HTTP/1.1 401 Access Denied
Allow: GET, POST
Content-Length: 2232
Content-Type: text/html
Accept-Ranges: bytes
Server: Microsoft-HTTPAPI/2.0
Set-Cookie: GWSID=21A9B79C98034E319BEBDCFFFB460BEA; expires=Fri, 21 Nov 2025 00:00:00 UTC; path=/;HttpOnly
Set-Cookie: fmxs_userid=;Path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT;HttpOnly
Set-Cookie: fmxs_accesskey=;Path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT;HttpOnly
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Content-Security-Policy: connect-src 'self' ws: wss: http: https:; child-src 'self'; style-src 'self' 'sha256-47XaZds7UlsDQ+atdqJAp+3rZKSWalqaCa4r84a3K50='; default-src 'none'; script-src 'self' blob: 'unsafe-inline'; form-action 'self'; font-src 'self' data:; media-src 'self' data:; object-src 'none'; img-src 'self' data: blob:; frame-ancestors 'self'; frame-src 'self' https://www.google.com/ https://*.duosecurity.com/; worker-src 'self' data: blob:
Access-Control-Allow-Credentials: true
Referrer-Policy: same-origin
Access-Control-Allow-Methods: GET, POST
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10080;
Feature-Policy: geolocation 'none'
WWW-Authenticate: Basic realm="Secure Area"
Date: Thu, 21 Nov 2024 08:19:56 GMT
Connection: close
<!DOCTYPE HTML PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<meta name="thinfinity-header" data-name="Content-Security-Policy" data-value="frame-ancestors 'self'; default-src 'none'; frame-src 'self'; script-src 'self' blob: ;form-action 'self'; style-src 'self' 'sha256-47XaZds7UlsDQ+atdqJAp+3rZKSWalqaCa4r84a3K50=' ;base-uri 'self'; img-src 'self' data: blob:; font-src 'self' data:; object-src 'none'; connect-src 'self'; media-src 'self' data:;" />
<meta name="thinfinity-header" data-name="X-Content-Type-Options" data-value="nosniff" />
<meta name="thinfinity-header" data-name="X-XSS-Protection" data-value="1; mode=block" />
<meta name="thinfinity-header" data-name="Referrer-Policy" data-value="same-origin" />
<meta name="thinfinity-header" data-name="Feature-Policy" data-value="geolocation 'none'" />
<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
<style type="text/css">
body{margin:0;font-size:.7em;font-family:Verdana,Arial,Helvetica,sans-serif;background:#eee}fieldset{padding:0 15px 10px 15px}.divbuttons{margin-top:-25px!important}
h1{font-size:1.4em;margin:0;color:#fff}h2{display:none;font-size:1.7em;margin:0;color:#c00}h3{font-size:1.2em;margin:10px 0 0 0;color:#000}
#header{display:none;width:96%;margin:0;padding:6px 2% 6px 2%;font-family:"trebuchet MS",Verdana,sans-serif;color:#fff;background-color:#555}
#content{margin:0;position:relative}.content-container{background:#fff;width:96%;margin-top:8px;padding:10px;position:relative}
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container">
<fieldset>
<h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
<span class="error_message">You do not have permission to view this directory or page using the credentials that you supplied.</span>
</fieldset>
</div>
</div>
</body>
</html>
{
"@category" : "datascan",
"@timestamp" : "2024-11-21T08:31:31.000Z",
"app" : {
"extract" : {
"domain" : [
"w3.org",
"google.com"
],
"hostname" : [
"www.google.com",
"www.w3.org"
],
"url" : [
"http://www.w3.org/1999/xhtml",
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd",
"https://www.google.com/"
]
},
"http" : {
"bodymd5" : "6f4eef9a510d3a0bba642140b4658278",
"bodymmh3" : 1431924284,
"headermd5" : "f635c1b0f4421513da954467eb5f8a3f",
"headermmh3" : 1563880037,
"realm" : "Secure Area",
"title" : "401 - Unauthorized: Access is denied due to invalid credentials."
