Returning 10 result(s) out of 1,016,154 in 0.071 second(s)

  • <access denied by policy>:<access denied by policy> (<access denied by policy>/<access denied by policy>) - last seen on 2024-11-21 at 08:48:08 UTC

    • IP

      <access denied by policy>

      Alternative IP(s)

      <access denied by policy>

      Network

      <access denied by policy>

      Domain(s)
      Operating System

      <access denied by policy> <access denied by policy>

      Reverse DNS

      <access denied by policy>

      ASN

      <access denied by policy>

      Organization

      <access denied by policy>

      Protocol

      <access denied by policy>

      Source

      <access denied by policy>

    • Operating System

      <access denied by policy> <access denied by policy>

      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5

      <access denied by policy>

    • <access denied by policy>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:48:08.000Z",
         "alternativeip" : "<access denied by policy>",
         "app" : "<enterprise field>: app",
         "asn" : "<access denied by policy>",
         "country" : "<access denied by policy>",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "<access denied by policy>",
         "datamd5" : "<access denied by policy>",
         "datammh3" : "<access denied by policy>",
         "device" : "<enterprise field>: device",
         "domain" : "<access denied by policy>",
         "host" : "<access denied by policy>",
         "hostname" : "<access denied by policy>",
         "ip" : "<access denied by policy>",
         "ipv6" : "<access denied by policy>",
         "latitude" : "<access denied by policy>",
         "location" : "<access denied by policy>",
         "longitude" : "<access denied by policy>",
         "node" : "<enterprise field>: node",
         "organization" : "<access denied by policy>",
         "os" : "<access denied by policy>",
         "osvendor" : "<access denied by policy>",
         "port" : "<access denied by policy>",
         "protocol" : "<access denied by policy>",
         "protocolversion" : "<access denied by policy>",
         "reverse" : "<access denied by policy>",
         "seen_date" : "<access denied by policy>",
         "source" : "<access denied by policy>",
         "subnet" : "<access denied by policy>",
         "tag" : "<enterprise field>: tag",
         "tld" : "<access denied by policy>",
         "tls" : "<access denied by policy>",
         "transport" : "<access denied by policy>",
         "url" : "<access denied by policy>"
      }
      
  • 107.191.45.17:22222 (tcp/http) - last seen on 2024-11-21 at 08:48:07 UTC

    • IP
      107.191.45.17
      Network
      107.191.32.0/20
      Domain(s)
      vultrusercontent.com
      Device

      <enterprise field>: device.class

      URL

      http://107.191.45.17:22222/ 302

      HTTP Title
      302 Found
      Reverse DNS
      107.191.45.17.vultrusercontent.com
      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      http
      Source
      datascan::redirect::5
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      fb960e8816844aeef5f8c2fd548babd6
      HTTP Header MD5
      2e4bf6840a3be0d39fdde662e1950ef3
      HTTP Body MD5
      29b5f7615598c74df0019844c163d80c
    • HTTP/1.1 302 Moved Temporarily
      Server: nginx
      Date: Thu, 21 Nov 2024 08:48:07 GMT
      Content-Type: text/html
      Content-Length: 138
      Connection: close
      Location: https://<ip>:22222/
      X-Powered-By: WordOps
      X-Frame-Options: SAMEORIGIN
      X-Content-Type-Options: nosniff
      Referrer-Policy: strict-origin-when-cross-origin
      Cache-Control: public, max-age=31536000, immutable
      
      <html>
      <head><title>302 Found</title></head>
      <body>
      <center><h1>302 Found</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:48:07.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "29b5f7615598c74df0019844c163d80c",
               "bodymmh3" : -23674247,
               "headermd5" : "2e4bf6840a3be0d39fdde662e1950ef3",
               "headermmh3" : 1315206527,
               "title" : "302 Found"
            },
            "length" : 507
         },
         "asn" : "AS20473",
         "city" : "Dallas",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:48:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: close\r\nLocation: https://<ip>:22222/\r\nX-Powered-By: WordOps\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nCache-Control: public, max-age=31536000, immutable\r\n\r\n<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "fb960e8816844aeef5f8c2fd548babd6",
         "datammh3" : 2086249085,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "vultrusercontent.com"
         ],
         "forward" : "107.191.45.17",
         "geolocus" : {
            "asn" : "AS20473",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "constant.com",
               "vultr.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "NET-107-191-44-0-23",
            "organization" : "Vultr Holdings, LLC",
            "subnet" : "107.191.44.0/23"
         },
         "host" : [
            107
         ],
         "hostname" : [
            "107.191.45.17",
            "107.191.45.17.vultrusercontent.com"
         ],
         "ip" : "107.191.45.17",
         "ipv6" : "false",
         "latitude" : "32.7889",
         "location" : "32.7889,-96.8021",
         "longitude" : "-96.8021",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-VULTR",
         "port" : 22222,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "reverse" : [
            "107.191.45.17.vultrusercontent.com"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan::redirect::5",
         "status" : 302,
         "subdomains" : [
            "17.vultrusercontent.com",
            "191.45.17.vultrusercontent.com",
            "45.17.vultrusercontent.com"
         ],
         "subnet" : "107.191.32.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 107.182.31.34:22222 (tcp/http) - last seen on 2024-11-21 at 08:48:07 UTC

    • IP
      107.182.31.34
      Network
      107.182.16.0/20
      Domain(s)
      16clouds.com
      Device

      <enterprise field>: device.class

      URL

      http://107.182.31.34:22222/ 307

      Reverse DNS
      107.182.31.34.16clouds.com
      ASN
      AS25820
      Organization
      IT7NET
      Protocol
      http
      Source
      datascan::redirect::1
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      96cd1ebfa95a30909176aa57304be9b9
      HTTP Header MD5
      c3dc1c6e68b0572d7d0c0afc05ba8b0e
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/0.0 307 Temporary Redirect
      Location: https://<ip>:22222/
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:48:07.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "c3dc1c6e68b0572d7d0c0afc05ba8b0e",
               "headermmh3" : 1248002868
            },
            "length" : 85
         },
         "asn" : "AS25820",
         "city" : "Los Angeles",
         "country" : "US",
         "data" : "HTTP/0.0 307 Temporary Redirect\r\nLocation: https://<ip>:22222/\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "96cd1ebfa95a30909176aa57304be9b9",
         "datammh3" : -1717360352,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "16clouds.com"
         ],
         "forward" : "107.182.31.34",
         "geolocus" : {
            "asn" : "AS25820",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "16clouds.com",
               "sioru.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "CL-107-182-16-0-20",
            "organization" : "Cluster Logic Inc",
            "subnet" : "107.182.16.0/20"
         },
         "host" : [
            107
         ],
         "hostname" : [
            "107.182.31.34",
            "107.182.31.34.16clouds.com"
         ],
         "ip" : "107.182.31.34",
         "ipv6" : "false",
         "latitude" : "34.0726",
         "location" : "34.0726,-118.2610",
         "longitude" : "-118.2610",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "IT7NET",
         "port" : 22222,
         "protocol" : "http",
         "protocolversion" : "0.0",
         "reason" : "Temporary Redirect",
         "reverse" : [
            "107.182.31.34.16clouds.com"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan::redirect::1",
         "status" : 307,
         "subdomains" : [
            "34.16clouds.com",
            "31.34.16clouds.com",
            "182.31.34.16clouds.com"
         ],
         "subnet" : "107.182.16.0/20",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 94.30.98.221:22222 (tcp/http) - last seen on 2024-11-21 at 08:48:07 UTC

