y como ultimo aparte de los dos nodos principales tenemos:

  • ip
  • domains 
  • os
  • asn
  • ip_str

Para cerrar todo esto con broche de oro el ultimo valor “total”. Ahora con esto ya tenemos los conocimientos necesarios para poder aumentar algo mas a nuestro pequeño script todas las varibales que identificacmos podemos imprimirlas claro esta quitando el print result.

Imprimiendo el valor total, basta con agregar:

print 'Resultados encontrados: %s' % result\['total'\]

Pero que hace este total la respuesta es la siguiente:

(python2.7)\[snifer@rizel GPT\]$ python bshodan.py iis  
Resultados encontrados: 9872108

Y bueno hasta aquí con la presente entrada, ya veremos en otra algo nuevo  y terminaremos de realizar el script, espero les agrade y claro no se olviden que todo comentario o duda es bienvenido, si no saben que es Shodan o necesitan saber algunos terminos usados, les invito a darse una vuelta por las entradas anteriores que abordamos en Snifer@L4b’s.

¡Hola que tal Shodan soy un curioso!

  • ¿Que es Shodan?
  • ¿Para que puedo usar Shodan?
  • ¿Shodan para quien es?
  • Conociendo mas sobre Shodan. 

Mira mamá uso otro buscador se llama Shodan

  • Shodan en mi navegador
  • Realizando búsquedas en Shodan
  • Contraseñas y configuraciones por defecto
  • Shodan Maps

Mi nuevo amigo Shodan me enseña a ser mas cuidadoso

  • Shodan en mi navegador
  • Realizando búsquedas en Shodan
  • Contraseñas y configuraciones por defecto
  • Shodan Maps

Regards,
Snifer

Share on
Support the author with
Avatar
WRITTEN BY

See Also