},
"length" : 3744
},
"asn" : "AS25019",
"city" : "Riyadh",
"country" : "SA",
"cpe" : "<enterprise field>: cpe",
"cpecount" : "<enterprise field>: cpecount",
"data" : "HTTP/1.1 401 Access Denied\r\nAllow: GET, POST\r\nContent-Length: 2232\r\nContent-Type: text/html\r\nAccept-Ranges: bytes\r\nServer: Microsoft-HTTPAPI/2.0\r\nSet-Cookie: GWSID=21A9B79C98034E319BEBDCFFFB460BEA; expires=Fri, 21 Nov 2025 00:00:00 UTC; path=/;HttpOnly\r\nSet-Cookie: fmxs_userid=;Path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT;HttpOnly\r\nSet-Cookie: fmxs_accesskey=;Path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT;HttpOnly\r\nX-Content-Type-Options: nosniff\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control\r\nP3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'\r\nContent-Security-Policy: connect-src 'self' ws: wss: http: https:; child-src 'self'; style-src 'self' 'sha256-47XaZds7UlsDQ+atdqJAp+3rZKSWalqaCa4r84a3K50='; default-src 'none'; script-src 'self' blob: 'unsafe-inline'; form-action 'self'; font-src 'self' data:; media-src 'self' data:; object-src 'none'; img-src 'self' data: blob:; frame-ancestors 'self'; frame-src 'self' https://www.google.com/ https://*.duosecurity.com/; worker-src 'self' data: blob:\r\nAccess-Control-Allow-Credentials: true\r\nReferrer-Policy: same-origin\r\nAccess-Control-Allow-Methods: GET, POST\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=10080;\r\nFeature-Policy: geolocation 'none'\r\nWWW-Authenticate: Basic realm=\"Secure Area\"\r\nDate: Thu, 21 Nov 2024 08:19:56 GMT\r\nConnection: close\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n <meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />\r\n <meta name=\"thinfinity-header\" data-name=\"Content-Security-Policy\" data-value=\"frame-ancestors 'self'; default-src 'none'; frame-src 'self'; script-src 'self' blob: ;form-action 'self'; style-src 'self' 'sha256-47XaZds7UlsDQ+atdqJAp+3rZKSWalqaCa4r84a3K50=' ;base-uri 'self'; img-src 'self' data: blob:; font-src 'self' data:; object-src 'none'; connect-src 'self'; media-src 'self' data:;\" />\r\n <meta name=\"thinfinity-header\" data-name=\"X-Content-Type-Options\" data-value=\"nosniff\" />\r\n <meta name=\"thinfinity-header\" data-name=\"X-XSS-Protection\" data-value=\"1; mode=block\" />\r\n <meta name=\"thinfinity-header\" data-name=\"Referrer-Policy\" data-value=\"same-origin\" />\r\n <meta name=\"thinfinity-header\" data-name=\"Feature-Policy\" data-value=\"geolocation 'none'\" />\r\n <title>401 - Unauthorized: Access is denied due to invalid credentials.</title>\r\n <style type=\"text/css\">\r\n body{margin:0;font-size:.7em;font-family:Verdana,Arial,Helvetica,sans-serif;background:#eee}fieldset{padding:0 15px 10px 15px}.divbuttons{margin-top:-25px!important}\r\n h1{font-size:1.4em;margin:0;color:#fff}h2{display:none;font-size:1.7em;margin:0;color:#c00}h3{font-size:1.2em;margin:10px 0 0 0;color:#000}\r\n #header{display:none;width:96%;margin:0;padding:6px 2% 6px 2%;font-family:\"trebuchet MS\",Verdana,sans-serif;color:#fff;background-color:#555}\r\n #content{margin:0;position:relative}.content-container{background:#fff;width:96%;margin-top:8px;padding:10px;position:relative}\r\n </style>\r\n</head>\r\n<body>\r\n <div id=\"header\"><h1>Server Error</h1></div>\r\n <div id=\"content\">\r\n <div class=\"content-container\">\r\n <fieldset>\r\n <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>\r\n <span class=\"error_message\">You do not have permission to view this directory or page using the credentials that you supplied.</span>\r\n </fieldset>\r\n </div>\r\n </div>\r\n</body>\r\n</html>\r\n",
"datamd5" : "237f6d104e9a28cabef732c942b46274",
"datammh3" : 893386710,
"device" : {
"class" : "<enterprise field>: device.class"
},
"geolocus" : {
"asn" : "AS25019",
"continent" : "AS",
"continentname" : "Asia",
"country" : "SA",
"countryname" : "Saudi Arabia",
"domain" : [
"stc.com.sa"
],
"isineu" : "false",
"latitude" : "23.885942",
"location" : "23.885942,45.079162",
"longitude" : "45.079162",
"netname" : "SAUDINET_DSL_POOL",
"organization" : "SAUDINET_DSL_POOL",
"subnet" : "176.44.0.0/16"
},
"ip" : "176.44.191.214",
"ipv6" : "false",
"latitude" : "24.6869",
"location" : "24.6869,46.7224",
"longitude" : "46.7224",
"node" : {
"country" : "<enterprise field>: node.country",
"groupid" : "<enterprise field>: node.groupid",
"id" : "<enterprise field>: node.id",
"physicalcountry" : "<enterprise field>: node.physicalcountry"
},
"organization" : "Saudi Telecom Company JSC",
"os" : "Windows",
"osvendor" : "Microsoft",
"port" : 1799,
"product" : "HTTPAPI",
"productvendor" : "Microsoft",
"productversion" : "2.0",
"protocol" : "winrm",
"protocolversion" : "1.1",
"reason" : "Access Denied",
"seen_date" : "2024-11-21",
"source" : "datascan",
"status" : 401,
"subnet" : "176.44.0.0/15",
"tag" : "<enterprise field>: tag",
"tls" : "false",
"transport" : "tcp"
}