    • IP
      94.30.98.221
      Network
      94.30.0.0/17
      Domain(s)
      murphx.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Linux Linux sUse
      URL

      http://94.30.98.221:22222/weblogin.htm 200

      HTTP Title
      Vigor Login Page
      Reverse DNS
      94-30-98-221.xdsl.murphx.net
      ASN
      AS5413
      Organization
      Daisy Corporate Services Trading Ltd
      Protocol
      http
      Source
      datascan::redirect::1
    • Operating System
      Linux Linux sUse
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c9ab5588e8ddf4cfa2f92d59485a077e
      HTTP Header MD5
      34a0e02b0b353cc5153ae8143b6636c7
      HTTP Body MD5
      0547f147b949960d30ddad92da63c509
    • HTTP/1.0 200 OK
      Cache-Control: no-cache, no-store, must-revalidate
      Pragma: no-cache
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Content-type: text/html
      Expires: 0
      X-Frame-Options: SAMEORIGIN
      Content-length: 11935
      Connection: close
      
      <html><head><title>Vigor Login Page</title><LINK / href=../images/favicon.ico rel="shortcut icon" type=image/x-icon><meta content="text/html; charset=iso-8859-1" http-equiv=Content-Type><script> function TR(str){return str;}</script><style>
      input {height:24px;}
      select {height:24px;}
      td.userpwd {
      color: #000000;
      font-family : Verdana, Arial, Helvetica, sans-serif;
      font-size : 14px;
      font-weight: bold;
      }
      td.errmsg {
      color : red;
      font-family : Verdana, Arial, Helvetica, sans-serif;
      font-size : 12px;
      }
      td.errmsg1 {
      color : red;
      font-family : Verdana, Arial, Helvetica, sans-serif;
      font-size : 12px;
      }
      td.copyright {
      color: #888;
      font-family: Verdana, Arial, Helvetica, sans-serif;
      font-size: 10px;
      font-weight: normal;
      padding-bottom: 15px;
      -webkit-text-size-adjust:none
      }
      input.userpwd {
      width: 180px;
      font-family: Verdana, Arial, Helvetica, sans-serif;
      }
      input.login {
      color: #000;
      width: 68px;
      height: 25px;
      padding: 0 .38em .22em .38em;
      background: #004488 url(images/login1.jpg) scroll 0;
      border: 0px #004488 solid;
      font-family: Verdana, Arial, Helvetica, sans-serif;
      font-style: normal;
      font-weight: bold;
      font-size: 14px;
      cursor: pointer;
      margin-left: 275px;
      }
      </style></head><body><form name=frm1 onsubmit="return false;"><input name=csrf_token type=hidden value=1><table border=0 height=90% width=100%><tr><td><script>if('0'=='2'){str='<table align=center width=524px border=0 cellspacing="0" cellpadding=0>';str+='<tr><td><img src="/get_logo.cgi" width="524px"></td></tr>';str+='<tr><td style="border:2px solid #aaaaaa;">';str+='<table width=80% align=center cellspacing="0" cellpadding=2 border=0 style="margin-top:30px">';}else if('0'=='1'){str='<table align=center width=524px height=352px border=0 cellspacing="0" cellpadding=0>';str+='<tr><td>';str+='<table width=80% align=center cellspacing="0" cellpadding=2 border=0 style="margin-top:75px">';}else{str="<table align=center width=524px border=0 cellspacing=0 cellpadding=0><tr height=96><td colspan=2 style='background:url(images/login1.png) no-repeat;'>&nbsp;</td></tr>";str+='<tr><td style="background:url(images/login2.png) repeat;">';str+='<table width=80% align=center cellspacing="0" cellpadding=2 border=0>';}document.write(str);</script><tr align=center class=CustomLogin style=display:none><td colspan=2><h3>Router Login</h3></td></tr><tr height=35><td class=userpwd style=padding-right:20px;text-align:right; width=40%>Username</td><td width=60%><input autocapitalize=off autocomplete=off class=userpwd maxlength=24 name=sUserName type=text></td></tr><tr height=35><td class=userpwd style=padding-right:20px;text-align:right;>Password</td><td><input autocomplete=off class=userpwd maxlength=84 name=sSysPass type=password></td></tr><tr class=sValidatedCode height=35 style=display:none><td class=userpwd style=padding-right:20px;text-align:right;>Validation Code</td><td><input id=validated_code maxlength=4 style="width: 60px" type=text><img align=bottom alt=ValidatedCode height=24px id=sVerification onclick=changecode() style="margin-left:15px;cursor:pointer;vertical-align: middle;" width=96px></td></tr><script>var enSSlgrp='';var enAdminAuth='';var admin_local_en=0;var admin_ldap_en=0;var sslgrp_used=false;var add_group_selector=false;var ssl_group=["","","","","","","","","",""];var ssl_group_en=["0","0","0","0","0","0","0","0","0","0"];if(enSSlgrp==""){for(var i=0;i<ssl_group.length;i++){if(ssl_group_en[i]==1&&ssl_group[i]!="")sslgrp_used=true;}}add_group_selector=(enSSlgrp==""&&sslgrp_used)||(enAdminAuth==""&&(admin_local_en||admin_ldap_en));if(add_group_selector){var str="";str+="<tr height='35'><td class=userpwd style='padding-right:20px;text-align:right;'>"+TR("Group")+"</td>";str+="<td><select name=sltsslgrp>";str+="<option value=-1>---</option>";if(enAdminAuth==""){if(admin_local_en==1||admin_ldap_en==1){str+="<option value=admin>"+TR("admin")+"</option>";}}if(enSSlgrp==""){for(var i=0;i<ssl_group.length;i++){if(ssl_group_en[i]==1&&ssl_group[i]!="")str+="<option value="+i+">"+ssl_group[i]+"</option>";}}str+="</select></td></tr>";document.write(str);}else{document.write("<input type=hidden name=sltsslgrp value=-1>");}</script><tr><td class=errmsg colspan=2 height=15><span id=errmsg></span></td></tr><tr><td class=errmsg1 colspan=2 height=15><span id=errmsg1></span></td></tr><tr><td colspan=2 height=35 valign=top><input class=login name=btnOk type=button value=Login></td></tr></table></td></tr><script>var str='<tr><td height=60 class=copyright style="text-align:center;">';if('0'=='2')str='<tr><td height=60 class=copyright style="text-align:center;">';else if('0'=='0')str='<tr><td class=copyright height=70 style="background:url(images/login3.png) no-repeat;text-align:center;">';str+=TR("Copyright &copy; 2000-");var buildtime="Aug 11 2022 19:05:21";var build_ary=buildtime.split(" ");for(var i=0;i<build_ary.length;i++){if(build_ary[i].length==4){str+=build_ary[i];break;}}str+=TR("DrayTek Corp. All Rights Reserved.")+"</td></tr>";document.write(str);</script></table><table align=center border=0 class=CustomLogin style=display:none><tr><td><h1><b><font color=red>Welcome Message</font></b></h1><p>This welcome message is displayed in the Login page of the router. Replace this text with your own message. </p><ol><li>The welcome message can be written in HTML so lists such as this one can be created </li><li>Other markup tags such as p, font or img can be used</li></ol></td></tr></table></td></tr></table></form><form name=frmSub><input name=csrf_token type=hidden value=1><script>var sUser_mgt_End='';var sValidatedCode='';var sValidatedCodeNum;var form_num=2; if(sUser_mgt_End=="")form_num+=5; form_num+=1;if(sValidatedCode!="")form_num+=2;for(i=0;i<form_num+1;i++){document.write("<input type=hidden name=obj"+i+">");}</script></form></body></html><script>var isNav=(navigator.appName.indexOf("Netscape")!=-1);var isIE=(navigator.appName.indexOf("Microsoft")!=-1);var isOpr=(navigator.appName.indexOf("Opera")!=-1);var f=document.frm1;var iFrmLgErr=2;var iCustomLoginFlag='0';var CUST_LOGIN_ENABLE=(1<<3);var src_ip;var target_url;var mode;var fw_set;var fw_rule;initParameter();initPage();if(opener&&typeof(window.opener.document)!='unknown'&&typeof(window.opener.document)!='undefined'){if(opener.loginset_preview==1)opener.loginset_preview=0;}else ClearCookies();function changecode(){var verify=document.getElementById('sVerification');sValidatedCodeNum=Math.random()*1000000;verify.setAttribute('src','/verifycode.png?'+sValidatedCodeNum);}function showElmtByClass(_doc,_tag,_el){var doc=_doc;var tag=_tag;var el=_el;if(doc.getElementsByTagName){var nodes=doc.getElementsByTagName(tag);var max=nodes.length;for(var i=0;i<max;i++){var node=nodes.item(i);if(node.className==el){node.style.display="";}}}}function initPage(){if(sValidatedCode!=""){changecode();}if((iCustomLoginFlag&CUST_LOGIN_ENABLE)==CUST_LOGIN_ENABLE){if('0'=='0')showElmtByClass(document,"tr","CustomLogin");showElmtByClass(document,"table","CustomLogin");} if(self!=top)top.location="weblogin.htm";f.sUserName.focus();if(sUser_mgt_End==""){if(mode){switch(mode){case 3: if(iFrmLgErr==4){errmsg.innerHTML=TR("User Mode is off now.");}else if(iFrmLgErr==5){errmsg.innerHTML=TR("Wrong validation code!");}else{errmsg.innerHTML=TR("The username or password you entered is incorrect.");}break;case 4: errmsg.innerHTML=TR("Reach the maximum login number. Try another user account.");break;case 5: errmsg.innerHTML=TR("No available buffer now. Please contact with your administrator");break;case 6: errmsg.innerHTML=TR("The username or password you entered is incorrect.");break;case 7:errmsg.innerHTML=TR("User account is not enabled now.");break;case 8:errmsg.innerHTML=TR("You aren't allowed to access internet (out of schedule).");break;case 9:errmsg.innerHTML=TR("User login denied from http protocol. Please contact with your administrator");break;case 10:errmsg.innerHTML=TR("The user ran out of time quota.");break;case 11:errmsg.innerHTML=TR("The user ran out of data quota.");break;case 12:errmsg.innerHTML=TR("Wrong user account. Please contact with your administrator.");break;default:if(iFrmLgErr==2)errmsg.innerHTML=TR("The username or password you entered is incorrect.");break;}}else if(iFrmLgErr==2){errmsg.innerHTML=TR("The username or password you entered is incorrect.");}else if(iFrmLgErr==4){errmsg.innerHTML=TR("User Mode is off now.");}else if(iFrmLgErr==5){errmsg.innerHTML=TR("Wrong validation code!");}}else if(iFrmLgErr==2){errmsg.innerHTML=TR("The username or password you entered is incorrect.");}else if(iFrmLgErr==4){errmsg.innerHTML=TR("User Mode is off now.");}else if(iFrmLgErr==5){errmsg.innerHTML=TR("Wrong validation code!");}if(sValidatedCode!=""){showElmtByClass(document,"tr","sValidatedCode");} for(var d=0;d<document.forms.length;d++){ for(var e=0;e<document.forms[d].elements.length;e++){addhandlers(document.forms[d].elements[e]);}}}function initParameter(){if(sUser_mgt_End==""){src_ip='';target_url='';mode=0;fw_set=0;fw_rule=0;}}function encode(instr){var keyStr="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";var outstr="";var chr1,chr2,chr3="";var enc1,enc2,enc3,enc4="";var i=0;do{chr1=instr.charCodeAt(i++);chr2=instr.charCodeAt(i++);chr3=instr.charCodeAt(i++);enc1=chr1>>2;enc2=((chr1&3)<<4)|(chr2>>4);enc3=((chr2&15)<<2)|(chr3>>6);enc4=chr3&63;if(isNaN(chr2)){enc3=enc4=64;}else if(isNaN(chr3)){enc4=64;}outstr=outstr+keyStr.charAt(enc1)+keyStr.charAt(enc2)+keyStr.charAt(enc3)+keyStr.charAt(enc4);chr1=chr2=chr3="";enc1=enc2=enc3=enc4="";}while(i<instr.length);return outstr;}function submitPara(){var frmSub=document.frmSub;var fwElmIdx=2;frmSub.method="post";frmSub.action="cgi-bin/wlogin.cgi";frmSub[0].name="aa";frmSub[0].value=encode(f.sUserName.value);frmSub[1].name="ab";frmSub[1].value=encode(f.sSysPass.value); if(sUser_mgt_End==""&&mode!=0){frmSub[2].name="src_ip";frmSub[2].value=src_ip;frmSub[3].name="target_url";frmSub[3].value=target_url;frmSub[4].name="mode";frmSub[4].value=mode;frmSub[5].name="fw_set";frmSub[5].value=fw_set;frmSub[6].name="fw_rule";frmSub[6].value=fw_rule;fwElmIdx=7;}if(enSSlgrp==""||enAdminAuth==""){frmSub[fwElmIdx].name="sslgroup";frmSub[fwElmIdx].value=f.sltsslgrp.value;}if(sValidatedCode!=""){fwElmIdx++;frmSub[fwElmIdx].name="sVerifCode";frmSub[fwElmIdx].value=document.getElementById("validated_code").value;fwElmIdx++;frmSub[fwElmIdx].name="sValidatedCodeNum";frmSub[fwElmIdx].value=sValidatedCodeNum;}frmSub[form_num].name="sFormAuthStr";frmSub[form_num].value=randomString(15);frmSub.submit();}function randomString(len){var chars='ABCDEFGHJKMNPQRSTWXYZabcdefhijkmnprstwxyz2345678';var maxPos=chars.length;var pwd='';for(i=0;i<len;i++){pwd+=chars.charAt(Math.floor(Math.random()*maxPos));}return pwd;}function handler(_e){var e=_e,elmt,type;if(isNav){elmt=e.target;type=e.type;keycode=e.which;}if(isIE||isOpr){e=window.event;elmt=e.srcElement;type=e.type;keycode=e.keyCode;} if(isIE){if(elmt.type=="text")e.cancelBubble=false;else e.cancelBubble=true;}if(elmt==f.btnOk&&type=="click"){submitPara();}if(elmt!=f.btnOk&&type=="keydown"){if(keycode==13){ e.returnValue=false;submitPara();}}} function addhandlers(_o){var o=_o;o.onclick=handler;o.onkeydown=handler;}function ClearCookies(){var temp=document.cookie.split(";");var ts;for(var i=0;;i++){if(!temp[i])break;ts=temp[i].split("=")[0];DeleteCookie(ts);}}function GetCookieVal(offset){var endstr=document.cookie.indexOf(";",offset);if(endstr==-1)endstr=document.cookie.length;return unescape(document.cookie.substring(offset,endstr));}function GetCookie(name){var arg=name+"=";var alen=arg.length;var clen=document.cookie.length;var i=0;while(i<clen){var j=i+alen;if(document.cookie.substring(i,j)==arg)return GetCookieVal(j);i=document.cookie.indexOf(" ",i)+1;if(i==0)break;}return null;}function DeleteCookie(name){var exp=new Date();exp.setTime(exp.getTime()-1);var cval=GetCookie(name);document.cookie=name+"="+cval+"; expires="+exp.toGMTString();}</script>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:48:07.000Z",
         "app" : {
            "extract" : {
               "file" : [
                  "get_logo.cgi",
                  "wlogin.cgi"
               ]
            },
            "http" : {
               "bodymd5" : "0547f147b949960d30ddad92da63c509",
               "bodymmh3" : 848832414,
               "headermd5" : "34a0e02b0b353cc5153ae8143b6636c7",
               "headermmh3" : -1982034643,
               "title" : "Vigor Login Page"
            },
            "length" : 12198
         },
         "asn" : "AS5413",
         "city" : "Slough",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-type: text/html\r\nExpires: 0\r\nX-Frame-Options: SAMEORIGIN\r\nContent-length: 11935\r\nConnection: close\r\n\r\n<html><head><title>Vigor Login Page</title><LINK / href=../images/favicon.ico rel=\"shortcut icon\" type=image/x-icon><meta content=\"text/html; charset=iso-8859-1\" http-equiv=Content-Type><script> function TR(str){return str;}</script><style>\ninput {height:24px;}\nselect {height:24px;}\ntd.userpwd {\ncolor: #000000;\nfont-family : Verdana, Arial, Helvetica, sans-serif;\nfont-size : 14px;\nfont-weight: bold;\n}\ntd.errmsg {\ncolor : red;\nfont-family : Verdana, Arial, Helvetica, sans-serif;\nfont-size : 12px;\n}\ntd.errmsg1 {\ncolor : red;\nfont-family : Verdana, Arial, Helvetica, sans-serif;\nfont-size : 12px;\n}\ntd.copyright {\ncolor: #888;\nfont-family: Verdana, Arial, Helvetica, sans-serif;\nfont-size: 10px;\nfont-weight: normal;\npadding-bottom: 15px;\n-webkit-text-size-adjust:none\n}\ninput.userpwd {\nwidth: 180px;\nfont-family: Verdana, Arial, Helvetica, sans-serif;\n}\ninput.login {\ncolor: #000;\nwidth: 68px;\nheight: 25px;\npadding: 0 .38em .22em .38em;\nbackground: #004488 url(images/login1.jpg) scroll 0;\nborder: 0px #004488 solid;\nfont-family: Verdana, Arial, Helvetica, sans-serif;\nfont-style: normal;\nfont-weight: bold;\nfont-size: 14px;\ncursor: pointer;\nmargin-left: 275px;\n}\n</style></head><body><form name=frm1 onsubmit=\"return false;\"><input name=csrf_token type=hidden value=1><table border=0 height=90% width=100%><tr><td><script>if('0'=='2'){str='<table align=center width=524px border=0 cellspacing=\"0\" cellpadding=0>';str+='<tr><td><img src=\"/get_logo.cgi\" width=\"524px\"></td></tr>';str+='<tr><td style=\"border:2px solid #aaaaaa;\">';str+='<table width=80% align=center cellspacing=\"0\" cellpadding=2 border=0 style=\"margin-top:30px\">';}else if('0'=='1'){str='<table align=center width=524px height=352px border=0 cellspacing=\"0\" cellpadding=0>';str+='<tr><td>';str+='<table width=80% align=center cellspacing=\"0\" cellpadding=2 border=0 style=\"margin-top:75px\">';}else{str=\"<table align=center width=524px border=0 cellspacing=0 cellpadding=0><tr height=96><td colspan=2 style='background:url(images/login1.png) no-repeat;'>&nbsp;</td></tr>\";str+='<tr><td style=\"background:url(images/login2.png) repeat;\">';str+='<table width=80% align=center cellspacing=\"0\" cellpadding=2 border=0>';}document.write(str);</script><tr align=center class=CustomLogin style=display:none><td colspan=2><h3>Router Login</h3></td></tr><tr height=35><td class=userpwd style=padding-right:20px;text-align:right; width=40%>Username</td><td width=60%><input autocapitalize=off autocomplete=off class=userpwd maxlength=24 name=sUserName type=text></td></tr><tr height=35><td class=userpwd style=padding-right:20px;text-align:right;>Password</td><td><input autocomplete=off class=userpwd maxlength=84 name=sSysPass type=password></td></tr><tr class=sValidatedCode height=35 style=display:none><td class=userpwd style=padding-right:20px;text-align:right;>Validation Code</td><td><input id=validated_code maxlength=4 style=\"width: 60px\" type=text><img align=bottom alt=ValidatedCode height=24px id=sVerification onclick=changecode() style=\"margin-left:15px;cursor:pointer;vertical-align: middle;\" width=96px></td></tr><script>var enSSlgrp='';var enAdminAuth='';var admin_local_en=0;var admin_ldap_en=0;var sslgrp_used=false;var add_group_selector=false;var ssl_group=[\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\"];var ssl_group_en=[\"0\",\"0\",\"0\",\"0\",\"0\",\"0\",\"0\",\"0\",\"0\",\"0\"];if(enSSlgrp==\"\"){for(var i=0;i<ssl_group.length;i++){if(ssl_group_en[i]==1&&ssl_group[i]!=\"\")sslgrp_used=true;}}add_group_selector=(enSSlgrp==\"\"&&sslgrp_used)||(enAdminAuth==\"\"&&(admin_local_en||admin_ldap_en));if(add_group_selector){var str=\"\";str+=\"<tr height='35'><td class=userpwd style='padding-right:20px;text-align:right;'>\"+TR(\"Group\")+\"</td>\";str+=\"<td><select name=sltsslgrp>\";str+=\"<option value=-1>---</option>\";if(enAdminAuth==\"\"){if(admin_local_en==1||admin_ldap_en==1){str+=\"<option value=admin>\"+TR(\"admin\")+\"</option>\";}}if(enSSlgrp==\"\"){for(var i=0;i<ssl_group.length;i++){if(ssl_group_en[i]==1&&ssl_group[i]!=\"\")str+=\"<option value=\"+i+\">\"+ssl_group[i]+\"</option>\";}}str+=\"</select></td></tr>\";document.write(str);}else{document.write(\"<input type=hidden name=sltsslgrp value=-1>\");}</script><tr><td class=errmsg colspan=2 height=15><span id=errmsg></span></td></tr><tr><td class=errmsg1 colspan=2 height=15><span id=errmsg1></span></td></tr><tr><td colspan=2 height=35 valign=top><input class=login name=btnOk type=button value=Login></td></tr></table></td></tr><script>var str='<tr><td height=60 class=copyright style=\"text-align:center;\">';if('0'=='2')str='<tr><td height=60 class=copyright style=\"text-align:center;\">';else if('0'=='0')str='<tr><td class=copyright height=70 style=\"background:url(images/login3.png) no-repeat;text-align:center;\">';str+=TR(\"Copyright &copy; 2000-\");var buildtime=\"Aug 11 2022 19:05:21\";var build_ary=buildtime.split(\" \");for(var i=0;i<build_ary.length;i++){if(build_ary[i].length==4){str+=build_ary[i];break;}}str+=TR(\"DrayTek Corp. All Rights Reserved.\")+\"</td></tr>\";document.write(str);</script></table><table align=center border=0 class=CustomLogin style=display:none><tr><td><h1><b><font color=red>Welcome Message</font></b></h1><p>This welcome message is displayed in the Login page of the router. Replace this text with your own message. </p><ol><li>The welcome message can be written in HTML so lists such as this one can be created </li><li>Other markup tags such as p, font or img can be used</li></ol></td></tr></table></td></tr></table></form><form name=frmSub><input name=csrf_token type=hidden value=1><script>var sUser_mgt_End='';var sValidatedCode='';var sValidatedCodeNum;var form_num=2; if(sUser_mgt_End==\"\")form_num+=5; form_num+=1;if(sValidatedCode!=\"\")form_num+=2;for(i=0;i<form_num+1;i++){document.write(\"<input type=hidden name=obj\"+i+\">\");}</script></form></body></html><script>var isNav=(navigator.appName.indexOf(\"Netscape\")!=-1);var isIE=(navigator.appName.indexOf(\"Microsoft\")!=-1);var isOpr=(navigator.appName.indexOf(\"Opera\")!=-1);var f=document.frm1;var iFrmLgErr=2;var iCustomLoginFlag='0';var CUST_LOGIN_ENABLE=(1<<3);var src_ip;var target_url;var mode;var fw_set;var fw_rule;initParameter();initPage();if(opener&&typeof(window.opener.document)!='unknown'&&typeof(window.opener.document)!='undefined'){if(opener.loginset_preview==1)opener.loginset_preview=0;}else ClearCookies();function changecode(){var verify=document.getElementById('sVerification');sValidatedCodeNum=Math.random()*1000000;verify.setAttribute('src','/verifycode.png?'+sValidatedCodeNum);}function showElmtByClass(_doc,_tag,_el){var doc=_doc;var tag=_tag;var el=_el;if(doc.getElementsByTagName){var nodes=doc.getElementsByTagName(tag);var max=nodes.length;for(var i=0;i<max;i++){var node=nodes.item(i);if(node.className==el){node.style.display=\"\";}}}}function initPage(){if(sValidatedCode!=\"\"){changecode();}if((iCustomLoginFlag&CUST_LOGIN_ENABLE)==CUST_LOGIN_ENABLE){if('0'=='0')showElmtByClass(document,\"tr\",\"CustomLogin\");showElmtByClass(document,\"table\",\"CustomLogin\");} if(self!=top)top.location=\"weblogin.htm\";f.sUserName.focus();if(sUser_mgt_End==\"\"){if(mode){switch(mode){case 3: if(iFrmLgErr==4){errmsg.innerHTML=TR(\"User Mode is off now.\");}else if(iFrmLgErr==5){errmsg.innerHTML=TR(\"Wrong validation code!\");}else{errmsg.innerHTML=TR(\"The username or password you entered is incorrect.\");}break;case 4: errmsg.innerHTML=TR(\"Reach the maximum login number. Try another user account.\");break;case 5: errmsg.innerHTML=TR(\"No available buffer now. Please contact with your administrator\");break;case 6: errmsg.innerHTML=TR(\"The username or password you entered is incorrect.\");break;case 7:errmsg.innerHTML=TR(\"User account is not enabled now.\");break;case 8:errmsg.innerHTML=TR(\"You aren't allowed to access internet (out of schedule).\");break;case 9:errmsg.innerHTML=TR(\"User login denied from http protocol. Please contact with your administrator\");break;case 10:errmsg.innerHTML=TR(\"The user ran out of time quota.\");break;case 11:errmsg.innerHTML=TR(\"The user ran out of data quota.\");break;case 12:errmsg.innerHTML=TR(\"Wrong user account. Please contact with your administrator.\");break;default:if(iFrmLgErr==2)errmsg.innerHTML=TR(\"The username or password you entered is incorrect.\");break;}}else if(iFrmLgErr==2){errmsg.innerHTML=TR(\"The username or password you entered is incorrect.\");}else if(iFrmLgErr==4){errmsg.innerHTML=TR(\"User Mode is off now.\");}else if(iFrmLgErr==5){errmsg.innerHTML=TR(\"Wrong validation code!\");}}else if(iFrmLgErr==2){errmsg.innerHTML=TR(\"The username or password you entered is incorrect.\");}else if(iFrmLgErr==4){errmsg.innerHTML=TR(\"User Mode is off now.\");}else if(iFrmLgErr==5){errmsg.innerHTML=TR(\"Wrong validation code!\");}if(sValidatedCode!=\"\"){showElmtByClass(document,\"tr\",\"sValidatedCode\");} for(var d=0;d<document.forms.length;d++){ for(var e=0;e<document.forms[d].elements.length;e++){addhandlers(document.forms[d].elements[e]);}}}function initParameter(){if(sUser_mgt_End==\"\"){src_ip='';target_url='';mode=0;fw_set=0;fw_rule=0;}}function encode(instr){var keyStr=\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\";var outstr=\"\";var chr1,chr2,chr3=\"\";var enc1,enc2,enc3,enc4=\"\";var i=0;do{chr1=instr.charCodeAt(i++);chr2=instr.charCodeAt(i++);chr3=instr.charCodeAt(i++);enc1=chr1>>2;enc2=((chr1&3)<<4)|(chr2>>4);enc3=((chr2&15)<<2)|(chr3>>6);enc4=chr3&63;if(isNaN(chr2)){enc3=enc4=64;}else if(isNaN(chr3)){enc4=64;}outstr=outstr+keyStr.charAt(enc1)+keyStr.charAt(enc2)+keyStr.charAt(enc3)+keyStr.charAt(enc4);chr1=chr2=chr3=\"\";enc1=enc2=enc3=enc4=\"\";}while(i<instr.length);return outstr;}function submitPara(){var frmSub=document.frmSub;var fwElmIdx=2;frmSub.method=\"post\";frmSub.action=\"cgi-bin/wlogin.cgi\";frmSub[0].name=\"aa\";frmSub[0].value=encode(f.sUserName.value);frmSub[1].name=\"ab\";frmSub[1].value=encode(f.sSysPass.value); if(sUser_mgt_End==\"\"&&mode!=0){frmSub[2].name=\"src_ip\";frmSub[2].value=src_ip;frmSub[3].name=\"target_url\";frmSub[3].value=target_url;frmSub[4].name=\"mode\";frmSub[4].value=mode;frmSub[5].name=\"fw_set\";frmSub[5].value=fw_set;frmSub[6].name=\"fw_rule\";frmSub[6].value=fw_rule;fwElmIdx=7;}if(enSSlgrp==\"\"||enAdminAuth==\"\"){frmSub[fwElmIdx].name=\"sslgroup\";frmSub[fwElmIdx].value=f.sltsslgrp.value;}if(sValidatedCode!=\"\"){fwElmIdx++;frmSub[fwElmIdx].name=\"sVerifCode\";frmSub[fwElmIdx].value=document.getElementById(\"validated_code\").value;fwElmIdx++;frmSub[fwElmIdx].name=\"sValidatedCodeNum\";frmSub[fwElmIdx].value=sValidatedCodeNum;}frmSub[form_num].name=\"sFormAuthStr\";frmSub[form_num].value=randomString(15);frmSub.submit();}function randomString(len){var chars='ABCDEFGHJKMNPQRSTWXYZabcdefhijkmnprstwxyz2345678';var maxPos=chars.length;var pwd='';for(i=0;i<len;i++){pwd+=chars.charAt(Math.floor(Math.random()*maxPos));}return pwd;}function handler(_e){var e=_e,elmt,type;if(isNav){elmt=e.target;type=e.type;keycode=e.which;}if(isIE||isOpr){e=window.event;elmt=e.srcElement;type=e.type;keycode=e.keyCode;} if(isIE){if(elmt.type==\"text\")e.cancelBubble=false;else e.cancelBubble=true;}if(elmt==f.btnOk&&type==\"click\"){submitPara();}if(elmt!=f.btnOk&&type==\"keydown\"){if(keycode==13){ e.returnValue=false;submitPara();}}} function addhandlers(_o){var o=_o;o.onclick=handler;o.onkeydown=handler;}function ClearCookies(){var temp=document.cookie.split(\";\");var ts;for(var i=0;;i++){if(!temp[i])break;ts=temp[i].split(\"=\")[0];DeleteCookie(ts);}}function GetCookieVal(offset){var endstr=document.cookie.indexOf(\";\",offset);if(endstr==-1)endstr=document.cookie.length;return unescape(document.cookie.substring(offset,endstr));}function GetCookie(name){var arg=name+\"=\";var alen=arg.length;var clen=document.cookie.length;var i=0;while(i<clen){var j=i+alen;if(document.cookie.substring(i,j)==arg)return GetCookieVal(j);i=document.cookie.indexOf(\" \",i)+1;if(i==0)break;}return null;}function DeleteCookie(name){var exp=new Date();exp.setTime(exp.getTime()-1);var cval=GetCookie(name);document.cookie=name+\"=\"+cval+\"; expires=\"+exp.toGMTString();}</script>",
         "datamd5" : "c9ab5588e8ddf4cfa2f92d59485a077e",
         "datammh3" : -558083443,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "murphx.net"
         ],
         "forward" : "94.30.98.221",
         "host" : [
            "94-30-98-221"
         ],
         "hostname" : [
            "94-30-98-221.xdsl.murphx.net",
            "94.30.98.221"
         ],
         "ip" : "94.30.98.221",
         "ipv6" : "false",
         "latitude" : "51.5555",
         "location" : "51.5555,-0.6212",
         "longitude" : "-0.6212",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Daisy Corporate Services Trading Ltd",
         "os" : "Linux",
         "osdistribution" : "sUse",
         "osvendor" : "Linux",
         "port" : 22222,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "reverse" : [
            "94-30-98-221.xdsl.murphx.net"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan::redirect::1",
         "status" : 200,
         "subdomains" : [
            "xdsl.murphx.net"
         ],
         "subnet" : "94.30.0.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/weblogin.htm"
      }
      
  • <access denied by policy>:<access denied by policy> (<access denied by policy>/<access denied by policy>) - last seen on 2024-11-21 at 08:48:07 UTC

    • IP

      <access denied by policy>

      Network

      <access denied by policy>

      Operating System

      <access denied by policy> <access denied by policy>

      ASN

      <access denied by policy>

      Organization

      <access denied by policy>

      Protocol

      <access denied by policy>

      Source

      <access denied by policy>

    • Operating System

      <access denied by policy> <access denied by policy>

      Product

      <access denied by policy> <access denied by policy> <access denied by policy>

      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5

      <access denied by policy>

    • <access denied by policy>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:48:07.000Z",
         "app" : "<enterprise field>: app",
         "asn" : "<access denied by policy>",
         "city" : "<access denied by policy>",
         "country" : "<access denied by policy>",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "<access denied by policy>",
         "datamd5" : "<access denied by policy>",
         "datammh3" : "<access denied by policy>",
         "device" : "<enterprise field>: device",
         "geolocus" : "<enterprise field>: geolocus",
         "ip" : "<access denied by policy>",
         "ipv6" : "<access denied by policy>",
         "latitude" : "<access denied by policy>",
         "location" : "<access denied by policy>",
         "longitude" : "<access denied by policy>",
         "node" : "<enterprise field>: node",
         "organization" : "<access denied by policy>",
         "os" : "<access denied by policy>",
         "osvendor" : "<access denied by policy>",
         "port" : "<access denied by policy>",
         "product" : "<access denied by policy>",
         "productvendor" : "<access denied by policy>",
         "productversion" : "<access denied by policy>",
         "protocol" : "<access denied by policy>",
         "protocolversion" : "<access denied by policy>",
         "seen_date" : "<access denied by policy>",
         "source" : "<access denied by policy>",
         "subnet" : "<access denied by policy>",
         "tag" : "<enterprise field>: tag",
         "tls" : "<access denied by policy>",
         "transport" : "<access denied by policy>",
         "url" : "<access denied by policy>"
      }
      
  • 137.220.162.156:22222 (tcp/http) - last seen on 2024-11-21 at 08:48:06 UTC

    • IP
      137.220.162.156
      Network
      137.220.160.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://137.220.162.156:22222/ 302

      HTTP Title
      302 Found
      ASN
      AS152194
      Organization
      CTG Server Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      fec523b9aa4f35bf1e9de0046045ced3
      HTTP Header MD5
      d7becab03a8905d978f0985d2d16182f
      HTTP Body MD5
      29b5f7615598c74df0019844c163d80c
    • HTTP/1.1 302 Moved Temporarily
      Server: nginx
      Date: Thu, 21 Nov 2024 08:48:06 GMT
      Content-Type: text/html
      Content-Length: 138
      Connection: close
      Location: https://<ip>/
      Strict-Transport-Security: max-age=31536000
      
      <html>
      <head><title>302 Found</title></head>
      <body>
      <center><h1>302 Found</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:48:06.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "29b5f7615598c74df0019844c163d80c",
               "bodymmh3" : -23674247,
               "headermd5" : "d7becab03a8905d978f0985d2d16182f",
               "headermmh3" : 252949081,
               "title" : "302 Found"
            },
            "length" : 359
         },
         "asn" : "AS152194",
         "city" : "Tokyo",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:48:06 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: close\r\nLocation: https://<ip>/\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "fec523b9aa4f35bf1e9de0046045ced3",
         "datammh3" : 576449098,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS152194",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "ctgserver.com",
               "rackip.com"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "CTG220-128-JP",
            "organization" : "RACKIP CONSULTANCY PTE. LTD.",
            "subnet" : "137.220.160.0/20"
         },
         "ip" : "137.220.162.156",
         "ipv6" : "false",
         "latitude" : "35.6893",
         "location" : "35.6893,139.6899",
         "longitude" : "139.6899",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CTG Server Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 22222,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "137.220.160.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 57.128.86.69:22222 (tcp/http) - last seen on 2024-11-21 at 08:47:05 UTC

    • IP
      57.128.86.69
      Network
      57.128.0.0/15
      Device

      <enterprise field>: device.class

      URL

      http://57.128.86.69:22222/ 302

      HTTP Title
      302 Found
      ASN
      AS16276
      Organization
      OVH SAS
      Protocol
      http
      Source
      datascan::redirect::2
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f18f1c80fda5079f58b9c233635d3fd7
      HTTP Header MD5
      7e4fd0b8eb8a00dc71680972d22e0a15
      HTTP Body MD5
      29b5f7615598c74df0019844c163d80c
    • HTTP/1.1 302 Moved Temporarily
      Server: nginx
      Date: Thu, 21 Nov 2024 08:47:05 GMT
      Content-Type: text/html
      Content-Length: 138
      Connection: close
      Location: https://<ip>:22222/
      X-Powered-By: WordOps
      X-Frame-Options: SAMEORIGIN
      X-Content-Type-Options: nosniff
      Referrer-Policy: strict-origin-when-cross-origin
      
      <html>
      <head><title>302 Found</title></head>
      <body>
      <center><h1>302 Found</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:47:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "29b5f7615598c74df0019844c163d80c",
               "bodymmh3" : -23674247,
               "headermd5" : "7e4fd0b8eb8a00dc71680972d22e0a15",
               "headermmh3" : -1727305242,
               "title" : "302 Found"
            },
            "length" : 455
         },
         "asn" : "AS16276",
         "city" : "Boissy-Saint-L\u00e9ger",
         "country" : "FR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:47:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: close\r\nLocation: https://<ip>:22222/\r\nX-Powered-By: WordOps\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "f18f1c80fda5079f58b9c233635d3fd7",
         "datammh3" : -881203907,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "57.128.86.69",
         "geolocus" : {
            "asn" : "AS16276",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "FR",
            "countryname" : "France",
            "domain" : [
               "ovh.net"
            ],
            "isineu" : "true",
            "latitude" : "46.227638",
            "location" : "46.227638,2.213749",
            "longitude" : "2.213749",
            "netname" : "PCI-GRA11",
            "organization" : "OVH SAS",
            "subnet" : "57.128.80.0/20"
         },
         "hostname" : [
            "57.128.86.69"
         ],
         "ip" : "57.128.86.69",
         "ipv6" : "false",
         "latitude" : "48.7519",
         "location" : "48.7519,2.5136",
         "longitude" : "2.5136",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "OVH SAS",
         "port" : 22222,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-11-21",
         "source" : "datascan::redirect::2",
         "status" : 302,
         "subnet" : "57.128.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 113.13.243.1:22222 (tcp/http) - last seen on 2024-11-21 at 08:46:11 UTC

    • IP
      113.13.243.1
      Network
      113.13.128.0/17
      Device

      <enterprise field>: device.class

      URL

      http://113.13.243.1:22222/ 301

      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan::redirect::2
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a6600977754339e20fa240f1e4bfda35
      HTTP Header MD5
      175f6d62c148878728460deffc6d0b5d
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.0 301 Moved Permanently
      Cache-Control: no-cache
      Connection: close
      Content-Length: 0
      Content-Type: text/html; charset=utf-8
      Expires: -1
      Location: https://<ip>:22222
      Pragma: no-cache
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:46:11.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1636538602,
               "headermd5" : "175f6d62c148878728460deffc6d0b5d",
               "headermmh3" : 1848944610
            },
            "length" : 198
         },
         "asn" : "AS4134",
         "city" : "Qinzhou",
         "country" : "CN",
         "data" : "HTTP/1.0 301 Moved Permanently\r\nCache-Control: no-cache\r\nConnection: close\r\nContent-Length: 0\r\nContent-Type: text/html; charset=utf-8\r\nExpires: -1\r\nLocation: https://<ip>:22222\r\nPragma: no-cache\r\n\r\n",
         "datamd5" : "a6600977754339e20fa240f1e4bfda35",
         "datammh3" : -681722591,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "113.13.243.1",
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "189.cn",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-GX",
            "organization" : "CHINANET GUANGXI PROVINCE NETWORK",
            "subnet" : "113.13.128.0/17"
         },
         "hostname" : [
            "113.13.243.1"
         ],
         "ip" : "113.13.243.1",
         "ipv6" : "false",
         "latitude" : "21.9864",
         "location" : "21.9864,108.6499",
         "longitude" : "108.6499",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "port" : 22222,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Moved Permanently",
         "seen_date" : "2024-11-21",
         "source" : "datascan::redirect::2",
         "status" : 301,
         "subnet" : "113.13.128.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 188.166.46.13:22222 (tcp/http) - last seen on 2024-11-21 at 08:46:07 UTC

    • IP
      188.166.46.13
      Network
      188.166.0.0/16
      Domain(s)
      codeslice.cc
      Device

      <enterprise field>: device.class

      URL

      http://188.166.46.13:22222/ 302

      HTTP Title
      302 Found
      Reverse DNS
      vpsbrainboost.codeslice.cc
      ASN
      AS14061
      Organization
      DIGITALOCEAN-ASN
      Protocol
      http
      Source
      datascan::redirect::2
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      11fc6cc5e3f46ddda4d9db0f5ae7cd6c
      HTTP Header MD5
      f26fb3bcb9039a89ea6887765c61c034
      HTTP Body MD5
      29b5f7615598c74df0019844c163d80c
    • HTTP/1.1 302 Moved Temporarily
      Server: nginx
      Date: Thu, 21 Nov 2024 08:46:07 GMT
      Content-Type: text/html
      Content-Length: 138
      Connection: close
      Location: https://<ip>:22222/
      X-Powered-By: Codeslice
      X-Frame-Options: SAMEORIGIN
      X-Content-Type-Options: nosniff
      Referrer-Policy: strict-origin-when-cross-origin
      
      <html>
      <head><title>302 Found</title></head>
      <body>
      <center><h1>302 Found</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:46:07.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "29b5f7615598c74df0019844c163d80c",
               "bodymmh3" : -23674247,
               "headermd5" : "f26fb3bcb9039a89ea6887765c61c034",
               "headermmh3" : -1970279019,
               "title" : "302 Found"
            },
            "length" : 457
         },
         "asn" : "AS14061",
         "city" : "Amsterdam",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:46:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: close\r\nLocation: https://<ip>:22222/\r\nX-Powered-By: Codeslice\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "11fc6cc5e3f46ddda4d9db0f5ae7cd6c",
         "datammh3" : 1930505658,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "codeslice.cc"
         ],
         "forward" : "188.166.46.13",
         "geolocus" : {
            "asn" : "AS14061",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "NL",
            "countryname" : "Netherlands",
            "domain" : [
               "digitalocean.com"
            ],
            "isineu" : "true",
            "latitude" : "52.132633",
            "location" : "52.132633,5.291266",
            "longitude" : "5.291266",
            "netname" : "EU-DIGITALOCEAN-NL1",
            "organization" : "DigitalOcean, LLC",
            "subnet" : "188.166.0.0/17"
         },
         "host" : [
            "vpsbrainboost"
         ],
         "hostname" : [
            "188.166.46.13",
            "vpsbrainboost.codeslice.cc"
         ],
         "ip" : "188.166.46.13",
         "ipv6" : "false",
         "latitude" : "52.3520",
         "location" : "52.3520,4.9392",
         "longitude" : "4.9392",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "DIGITALOCEAN-ASN",
         "port" : 22222,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "reverse" : [
            "vpsbrainboost.codeslice.cc"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan::redirect::2",
         "status" : 302,
         "subnet" : "188.166.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "cc"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 213.176.102.6:22222 (tcp/http) - last seen on 2024-11-21 at 08:45:32 UTC

    • IP
      213.176.102.6
      Network
      213.176.96.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://213.176.102.6:22222/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS142578
      Organization
      E-Large HongKong
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3b40fcd13ec4c48698cf15e0d2ba5977
      HTTP Header MD5
      7de09592d0cc3062011d73fa292680b0
      HTTP Body MD5
      77bd43987adf27926b335fbe22b67813
    • HTTP/1.1 400 Bad Request
      Server: WAF
      Date: Thu, 21 Nov 2024 08:45:31 GMT
      Content-Type: text/html
      Content-Length: 262
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>WAF</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:45:32.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "77bd43987adf27926b335fbe22b67813",
               "bodymmh3" : -2135056736,
               "headermd5" : "7de09592d0cc3062011d73fa292680b0",
               "headermmh3" : -1036945004,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 405
         },
         "asn" : "AS142578",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: WAF\r\nDate: Thu, 21 Nov 2024 08:45:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 262\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>WAF</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3b40fcd13ec4c48698cf15e0d2ba5977",
         "datammh3" : 401141661,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS142578",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "IR",
            "countryname" : "Iran",
            "domain" : [
               "gmail.com"
            ],
            "isineu" : "false",
            "latitude" : "32.427908",
            "location" : "32.427908,53.688046",
            "longitude" : "53.688046",
            "netname" : "us-sammu-1",
            "organization" : "us-sammu-1",
            "subnet" : "213.176.96.0/20"
         },
         "ip" : "213.176.102.6",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "E-Large HongKong",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 22222,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "213.176.96.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }